Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
File: qjX5B-x9v5xluBWqPXICtt-uMUg.mft (raw, json)
Hash identifier: k+1Dsuy70YI7EH3J3wn3bbywC6l7p34oiWBZneOFKSs=
Subject key identifier: 42:7C:19:E2:13:C5:90:75:84:68:3F:05:D5:4E:56:44:A8:C3:F0:E7
Authority key identifier: AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
Certificate issuer: /CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Certificate serial: 0194BBCDDD6E9493274BAFFCA58B51F16933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:18 +0000
Manifest this update: Fri 31 Jan 2025 10:00:18 +0000
Manifest next update: Sat 01 Feb 2025 10:00:18 +0000
Files and hashes: 1: DxU6Tj_sH9i6nYuhG62Zr3rykbI.roa (hash: m10v06RZq7QrBohirh1LPManMxgfja3ZfQ1j9hj5ZLI=)
2: kZG65yjYhzWbyjVxS5nDngYTn7o.roa (hash: NxEcj6vOgWy2wxB1Tg6EXlBHbNa6oBK7xEqZZsDpfQk=)
3: qjX5B-x9v5xluBWqPXICtt-uMUg.crl (hash: DBRCG3ONc3RFl8L+AMirRg0krRb0n50+UQ/ZDqGuVWA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:dd:6e:94:93:27:4b:af:fc:a5:8b:51:f1:69:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Validity
Not Before: Jan 31 10:00:18 2025 GMT
Not After : Feb 1 10:00:18 2025 GMT
Subject: CN=427c19e213c5907584683f05d54e5644a8c3f0e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4d:68:37:8a:9f:98:a5:a1:cc:c4:b4:e5:77:
8b:b0:08:f2:94:7c:6e:74:64:d6:70:ba:55:9b:d9:
1f:2c:bc:d6:bd:5a:1d:c1:72:55:40:9e:fc:e4:d6:
f9:a1:7d:2b:a9:68:be:e1:84:3c:a9:9f:68:5b:90:
a4:ac:b2:c5:2d:6d:f2:fa:22:d1:2f:97:92:6f:79:
ca:74:a9:60:a9:08:2a:b9:13:26:61:00:e6:7e:c4:
d6:fc:f0:25:8a:26:98:8e:9b:03:4e:00:3d:c7:32:
68:21:15:e6:38:aa:e9:15:8f:9a:0b:2a:37:a4:46:
4d:52:f7:73:e6:f8:0c:46:c9:ac:79:bc:4f:9f:56:
a1:04:3f:b0:f4:3f:b3:55:81:fd:51:1a:a7:1a:7b:
d6:3b:df:3c:6c:ef:91:be:e7:3f:81:6b:58:c4:03:
ba:3f:b8:a8:3a:46:ed:69:b7:ea:11:05:41:97:6e:
c9:2b:3f:bd:b6:4e:dc:38:52:3e:d0:d2:ce:b1:cf:
f5:ce:b7:5a:e8:53:ae:77:16:64:7e:e7:1d:73:a8:
51:57:28:86:ba:74:38:b2:08:66:cd:dd:af:f1:02:
83:b9:ef:ab:82:2c:dc:62:48:26:a3:85:42:57:bf:
0e:2d:4b:78:83:1c:ea:9b:0b:cf:d0:47:28:92:90:
22:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7C:19:E2:13:C5:90:75:84:68:3F:05:D5:4E:56:44:A8:C3:F0:E7
X509v3 Authority Key Identifier:
keyid:AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:28:4f:8f:40:66:69:9c:02:66:e2:ea:7f:06:9b:6e:5a:a7:
f5:af:92:07:96:92:be:7a:37:ec:51:93:6f:80:75:b7:d0:21:
35:90:20:c4:cd:56:98:b5:d7:c0:3f:73:92:bb:3b:30:16:bf:
4c:49:98:91:1c:bd:18:c1:b8:cc:43:a3:b6:b8:64:2d:8f:dc:
14:36:17:51:1e:7c:ea:98:d3:46:ab:d3:36:a9:f3:e5:16:81:
c9:87:38:5c:86:2f:3a:37:d7:0a:20:aa:24:07:90:51:d6:56:
a6:c6:9c:8a:ac:74:78:7c:04:32:2e:cc:82:df:f4:fe:67:c1:
19:13:60:12:37:b1:8a:be:b3:f4:a0:ae:8e:64:b2:14:01:c8:
8a:b1:26:5f:a0:eb:43:73:63:85:0f:c4:18:aa:f1:6b:4e:bc:
3c:54:98:2c:a0:7a:c3:fe:9b:90:c5:a8:9c:c8:3f:c6:71:24:
89:77:05:02:52:59:1b:3d:64:c1:ee:f5:db:b4:42:0f:4e:16:
6d:6d:74:cf:4d:f9:41:7b:11:d1:39:f2:07:9c:97:45:86:d8:
9f:6d:1d:4a:9b:c6:e6:7a:1b:99:ac:fc:ad:c8:87:f4:d9:3e:
7b:27:e2:1a:9b:87:dd:bd:82:ec:1d:40:b3:42:3b:49:13:31:
8d:d5:c6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:14 2025 by rpki-client