Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.mft
File: qPuDH1vWwMILjgm-URwhvn3F3ro.mft (raw, json)
Hash identifier: 2lFXlyyPQwdI4rJd/L/SaMgzXtUB0wInik+UOaBn1UA=
Subject key identifier: 43:68:9C:EC:39:DB:25:56:6A:79:BA:C2:BB:78:B3:D3:A0:32:C5:77
Authority key identifier: A8:FB:83:1F:5B:D6:C0:C2:0B:8E:09:BE:51:1C:21:BE:7D:C5:DE:BA
Certificate issuer: /CN=a8fb831f5bd6c0c20b8e09be511c21be7dc5deba
Certificate serial: 0194BCAA2A098B5CBA7B0DE57BA0248B7856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPuDH1vWwMILjgm-URwhvn3F3ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.mft
Manifest number: 040F
Signing time: Fri 31 Jan 2025 14:00:55 +0000
Manifest this update: Fri 31 Jan 2025 14:00:55 +0000
Manifest next update: Sat 01 Feb 2025 14:00:55 +0000
Files and hashes: 1: eVNnviqiIdPY1BUvp61D_AbFKTc.roa (hash: zPSI/g0bx6X/hvEByyb1M6C4zHIhQAKfdMZa4T5kVWA=)
2: qPuDH1vWwMILjgm-URwhvn3F3ro.crl (hash: Xarkwa4mXuaOOCx7mJB9JOVavmbK4A+PzwCo+wk1j34=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2a:09:8b:5c:ba:7b:0d:e5:7b:a0:24:8b:78:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8fb831f5bd6c0c20b8e09be511c21be7dc5deba
Validity
Not Before: Jan 31 14:00:55 2025 GMT
Not After : Feb 1 14:00:55 2025 GMT
Subject: CN=43689cec39db25566a79bac2bb78b3d3a032c577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:39:ef:7a:d0:3d:c9:78:23:f9:bb:50:81:88:
e4:5a:4c:50:2a:b1:a9:9c:a6:82:95:89:59:ce:8f:
9e:47:87:de:54:6d:bb:f6:b5:1f:11:41:2f:4c:3c:
6c:19:e0:4c:4e:c1:00:56:9a:1f:f0:6f:d2:3f:2e:
31:24:fc:80:4c:11:ad:e6:a6:a7:bf:37:ca:2e:93:
c5:3b:20:09:02:9b:df:13:db:1f:1f:59:5f:35:c8:
68:d1:8e:30:10:59:22:67:a5:44:41:f9:81:5f:55:
bc:20:b6:a2:4f:ae:5c:64:7a:c2:f1:c3:38:df:0d:
61:a6:12:28:46:a5:50:3d:4c:8c:dc:c6:42:09:18:
18:13:9e:9c:27:9f:bc:9f:98:8b:60:c3:a9:dc:16:
18:5c:07:f4:45:45:f1:92:3b:2b:26:91:d2:6c:8f:
d8:5f:46:71:5b:87:8a:97:31:28:87:b3:8a:32:03:
43:99:8f:f7:78:47:53:e3:44:5b:86:ea:76:d0:1b:
e7:48:24:e6:72:9b:fe:24:6b:48:a1:be:00:eb:b7:
98:2e:88:57:b7:4e:2d:cc:9b:81:c1:9f:ee:4d:a9:
61:1d:81:c2:2f:72:52:11:f1:2a:91:e4:a3:5d:1a:
df:fa:4f:52:40:f0:de:d1:a1:2c:a8:2e:3b:85:d8:
38:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:68:9C:EC:39:DB:25:56:6A:79:BA:C2:BB:78:B3:D3:A0:32:C5:77
X509v3 Authority Key Identifier:
keyid:A8:FB:83:1F:5B:D6:C0:C2:0B:8E:09:BE:51:1C:21:BE:7D:C5:DE:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPuDH1vWwMILjgm-URwhvn3F3ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/01cb70-518b-441b-b3da-646d7eee0a0f/1/qPuDH1vWwMILjgm-URwhvn3F3ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:5f:f8:15:35:7f:5d:57:f9:a7:b2:87:a5:70:cd:9b:08:14:
ef:9e:cd:78:d4:81:62:ee:67:1b:f6:b3:ac:81:8d:de:2c:f2:
e4:d2:6e:58:89:1d:bc:7a:14:b1:5c:ec:c3:77:bf:e4:57:27:
43:f7:6b:52:f6:c5:12:5d:04:9c:ad:8f:f4:fe:22:21:21:c3:
3e:ca:ff:1e:32:78:7b:d9:a3:95:75:68:c1:36:29:1a:65:5c:
74:98:6e:e4:75:6e:1e:96:67:6b:65:2f:f3:16:94:0a:7d:d9:
3d:73:6d:14:60:49:da:aa:93:80:9d:46:ce:39:e9:39:09:03:
bd:3e:af:58:62:31:46:e2:76:e3:06:f1:13:da:fd:ac:72:d0:
27:89:ef:6b:05:c0:56:c6:57:78:f6:7f:4c:aa:63:a7:ca:d2:
e6:13:76:dc:84:61:ef:be:52:fa:c7:3a:04:50:31:b0:40:75:
34:36:1a:37:ca:cc:fc:68:e3:92:0a:d9:7a:96:f5:c0:cf:12:
71:20:0f:81:f6:59:f0:97:7b:5f:d6:1e:bc:25:9d:f2:fd:f5:
09:66:64:9a:a2:8b:a4:77:44:23:62:f3:6c:52:e2:cf:95:36:
0f:30:cc:a9:f8:33:5c:17:67:5b:fc:01:64:35:24:97:b5:d2:
32:ef:9a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:10:02 2025 by rpki-client