Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
File: qD8d69XUeEhD-qKIsuAciFBsHMk.mft (raw, json)
Hash identifier: XDI6ADAbNurJBr/ODXl/QavQSGN+Bq5Q3d2EbG5lQa8=
Subject key identifier: 8D:40:37:9D:B4:98:E8:94:5F:FE:87:3B:5D:24:02:2A:E2:46:70:3F
Authority key identifier: A8:3F:1D:EB:D5:D4:78:48:43:FA:A2:88:B2:E0:1C:88:50:6C:1C:C9
Certificate issuer: /CN=a83f1debd5d4784843faa288b2e01c88506c1cc9
Certificate serial: 0194BC3BEAE6616BCD8794A6B43FD250D178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
Manifest number: 1287
Signing time: Fri 31 Jan 2025 12:00:30 +0000
Manifest this update: Fri 31 Jan 2025 12:00:30 +0000
Manifest next update: Sat 01 Feb 2025 12:00:30 +0000
Files and hashes: 1: BZ13VNeYDJ675QrTvza6Su89fFQ.roa (hash: 1LD0YSVmtKovTGtmhUY3CjQg1PtKAp7I1QWK9ijZOII=)
2: qD8d69XUeEhD-qKIsuAciFBsHMk.crl (hash: JrTgJwgbURbY4pL2Z69ee7Ac7WzaBPRyjO0e+gw6Yyg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ea:e6:61:6b:cd:87:94:a6:b4:3f:d2:50:d1:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83f1debd5d4784843faa288b2e01c88506c1cc9
Validity
Not Before: Jan 31 12:00:30 2025 GMT
Not After : Feb 1 12:00:30 2025 GMT
Subject: CN=8d40379db498e8945ffe873b5d24022ae246703f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d6:7f:00:04:33:d3:0f:9d:d6:f1:dd:4d:45:
7b:f1:23:ea:d9:83:fe:18:df:a1:3e:0d:9a:4f:df:
86:b3:05:41:04:ec:34:e9:ab:73:12:4a:4c:d1:99:
ae:9e:91:04:b2:49:a3:0d:d6:fe:0e:4a:82:96:16:
97:cd:82:cf:44:78:ff:9e:52:1e:2c:e0:a2:7c:dd:
c0:df:00:e8:dd:a5:ea:7c:f3:f0:0a:a6:fb:92:00:
aa:8f:e5:a7:7d:b8:0e:72:c1:0a:ed:aa:bc:f2:f0:
a4:bf:79:b1:36:97:2f:f5:94:6d:15:e1:df:0d:3b:
a1:8e:1b:8b:49:eb:78:8b:2f:a3:b5:06:ed:80:db:
0c:ab:32:77:c9:0c:da:ac:33:9f:95:24:0f:40:0b:
85:9a:01:08:e5:95:bb:1c:64:c1:76:b9:dd:45:8d:
ac:73:db:c8:fc:0c:85:36:84:9d:a5:31:82:78:bc:
f7:fb:85:9a:aa:dd:b9:44:43:f4:d3:85:52:02:e5:
6a:55:c1:71:5f:48:26:e1:5e:21:11:b0:8a:b9:8d:
c0:90:2e:25:af:db:c6:cd:71:6c:1f:cd:5e:fa:47:
1e:d9:f0:de:1a:a5:78:2b:43:15:a5:16:0d:c3:00:
bc:5b:0e:56:72:58:d0:00:95:8d:5d:97:63:10:0d:
d7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:40:37:9D:B4:98:E8:94:5F:FE:87:3B:5D:24:02:2A:E2:46:70:3F
X509v3 Authority Key Identifier:
keyid:A8:3F:1D:EB:D5:D4:78:48:43:FA:A2:88:B2:E0:1C:88:50:6C:1C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a0:d5:82:6a:ef:82:3a:d0:96:c8:53:77:25:18:77:3b:66:
aa:fa:b7:d8:1d:9d:0b:db:37:81:b9:ee:0a:af:9f:35:31:40:
95:04:02:1e:a4:f1:e9:45:ba:fd:9f:70:3a:1c:05:b9:71:d3:
7e:f6:b5:a4:99:0a:b0:e6:0d:29:35:33:38:87:ad:5b:9a:f9:
13:95:25:4c:87:15:f9:fe:88:af:87:70:05:3c:f8:e6:84:ba:
a7:3f:83:f0:88:e1:80:52:0c:4c:dd:f4:30:33:c6:9c:69:71:
d4:7e:32:7b:57:6f:08:74:fb:b6:e3:4c:97:aa:f5:70:00:32:
d5:12:ad:5e:3d:16:d1:fa:df:ad:af:d5:35:33:60:ac:7a:ff:
ce:c5:2e:6f:c1:79:3f:f3:8c:72:8c:af:59:6f:b0:e6:b7:81:
ae:26:c2:09:ba:4e:c9:dd:9e:fd:d7:18:ad:7d:ac:24:e7:54:
59:85:f9:07:85:81:aa:ba:6e:44:91:4c:a8:ed:aa:41:eb:14:
47:50:0b:50:83:74:eb:49:42:c0:44:71:75:56:c8:a5:e5:23:
4b:2f:6e:fa:78:d3:e2:59:79:04:5a:18:1d:7c:52:e8:27:14:
8a:27:d8:5b:b7:c5:1c:eb:3a:fb:ff:07:7f:dd:7e:02:7d:24:
34:29:be:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:21:39 2025 by rpki-client