Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
File: p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft (raw, json)
Hash identifier: x3/KFYQoghsLFHwbmzk2XsBl80BBWgsxOdB309jzNrc=
Subject key identifier: CC:6C:EA:77:F1:8E:95:78:D0:B4:2D:F6:9B:57:50:F9:A4:27:AC:23
Authority key identifier: A7:6A:90:E7:16:53:0F:15:F7:39:9B:7A:C3:E0:D2:93:9A:21:A2:10
Certificate issuer: /CN=a76a90e716530f15f7399b7ac3e0d2939a21a210
Certificate serial: 0194BD858D2AD2F1E0BBC104CADE6E1A2E1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:33 +0000
Manifest this update: Fri 31 Jan 2025 18:00:33 +0000
Manifest next update: Sat 01 Feb 2025 18:00:33 +0000
Files and hashes: 1: I9i0WWS-frfVjqHawC8I642O_Mk.roa (hash: itGdqF9tI2l3tL7Dy0ty9ZBwR6g1Row8wxamV2kVAqE=)
2: p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl (hash: D48opxBIPOyASR5VyZFbhJVsK+NVNIoEQu2j93NxAaI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8d:2a:d2:f1:e0:bb:c1:04:ca:de:6e:1a:2e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76a90e716530f15f7399b7ac3e0d2939a21a210
Validity
Not Before: Jan 31 18:00:33 2025 GMT
Not After : Feb 1 18:00:33 2025 GMT
Subject: CN=cc6cea77f18e9578d0b42df69b5750f9a427ac23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a2:a9:60:4d:52:49:1c:6f:43:1c:c4:6f:3e:
02:8c:58:10:c1:96:56:3b:5c:de:22:53:4e:62:2e:
f0:6a:46:17:f3:c3:77:a5:d0:0d:e8:09:dc:96:a9:
02:e7:56:fa:7b:b7:2b:bb:59:08:67:0f:33:01:a7:
9d:cc:e1:c9:36:e3:2c:63:1b:d5:16:d0:04:2a:46:
24:eb:6a:99:16:39:9a:f0:93:13:90:0d:58:e2:db:
d3:e4:0f:26:80:ee:df:b1:80:6f:96:df:91:30:e0:
0c:92:dc:db:e3:f2:ea:0a:82:a6:35:73:26:28:3b:
ce:39:24:8a:99:1b:79:92:6c:1b:3c:50:1e:05:09:
9f:5d:c6:ff:31:57:90:2f:ad:59:a4:88:12:a7:84:
86:1c:5a:d0:91:6e:81:65:9a:7a:93:a1:25:ed:ab:
5a:ba:d6:2b:fd:8c:6a:cc:fd:5f:49:14:f4:7f:39:
3d:da:a0:59:32:21:20:5c:02:1f:b8:2e:3e:8d:9a:
cf:c7:24:3e:d3:22:b6:91:ae:92:9a:40:ce:db:ea:
b5:ca:ff:52:83:12:8a:2a:65:d1:75:69:3e:57:71:
8a:31:66:04:5b:23:63:da:7b:17:20:bf:2e:60:f7:
d1:86:45:9e:58:87:f7:88:9e:8a:b5:f8:17:8f:40:
07:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6C:EA:77:F1:8E:95:78:D0:B4:2D:F6:9B:57:50:F9:A4:27:AC:23
X509v3 Authority Key Identifier:
keyid:A7:6A:90:E7:16:53:0F:15:F7:39:9B:7A:C3:E0:D2:93:9A:21:A2:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a8:4a:f5:d3:ef:d2:b6:6d:fd:29:b7:6e:c4:4d:48:1d:9b:
db:b6:26:d9:7f:c8:dd:25:2d:79:d6:ec:88:8b:0c:f7:e8:16:
5d:05:6f:3b:f9:a9:7c:ed:bd:a1:23:ea:76:32:af:12:61:b3:
6d:0c:12:ba:5c:67:6a:0a:ef:fd:38:fd:91:55:47:b4:25:a2:
75:86:e2:cf:7f:5c:f2:b0:4a:e4:22:ff:bd:f9:13:16:17:36:
fe:e5:0b:da:51:83:d6:60:0d:3f:a1:1c:2d:fe:16:dc:a8:88:
f8:92:89:c6:6c:98:3f:86:1e:f0:4b:41:06:72:45:31:11:f3:
24:02:b3:66:92:64:69:4e:f2:a9:97:2d:24:bc:69:d6:e5:e8:
e7:e0:fd:dc:58:c5:e0:f0:73:e1:83:d2:20:8a:8f:27:4b:d2:
aa:57:39:24:7e:4e:73:34:b2:4f:69:c2:5e:2e:f9:92:2d:2a:
34:03:b8:d9:c6:bf:21:d4:4a:f5:83:df:3b:98:43:ca:83:6f:
22:fd:7c:e2:3c:96:04:f3:05:07:ec:fa:8d:de:99:65:0e:7b:
42:29:3d:f9:6f:d3:c9:a8:75:89:0c:71:61:4a:29:5d:4e:1b:
68:75:ba:2d:aa:63:0f:d7:c5:88:d3:52:1c:9b:b0:4f:ca:2d:
d2:42:55:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:35:13 2025 by rpki-client