Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
File: qNU0ujy0JM9cXjuiVLojJQgGWLA.mft (raw, json)
Hash identifier: JXj988Yb/wXh9VZKc5cp0udhoRzTjBoaBOuLZg8w0WA=
Subject key identifier: 3C:6E:ED:F2:24:8E:4F:D7:A2:38:3E:46:7D:2B:20:96:BF:0F:C7:F1
Authority key identifier: A8:D5:34:BA:3C:B4:24:CF:5C:5E:3B:A2:54:BA:23:25:08:06:58:B0
Certificate issuer: /CN=a8d534ba3cb424cf5c5e3ba254ba2325080658b0
Certificate serial: 0194BD853018B7D647AD5A85FF8A9A275497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qNU0ujy0JM9cXjuiVLojJQgGWLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
Manifest number: 056E
Signing time: Fri 31 Jan 2025 18:00:09 +0000
Manifest this update: Fri 31 Jan 2025 18:00:09 +0000
Manifest next update: Sat 01 Feb 2025 18:00:09 +0000
Files and hashes: 1: oATe-_oISha7IgG23AEM218xrRE.roa (hash: uddGyx2jLyok/qpchLVARkXw2HFXXOE6m1d81wn4B4M=)
2: qNU0ujy0JM9cXjuiVLojJQgGWLA.crl (hash: n/p1yfkajmXa0lyfURd5X5vrFcBpW7xWJcRRaWhnzic=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:30:18:b7:d6:47:ad:5a:85:ff:8a:9a:27:54:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8d534ba3cb424cf5c5e3ba254ba2325080658b0
Validity
Not Before: Jan 31 18:00:09 2025 GMT
Not After : Feb 1 18:00:09 2025 GMT
Subject: CN=3c6eedf2248e4fd7a2383e467d2b2096bf0fc7f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2e:67:54:c1:bf:58:81:62:ab:d1:67:7f:79:
1e:00:2e:d6:71:1c:03:4f:c1:93:c1:52:74:1c:a3:
96:3d:c1:37:1f:3b:f2:f3:9e:64:ff:fc:82:92:23:
f4:0a:aa:87:df:20:a0:e9:b3:50:19:9e:54:50:35:
1e:38:4f:ed:e4:47:b4:39:a8:dc:23:5d:3d:0d:1f:
5b:c6:61:d2:93:ff:a8:bf:b8:90:42:eb:38:03:84:
15:fc:f3:10:1c:56:64:2c:b3:2e:0e:64:5e:ac:34:
62:5f:66:eb:43:b2:78:bf:b7:ea:82:94:a1:0d:17:
35:9f:d9:65:76:c8:7c:94:5d:2a:fa:75:2b:5a:0e:
f9:88:df:cb:a4:fe:0a:fe:20:be:d3:cf:2d:87:75:
95:74:b9:48:50:9d:36:f1:16:1d:32:01:3a:ed:df:
35:75:1e:e5:37:1b:e1:9d:ff:bf:e4:ee:54:44:59:
27:6a:27:9c:8a:cb:e4:0a:8b:fa:a7:03:08:15:26:
63:f0:a9:f4:39:ed:62:5e:05:3c:cf:e2:a6:a9:a2:
f1:50:ba:2d:db:dc:89:e7:af:bb:04:f3:48:1e:f9:
ed:d9:3c:cc:5f:58:5e:4e:76:c9:6c:27:4b:f8:09:
1d:32:da:0d:2e:99:6f:4f:7b:79:e3:2e:55:e9:5a:
c9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6E:ED:F2:24:8E:4F:D7:A2:38:3E:46:7D:2B:20:96:BF:0F:C7:F1
X509v3 Authority Key Identifier:
keyid:A8:D5:34:BA:3C:B4:24:CF:5C:5E:3B:A2:54:BA:23:25:08:06:58:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qNU0ujy0JM9cXjuiVLojJQgGWLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ae:20:fb:e0:c7:ae:6f:2c:3d:62:bc:31:38:d4:67:e7:1c:
7e:25:e0:29:41:b2:1a:c5:b9:c8:85:ab:ff:85:f2:61:26:46:
45:07:b2:89:a0:a7:71:89:f3:1b:42:dd:44:6a:77:94:11:f4:
9b:d0:9c:07:1f:71:31:c7:c0:dd:e1:1f:f5:56:49:3b:a7:65:
a9:62:98:5a:d5:c3:a6:92:fe:87:ba:80:16:a5:dc:85:42:bf:
ad:d7:20:57:63:52:37:49:82:8d:c0:6d:d5:4e:af:a4:3b:7d:
98:d3:a6:1b:34:88:f5:96:b8:e5:91:41:75:04:c9:c0:c0:23:
10:c9:9f:d2:1b:e0:0e:df:13:de:a2:5b:27:43:7a:c5:fd:7e:
b7:e8:66:78:43:f8:09:cc:0e:4b:14:b8:38:3e:e7:a5:58:f9:
9d:5a:b3:3d:69:2d:a7:98:43:8c:a1:4c:ec:df:ef:04:0f:fd:
70:0f:dc:a7:86:db:d9:86:fc:2a:6c:42:4c:27:22:df:8c:2a:
23:79:d4:ca:ed:2a:11:1a:8f:6d:79:a7:ba:fa:b3:a1:c6:9d:
09:7c:e1:03:31:9d:6c:30:be:01:fd:22:d8:e2:28:62:41:2b:
97:f0:1a:10:84:6c:23:6d:f6:01:41:09:2d:93:83:d4:07:2d:
2f:9b:65:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:46 2025 by rpki-client