
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
File: ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft (raw, json)
Hash identifier: FezSYI85cT0BIdrMjiHKkNF+WDd8wT++aXX6vv4OwFA=
Subject key identifier: 43:DD:81:2F:18:E6:0C:D8:0E:3B:65:83:B1:38:C4:7F:ED:F1:5D:F8
Authority key identifier: 00:B4:FE:43:94:E3:3F:C2:2A:C5:CB:B5:45:F9:CD:10:94:08:75:67
Certificate issuer: /CN=00b4fe4394e33fc22ac5cbb545f9cd1094087567
Certificate serial: 0194BC72976569D52539D932A8B79C6D7D91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
Manifest number: 0570
Signing time: Fri 31 Jan 2025 13:00:13 +0000
Manifest this update: Fri 31 Jan 2025 13:00:13 +0000
Manifest next update: Sat 01 Feb 2025 13:00:13 +0000
Files and hashes: 1: ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl (hash: nDjWxjyWJC1o6y4IDaH3dZjBm3FRWwC/f+xC1brGQEw=)
2: wMWuF3SVMuDIRng4fcNAPXQ4AjA.roa (hash: TLB7j9h/GLQ2Xf40vyUq/3XDhGfoA1ufwio0cDXXu5M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:97:65:69:d5:25:39:d9:32:a8:b7:9c:6d:7d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00b4fe4394e33fc22ac5cbb545f9cd1094087567
Validity
Not Before: Jan 31 13:00:13 2025 GMT
Not After : Feb 1 13:00:13 2025 GMT
Subject: CN=43dd812f18e60cd80e3b6583b138c47fedf15df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8f:df:5d:24:db:85:c4:a7:85:88:b5:0c:87:
61:fb:23:b2:92:02:2e:80:0a:d2:1d:b7:f7:b8:c7:
14:b8:74:a4:4e:dc:f9:54:02:b6:80:5e:28:04:7b:
0b:c6:25:ba:89:52:e8:11:ae:0b:5f:1a:a5:cc:16:
76:0f:1f:1f:90:8f:dd:79:ee:fe:84:1a:90:6b:13:
de:aa:43:c5:6e:c3:c8:9d:b1:f0:c3:e0:bc:62:e7:
c9:c7:ea:ab:61:37:0e:97:05:66:76:6f:89:57:eb:
7b:17:1b:58:19:c1:16:a2:89:5e:e8:e1:94:a4:3f:
05:df:33:32:c3:78:b3:b9:28:ec:52:c3:68:95:58:
ca:fb:01:4f:05:f9:10:2f:1b:7c:76:36:be:fa:1f:
4f:0d:c2:95:53:01:28:53:9b:f8:03:cf:ff:81:77:
04:18:38:db:d2:f1:81:ba:78:1b:d9:40:d8:c0:ed:
cd:6a:6f:ad:7b:c1:24:54:82:86:73:b1:c8:d4:b8:
f4:c5:e6:d1:9c:f6:35:c7:3d:20:5d:20:1b:17:e3:
4c:7d:84:b3:ef:df:3b:3a:f4:66:48:ca:45:60:ba:
5b:c3:3b:51:fb:f3:a2:43:cd:8e:c2:7d:46:5f:54:
5b:69:09:ca:72:80:16:b4:c2:d2:67:f1:6d:f1:7f:
dc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DD:81:2F:18:E6:0C:D8:0E:3B:65:83:B1:38:C4:7F:ED:F1:5D:F8
X509v3 Authority Key Identifier:
keyid:00:B4:FE:43:94:E3:3F:C2:2A:C5:CB:B5:45:F9:CD:10:94:08:75:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dbe923-aaef-4912-843f-a4efc43a0478/1/ALT-Q5TjP8Iqxcu1RfnNEJQIdWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:70:bf:a5:e4:8d:bf:31:4f:1b:c9:d4:cd:52:d5:df:1f:6a:
42:a8:9b:9a:f8:68:a7:81:da:e6:d7:54:35:95:66:45:e2:7f:
36:d1:ed:85:f8:ee:f6:49:ea:7c:1f:aa:49:aa:30:65:dc:fa:
2d:70:98:b8:1c:77:e9:77:03:40:38:d9:f2:58:3a:f2:c8:9e:
45:8c:a7:b2:3d:cf:c4:ef:1c:54:ce:be:bf:95:44:88:e2:2e:
0d:eb:63:85:20:b1:b6:13:05:41:10:08:70:f3:e8:da:1d:c4:
d1:a8:4c:07:f3:2f:86:81:a9:56:b9:56:50:a4:69:e0:87:fa:
63:08:8c:c0:f1:22:28:00:44:e9:9c:d8:90:be:07:a0:22:c6:
fc:c3:de:fa:79:14:35:ab:bd:82:7b:3a:77:c8:78:f6:11:f0:
2a:45:92:7a:ef:89:9d:3c:3b:1c:54:d4:d7:db:b7:84:f6:b8:
45:53:e5:ca:d3:fd:d0:b0:50:28:d2:ab:af:39:e2:5b:2c:fd:
08:08:ab:f1:69:b4:a1:fa:b1:84:fe:f9:18:2e:87:0b:e8:14:
2f:3c:bc:29:df:ea:32:67:fa:e1:fc:16:c1:0c:d0:77:62:5e:
db:18:78:cd:d4:3c:ea:5b:1a:e6:60:7d:fd:9d:e7:2c:df:c8:
cf:1e:dd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:57 2025 by rpki-client