Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
File: Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft (raw, json)
Hash identifier: kWvPdZ5PikM73ytAMZAKDNRYCYhIpM+ndJRt/vkmWEs=
Subject key identifier: DB:41:24:87:2C:CA:86:8B:02:2E:4A:73:98:B8:D3:F8:FC:D9:EF:7A
Authority key identifier: 42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
Certificate issuer: /CN=428df99824ce67b0cb5f87fc46599e13adea5702
Certificate serial: 0194BCAA38BF10CAF184E9CD53806EB2B7FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:59 +0000
Manifest this update: Fri 31 Jan 2025 14:00:59 +0000
Manifest next update: Sat 01 Feb 2025 14:00:59 +0000
Files and hashes: 1: Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl (hash: LCydTDjyU4Vks8Y4Bh6tGEhfywvtrcWzOLAkhwMK/9k=)
2: raYuD2-oWYFkHeIeR6LIUYgtbtM.roa (hash: JU+hidsjRHQowQdjLtlmSpodi1Pd90fMaRJU/QLsDsg=)
3: zY-mc8ottsO0mlX2DbncV_JVaGI.roa (hash: IXtxsfxn422nBKB3kQxte4GM01lfDRPi2WPTNL4v8HQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:38:bf:10:ca:f1:84:e9:cd:53:80:6e:b2:b7:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=428df99824ce67b0cb5f87fc46599e13adea5702
Validity
Not Before: Jan 31 14:00:59 2025 GMT
Not After : Feb 1 14:00:59 2025 GMT
Subject: CN=db4124872cca868b022e4a7398b8d3f8fcd9ef7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6e:73:f5:ca:08:37:2d:20:ce:3d:01:40:69:
84:39:dd:7a:e9:26:65:8b:fd:a5:0d:0a:f2:6d:21:
2c:eb:20:be:bb:60:0d:99:f4:2c:82:f8:58:2c:50:
06:6f:e5:91:05:e2:e8:b4:8a:1c:3f:46:1d:31:64:
87:14:9e:89:b7:5e:0f:5b:90:5e:26:f8:4e:91:ab:
9a:fe:99:8e:c6:ac:47:d0:29:79:88:a6:6f:59:ed:
71:75:b0:9f:2e:c7:2e:97:71:73:88:8a:93:06:ca:
a5:b7:be:50:fb:9a:fe:e0:b1:2b:72:f9:b0:54:7c:
87:33:95:8d:70:76:35:c7:a6:bf:83:5c:76:e4:02:
5e:1d:b5:08:2b:8b:11:57:e4:f2:a1:6d:f7:a6:88:
cc:0e:ec:3b:36:a9:96:fe:d3:9c:dc:72:7a:ec:1f:
25:19:1f:8c:e7:03:ac:6c:17:9a:f6:56:68:41:06:
9a:e3:7c:0e:71:8f:ae:45:73:98:85:a3:b2:a2:34:
55:6f:c6:8e:d6:b4:ee:6f:7f:c0:63:23:74:f0:e2:
68:de:4b:bc:1a:db:52:1f:de:0c:08:8e:9e:55:2a:
52:1d:2a:dc:78:fd:ed:b0:8e:dc:15:3d:4a:92:b9:
4f:73:40:f7:5d:6c:92:f1:ce:01:93:08:54:6a:f3:
38:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:41:24:87:2C:CA:86:8B:02:2E:4A:73:98:B8:D3:F8:FC:D9:EF:7A
X509v3 Authority Key Identifier:
keyid:42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:4e:ba:da:fd:aa:f3:19:dd:f3:0f:49:ad:52:fc:bb:e4:02:
b5:11:e5:2d:76:a4:e5:7e:be:9b:78:52:bb:cb:11:21:62:4e:
ff:2e:5c:d8:97:a5:3a:c9:83:01:05:84:e4:2d:29:ae:0c:d7:
d0:29:92:f5:54:d9:db:6c:bc:26:f9:af:5b:b4:3f:22:12:df:
5d:c6:4c:62:81:a4:71:a3:f6:2a:fa:ca:50:00:2a:5b:c0:43:
cb:39:3c:c6:eb:f8:96:c2:ed:fa:4c:d1:f0:ab:8f:7d:09:d8:
73:59:2f:7b:57:91:03:38:6a:a2:be:a0:e7:ba:ed:13:72:46:
23:79:43:53:07:5e:95:ad:25:04:31:30:9a:b3:1e:29:ef:b1:
27:0a:85:88:b4:5c:34:ca:76:c6:1f:1c:62:0b:ad:56:4f:4b:
a8:82:4f:3a:27:75:48:3d:c4:2d:0f:50:26:eb:20:a0:4b:27:
b4:15:7a:af:42:c0:20:d5:21:50:5d:9f:7f:d1:08:6e:91:23:
a5:9e:72:36:96:2f:fe:f1:7b:a2:15:1d:9b:6c:e7:c8:8e:b0:
97:86:bc:e6:8a:a2:2a:77:e5:c6:7e:0f:5d:22:d9:e8:fe:8b:
dc:2b:bc:9c:b6:6b:5f:0e:f6:da:f6:5c:fa:6e:fa:aa:bd:e6:
5f:da:64:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:00 2025 by rpki-client