Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
File: qx0OfoGLr5p6-5hmEkKSphqvuMo.mft (raw, json)
Hash identifier: T7XcZxC5s7EgpZJUufVY224gmAp8WypUzxf2o13FEOA=
Subject key identifier: A3:90:7D:A1:8D:EC:02:95:CE:5C:2C:07:80:1A:1B:4F:C0:21:6A:82
Authority key identifier: AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
Certificate issuer: /CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Certificate serial: 0194BC3BDD648A71094739EE20749244BF3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 12:00:27 +0000
Manifest this update: Fri 31 Jan 2025 12:00:27 +0000
Manifest next update: Sat 01 Feb 2025 12:00:27 +0000
Files and hashes: 1: 3rk6DTXzfhXnDvH7YjIIV0HcXhY.roa (hash: 8yMBicvXGg6+UMP8iKzu3+exUVvDmdmba1/S47z8Uyk=)
2: qx0OfoGLr5p6-5hmEkKSphqvuMo.crl (hash: uW76YBMQDoccmRhUQ38KvJX922rgIqSbm3e8mzIx0Ek=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:dd:64:8a:71:09:47:39:ee:20:74:92:44:bf:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Validity
Not Before: Jan 31 12:00:27 2025 GMT
Not After : Feb 1 12:00:27 2025 GMT
Subject: CN=a3907da18dec0295ce5c2c07801a1b4fc0216a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:15:5a:3d:4c:ac:68:48:97:46:f0:05:79:ff:
b7:04:ea:c5:1d:63:79:2c:00:6b:40:4b:6d:67:a6:
91:0d:27:85:c9:9b:05:25:2f:d1:af:dc:3f:7e:87:
38:32:22:86:d4:3c:af:ee:3e:e4:7a:9c:4d:bd:ff:
0e:03:f5:e6:3d:70:d5:73:d1:1e:bd:4a:a8:4e:34:
ee:b3:fa:c2:30:58:77:05:29:64:f6:6d:2c:f2:e1:
e2:40:56:b0:d3:58:fe:a8:8e:11:44:78:f5:0b:58:
5a:32:0d:90:ad:16:91:b4:a4:03:ed:f6:fc:08:b5:
bd:c0:9c:32:d7:0b:d3:e6:b3:ae:af:0b:c2:9a:74:
a1:58:56:61:94:2d:cf:80:07:ef:54:09:a1:d1:24:
ea:16:68:51:a8:d0:e1:ca:aa:b5:72:13:e8:e2:b8:
58:a4:6a:9e:04:6c:4c:d0:34:f2:d1:aa:03:f4:b4:
a5:f3:65:a2:18:b8:9a:68:cb:fa:3b:c1:59:f6:1d:
11:fc:ae:b6:5d:50:15:3b:5c:4c:01:48:19:07:f9:
3a:b1:ae:ad:d2:70:55:13:fe:0e:ae:0a:31:d3:b0:
98:6d:0b:ca:15:0d:22:bb:31:1d:01:be:ec:94:14:
43:a3:2e:93:5a:7e:dd:fa:4f:2b:38:9f:0e:fe:85:
89:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:90:7D:A1:8D:EC:02:95:CE:5C:2C:07:80:1A:1B:4F:C0:21:6A:82
X509v3 Authority Key Identifier:
keyid:AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:7c:f3:58:1b:a8:44:b1:1c:2d:dd:fb:7d:b5:76:f1:76:68:
5c:ee:f5:01:c8:27:3d:fb:74:57:15:75:1a:d1:1b:a8:77:a3:
48:01:6a:40:3a:aa:d9:3c:25:f2:7e:e5:1c:6f:28:11:9c:ad:
44:50:ee:a3:a9:80:02:e8:ca:3c:72:c9:74:21:35:13:a4:62:
0c:19:1f:7c:f3:e8:3f:7b:9a:33:94:53:30:da:8e:97:89:a7:
6e:87:07:4f:fb:d3:03:05:2e:4b:27:a1:57:b5:dc:0c:49:0d:
7e:16:36:dd:22:10:82:5f:de:2b:4c:61:2a:d9:5a:95:08:48:
63:ce:1f:9c:4f:80:d5:fb:35:97:79:db:51:6d:e9:76:1a:a8:
95:08:b4:a1:f6:a5:ba:8d:68:6a:a5:c5:3f:b8:ef:bf:e0:27:
67:1c:5d:87:a0:f4:d8:7d:c4:1b:27:95:de:36:56:b1:44:4b:
89:58:8c:18:72:cc:6b:66:6b:b4:95:e0:ec:53:a8:a8:77:12:
93:aa:d6:68:88:1c:0d:ab:ef:d2:9e:ec:37:3b:87:da:7c:95:
8f:57:ef:cf:15:27:8f:67:b8:4e:ed:80:2c:8f:99:d6:88:ed:
81:79:fe:dd:d0:ee:3b:10:57:61:77:7b:a6:e1:2a:ec:be:5b:
01:d5:c2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:42 2025 by rpki-client