Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/7c07e8-3b8c-4c93-9a08-a909cb0a138f/1/qAK3PvSotrDgiDqci8bn8BLbk6A.mft
File: qAK3PvSotrDgiDqci8bn8BLbk6A.mft (raw, json)
Hash identifier: oR6E1PCPclk4HGnBVHVoz2dbPucqaiSylyr78aZKRR4=
Subject key identifier: 46:FA:1C:76:5F:26:00:06:07:6A:F9:D0:5B:8E:44:5A:FD:EB:E4:09
Authority key identifier: A8:02:B7:3E:F4:A8:B6:B0:E0:88:3A:9C:8B:C6:E7:F0:12:DB:93:A0
Certificate issuer: /CN=a802b73ef4a8b6b0e0883a9c8bc6e7f012db93a0
Certificate serial: 01953BB19E7F620013EE0FEDC7CF4FC7825A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAK3PvSotrDgiDqci8bn8BLbk6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/7c07e8-3b8c-4c93-9a08-a909cb0a138f/1/qAK3PvSotrDgiDqci8bn8BLbk6A.mft
Manifest number: 0C61
Signing time: Tue 25 Feb 2025 06:00:50 +0000
Manifest this update: Tue 25 Feb 2025 06:00:50 +0000
Manifest next update: Wed 26 Feb 2025 06:00:50 +0000
Files and hashes: 1: 9ICgCcaHNv6nFSIzYWPqbgMN-SE.roa (hash: kEEuJVyT/3d7mt1VJTzI/Y09M3OYhLbV7WtDMk4v9CM=)
2: E5jMo05UqECQgz0ONfqphOorxOw.roa (hash: pfsgZumJScrPhb10fyVqU4PJBAlF8w76qex2K1C4MnQ=)
3: kVmBpZcBrEyOIwjwA_ZWxav09yo.roa (hash: EvYAV5e04qRQjI42asHDf0fKa+r+5BhYX3Ny8U2hTu0=)
4: qAK3PvSotrDgiDqci8bn8BLbk6A.crl (hash: UJUrHbjj5gUFZLz3gdeAr4FoxiS/sW22mEMwsK8H3oQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3b:b1:9e:7f:62:00:13:ee:0f:ed:c7:cf:4f:c7:82:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a802b73ef4a8b6b0e0883a9c8bc6e7f012db93a0
Validity
Not Before: Feb 25 06:00:50 2025 GMT
Not After : Feb 26 06:00:50 2025 GMT
Subject: CN=46fa1c765f260006076af9d05b8e445afdebe409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:79:78:e6:1f:68:9e:7c:aa:ca:e6:53:fc:8b:
37:eb:95:61:36:f8:95:4f:33:d1:0e:62:25:63:26:
8a:66:2f:77:29:87:4c:a9:a3:db:14:6d:ec:c4:0f:
7e:78:ac:2e:15:4d:e8:92:63:c8:15:a2:58:2a:d1:
fe:9c:d5:05:0f:7d:ca:52:43:d2:e4:d0:0e:56:23:
87:2b:7b:e2:60:8c:e9:b5:7e:4a:cd:ec:01:13:15:
f0:c1:cb:e2:cd:91:ba:45:95:8e:01:45:a7:64:01:
13:21:d6:7a:57:ac:25:da:90:36:da:85:da:5d:23:
a7:a9:2d:8e:94:1f:d0:8a:05:dc:23:a5:0f:86:e7:
7b:e3:2f:87:60:a6:21:b8:a1:75:54:e4:5c:bb:fe:
a3:4a:dd:49:ca:4e:77:bf:47:3a:37:65:14:5f:eb:
5f:30:64:44:89:a0:d5:14:5e:da:fa:71:e4:ef:99:
33:dc:b4:d4:bd:c6:5a:cc:b8:9d:27:bd:1e:dc:90:
50:e2:ee:08:ab:e7:fc:d9:c0:99:3c:ce:3d:28:2a:
d7:10:4d:d8:29:e5:ea:3b:36:4b:ad:81:fc:62:55:
de:bf:26:c1:a2:02:b9:a8:62:c5:f8:23:8f:b1:d0:
af:ed:1e:f8:4d:34:84:e1:09:c9:5c:7c:d8:f0:9c:
49:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FA:1C:76:5F:26:00:06:07:6A:F9:D0:5B:8E:44:5A:FD:EB:E4:09
X509v3 Authority Key Identifier:
keyid:A8:02:B7:3E:F4:A8:B6:B0:E0:88:3A:9C:8B:C6:E7:F0:12:DB:93:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAK3PvSotrDgiDqci8bn8BLbk6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/7c07e8-3b8c-4c93-9a08-a909cb0a138f/1/qAK3PvSotrDgiDqci8bn8BLbk6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/7c07e8-3b8c-4c93-9a08-a909cb0a138f/1/qAK3PvSotrDgiDqci8bn8BLbk6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:7f:72:99:8e:f1:c7:c8:9f:0b:e0:b9:a3:fc:7a:26:2c:d2:
6c:31:ec:41:bf:86:ab:ff:8a:78:79:61:24:92:aa:63:53:ae:
b0:18:35:16:34:61:7d:8b:a3:54:a6:08:c0:3e:cb:6c:71:9c:
bc:81:b5:e8:e5:78:fa:8d:35:bc:35:f2:4a:e4:48:65:b0:1a:
5f:c9:9a:e6:99:e5:a3:bf:7a:fb:5e:f1:72:5b:4f:dc:0f:71:
e8:d5:00:5f:78:e7:5c:01:bf:b8:02:1f:61:4d:80:4e:76:24:
ec:b6:c8:6d:b0:e1:56:c2:e2:d5:d6:9d:96:95:08:e1:27:07:
aa:a1:1e:85:b7:f7:54:23:ba:0f:f0:c3:30:4c:94:84:df:92:
69:1f:af:17:58:1a:ea:9a:0f:72:ef:6b:f7:e0:28:e5:3f:8d:
76:4c:82:83:95:07:81:b8:85:f1:33:3c:eb:17:3a:ca:93:84:
02:ab:0c:5b:3a:ba:d9:22:aa:8c:38:ee:b6:6f:91:e6:bf:55:
09:b8:d7:02:62:a8:44:c3:4c:e5:2f:cc:93:f2:3b:54:b5:de:
63:a6:58:fa:da:53:d1:9d:9c:34:a1:fa:a8:0b:e5:4e:d5:c1:
29:37:66:0a:36:c9:57:21:cf:3d:73:0f:4e:07:d8:4f:31:25:
65:4d:5c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:25:29 2025 by rpki-client