Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
File: 1-qe1orkHCRPTSTKBX-tH42Mf318.mft (raw, json)
Hash identifier: S1wWDMwdrjZtsBM81PCTZrBap/Xitd2PWJubTPBtVsc=
Subject key identifier: 9D:3E:8D:B5:EF:3F:8A:05:18:9C:47:BD:A7:41:E0:37:E2:FF:B9:96
Authority key identifier: FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
Certificate issuer: /CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Certificate serial: 0194BC3BF578D7B1092112AC4572770F3C6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
Manifest number: 1205
Signing time: Fri 31 Jan 2025 12:00:33 +0000
Manifest this update: Fri 31 Jan 2025 12:00:33 +0000
Manifest next update: Sat 01 Feb 2025 12:00:33 +0000
Files and hashes: 1: 1-qe1orkHCRPTSTKBX-tH42Mf318.crl (hash: mxsrhnSx3zQH+lyN/86Jyb9xhdF2s+l2Sn/pa658K4o=)
2: gHlRquCMx6iwfFhK1AbziJf-SOA.roa (hash: vGvXkm75uZ6w5eWBxSl4fiUVkztcBJ6xWRWL2h8kjfg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f5:78:d7:b1:09:21:12:ac:45:72:77:0f:3c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Validity
Not Before: Jan 31 12:00:33 2025 GMT
Not After : Feb 1 12:00:33 2025 GMT
Subject: CN=9d3e8db5ef3f8a05189c47bda741e037e2ffb996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:db:4f:a7:c5:af:77:26:3b:43:86:29:cd:75:
c1:58:bd:c1:92:7b:ed:da:15:f3:62:03:97:e0:5d:
02:63:3e:b4:f1:2e:6a:27:31:c5:75:09:2d:77:f7:
bc:2a:4e:ee:f8:89:83:5e:56:20:f3:3f:1b:39:17:
26:d3:0a:56:54:0a:22:7c:6f:02:e3:17:ad:b1:c9:
5f:8d:c5:aa:bd:91:2c:ed:7f:34:17:49:cf:c0:bc:
3e:13:7d:6b:e4:72:50:31:81:84:74:38:bc:93:6a:
92:f3:06:f3:c5:3b:26:9a:53:c4:3b:59:53:f3:a0:
10:8f:0e:2f:6d:6a:10:dd:7e:1e:4b:ab:93:43:3a:
1a:d1:28:8f:be:01:50:a8:2a:91:bf:c0:2d:7b:b8:
8c:26:ad:69:3a:49:f4:3f:ce:64:5f:4c:ac:97:d8:
3a:2c:7f:0f:e2:1a:8f:36:b5:d6:29:5d:b9:7d:b9:
54:4d:a0:da:b4:e7:13:1e:cb:93:60:2d:ed:a7:0a:
58:71:b4:8f:59:5e:02:d0:4d:b7:49:63:59:74:d7:
ee:9a:fd:ee:8e:61:c3:5e:d8:9d:8f:af:c4:14:6e:
5d:93:8d:b3:4d:43:34:5a:18:d7:2f:d2:9b:cc:a5:
63:4c:c6:f9:30:2e:81:db:35:6c:6f:5b:d9:f6:ac:
d8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3E:8D:B5:EF:3F:8A:05:18:9C:47:BD:A7:41:E0:37:E2:FF:B9:96
X509v3 Authority Key Identifier:
keyid:FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:21:3d:05:1b:a0:fa:91:2e:39:a8:39:72:7b:ac:ce:a1:06:
e1:d6:d2:bc:45:0e:1c:80:2c:f3:ff:c0:5a:aa:90:ef:b0:f2:
b8:3d:d9:bb:6f:e9:bf:ce:66:1d:6f:31:33:1f:ed:8f:ac:04:
61:9a:5b:61:55:10:f6:c3:ff:52:07:41:fe:a4:a8:97:34:27:
13:45:2a:c8:21:8b:57:1a:4c:72:c8:83:52:34:d4:9c:14:69:
99:7b:a5:7f:bd:9f:dc:98:57:5a:ae:5d:42:b1:7e:2b:20:ee:
3a:35:e6:3d:2e:f8:23:e2:96:ee:26:7d:04:70:2c:44:a6:52:
3d:71:b4:f2:db:34:91:c3:8f:5b:bf:6a:1e:ac:7a:3e:c9:6a:
a5:76:e7:9d:be:86:45:f0:bf:7e:04:f2:1f:ad:10:46:dd:77:
37:4e:82:7e:95:0d:af:c1:41:ca:7d:11:66:f8:00:ec:38:01:
26:1d:eb:48:6c:20:d0:fb:09:c0:f2:3f:4b:72:66:3e:18:dd:
39:86:52:f8:88:ec:8c:fa:1f:44:93:94:75:1f:77:24:10:c0:
82:0a:80:99:1e:db:cc:90:d0:4d:46:da:ac:21:3f:a6:9d:f3:
07:35:23:6d:f6:4c:2a:b5:7b:44:65:88:17:b3:9a:bd:2d:db:
17:bb:ed:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:25 2025 by rpki-client