Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
File: q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft (raw, json)
Hash identifier: 9cI+gQqui4Sn7eTj785Mo7VuSqraqBfX7NINKxyqbCg=
Subject key identifier: 39:1B:7C:B5:F8:6C:DA:63:70:79:32:F7:96:B1:50:16:50:44:24:AB
Authority key identifier: AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8
Certificate issuer: /CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8
Certificate serial: 0194BBCEE87E6A14747CBB3759645C0EDFF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:01:26 +0000
Manifest this update: Fri 31 Jan 2025 10:01:26 +0000
Manifest next update: Sat 01 Feb 2025 10:01:26 +0000
Files and hashes: 1: 2Vg-fH2vp-D7ckuE6V7PaBZ7o70.roa (hash: DyWglEVnrpM8F4KNwyZkOV0Y6uTuRo6wEmkRjgJVIdU=)
2: q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl (hash: 5YCeLWLkEMXU8XiLckS6nzT6OFnWDNyDL0SoBSjv8Ik=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e8:7e:6a:14:74:7c:bb:37:59:64:5c:0e:df:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8
Validity
Not Before: Jan 31 10:01:26 2025 GMT
Not After : Feb 1 10:01:26 2025 GMT
Subject: CN=391b7cb5f86cda63707932f796b15016504424ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a0:bb:46:c7:9d:01:cd:95:b4:87:31:42:07:
b3:ff:7c:f8:4f:d7:a7:f8:2c:00:30:92:de:c3:fc:
87:1d:66:b6:aa:0d:c5:c9:3f:4c:89:74:a8:cc:ec:
5f:51:74:3d:4a:73:a6:10:5a:04:e0:fe:3f:9d:2d:
30:8a:39:2e:5c:16:dc:b9:f5:2c:5f:ce:c0:0c:0a:
80:a2:2d:a6:39:f0:37:25:e0:d8:05:89:c2:d1:20:
92:f4:19:e0:77:ba:e2:f8:6b:42:1a:c7:85:e9:95:
06:92:80:c0:c3:c6:ee:6d:76:7f:9f:65:99:a5:98:
1f:42:1a:68:0d:62:f3:4a:47:ab:a1:01:21:ba:0e:
92:c1:d9:1b:36:20:96:d5:8a:87:82:5c:37:a2:57:
85:5f:89:36:6b:2a:9b:55:d7:c4:6c:e1:99:e7:fc:
b5:07:e7:5b:38:9c:dd:4b:ef:fa:ed:05:73:d4:73:
a8:9e:d3:40:2c:89:b8:bb:f4:61:c8:b8:71:f3:0e:
ba:8f:ab:bc:65:90:36:be:5f:14:1b:9b:7d:04:a4:
55:11:bb:f2:ef:83:3a:ae:42:b3:62:99:ab:a3:29:
7c:f0:9d:d5:0f:75:af:ec:0e:35:bc:cd:55:b1:b3:
6d:c2:9e:f4:31:62:5b:76:30:0a:6c:b0:e9:da:82:
6c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1B:7C:B5:F8:6C:DA:63:70:79:32:F7:96:B1:50:16:50:44:24:AB
X509v3 Authority Key Identifier:
keyid:AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:81:49:42:83:f6:a8:4d:c1:65:91:31:3b:15:0f:0c:e4:02:
18:1c:a0:cb:a5:5a:c0:51:12:ee:66:b5:5b:b3:ad:e6:51:b1:
b4:28:85:0b:31:90:1b:47:31:43:ef:88:a5:67:1a:92:58:84:
f2:da:37:da:5e:57:01:6a:30:62:48:76:db:91:52:b5:b7:7f:
f0:c5:b9:82:4e:99:cf:02:5f:ed:a2:da:e9:ee:bf:e1:91:9f:
ec:21:08:ab:24:48:48:a5:0c:af:68:eb:be:43:58:0b:a6:ce:
22:a8:39:a1:c2:b2:73:3f:d2:90:f7:31:f0:e5:46:e8:d7:af:
ef:9e:f4:b0:15:24:8e:16:13:a1:4e:0f:6b:4c:56:0f:5c:cf:
e2:f8:01:99:ba:01:c6:97:6f:92:32:9f:a4:9f:7e:0e:48:3f:
5b:ed:4b:e0:0d:96:78:80:9b:5c:64:6e:49:4c:98:b6:cd:ab:
b7:56:9e:80:2b:66:0b:c5:ea:02:65:cf:01:4f:31:e1:f3:a1:
dc:b6:52:b0:e2:30:73:47:80:db:5b:49:6d:db:91:75:21:5e:
77:be:6c:5f:fc:b4:1a:3f:07:90:60:f8:84:ef:7a:a1:b4:65:
80:66:99:ae:f1:90:0a:86:d6:7a:d4:7e:48:9f:9e:19:e0:3c:
2b:cd:95:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:23:01 2025 by rpki-client