Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
File: qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft (raw, json)
Hash identifier: UGI5wLSeCbshD3kyCXyH9ryuCrOU2wgb3Xq4mYNcMCU=
Subject key identifier: 68:14:75:12:50:28:00:7C:9B:23:7F:23:CE:69:03:20:D5:92:41:B2
Authority key identifier: A8:6E:25:7C:32:D9:DB:B8:19:D5:17:D5:50:54:F7:67:D7:16:1D:2C
Certificate issuer: /CN=a86e257c32d9dbb819d517d55054f767d7161d2c
Certificate serial: 0194BBCED5898A1E56272BD5251EF5DE5E9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:01:21 +0000
Manifest this update: Fri 31 Jan 2025 10:01:21 +0000
Manifest next update: Sat 01 Feb 2025 10:01:21 +0000
Files and hashes: 1: Uebp0JIuP3hxZnZ2gSrGEbFlcC4.roa (hash: ioWjN07GA9Wdsf4jPQTmSsjSBf+lcaQHQxBmquaB1Tg=)
2: qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl (hash: oC5KPh+802T22+Xdz3BTKjtn0/mCItajYR/qrl8L1zI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d5:89:8a:1e:56:27:2b:d5:25:1e:f5:de:5e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a86e257c32d9dbb819d517d55054f767d7161d2c
Validity
Not Before: Jan 31 10:01:21 2025 GMT
Not After : Feb 1 10:01:21 2025 GMT
Subject: CN=681475125028007c9b237f23ce690320d59241b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:66:99:9b:94:a6:53:ba:ee:d3:68:b4:a7:cb:
b8:17:92:b2:f7:ee:19:cf:80:08:bb:c1:03:11:83:
65:39:1b:68:42:ca:9e:4c:14:9a:75:30:e7:8a:b7:
c0:38:6f:5e:da:7e:61:47:3b:cb:d7:99:b3:e1:ec:
48:f7:4e:b2:93:08:09:9a:2b:b0:c7:a8:48:c4:de:
ee:9e:64:fa:35:02:a9:02:f3:c8:a0:6a:ad:fd:59:
83:c5:e9:06:95:e3:57:67:f2:e1:a2:aa:d1:82:59:
58:5e:70:72:d4:53:12:39:66:97:70:e1:43:86:5e:
38:d5:cf:15:75:de:33:3d:eb:b6:31:33:da:24:f4:
37:c4:3a:5c:87:93:c5:09:d9:94:f5:07:be:2e:a3:
0f:97:4f:41:c7:97:13:a9:6b:8e:be:65:e3:af:bf:
13:1e:3f:84:96:88:b5:2c:2c:ae:27:c1:0c:73:6e:
2d:dd:4a:6d:d3:4e:ff:9e:8a:54:05:5f:bd:6b:ff:
72:6c:01:8f:55:b2:57:e2:36:ec:f2:2d:de:c7:52:
7e:f9:41:7e:46:57:c6:6e:f3:1e:e6:de:75:f1:d9:
20:15:af:db:04:50:6b:74:fb:2c:79:62:cf:6f:c9:
27:6b:ae:92:46:01:1b:59:c1:36:53:4d:0d:77:14:
1a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:14:75:12:50:28:00:7C:9B:23:7F:23:CE:69:03:20:D5:92:41:B2
X509v3 Authority Key Identifier:
keyid:A8:6E:25:7C:32:D9:DB:B8:19:D5:17:D5:50:54:F7:67:D7:16:1D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:69:6a:a8:04:8a:78:f8:43:8b:9e:c7:41:70:ce:26:6d:de:
d0:f3:eb:17:80:1b:d2:27:4d:9c:37:d1:a3:08:b4:7a:0a:25:
9b:c8:ab:4c:d4:7b:52:01:3a:3e:91:d3:2c:e2:62:c2:df:50:
fa:8a:0c:15:59:a5:f5:b4:bb:6a:93:e2:6b:a8:36:71:0c:b1:
53:28:2f:ed:d6:d0:ea:15:68:db:49:9a:9a:ca:89:c0:c0:41:
89:72:8b:da:4b:7d:7b:e7:2c:b2:9a:3a:5e:32:0e:70:32:3e:
f9:d8:15:2b:60:64:81:fb:68:96:ee:6e:74:14:89:02:f4:3c:
fe:d6:90:91:41:d9:7c:ea:59:e5:57:ad:df:7f:ce:de:ce:17:
29:f4:99:04:1d:61:39:74:c0:49:9f:89:b6:92:3a:9d:b8:45:
cc:24:78:b7:5c:6a:b0:a1:79:a2:65:bf:c3:86:c2:f6:66:1e:
a3:31:b7:7e:fe:79:99:6b:f4:aa:25:61:33:b0:3d:37:9b:fc:
87:4d:4d:4e:59:8d:ec:28:60:e9:a4:52:2a:35:52:30:85:f8:
d4:4b:32:c5:19:9d:67:b4:47:a2:c2:7a:43:95:93:9d:eb:fd:
18:21:a2:d2:b2:96:bf:6b:8b:83:fa:89:f9:93:59:49:53:a8:
ed:b9:04:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:37 2025 by rpki-client