Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
File: qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft (raw, json)
Hash identifier: G4BHTcRVZ6z9AxVpcdds25Xx+55fSqOPXUc17/OgMJ8=
Subject key identifier: 17:C6:10:25:09:DB:33:65:9F:10:3C:72:94:8A:5D:BF:D4:11:43:23
Authority key identifier: A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3
Certificate issuer: /CN=a8153b3d5612234fe260fe60bc7ce028062227a3
Certificate serial: 0194BC04E31D1CF29B87176D5407BDBF1F06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:24 +0000
Manifest this update: Fri 31 Jan 2025 11:00:24 +0000
Manifest next update: Sat 01 Feb 2025 11:00:24 +0000
Files and hashes: 1: lxBXnG-4rYAQUCGbktacJsJcscU.roa (hash: d11nQxBRc+xMvxpKWxAVqfhsk9tCL6Ja3DwWQ6WsmPo=)
2: qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl (hash: czMcWHaMxx4uRxqxPSXEHXVXVArl8bvBFEFQGmCFOw0=)
3: u2p9YZ_LXa4YZ8T6-whJAsnzXuE.roa (hash: HvG5oZRfAf2DkODgozvYS7e+xqSp2NYm+qp3YwzyYdI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e3:1d:1c:f2:9b:87:17:6d:54:07:bd:bf:1f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8153b3d5612234fe260fe60bc7ce028062227a3
Validity
Not Before: Jan 31 11:00:24 2025 GMT
Not After : Feb 1 11:00:24 2025 GMT
Subject: CN=17c6102509db33659f103c72948a5dbfd4114323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a0:1f:dc:61:8e:67:a6:52:83:89:5f:a4:3d:
29:82:fa:7b:83:7e:bf:30:de:32:b3:ba:61:b4:9f:
46:f3:77:23:05:4a:57:ac:33:84:0d:89:8d:61:ee:
b5:05:26:03:f7:c9:ca:aa:62:7e:1f:e2:8c:ba:4a:
05:98:90:7a:21:d5:ba:74:42:68:08:e8:5e:9a:b3:
a9:46:39:df:74:c5:c0:74:fb:29:d3:b6:1f:de:55:
86:30:69:23:e8:04:c3:ed:a7:0b:01:d0:13:0f:02:
4c:d4:0a:0f:fe:29:15:73:e7:07:59:59:21:8f:3b:
f3:e5:5d:43:ab:b9:da:d1:ad:df:8d:b1:08:74:9b:
af:76:2e:e0:5d:83:e4:aa:9a:9e:85:b5:b2:c9:46:
ad:5e:8d:2f:ec:63:6a:70:e8:ba:11:44:12:6b:84:
df:05:14:f5:51:6e:b2:c9:fd:c7:e9:34:8b:8b:91:
63:88:b9:7d:35:c5:08:57:2f:a2:46:91:82:f2:80:
f1:14:0e:c3:22:d5:b2:e1:f6:ed:f8:88:92:3d:08:
15:c6:55:3e:fa:c4:fc:76:40:18:da:fd:f3:79:fd:
c1:74:4e:74:f9:64:ed:73:c6:e5:be:ff:ac:16:68:
59:2c:d7:7d:e7:63:c6:52:18:37:53:70:be:99:b7:
cb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C6:10:25:09:DB:33:65:9F:10:3C:72:94:8A:5D:BF:D4:11:43:23
X509v3 Authority Key Identifier:
keyid:A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:cc:5a:0c:97:f9:b3:0b:86:7b:c8:e6:87:1d:ca:88:14:79:
54:f2:7c:6f:c2:7c:87:ba:59:8f:70:ce:d1:47:42:9b:00:39:
8b:ce:e5:9c:48:6e:c5:5c:e0:b4:fa:7d:93:4b:9a:64:f7:cf:
d8:87:bc:8a:9f:d7:17:b4:74:04:91:2a:75:24:c3:88:82:90:
53:d2:9c:48:c0:9e:a3:0a:11:92:b3:51:e0:69:db:8f:9e:04:
4d:f5:6c:29:43:dd:0e:0d:6d:0d:1b:d8:d8:b2:43:07:17:11:
3f:69:16:4c:1a:dc:b5:6a:72:47:35:6f:04:93:65:64:03:2f:
51:e4:3d:c6:08:e4:c3:51:c8:55:ff:b8:6f:04:a3:f6:f1:2b:
0f:23:3f:8a:f7:40:06:34:1d:d6:1a:2d:11:c7:40:cf:4c:4a:
aa:86:6a:c9:e4:54:66:ef:14:32:47:60:a8:c2:1b:ff:87:18:
96:eb:bc:c4:31:00:30:ad:bc:7f:5a:93:04:00:cd:54:9a:e4:
b1:42:fb:da:38:3d:2b:be:48:83:2a:47:ac:5f:7d:cc:dc:02:
d1:e9:73:25:bc:21:2d:a8:1c:ce:5f:c8:a1:47:8e:eb:5c:d8:
d5:95:2b:0e:88:1b:08:5a:0a:40:ad:c2:96:93:2c:60:89:37:
74:56:fd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:35:23 2025 by rpki-client