Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft
File: Q5i1d7IjtadjUSGadP2kRnBIkPc.mft (raw, json)
Hash identifier: 5kW9vfVsJ7NkDwr05vXq4YDG2fB3psS19v1+hfhE5+E=
Subject key identifier: 54:25:4C:1C:BF:BE:AA:5B:75:5C:6B:8A:9C:DD:28:CD:FE:31:BA:CD
Authority key identifier: 43:98:B5:77:B2:23:B5:A7:63:51:21:9A:74:FD:A4:46:70:48:90:F7
Certificate issuer: /CN=4398b577b223b5a76351219a74fda446704890f7
Certificate serial: 0194BC72A8FA99D2663AC04AFB72D23B4E7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5i1d7IjtadjUSGadP2kRnBIkPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft
Manifest number: 1112
Signing time: Fri 31 Jan 2025 13:00:18 +0000
Manifest this update: Fri 31 Jan 2025 13:00:18 +0000
Manifest next update: Sat 01 Feb 2025 13:00:18 +0000
Files and hashes: 1: KL5bIat3Yk7dpaHmhHBN9ywSikg.roa (hash: 2Dm1yDCv5S4uhPon+c/p0fcUA41+SmoP2uLFsPOLfB0=)
2: Q5i1d7IjtadjUSGadP2kRnBIkPc.crl (hash: LU4E5JF60GBI3XH90CpqXI3x0xrW61eME2w/+6JSBrc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a8:fa:99:d2:66:3a:c0:4a:fb:72:d2:3b:4e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4398b577b223b5a76351219a74fda446704890f7
Validity
Not Before: Jan 31 13:00:18 2025 GMT
Not After : Feb 1 13:00:18 2025 GMT
Subject: CN=54254c1cbfbeaa5b755c6b8a9cdd28cdfe31bacd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:df:c2:6d:59:fb:cd:89:d1:f0:93:c8:5c:36:
20:08:bb:d8:03:ee:ed:9a:ea:62:c8:3d:66:37:84:
a6:48:73:f0:74:d7:6d:11:3d:87:b4:33:b9:69:d5:
63:1b:9c:2e:f3:4b:22:b8:9f:cc:6b:27:8f:69:b0:
ba:4c:b7:9b:43:83:09:2e:c1:51:12:14:d9:a0:32:
0c:93:af:54:b1:02:77:d5:36:85:27:e4:b4:9f:66:
68:b3:da:03:a5:20:a6:d6:90:bc:8a:6a:13:b0:47:
5d:13:f4:91:3b:01:e4:c8:ee:91:22:fb:5e:a1:62:
7b:19:46:2b:8e:38:b1:9a:f3:51:52:7f:46:f8:16:
f2:46:3a:8a:8a:19:c6:00:35:af:eb:e5:6d:2f:e4:
94:23:84:da:d2:28:c6:4a:8a:1b:86:8b:8a:a1:69:
3c:2e:db:29:f6:8d:4b:eb:3e:42:65:c7:99:3d:f7:
68:bc:c8:d4:e0:2c:5b:40:0a:9e:e4:6d:aa:40:48:
1a:d3:c9:8d:5e:d1:eb:e9:d2:65:81:7a:5b:02:db:
8c:22:46:a6:a7:37:d2:6f:10:fd:1e:03:fc:f0:e0:
12:3e:f3:43:aa:ca:18:ec:14:2d:56:eb:57:5c:fe:
fc:db:56:b6:52:96:22:a2:5d:7c:66:91:9d:dc:f8:
65:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:25:4C:1C:BF:BE:AA:5B:75:5C:6B:8A:9C:DD:28:CD:FE:31:BA:CD
X509v3 Authority Key Identifier:
keyid:43:98:B5:77:B2:23:B5:A7:63:51:21:9A:74:FD:A4:46:70:48:90:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5i1d7IjtadjUSGadP2kRnBIkPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/582695-61a1-48e7-b6ac-7bc45340dd28/1/Q5i1d7IjtadjUSGadP2kRnBIkPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:28:fc:6f:5a:aa:b1:56:5b:90:70:4e:21:73:19:8d:5b:58:
f7:4a:d2:9a:94:73:88:84:08:7f:20:6a:0b:b2:de:3b:c9:59:
8d:95:f2:9e:2c:ee:a0:04:11:ca:81:85:82:6d:91:03:14:1a:
bb:9e:de:58:53:31:4e:f6:5e:7d:e7:ff:e7:c1:77:80:f7:fe:
7a:c6:ba:9d:33:55:8b:28:6e:60:58:18:03:d3:3e:18:6c:60:
fa:41:e4:53:d3:d9:dc:e9:d6:12:91:3a:cb:f8:fe:45:e3:46:
27:d1:9c:b0:c3:4c:1a:d1:ef:a0:cd:ea:6d:8d:27:45:24:43:
8f:a1:10:27:fe:cb:8d:6a:20:23:08:94:71:b0:ba:45:1c:ba:
4d:84:2b:52:b6:b6:9a:f5:9d:94:3e:12:2a:d9:89:94:0d:71:
2d:42:7c:eb:a8:21:01:c2:15:b6:d7:cb:60:6d:b8:cb:1b:c8:
11:f4:ed:6d:1a:ee:08:47:4d:19:82:eb:13:45:ce:be:ac:40:
c3:27:7c:d4:d9:c8:26:8f:c9:3b:3c:88:fc:66:6a:bd:74:86:
d4:f9:9b:80:a9:83:ec:65:95:0e:c6:fe:6f:98:5c:64:82:21:
9b:12:d0:cd:6e:08:fc:b2:fb:7a:de:0f:90:c5:47:e9:d5:c0:
c1:cc:79:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:24:56 2025 by rpki-client