Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
File: Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft (raw, json)
Hash identifier: VMSWECVXdEsRpeTpSfrXvJRhYwbASFr5kryBCyfVC+c=
Subject key identifier: 0E:AE:33:2E:D3:CD:CB:EB:B0:57:EF:A9:65:72:E9:BC:BD:9B:57:BE
Authority key identifier: 43:1F:14:80:65:1F:1B:33:8B:E2:63:41:E2:DB:3A:0A:A3:B3:44:EB
Certificate issuer: /CN=431f1480651f1b338be26341e2db3a0aa3b344eb
Certificate serial: 0194BCA9A8EE48F15E4847BCD429D975904F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
Manifest number: 030B
Signing time: Fri 31 Jan 2025 14:00:22 +0000
Manifest this update: Fri 31 Jan 2025 14:00:22 +0000
Manifest next update: Sat 01 Feb 2025 14:00:22 +0000
Files and hashes: 1: 3ZVx610sqQi3jR1aN5jm4CubkNI.roa (hash: ailedL7i/J97fdockeVNWVcnZPHz5O3htVX32ZMAjHU=)
2: Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl (hash: QURyzMnuZNOwEVnlqqllF56sD12QE/XSvst8Fkh5yhE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a8:ee:48:f1:5e:48:47:bc:d4:29:d9:75:90:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=431f1480651f1b338be26341e2db3a0aa3b344eb
Validity
Not Before: Jan 31 14:00:22 2025 GMT
Not After : Feb 1 14:00:22 2025 GMT
Subject: CN=0eae332ed3cdcbebb057efa96572e9bcbd9b57be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:12:a8:29:47:5f:79:16:99:99:b1:5c:a4:1c:
ac:7e:da:49:51:78:ed:36:e0:b1:74:a6:3c:79:92:
1b:39:63:5b:d0:84:f3:98:5f:33:d9:a7:16:12:76:
cc:02:c3:d5:a9:0d:3b:74:cb:eb:31:72:f0:98:ee:
5b:6f:3e:c7:91:e6:00:79:92:85:1e:a1:8a:52:60:
15:f5:6e:a5:1c:39:f3:ee:43:bf:88:70:7c:a3:af:
50:7e:21:b2:83:5e:6a:d8:72:9f:43:ea:19:08:39:
16:d5:61:d0:51:36:65:a4:a8:25:64:1e:e9:e3:df:
32:ec:87:e1:85:3d:4e:58:42:f4:2f:6a:83:96:25:
ae:fa:51:aa:e1:fe:e3:e6:e9:85:e5:a5:fe:ad:0e:
f3:4f:2c:3e:21:46:dc:29:d6:0b:a8:ea:33:3c:05:
e0:5d:52:a6:4b:eb:5a:52:f9:f9:31:a4:03:84:89:
30:be:0b:fe:39:d0:68:ec:73:2c:3d:a4:12:7b:3e:
65:94:82:2e:db:2e:8a:5f:0b:c1:cf:0c:94:53:dc:
c0:a7:1a:91:67:76:5f:37:a1:e9:21:51:0a:c7:52:
f7:a2:fb:4d:bf:c2:2a:a1:2f:09:01:4f:15:33:cf:
4d:88:a9:6e:3e:b7:67:a3:b4:7e:98:4b:0b:03:42:
bc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:AE:33:2E:D3:CD:CB:EB:B0:57:EF:A9:65:72:E9:BC:BD:9B:57:BE
X509v3 Authority Key Identifier:
keyid:43:1F:14:80:65:1F:1B:33:8B:E2:63:41:E2:DB:3A:0A:A3:B3:44:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:22:0a:29:91:d4:26:af:39:b9:92:48:36:e4:4d:21:41:d2:
c4:d1:26:e5:d4:88:d0:ca:c7:9d:86:31:80:1d:d1:c0:8c:7f:
30:6a:ae:a4:52:85:b0:a8:ae:e8:36:6b:fe:05:7e:cb:6c:35:
98:91:1f:bc:a8:1f:7f:51:4f:a4:9f:d6:e0:35:4c:91:5e:7e:
94:e7:7b:f8:2a:aa:cf:d9:98:e0:53:cb:39:0e:c0:58:94:f6:
48:68:e8:8a:53:8c:ce:71:c6:f1:ca:69:7c:6b:6b:8e:ea:b0:
20:4d:76:f3:50:7d:86:86:51:4d:a5:a2:bb:47:9a:de:de:0a:
3a:58:a4:3c:64:0d:7c:ae:18:80:53:ca:74:83:98:26:03:6a:
8f:a1:a2:bb:05:c4:f3:f6:07:2d:67:17:bb:c9:84:ab:57:df:
6f:81:79:a8:db:a2:70:d8:54:5d:a3:a3:0d:4a:7e:52:d1:76:
f1:fa:f7:e0:b1:f7:11:c3:27:be:91:1f:43:ab:cc:b4:fa:7a:
b7:3d:26:60:3d:75:6a:03:d4:2c:df:91:f6:bb:93:e6:6c:3c:
0d:ce:9d:26:5e:f9:fc:a0:a2:da:68:49:06:4a:31:07:70:a5:
d6:b9:4b:a5:95:63:7c:fb:1e:71:47:bd:b8:e1:9b:cc:db:3d:
91:8f:be:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:50:01 2025 by rpki-client