Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
File: qjHJjjyrghyE3e_yBp4CJZvW5hw.mft (raw, json)
Hash identifier: TaRGaEx92tkE/8NIa3HOPpVuoq+315OUbr3c5b6OJC8=
Subject key identifier: C5:65:7D:90:8D:D5:DD:58:E3:F9:68:18:9A:79:1A:91:2C:1C:AF:77
Authority key identifier: AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C
Certificate issuer: /CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
Certificate serial: 0195E07DB1E1BF6D4DC0E21CC4015B51397A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
Manifest number: 0A32
Signing time: Sat 29 Mar 2025 06:01:28 +0000
Manifest this update: Sat 29 Mar 2025 06:01:28 +0000
Manifest next update: Sun 30 Mar 2025 06:01:28 +0000
Files and hashes: 1: AIeHAMlo02ixYJZr9DxoRfeqC_w.roa (hash: r/OyoKCdS9zD7ksUp6W0p8pqS4rPDdjM46a0P82mb/E=)
2: qjHJjjyrghyE3e_yBp4CJZvW5hw.crl (hash: UO8eHh6H38anush559D20aD/eo+QDcdy/wSA1rG9Nhw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:b1:e1:bf:6d:4d:c0:e2:1c:c4:01:5b:51:39:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
Validity
Not Before: Mar 29 06:01:28 2025 GMT
Not After : Mar 30 06:01:28 2025 GMT
Subject: CN=c5657d908dd5dd58e3f968189a791a912c1caf77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f9:fd:c1:06:bd:5d:1c:c2:34:54:d2:ca:83:
51:09:0b:64:b1:50:13:b1:0d:48:44:12:9e:ff:11:
1b:a7:e5:79:fb:5f:af:00:e1:3b:5d:7d:7a:6d:b2:
27:75:92:41:1b:3b:d3:d8:56:38:03:cc:c5:eb:b6:
55:99:01:92:b9:73:f0:23:ff:d3:41:da:6c:f9:7a:
67:c8:2b:f5:26:55:22:0b:b2:e8:6e:6f:a3:f8:a9:
37:ba:a1:f5:64:c0:c2:de:ef:72:81:af:53:1e:eb:
25:a6:e8:df:78:e9:a1:f9:04:b8:21:1b:3c:34:99:
88:03:db:fe:89:14:cd:82:c4:82:82:81:59:ff:d9:
83:44:ff:94:1e:66:b1:a1:ee:98:51:63:6e:fc:a1:
6e:f3:d7:c8:3a:22:b6:4d:d2:15:2c:54:71:8a:7a:
69:8e:2e:2d:cd:46:4c:3d:74:e1:a9:32:99:80:2d:
1a:c2:1f:0f:c3:d8:d3:04:10:10:77:8f:21:bb:37:
68:80:5b:87:69:e6:33:67:75:cc:ae:4d:21:eb:58:
7e:02:f0:4c:1c:2c:77:7b:a3:34:04:18:75:0f:5d:
38:d6:fc:eb:15:fc:80:30:2e:ac:54:85:30:34:9d:
71:79:b6:c2:d3:8b:f5:08:01:ab:c4:c7:61:ee:e7:
a8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:65:7D:90:8D:D5:DD:58:E3:F9:68:18:9A:79:1A:91:2C:1C:AF:77
X509v3 Authority Key Identifier:
keyid:AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b8:df:ee:37:82:a2:bd:eb:11:45:5f:f5:d3:1d:41:e3:94:
5c:dd:95:a0:ed:07:98:79:e5:9c:04:4b:0e:11:4e:6a:25:21:
53:a8:ea:de:16:3d:63:89:b1:ce:a9:95:eb:31:77:75:52:9d:
7e:a8:35:45:73:4e:0c:ed:d9:aa:0b:ff:d7:8c:aa:c7:d7:5f:
4a:10:c2:5e:ab:6d:d3:b0:f4:06:60:97:c6:6e:7f:16:4a:67:
69:42:e8:bd:78:c5:76:45:8b:22:91:84:57:cd:c6:d1:f8:af:
28:93:dd:15:af:ae:bc:fb:fd:c0:cc:8f:45:17:c9:79:9a:48:
df:f2:d1:44:45:8e:5c:89:c9:54:de:40:89:66:ce:2d:aa:b2:
61:70:36:12:53:c6:10:d4:ab:2b:14:68:1a:a0:97:5c:99:ac:
1f:a6:2b:b4:a4:65:72:b0:0d:6f:6e:c1:2c:fc:a2:12:28:b2:
d7:3b:48:68:22:34:81:94:f3:20:c5:c0:2a:17:bc:e2:1b:2a:
60:13:b4:d6:00:4e:2f:0e:f9:26:ff:5f:a3:e2:a0:0c:f3:71:
e7:76:36:7c:75:e9:54:f0:c9:6a:e1:2a:b2:43:a8:10:de:33:
31:6a:1e:d1:ca:43:85:e2:70:60:49:0f:6b:c1:65:19:88:70:
97:dd:41:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:21 2025 by rpki-client