Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
File: qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft (raw, json)
Hash identifier: 9nnHCEktNd6SzHAx3NczLauv7DA6mtxCCi6llpWRg80=
Subject key identifier: 47:C3:43:B6:AD:3D:78:12:F8:71:AB:6E:E2:A4:C2:64:F1:92:0B:D9
Authority key identifier: A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4
Certificate issuer: /CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4
Certificate serial: 0194BD4EC79AA6331C7988EFB78E1365110D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
Manifest number: 0281
Signing time: Fri 31 Jan 2025 17:00:44 +0000
Manifest this update: Fri 31 Jan 2025 17:00:44 +0000
Manifest next update: Sat 01 Feb 2025 17:00:44 +0000
Files and hashes: 1: 2U9_DlkXgIcp2fqTIjSzc96XjLo.roa (hash: AqnnBs4DF+DHHSE1BOafxKA5wB2i7dk/ZwYwgXHHS/Y=)
2: qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl (hash: 048zEsCpKaQ2/koaYIRqkuOewoMwDsJ15QzQRT/8aTc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c7:9a:a6:33:1c:79:88:ef:b7:8e:13:65:11:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4
Validity
Not Before: Jan 31 17:00:44 2025 GMT
Not After : Feb 1 17:00:44 2025 GMT
Subject: CN=47c343b6ad3d7812f871ab6ee2a4c264f1920bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:83:e4:37:b1:12:da:36:51:07:3d:2d:88:1d:
03:26:e6:ba:6f:00:c3:03:6d:7e:cc:af:0f:be:82:
64:a1:1f:7d:d7:f3:e2:1a:d5:ac:9f:14:7a:cf:19:
3e:5d:dc:f2:0a:c8:cb:40:fd:37:75:e6:c8:ce:ad:
25:d7:7c:38:cd:e0:45:4b:88:31:93:25:db:7e:bf:
29:8e:33:4e:95:76:e2:f3:ee:15:22:5f:ae:b6:60:
c3:f5:1d:24:33:60:c5:77:33:98:98:46:01:26:23:
8d:1d:76:47:39:f2:78:10:22:cc:9b:85:02:e1:15:
72:b3:49:7e:59:d5:42:e9:59:79:cf:b0:81:a3:7f:
55:e9:8f:36:05:7d:27:c4:eb:8d:37:4f:58:c7:55:
96:5f:a2:ce:2a:d9:0b:46:49:f6:31:a6:7f:f4:9a:
39:fc:9f:fa:67:d5:35:09:88:f0:0a:dc:80:13:3e:
a7:2b:c9:02:4f:96:02:99:d7:4f:93:ea:b2:73:5a:
e4:4d:71:4d:17:9b:f8:37:71:15:9c:72:52:bb:01:
39:e7:a4:fe:7e:3f:7e:c1:92:7e:0c:5f:00:bd:54:
3e:6b:fd:24:32:e5:1f:2f:3c:00:cc:aa:eb:42:8a:
5a:4b:91:ea:c8:b4:61:68:91:88:45:35:96:0b:e4:
45:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C3:43:B6:AD:3D:78:12:F8:71:AB:6E:E2:A4:C2:64:F1:92:0B:D9
X509v3 Authority Key Identifier:
keyid:A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:df:cf:86:13:03:6d:24:57:e6:02:25:93:3a:81:83:83:c9:
15:fd:b1:91:23:14:d6:eb:87:3e:6b:62:ec:7d:a7:08:0d:74:
cb:ea:ad:3c:09:47:c4:b4:57:02:01:ef:56:85:84:72:20:f8:
af:93:32:cd:6b:b3:81:0b:20:24:5e:97:00:d5:d2:0d:f3:cc:
e8:66:7d:03:94:9b:7e:fa:29:25:93:ef:08:cd:1a:52:fa:e1:
11:92:aa:62:21:c0:f3:47:b2:d7:86:0b:f6:b5:39:71:2a:f3:
93:c0:1f:2c:e2:dc:cd:15:62:0e:5c:85:c3:b8:ea:6f:6a:3b:
ba:10:29:20:6c:8e:40:15:67:f8:fd:7a:d0:1f:16:dd:ac:e8:
a9:7a:e8:73:47:d4:8d:68:fc:e1:40:dc:70:3b:85:f5:f8:d2:
6b:09:0c:a9:00:5c:da:95:3f:bc:41:8d:dc:d9:2a:7a:47:7a:
72:a0:5a:7f:aa:ed:05:c3:1f:08:60:94:a9:b2:9e:4e:f7:e2:
7d:d6:d9:2a:68:a9:40:56:0a:25:8a:4e:cb:42:3b:31:37:c8:
7b:30:b5:6f:0a:41:31:85:e2:57:bf:29:0d:14:a3:17:65:05:
64:81:1e:3c:81:5c:13:84:b2:40:a2:e6:6b:7d:61:f8:1b:ff:
00:43:85:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:29 2025 by rpki-client