Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
File: qVHmOKLLlcaLvFSicoYFsn9XBoE.mft (raw, json)
Hash identifier: esH7pktXHJGnLpkcVfydL3WU8pxZX9jIWNJd3rgvOao=
Subject key identifier: 02:4F:A8:16:4E:F6:18:08:17:0E:D6:F4:B2:5B:1C:C4:A7:3A:82:9D
Authority key identifier: A9:51:E6:38:A2:CB:95:C6:8B:BC:54:A2:72:86:05:B2:7F:57:06:81
Certificate issuer: /CN=a951e638a2cb95c68bbc54a2728605b27f570681
Certificate serial: 0194BC7296B91FD83A87E54A3365BFCD7A8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
Manifest number: 0AE1
Signing time: Fri 31 Jan 2025 13:00:13 +0000
Manifest this update: Fri 31 Jan 2025 13:00:13 +0000
Manifest next update: Sat 01 Feb 2025 13:00:13 +0000
Files and hashes: 1: HI_761EI5uyGqmjrDCQMeEJHGzc.roa (hash: QB8Dmgi2EHb5963iec21h5u6pDxN6G7ySEepAThURJA=)
2: qVHmOKLLlcaLvFSicoYFsn9XBoE.crl (hash: lAyroBbMPCezZqVfhIpU9WTQ9tZiOnL5t8UZNllEGXs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:96:b9:1f:d8:3a:87:e5:4a:33:65:bf:cd:7a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a951e638a2cb95c68bbc54a2728605b27f570681
Validity
Not Before: Jan 31 13:00:13 2025 GMT
Not After : Feb 1 13:00:13 2025 GMT
Subject: CN=024fa8164ef61808170ed6f4b25b1cc4a73a829d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2a:10:e9:e2:36:bb:d9:00:2f:e0:16:66:ff:
7d:da:12:45:a6:6f:a4:12:50:7e:d8:48:56:8b:e9:
b6:c2:81:cb:ef:6c:b4:96:b8:7b:45:80:4e:d9:6c:
d7:cf:9b:cf:c6:7e:36:01:f7:2c:a2:19:2e:20:a1:
29:52:5d:c3:0a:70:ca:7a:f4:f3:f6:77:2b:6c:5c:
22:dc:77:d7:30:3e:2c:57:c8:0c:35:a5:38:72:55:
19:61:b9:80:e1:6a:e3:0e:e3:62:4a:b3:a9:41:69:
92:13:bf:1a:77:e0:b5:92:7c:0f:0b:8a:92:43:09:
5e:73:12:60:fb:81:a7:4a:ef:19:49:92:43:47:1e:
71:c0:33:f5:15:19:96:28:4b:6d:69:b7:6e:c7:ec:
41:88:bd:57:41:c4:8e:59:b7:26:20:e0:79:4c:33:
c0:8c:1e:b4:f7:3b:6f:46:23:f5:8b:3e:4b:67:93:
0a:d9:bb:e2:a0:5f:6d:cd:51:a1:60:5e:67:f7:b6:
30:ed:c0:75:1f:5b:b7:98:91:51:97:e4:db:62:c2:
97:6a:55:f7:47:b2:fd:f9:33:db:cf:4a:e8:3d:95:
72:64:eb:2c:49:c9:97:89:3c:b4:54:b9:1c:b6:3d:
0d:8b:df:e4:3c:de:90:89:da:1c:03:f2:df:b7:3f:
e3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4F:A8:16:4E:F6:18:08:17:0E:D6:F4:B2:5B:1C:C4:A7:3A:82:9D
X509v3 Authority Key Identifier:
keyid:A9:51:E6:38:A2:CB:95:C6:8B:BC:54:A2:72:86:05:B2:7F:57:06:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVHmOKLLlcaLvFSicoYFsn9XBoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f06e79-ed2b-43d5-b4c1-abdf906c5ade/1/qVHmOKLLlcaLvFSicoYFsn9XBoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:89:f9:04:a9:fc:cb:c6:e3:d8:81:bd:c9:53:d2:af:b4:75:
6e:09:df:5a:fb:6a:71:79:5a:e5:05:d2:56:4d:53:f4:e3:02:
cf:09:18:55:2f:c2:2c:f2:0a:e9:ae:0c:9a:81:c0:84:56:66:
53:ba:2b:60:1b:0a:1c:e2:f4:07:ef:52:f4:2c:43:a5:5e:47:
40:fb:32:e8:92:ab:d7:a4:d1:43:62:25:c7:6e:83:91:71:7e:
a0:61:c3:28:cd:63:44:3b:96:e6:7f:f4:57:cf:5e:5c:f3:46:
3c:94:a7:54:3f:29:9f:f9:ce:7c:67:6b:96:1c:6d:39:23:5d:
94:85:d5:dc:64:83:90:0d:b3:71:ad:c8:cd:96:0f:99:51:04:
19:93:78:36:31:b8:c3:50:26:b7:b9:12:6b:21:87:26:54:b3:
69:f4:0d:ac:f4:7f:c9:51:06:53:67:7c:27:93:3e:27:a4:e9:
bb:33:d4:ea:59:dc:59:5b:97:d6:41:f2:7d:d2:37:2a:70:73:
87:b7:6e:70:9d:76:fb:d5:c4:d1:07:55:12:10:bd:0b:94:ec:
f1:c9:f5:6b:58:85:b6:ca:b1:d9:8e:e9:d3:20:08:16:89:7f:
98:07:21:f3:84:94:a5:1f:3b:00:e1:58:42:2a:61:67:f1:d1:
ba:71:26:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:51 2025 by rpki-client