Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
File: q5z9FXRB9pQo3R9jYcpPSuQss4o.mft (raw, json)
Hash identifier: 9o2z2npv7fl3LE/dMOHJJGKYTI9AGsZcCdqJ0wTfZHc=
Subject key identifier: 3E:A4:F3:64:01:93:62:D5:43:15:C5:F7:C6:A8:8C:49:40:62:B7:79
Authority key identifier: AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A
Certificate issuer: /CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a
Certificate serial: 0194BD8546B6352E2A6F48E39FFA183E3E7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:15 +0000
Manifest this update: Fri 31 Jan 2025 18:00:15 +0000
Manifest next update: Sat 01 Feb 2025 18:00:15 +0000
Files and hashes: 1: dCfTqcxg62Lir67qVkgBChTuqA4.roa (hash: UBu+ymeFM9aQ8J18E3tvVpuPsYqEYn9P+xx2d6+/UxI=)
2: q5z9FXRB9pQo3R9jYcpPSuQss4o.crl (hash: 2xNuPdexpzjTLtCywxtPqrA02NuzeFDVrAyIEzU/VL0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:46:b6:35:2e:2a:6f:48:e3:9f:fa:18:3e:3e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a
Validity
Not Before: Jan 31 18:00:15 2025 GMT
Not After : Feb 1 18:00:15 2025 GMT
Subject: CN=3ea4f364019362d54315c5f7c6a88c494062b779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1a:8b:5d:f6:89:6f:c5:f4:91:d9:dc:18:09:
e1:6c:22:35:a7:86:55:00:97:4f:34:ab:dd:05:0e:
57:ec:80:40:9f:02:09:3c:3f:c4:02:ef:db:20:e5:
28:1e:b5:4c:ba:a9:e4:c0:97:97:4c:80:a2:47:06:
47:c2:90:07:85:d5:66:90:74:43:43:59:40:e5:10:
e8:2e:76:57:27:9b:5c:8a:e4:24:67:22:42:13:9b:
20:8a:43:56:45:41:13:c7:69:39:7c:10:b1:d3:1c:
21:14:20:0d:1e:4a:e0:b2:82:23:b3:4a:d6:c7:ac:
3e:14:06:96:4a:11:da:dd:9b:f6:57:2d:18:bd:bf:
3f:d5:76:dc:86:fd:8c:d3:2f:ae:f9:d4:a3:20:31:
d6:0f:9c:e2:b3:94:ff:b6:c6:ae:06:59:52:dd:62:
57:32:df:27:10:27:a5:86:67:33:02:ec:8e:c4:6a:
49:74:81:4c:05:51:b9:7e:8d:3e:cf:03:03:ed:c7:
5b:c8:9b:2d:ff:07:22:c4:a8:47:07:f3:98:3b:d0:
90:36:4d:39:6f:9e:63:ef:52:16:52:dc:2c:89:91:
9a:6b:dd:ce:f7:e5:c5:21:78:4a:60:a7:f4:5f:27:
40:d0:98:02:5d:48:4c:d8:24:99:40:34:a2:1e:85:
eb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A4:F3:64:01:93:62:D5:43:15:C5:F7:C6:A8:8C:49:40:62:B7:79
X509v3 Authority Key Identifier:
keyid:AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:45:f0:49:c1:f7:5b:51:df:95:19:03:94:81:c7:cd:41:4e:
d7:06:84:b7:05:79:4b:05:53:74:99:88:f4:eb:47:16:f9:bb:
f1:0f:60:c3:34:a5:94:ce:26:7d:01:88:61:b5:fc:a0:ba:87:
e8:f7:2a:a9:77:22:b5:66:f4:95:34:a8:54:4d:a8:53:cc:d0:
6f:10:db:6e:2a:ce:12:5e:e9:e1:c1:5a:da:53:55:12:5b:a3:
fa:20:d5:b0:c1:f5:d0:e2:68:6b:09:d7:cb:e5:a6:68:30:a0:
83:17:d4:7d:08:88:9c:6b:c5:73:ce:4c:f3:8f:b9:d5:96:13:
5e:70:b0:49:c4:12:40:6d:1f:48:24:25:28:31:87:14:1e:97:
11:d8:cd:a7:b6:97:7e:21:33:34:37:50:21:34:44:60:03:45:
ba:8c:92:95:0d:48:bc:32:3c:1b:3f:3d:ab:fa:7a:95:41:af:
59:c1:8e:3e:fa:18:3a:3b:6c:3c:e6:40:87:5e:d9:d6:84:2c:
f6:f2:66:35:9f:58:c2:8b:c0:3e:b9:c5:ef:32:45:a2:e4:22:
81:dc:59:79:de:76:89:c3:88:a9:4d:9f:3d:d2:f2:50:7c:43:
82:ee:24:e3:63:6a:1c:0a:05:ab:93:00:80:3f:48:a6:81:ed:
aa:81:55:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:49:18 2025 by rpki-client