Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
File: qsU0mf8g8DXLixwKqbd8PX0ol2w.mft (raw, json)
Hash identifier: abj783NmSrJKwxUpBYN5gEk+mc7feGgl3OrWuLW/5qs=
Subject key identifier: B1:AD:0A:17:3A:85:DE:05:F0:15:2C:87:E2:3D:8D:6F:1D:89:67:D9
Authority key identifier: AA:C5:34:99:FF:20:F0:35:CB:8B:1C:0A:A9:B7:7C:3D:7D:28:97:6C
Certificate issuer: /CN=aac53499ff20f035cb8b1c0aa9b77c3d7d28976c
Certificate serial: 0194BCE0B19047DCA8F1A8C458D6B728A8D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:29 +0000
Manifest this update: Fri 31 Jan 2025 15:00:29 +0000
Manifest next update: Sat 01 Feb 2025 15:00:29 +0000
Files and hashes: 1: 3RChXaGg2mHXT_oEdTM0SpY6jhc.roa (hash: PV09Dkm12mpf6AJ4aFGi0VOS8JddqTI6zuA00aTTnSY=)
2: qsU0mf8g8DXLixwKqbd8PX0ol2w.crl (hash: n+PRtDZVY5YBLxn9OnaKU3NPA7aSa10d5FP9x+Z6TLw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b1:90:47:dc:a8:f1:a8:c4:58:d6:b7:28:a8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac53499ff20f035cb8b1c0aa9b77c3d7d28976c
Validity
Not Before: Jan 31 15:00:29 2025 GMT
Not After : Feb 1 15:00:29 2025 GMT
Subject: CN=b1ad0a173a85de05f0152c87e23d8d6f1d8967d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:22:d7:f3:8c:e2:64:6b:1c:1b:ec:89:be:32:
aa:65:df:82:be:87:fc:41:01:d4:46:51:91:6d:86:
e7:22:ad:5f:c9:4b:28:2f:14:fa:50:6d:33:ef:b8:
7e:14:84:09:3b:a1:d9:b9:53:84:b3:50:b7:f6:b1:
91:e9:60:9c:98:6d:db:e2:df:c4:d7:8c:26:15:ca:
5e:f6:07:6f:53:9c:cd:d3:c2:79:7b:d1:af:7f:06:
ae:45:26:11:5b:85:43:51:7d:16:8b:68:25:db:d7:
c4:cf:10:d6:68:aa:88:d3:0c:d3:db:a7:9f:6d:f2:
fc:d8:4e:1f:06:ce:c8:13:f8:53:a9:ec:bf:36:5e:
cd:22:4d:88:7f:29:68:d9:5a:f8:34:20:ee:4f:09:
6e:d7:e8:6d:ba:6d:f0:c2:7f:27:06:81:c6:ae:12:
4e:16:78:73:81:5d:e7:18:50:81:c7:8e:5d:5f:86:
c4:d1:54:91:34:4a:4f:f3:a4:bd:60:1d:70:35:ea:
e6:7a:64:20:c3:e4:23:10:f5:6a:a8:38:9a:f0:b2:
53:48:d7:7b:bb:89:7f:3f:26:0f:e1:a2:bc:1b:3c:
62:09:cb:bc:6e:39:21:73:99:21:25:9a:7d:c4:53:
cf:e5:97:18:37:cd:16:03:85:fb:c8:58:a6:77:ad:
3d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AD:0A:17:3A:85:DE:05:F0:15:2C:87:E2:3D:8D:6F:1D:89:67:D9
X509v3 Authority Key Identifier:
keyid:AA:C5:34:99:FF:20:F0:35:CB:8B:1C:0A:A9:B7:7C:3D:7D:28:97:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:4c:82:63:a6:d4:df:58:d0:a3:1d:f4:5f:3f:f5:c8:69:34:
e6:40:e0:d7:9c:74:10:f0:cb:d6:b6:16:78:a3:91:fc:21:72:
8c:67:55:3e:15:a9:b1:d9:cc:78:d3:62:7d:09:64:02:92:a6:
9e:fa:f4:00:45:59:6e:16:2b:b1:7d:33:fa:80:ae:a5:06:af:
ca:e7:ac:5e:f5:b1:84:72:e9:a8:e4:bc:5a:1b:a2:1a:4c:ac:
d8:a6:0b:2e:6b:a1:c0:12:1e:c7:b7:ea:16:ae:80:be:73:da:
16:b7:04:2c:5a:b8:71:fa:e6:d3:ec:4f:e1:a4:7f:aa:7c:db:
d6:2f:15:56:04:b0:48:3c:34:48:2e:45:f5:fe:b7:1b:59:09:
28:f6:4d:75:af:da:f1:28:fb:4b:93:63:78:30:61:07:66:09:
f3:ea:94:39:1b:7f:43:9f:5f:17:e9:26:d1:8e:7d:c3:77:39:
f9:34:57:a7:f6:fb:44:db:d5:84:d5:3f:eb:90:e9:39:d5:e9:
8f:7b:f1:34:30:fe:aa:18:a3:9e:93:49:7a:19:32:d2:57:07:
1e:40:fa:39:7e:0e:79:f0:57:d5:50:79:85:e5:67:2f:8b:80:
a4:64:2e:a9:cd:59:72:28:41:c9:1e:81:2d:3c:1c:0c:29:3f:
3f:62:4d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:05:55 2025 by rpki-client