Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft
File: Q5p_k_yoCMgtJvv-D94bloz26NM.mft (raw, json)
Hash identifier: TamhLdE6z0NeDRJdSXRIHu19ox/JPknAPMksUk+Js1w=
Subject key identifier: 63:3C:2B:85:94:9F:B9:0E:D5:4E:D5:56:BC:28:DC:C6:90:36:0D:12
Authority key identifier: 43:9A:7F:93:FC:A8:08:C8:2D:26:FB:FE:0F:DE:1B:96:8C:F6:E8:D3
Certificate issuer: /CN=439a7f93fca808c82d26fbfe0fde1b968cf6e8d3
Certificate serial: 0194BC04DC25F02198A8661ECC19839A7224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5p_k_yoCMgtJvv-D94bloz26NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft
Manifest number: 064A
Signing time: Fri 31 Jan 2025 11:00:22 +0000
Manifest this update: Fri 31 Jan 2025 11:00:22 +0000
Manifest next update: Sat 01 Feb 2025 11:00:22 +0000
Files and hashes: 1: O9UxuLNdjVpPMRVJ8_xamVbi3ck.roa (hash: w7PnuXi3vgOvtTP6oScaXCDqYyS0FwVpkDFtt58ndZ4=)
2: Q5p_k_yoCMgtJvv-D94bloz26NM.crl (hash: vEWu5X9clJ68XDsU0svrbYowrVMD2tFJkV+GabbmDnA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:dc:25:f0:21:98:a8:66:1e:cc:19:83:9a:72:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439a7f93fca808c82d26fbfe0fde1b968cf6e8d3
Validity
Not Before: Jan 31 11:00:22 2025 GMT
Not After : Feb 1 11:00:22 2025 GMT
Subject: CN=633c2b85949fb90ed54ed556bc28dcc690360d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5e:d9:5f:74:2a:71:6a:51:96:82:e1:ea:5a:
51:78:6d:22:9f:64:40:78:0f:cd:67:95:23:1c:c0:
92:0a:98:cd:9b:9a:94:40:4e:9e:63:ad:56:a3:39:
2d:97:6c:ae:e0:0f:a1:7c:78:7e:12:15:cd:4c:b2:
04:e5:41:88:f7:29:70:d6:3c:56:92:9c:59:5a:24:
7a:71:34:39:80:7c:86:15:c8:9f:79:e4:13:fa:5a:
b2:5f:cc:37:2a:2b:27:8d:67:e1:b7:68:90:a1:d6:
ac:8f:b1:49:55:8c:17:32:f4:2b:8f:36:1e:c8:82:
ee:f3:76:ef:48:79:5d:ab:fe:66:a4:8c:5c:11:01:
1d:88:14:7d:18:50:59:26:a2:7b:e3:6d:f1:2d:59:
6f:06:26:86:f8:b2:01:1e:24:71:85:9f:d0:cd:2b:
45:a5:5d:86:2f:37:61:83:56:91:ae:a0:7b:e8:25:
28:95:21:26:b5:b1:8d:7b:29:eb:ce:4e:fc:c1:ab:
da:a4:e7:bf:d7:ec:c9:3d:c8:8d:ed:c9:86:bc:71:
cd:56:ea:b8:f6:54:f9:5f:14:f8:27:23:06:27:ca:
03:2d:ab:16:4c:a1:76:60:d6:de:ed:b5:b9:ba:1a:
47:ae:68:bd:46:fc:14:a4:bc:09:ac:bd:7f:d4:25:
37:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3C:2B:85:94:9F:B9:0E:D5:4E:D5:56:BC:28:DC:C6:90:36:0D:12
X509v3 Authority Key Identifier:
keyid:43:9A:7F:93:FC:A8:08:C8:2D:26:FB:FE:0F:DE:1B:96:8C:F6:E8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5p_k_yoCMgtJvv-D94bloz26NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/8f9f32-c1d5-4fa6-b013-9297b855fa72/1/Q5p_k_yoCMgtJvv-D94bloz26NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a5:e2:40:ea:97:b0:5d:7b:b2:98:0d:3b:30:95:0d:c5:2d:
62:5d:33:8e:3b:a8:cc:e2:8c:e2:6f:df:e2:24:80:59:10:b8:
c8:c1:e3:ef:c8:56:f3:f7:c2:5c:0a:51:6a:a8:9b:e0:92:5d:
3f:21:23:e2:1b:ae:74:fe:54:82:e4:bd:4c:1d:3f:e6:4d:e1:
25:a2:7c:e5:72:fc:b1:ee:74:86:99:1e:19:77:ad:8a:a3:9d:
b2:93:7f:0e:49:bf:e7:4e:d7:bf:b5:05:bb:1e:82:9e:34:12:
d4:79:9c:b1:b3:8e:c3:4d:11:9c:c4:e7:ba:1a:73:c5:46:d9:
ec:82:6e:88:7b:b1:b0:cd:a5:9e:84:ce:f0:8b:cb:d0:f9:68:
31:5f:17:dd:f0:23:57:31:47:1c:a1:89:54:47:f4:7b:e2:e9:
74:35:47:23:ae:2a:13:89:18:ed:5e:41:c4:35:19:9e:67:d5:
40:0e:2b:ba:95:94:7e:f4:82:9b:07:79:59:12:04:70:8c:75:
91:76:f8:2d:19:ea:2b:e0:10:ea:47:a8:87:84:98:e9:25:09:
5f:6e:07:57:10:e7:d7:53:3a:d3:76:97:66:1d:6e:6f:a6:10:
93:0b:7d:a5:a5:6c:b5:33:eb:bb:61:ea:be:b4:ed:af:25:b2:
86:8e:7b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:23 2025 by rpki-client