Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
File: qb2hj--wDn6cVHMwGcdiuy6zozw.mft (raw, json)
Hash identifier: ulHfjGKsZeoaCGWWH0GBREe0pJ5CAzaHMFiG6EPciRE=
Subject key identifier: A5:12:B0:90:30:2D:E0:95:E0:F6:CF:31:77:7E:31:B3:22:C1:17:7F
Authority key identifier: A9:BD:A1:8F:EF:B0:0E:7E:9C:54:73:30:19:C7:62:BB:2E:B3:A3:3C
Certificate issuer: /CN=a9bda18fefb00e7e9c54733019c762bb2eb3a33c
Certificate serial: 0194BD8551FEFEADCA68A18378182F1F15E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
Manifest number: 0825
Signing time: Fri 31 Jan 2025 18:00:18 +0000
Manifest this update: Fri 31 Jan 2025 18:00:18 +0000
Manifest next update: Sat 01 Feb 2025 18:00:18 +0000
Files and hashes: 1: nJtwSC-OZ-Smz_sZfs-hc-m0EuQ.roa (hash: TPYZpfCIEtspSFBIUZCXhe4Sd3FAryoOqoR+gBeCscc=)
2: qb2hj--wDn6cVHMwGcdiuy6zozw.crl (hash: EKixzmEZFHGs8lvG9EMTkhdQHlJcwzvOozW0xm5d3Jo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:51:fe:fe:ad:ca:68:a1:83:78:18:2f:1f:15:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9bda18fefb00e7e9c54733019c762bb2eb3a33c
Validity
Not Before: Jan 31 18:00:18 2025 GMT
Not After : Feb 1 18:00:18 2025 GMT
Subject: CN=a512b090302de095e0f6cf31777e31b322c1177f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c9:81:fd:99:ba:df:f0:55:9c:74:dc:87:a7:
87:82:d4:1c:d1:c6:f5:07:c0:84:03:d3:65:e1:9b:
2a:79:27:c9:ef:ca:f5:e7:f0:c4:3e:84:c2:6d:be:
c0:73:47:e4:23:c5:f7:96:9a:7b:b9:6e:8e:f7:84:
d7:66:ae:84:ba:eb:22:27:e8:90:5f:ec:35:eb:8f:
db:c5:43:6c:dc:5b:cc:f9:5b:1b:2a:ce:f5:7b:68:
f1:1a:1d:f3:b9:fa:be:1d:bc:ee:0b:79:9d:24:24:
89:49:6e:24:17:df:61:3e:65:ae:86:2d:89:1d:71:
6e:c3:35:86:e5:80:3b:24:c3:9c:cd:45:f1:4d:f7:
2a:f1:1d:1a:8b:80:76:85:e5:85:fc:f8:a8:00:ae:
8a:75:52:04:3d:78:cf:2a:af:76:48:74:87:ae:ab:
ed:f8:95:e7:08:a2:9c:01:d3:26:57:14:1a:32:89:
7f:3d:29:c1:70:52:a5:bf:d7:2a:9e:98:8f:b6:43:
30:30:25:f6:fe:15:45:ca:38:d0:3d:84:f8:6d:67:
26:76:4c:4f:88:68:28:84:03:95:32:b7:23:00:3f:
b8:5b:80:40:21:4d:f7:44:e8:45:89:3a:8e:c4:e8:
22:2a:93:81:f4:f8:ec:6b:4e:b2:b2:56:0a:3e:b9:
21:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:12:B0:90:30:2D:E0:95:E0:F6:CF:31:77:7E:31:B3:22:C1:17:7F
X509v3 Authority Key Identifier:
keyid:A9:BD:A1:8F:EF:B0:0E:7E:9C:54:73:30:19:C7:62:BB:2E:B3:A3:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qb2hj--wDn6cVHMwGcdiuy6zozw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/042339-d03c-4636-9ec9-163222a719b5/1/qb2hj--wDn6cVHMwGcdiuy6zozw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:47:f7:df:f9:c6:de:01:32:d0:fc:e9:da:6c:f2:e9:97:98:
25:57:e1:93:b1:d3:28:a0:6d:49:17:00:46:78:01:85:a5:f2:
e6:dd:64:ea:be:28:82:89:1d:10:fc:6a:b5:b9:9c:de:73:1a:
88:eb:85:10:79:5b:fb:cd:d0:41:3c:98:53:92:ec:27:d9:d0:
47:7e:14:d2:47:ee:d0:78:b6:fd:2c:d6:aa:be:6d:40:e9:ee:
06:a2:1b:2e:96:e0:3b:ae:a2:45:a3:1f:d0:41:24:a0:db:a6:
19:6d:bd:0f:f4:ad:e5:fe:d7:00:2f:46:10:23:ec:8e:f9:5d:
26:20:20:39:20:f8:fe:6e:21:05:59:56:4e:79:c3:cd:6d:75:
43:38:7c:1c:c2:62:52:07:c4:f9:16:df:37:e2:44:81:77:26:
19:de:94:af:77:a8:96:45:3c:e0:df:21:0d:89:ea:f2:49:d2:
f5:18:0d:22:33:80:f7:46:b9:7a:8a:40:e1:a4:f4:5e:f7:de:
d2:2f:f8:a0:d9:20:4d:12:ec:82:aa:37:b0:9b:05:74:f0:16:
a8:03:25:a0:93:8a:36:7d:27:1b:61:42:eb:b3:3d:c8:03:0b:
fd:b4:72:82:88:63:be:bf:f3:31:a3:e1:cc:fe:71:2c:76:db:
c6:0c:62:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:25:54 2025 by rpki-client