Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.mft
File: q67fL4Eo9I64ETv69NZ9kBBJCTo.mft (raw, json)
Hash identifier: ACSh+E6UcQAChbLjMfDPA3R5netI0Cgjc7Ze1Z2wZhw=
Subject key identifier: 4F:9E:2F:58:4C:99:6A:D4:53:4A:75:A9:75:34:92:61:50:42:F5:DF
Authority key identifier: AB:AE:DF:2F:81:28:F4:8E:B8:11:3B:FA:F4:D6:7D:90:10:49:09:3A
Certificate issuer: /CN=abaedf2f8128f48eb8113bfaf4d67d901049093a
Certificate serial: 0194BD856CBA5EBA12B35E0F915C7A94B5B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q67fL4Eo9I64ETv69NZ9kBBJCTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.mft
Manifest number: 0576
Signing time: Fri 31 Jan 2025 18:00:25 +0000
Manifest this update: Fri 31 Jan 2025 18:00:25 +0000
Manifest next update: Sat 01 Feb 2025 18:00:25 +0000
Files and hashes: 1: 0Q9DyYJq4YbBL7IBZhMWf3HhzbA.roa (hash: 4213R6OjAd56bVYP7rVqWPE8P8Ej5z/x2DZxc07Sx3o=)
2: q67fL4Eo9I64ETv69NZ9kBBJCTo.crl (hash: odGJKXmbM53AeORokoIhTRtA0XV+q4mwASejcRAkxXM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:6c:ba:5e:ba:12:b3:5e:0f:91:5c:7a:94:b5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abaedf2f8128f48eb8113bfaf4d67d901049093a
Validity
Not Before: Jan 31 18:00:25 2025 GMT
Not After : Feb 1 18:00:25 2025 GMT
Subject: CN=4f9e2f584c996ad4534a75a9753492615042f5df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:17:14:91:ad:da:ab:81:22:bd:bc:e7:5a:98:
92:d1:40:61:0a:f1:b5:97:60:66:9b:b7:ec:9b:d8:
b7:a7:54:71:1a:ef:2d:b4:65:74:b7:c9:ad:6b:ce:
c6:d5:09:68:3c:ca:cc:47:1b:d7:1f:b1:a2:31:5d:
91:bc:13:9d:4e:64:61:47:cb:c8:79:df:d3:0d:6d:
5a:83:45:24:9b:6b:53:76:e2:16:1c:45:db:6c:4c:
48:01:60:3c:81:69:47:6c:53:33:93:44:83:2b:05:
0c:b5:9f:a2:72:89:72:50:41:a1:b9:72:ef:99:2a:
eb:2e:92:01:09:a1:fb:09:10:63:fe:1c:6d:5a:2d:
e4:63:65:47:de:a8:1c:f9:ff:d4:6e:c8:15:9f:6f:
43:f7:f0:06:55:a7:15:db:e4:4b:47:d4:82:03:aa:
2e:5b:f4:18:f5:4a:9d:d1:61:48:87:f4:e7:43:a7:
84:86:96:75:2d:43:0f:9c:59:5c:48:48:c3:4e:ea:
ae:09:e5:c8:b9:eb:26:59:81:27:f5:41:98:d8:c5:
c8:a0:03:04:22:c2:6d:68:47:8d:7f:88:21:13:a4:
a1:52:64:54:41:b0:54:ee:7b:86:7b:7f:ea:80:9b:
c9:b7:b2:70:4a:76:7d:51:d8:5e:87:22:63:df:e8:
d5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9E:2F:58:4C:99:6A:D4:53:4A:75:A9:75:34:92:61:50:42:F5:DF
X509v3 Authority Key Identifier:
keyid:AB:AE:DF:2F:81:28:F4:8E:B8:11:3B:FA:F4:D6:7D:90:10:49:09:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q67fL4Eo9I64ETv69NZ9kBBJCTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ea:4d:ea:5a:b7:c3:8b:12:f3:64:84:7b:3f:f7:b6:17:88:
91:be:c9:d1:0c:e2:a6:81:6e:62:02:02:94:33:e6:37:66:5f:
2c:bc:d7:12:0f:04:9c:1a:06:34:db:dc:80:20:12:41:9b:64:
bb:98:9c:0a:cb:55:1a:01:00:c3:2d:97:c3:79:65:ae:b6:c2:
f4:8d:4f:2e:c7:1a:d1:8e:4e:69:72:45:e3:54:3a:81:41:c2:
d0:af:9d:4d:75:91:03:79:b1:4d:0b:49:36:c1:bf:d7:d5:4a:
3a:58:8e:ef:17:d2:57:6f:c6:77:b2:1a:0a:ed:16:06:76:01:
45:54:5a:ce:ba:af:ea:bb:8a:b9:cc:49:26:50:a9:af:f5:75:
db:e5:e1:a5:69:eb:83:8c:49:5c:e6:ea:36:ee:58:78:c8:7c:
1c:c6:00:22:f5:4d:01:fd:40:47:85:64:64:53:ff:50:b2:15:
23:ac:06:e8:79:a2:fb:e0:96:9e:8e:5d:2c:33:6c:a2:d7:06:
93:8f:df:63:60:24:02:c4:a4:cb:47:61:06:be:3b:62:80:08:
75:02:98:b8:cd:12:2f:d8:57:ec:90:a0:7e:82:b6:4c:ed:d1:
7b:69:7f:36:cd:9c:7a:c9:7f:3a:33:aa:e6:22:4b:a5:2d:27:
65:29:e1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:33:58 2025 by rpki-client