Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.mft
File: mQYOLer_6n1iLdkVgP-QFfJVdYs.mft (raw, json)
Hash identifier: W7NhAJV1rhVaZve5NjaMTL4DyFwDJADLfrxh2VnpJY4=
Subject key identifier: AF:81:10:59:97:2F:D6:26:9A:72:56:65:38:83:89:19:3A:75:50:1E
Authority key identifier: 99:06:0E:2D:EA:FF:EA:7D:62:2D:D9:15:80:FF:90:15:F2:55:75:8B
Certificate issuer: /CN=99060e2deaffea7d622dd91580ff9015f255758b
Certificate serial: 0194BBCE54133A14332CC59AFC9EFBD6055F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQYOLer_6n1iLdkVgP-QFfJVdYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.mft
Manifest number: 045C
Signing time: Fri 31 Jan 2025 10:00:48 +0000
Manifest this update: Fri 31 Jan 2025 10:00:48 +0000
Manifest next update: Sat 01 Feb 2025 10:00:48 +0000
Files and hashes: 1: YE7z5Yo-VebSsmgIFpnY-X43QgA.roa (hash: lLUNSeL3GzkU1y5/O/u6QldsICYnJuoTtdixE8gdS+A=)
2: mQYOLer_6n1iLdkVgP-QFfJVdYs.crl (hash: HoP4ufaPUtUmU3dpHM5J0+C342B8XT8lvuOxHIpIXxk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:54:13:3a:14:33:2c:c5:9a:fc:9e:fb:d6:05:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99060e2deaffea7d622dd91580ff9015f255758b
Validity
Not Before: Jan 31 10:00:48 2025 GMT
Not After : Feb 1 10:00:48 2025 GMT
Subject: CN=af811059972fd6269a725665388389193a75501e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:00:2c:96:b3:16:62:9b:0c:dd:63:86:c3:94:
ae:7e:0b:af:3e:25:e7:54:00:d3:50:9b:b4:87:72:
27:f7:75:0c:d6:62:da:8d:4b:26:25:2c:6c:7c:1b:
7a:03:e7:f4:5b:25:a3:36:08:14:17:df:f1:83:2d:
5c:b5:c5:f7:65:fd:b0:6b:4d:da:cb:2f:57:7a:16:
f8:fb:53:de:8b:95:16:bf:c2:30:f3:c7:86:2b:05:
f6:9a:88:0a:36:21:f7:f4:3a:d9:5f:35:5f:b7:c6:
5f:e5:c6:2b:30:c9:64:bf:cd:6c:27:30:c7:f0:5b:
9a:c3:0f:c1:35:37:99:6a:31:47:d3:36:b3:30:3d:
84:3e:06:5e:f1:e8:55:af:88:cf:10:d4:aa:14:1d:
61:a2:fa:63:7b:f0:ca:5b:02:de:78:f6:5c:d2:47:
37:b5:fd:78:0d:ee:97:a6:ef:a3:7a:aa:35:57:8d:
37:36:20:f4:dc:f1:67:d5:ee:8e:2c:f5:1e:fc:26:
10:6a:28:54:50:3a:ac:23:37:95:3d:63:69:f2:22:
33:2d:9d:81:57:ec:55:b8:5a:53:22:24:22:73:ee:
7f:8c:5d:ba:0d:0a:f9:ee:fc:40:94:f6:25:37:f2:
e1:49:45:29:22:36:cd:d5:9f:cf:4d:99:cf:a9:75:
07:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:81:10:59:97:2F:D6:26:9A:72:56:65:38:83:89:19:3A:75:50:1E
X509v3 Authority Key Identifier:
keyid:99:06:0E:2D:EA:FF:EA:7D:62:2D:D9:15:80:FF:90:15:F2:55:75:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQYOLer_6n1iLdkVgP-QFfJVdYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:56:0c:fc:94:7a:0b:ea:62:f4:50:cd:97:f4:ff:c5:b7:e9:
a4:b8:bd:05:f8:d9:9a:b5:ed:f6:7c:9c:e7:74:e2:30:dd:ef:
27:85:af:09:81:51:35:8f:4a:4c:9d:67:b7:ec:ab:5c:09:f2:
4c:76:1f:8a:ff:9f:98:21:97:f0:0e:e3:af:a3:f7:68:08:fc:
76:6e:f6:28:b6:63:ca:44:ef:55:d7:12:c6:44:a9:c1:76:8b:
7c:99:47:84:e8:f1:6b:f1:69:b1:75:dc:d6:c2:25:b2:55:88:
a1:e9:bf:b5:6a:be:3e:78:22:ab:b1:7c:61:4e:2a:87:60:0c:
77:19:32:25:af:29:e2:e3:4d:5d:8f:89:4e:c8:27:98:42:57:
5a:04:2e:6a:0a:37:fa:26:58:16:73:48:86:91:71:2f:23:23:
94:f0:09:34:76:10:02:94:60:56:98:c5:d7:81:01:6e:69:5b:
17:ff:e8:e3:61:ee:cc:0c:f6:5e:39:85:22:79:75:15:e9:3a:
87:3f:f7:7f:0a:c4:e2:10:b8:da:ff:97:32:43:f6:39:78:65:
cb:41:2f:e5:7f:43:a7:b4:1a:4f:a2:de:c9:cd:fe:fd:41:7d:
8c:5f:63:8e:58:ec:4d:99:25:b3:5a:8a:a8:d6:52:bf:e5:ca:
15:49:62:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:46:50 2025 by rpki-client