Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
File: qajkTlc8U8cZIxL8xyFQ0t43fW0.mft (raw, json)
Hash identifier: UdoRvK/vAN3RAZoWb6tH12QLigVQnhbWZQHjckoI4ho=
Subject key identifier: 1D:2F:58:B2:A2:1E:91:58:74:61:F5:76:52:43:82:20:35:54:B5:6B
Authority key identifier: A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D
Certificate issuer: /CN=a9a8e44e573c53c7192312fcc72150d2de377d6d
Certificate serial: 0194BCE07E550A33B7B0AE72EE695C3C5C29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 15:00:16 +0000
Manifest this update: Fri 31 Jan 2025 15:00:16 +0000
Manifest next update: Sat 01 Feb 2025 15:00:16 +0000
Files and hashes: 1: CTedhf-UDhDCo0gKWN1eFB95iME.roa (hash: Vr6y6sdI8B/BSyNE6gcBQftZW1dE4fIdtomKsz3LLNE=)
2: qajkTlc8U8cZIxL8xyFQ0t43fW0.crl (hash: ahX3TbKdHLyC+FFv4+5D4K2HeEzHUjrklF2XnTTKBmE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:7e:55:0a:33:b7:b0:ae:72:ee:69:5c:3c:5c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a8e44e573c53c7192312fcc72150d2de377d6d
Validity
Not Before: Jan 31 15:00:16 2025 GMT
Not After : Feb 1 15:00:16 2025 GMT
Subject: CN=1d2f58b2a21e91587461f576524382203554b56b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fd:2a:ae:90:22:1b:64:e9:fe:f7:01:a4:75:
d7:94:5c:9a:33:48:f6:3f:f2:6d:54:99:e9:4f:2f:
88:26:2e:28:7e:f2:29:35:d9:7d:d2:bb:c8:46:80:
70:8b:02:7a:a6:ec:65:ea:3f:55:a6:b6:55:8a:e7:
2e:48:71:87:a3:77:e8:07:88:c3:3e:c5:81:53:fc:
7b:eb:6e:00:3e:2e:ce:e3:cf:8c:f6:a8:68:97:03:
14:ee:a3:25:2f:1d:67:fe:f2:3e:46:00:c7:56:34:
8a:82:ff:1a:ca:45:98:ef:41:4e:d6:6f:c1:55:f1:
ff:de:5d:5e:fd:ef:0d:dd:19:3d:b6:ca:4a:26:a5:
8e:00:a2:a1:09:63:b1:9b:47:95:68:63:e8:a9:b9:
78:32:59:e1:a6:05:ba:6c:4f:e2:48:13:4c:54:09:
a6:c2:ff:cc:ed:50:2a:d5:e3:61:b2:d3:72:a0:84:
0a:e3:cf:65:e3:f8:d7:15:ac:7a:5c:fd:e9:9b:64:
e2:fd:ae:d8:5c:06:39:05:5e:2d:be:62:9d:16:3e:
11:9a:32:b5:12:a1:e3:b1:aa:d0:42:4c:55:fa:e5:
e9:28:00:ca:08:5d:b5:69:06:47:aa:2f:af:aa:d1:
8b:8c:97:64:d2:68:12:9f:8b:19:7c:50:ab:a2:0e:
a6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2F:58:B2:A2:1E:91:58:74:61:F5:76:52:43:82:20:35:54:B5:6B
X509v3 Authority Key Identifier:
keyid:A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ae:1e:66:9e:80:39:40:84:8f:4a:c2:38:ba:9e:52:2c:45:
4f:ae:c5:19:24:77:a3:2a:e7:d8:0c:7f:68:2a:63:bb:7d:58:
08:08:0e:04:e3:f1:0d:9c:19:7f:1a:25:01:cc:28:a5:cb:ae:
49:8f:bf:b8:55:69:63:31:3e:96:09:cd:63:d8:ee:a4:84:bf:
5e:6b:ef:ad:ca:32:76:2d:f0:5e:f0:08:96:18:4f:11:7d:ea:
d7:04:37:52:22:c3:0d:36:4e:fa:3c:02:f5:e3:3c:f3:11:87:
e1:6d:41:87:9f:82:a1:95:7f:b3:75:ea:ac:dd:ee:5e:c2:a0:
42:a1:0f:57:20:06:a0:a6:1f:b6:e8:94:e3:4f:d4:f5:78:b5:
1e:fb:b8:13:ec:26:af:1d:45:10:a9:88:92:30:81:c8:20:c9:
cf:43:fe:bc:41:78:b0:d1:58:eb:05:6b:8a:f8:5a:92:29:3a:
67:b9:fa:6b:20:35:5c:90:09:9d:28:8e:59:36:3f:dd:5f:32:
8a:7c:a6:53:c9:01:3b:f7:8e:7e:5c:a7:83:af:92:7c:1f:15:
cc:91:eb:64:bf:e7:a8:8e:0d:74:45:8f:4e:a6:a0:6a:06:a9:
83:13:54:bc:ab:f5:d0:b8:3e:b9:17:6f:8e:a3:b9:99:f3:7f:
c4:74:f8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:34:44 2025 by rpki-client