Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
File: Q0llhOXPObVodN6Nx3qjpv-eih4.mft (raw, json)
Hash identifier: ZBbSQxhqhCKc/QyN5OdMShbqkGarSxay5hBHYLRQk+8=
Subject key identifier: 67:17:D1:EF:52:9A:60:18:67:2B:85:E4:90:D5:40:5B:1C:7A:C1:F8
Authority key identifier: 43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
Certificate issuer: /CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Certificate serial: 0194BCA9F77720742D7AFEF52ACE03E6D9C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
Manifest number: 10C9
Signing time: Fri 31 Jan 2025 14:00:43 +0000
Manifest this update: Fri 31 Jan 2025 14:00:43 +0000
Manifest next update: Sat 01 Feb 2025 14:00:43 +0000
Files and hashes: 1: Q0llhOXPObVodN6Nx3qjpv-eih4.crl (hash: KBm4nlIBkSYVkJXsaV6wMOh+lBYWDi226tCHh9HPVQY=)
2: mF8H3prBEeFw8vv0-wYmE8_MtFk.roa (hash: k6q/MJjxt2Tjd0EikWZoheIRBqYjVQryjlZ0eCvLYRU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f7:77:20:74:2d:7a:fe:f5:2a:ce:03:e6:d9:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Validity
Not Before: Jan 31 14:00:43 2025 GMT
Not After : Feb 1 14:00:43 2025 GMT
Subject: CN=6717d1ef529a6018672b85e490d5405b1c7ac1f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:86:7f:80:85:a0:a8:e7:39:e0:b8:fb:66:82:
9d:b1:22:d1:a1:78:d7:c5:34:c9:43:bf:58:f9:08:
21:18:6b:43:da:e1:fb:e9:32:be:c5:43:7e:0b:1d:
b5:3e:42:46:5e:a3:fc:16:4e:9f:c6:87:cc:37:47:
66:aa:b5:5b:81:e2:b5:a6:cf:ab:cc:4f:64:4f:39:
6b:1e:90:90:48:c9:d7:80:b4:ea:67:02:0c:de:b1:
69:71:83:b5:61:b3:75:ee:04:08:38:24:09:2a:aa:
b2:7f:bc:bf:ff:37:8e:d6:5f:b9:be:cb:56:20:0b:
e6:66:b5:e0:b2:17:4a:53:f5:ab:41:db:91:be:e6:
7a:90:c3:97:60:e6:68:df:2a:30:49:91:13:54:88:
30:8f:18:af:5c:75:53:36:66:8e:6d:c5:52:5f:c6:
f2:6c:49:a7:61:a7:cd:a4:f8:ef:c6:24:80:67:92:
30:57:b8:f4:76:0b:67:09:29:c8:35:8d:48:b0:a2:
6d:3d:a2:63:cf:82:df:84:60:85:6a:ce:17:ed:4d:
22:d3:e3:88:c9:6c:4e:d3:5b:38:3f:c6:98:ca:82:
9a:4e:9f:1f:15:83:d1:98:b4:06:32:76:86:e1:41:
c0:52:64:32:8c:2a:ac:09:aa:2f:37:ab:7e:a6:ed:
7c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:17:D1:EF:52:9A:60:18:67:2B:85:E4:90:D5:40:5B:1C:7A:C1:F8
X509v3 Authority Key Identifier:
keyid:43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:89:08:95:4b:cb:e8:41:40:e7:ee:7f:c1:0e:ec:b4:b8:6d:
07:5e:b0:61:87:37:7d:e3:eb:c9:dd:49:aa:ee:da:f4:8e:aa:
3c:da:27:35:f4:b8:ac:20:8a:d0:ed:64:ee:6f:39:78:de:5b:
b4:fe:38:c8:87:3d:72:9b:76:81:06:65:c6:f6:7e:d0:e2:ea:
4d:3f:f9:56:f5:d3:70:77:0b:b3:db:7a:66:59:e9:f2:c3:bb:
30:05:20:1e:7d:da:df:65:10:e8:e3:fd:ba:fb:44:e7:1f:75:
c1:7c:2c:37:a9:cc:4b:c1:60:84:cc:67:74:cd:52:97:2b:27:
fd:da:e4:e4:0d:d6:85:99:81:be:bb:3e:21:02:b2:41:5c:2a:
4c:8f:78:c9:7d:f1:6b:bd:96:96:d1:fb:28:9a:ca:92:b9:68:
e9:03:58:77:3b:d6:62:d5:10:d8:c4:72:61:77:8f:ac:6e:4a:
d5:2f:53:29:21:b3:63:cb:e9:df:4e:18:76:ba:85:5d:0c:dd:
71:44:11:91:13:3f:1a:8e:f3:a3:1d:68:c4:c8:05:ec:a9:85:
b3:05:74:52:a3:1f:fd:5e:41:3c:1f:34:44:2c:87:7a:00:44:
aa:e5:8c:c9:3a:48:10:72:64:e1:4e:15:a5:55:6b:75:19:f1:
28:33:80:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:07 2025 by rpki-client