Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
File: qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft (raw, json)
Hash identifier: lIeIOjseF9zEFXluThXmI3f9qKZlvy34oV+xbSKzjFg=
Subject key identifier: 79:AF:BF:ED:C4:F0:10:85:8F:0E:CB:15:65:7D:29:DD:5E:65:48:D1
Authority key identifier: AA:44:E2:E8:12:F0:9A:C4:FE:2B:47:E4:26:9C:E1:A0:20:21:CA:0E
Certificate issuer: /CN=aa44e2e812f09ac4fe2b47e4269ce1a02021ca0e
Certificate serial: 0194BD85B51DE3F12A1CD4DBB00E00D7E9F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 18:00:43 +0000
Manifest this update: Fri 31 Jan 2025 18:00:43 +0000
Manifest next update: Sat 01 Feb 2025 18:00:43 +0000
Files and hashes: 1: Ksr0uLkRk2xgBxHqi3sQnitvzew.roa (hash: WSC+ZUBgflwaiPFD1qCd7YKaOxvqrLSTyitqpFIOSP4=)
2: qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl (hash: g7dASGq9s3LBdzEmr0iGfiDBHqiz57GCSTU6yGqvtmc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b5:1d:e3:f1:2a:1c:d4:db:b0:0e:00:d7:e9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa44e2e812f09ac4fe2b47e4269ce1a02021ca0e
Validity
Not Before: Jan 31 18:00:43 2025 GMT
Not After : Feb 1 18:00:43 2025 GMT
Subject: CN=79afbfedc4f010858f0ecb15657d29dd5e6548d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6c:63:7f:78:28:b5:55:ce:8e:87:44:45:42:
14:9a:5e:dc:d2:36:44:a5:65:0a:fe:29:bb:57:e9:
ff:a6:62:63:38:ba:6a:e9:a3:24:0f:e1:e0:76:53:
6f:b1:e5:0e:61:d0:89:32:d4:5c:97:df:f4:b2:42:
ab:ec:6f:bd:f4:18:bd:3c:ac:3f:f4:10:fc:94:97:
ba:20:36:e2:1a:f5:a0:b4:5c:a5:56:42:b3:6d:cf:
60:c3:59:a6:3c:8f:f1:99:4b:75:98:e0:5d:a9:08:
9d:0b:84:22:03:13:01:8e:17:33:82:e0:ce:32:9e:
be:23:c1:04:3b:c8:2c:b5:42:2c:f8:8c:a9:23:4b:
e5:f2:88:ba:2a:80:20:9a:c5:64:24:34:1c:8a:ff:
c4:ac:9a:16:3d:5e:fe:86:b2:ec:5e:95:73:62:40:
8a:9b:65:87:22:a7:30:bf:1b:6a:91:8e:d3:e2:68:
69:a0:36:9e:08:80:bc:57:dc:a1:fb:54:56:9d:e5:
3c:8d:0b:f7:dd:41:f6:c1:69:55:cb:a6:0f:00:fa:
da:ab:08:70:54:ee:b9:10:8e:ec:30:55:fd:d7:ad:
5b:c5:86:95:54:16:b9:14:b4:2d:d7:22:f9:db:79:
f5:64:b0:21:d3:8a:a3:5c:e1:e3:bb:fc:64:51:2b:
33:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:AF:BF:ED:C4:F0:10:85:8F:0E:CB:15:65:7D:29:DD:5E:65:48:D1
X509v3 Authority Key Identifier:
keyid:AA:44:E2:E8:12:F0:9A:C4:FE:2B:47:E4:26:9C:E1:A0:20:21:CA:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:00:06:c6:0a:b3:d7:90:6a:8d:d3:6c:8e:1e:ee:59:2d:ec:
ab:3e:85:a0:1d:be:34:13:0a:34:2f:7f:e7:08:23:f5:47:3a:
5e:1b:6b:1b:91:94:c9:8b:a4:f8:2a:5d:ca:3f:27:5a:57:d1:
16:a3:b4:f1:d7:2e:88:45:65:93:da:95:15:b7:fe:c1:82:5f:
f6:81:2d:7c:43:c3:45:04:3d:28:72:d9:9a:32:84:e7:81:30:
6b:fa:e6:de:60:b5:0f:f2:08:f1:6a:17:7a:45:03:f1:f2:96:
49:47:c1:8a:b7:ba:98:42:26:a0:ff:c7:25:86:29:81:0f:2e:
07:bb:16:50:44:0d:10:b5:56:0a:5f:3f:63:24:8b:de:c7:28:
de:10:80:96:7a:b1:82:d7:87:d0:7a:1f:c8:d6:39:e9:b9:68:
ca:1a:1e:af:0a:57:28:ff:2d:6b:1f:b6:a8:b7:de:c0:1f:7a:
55:ad:e3:33:c4:da:32:88:8f:56:67:ec:b9:71:7a:a2:7a:b9:
0b:27:60:31:a3:95:96:c8:99:59:d1:a3:70:37:e7:e5:f7:b9:
0d:c5:0e:66:b2:5a:f9:71:d2:96:ac:a7:c7:ad:21:f5:23:ed:
f6:89:1d:86:e4:48:f2:05:ce:d2:83:a1:5c:a5:b7:3f:4d:b0:
6b:cd:e5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:49:41 2025 by rpki-client