Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
File: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft (raw, json)
Hash identifier: s3OByYGZbTo5opJWyGgQUU9WUGGHFRQy76OdX/WBEYA=
Subject key identifier: 7F:C5:E7:28:9D:89:DD:91:56:CF:D3:4B:86:47:8D:36:C9:30:21:75
Authority key identifier: 43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
Certificate issuer: /CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Certificate serial: 0195E0B4566BE43C39B59B50DCFB92F1029A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
Manifest number: 09A3
Signing time: Sat 29 Mar 2025 07:01:09 +0000
Manifest this update: Sat 29 Mar 2025 07:01:09 +0000
Manifest next update: Sun 30 Mar 2025 07:01:09 +0000
Files and hashes: 1: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl (hash: WODdbaV9mPdL1F8QS8NAYxVpeqIH8LFBaDxpxrooA2g=)
2: qM0zHnDHmCB87MJblo3SPkQV0l8.roa (hash: ghiuWVRz4dZZF/5w9C3wckrnenvE19FZlWa9Xg0iyUQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:56:6b:e4:3c:39:b5:9b:50:dc:fb:92:f1:02:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Validity
Not Before: Mar 29 07:01:09 2025 GMT
Not After : Mar 30 07:01:09 2025 GMT
Subject: CN=7fc5e7289d89dd9156cfd34b86478d36c9302175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a5:f5:b2:a0:f6:ce:3e:7a:94:68:e6:d5:05:
53:f8:a4:6d:ad:a3:97:2c:90:23:9b:51:11:6e:b7:
24:1a:68:fb:a3:ee:2b:80:da:66:1d:c1:50:0d:3c:
1a:60:e1:8e:0e:9f:e6:9f:37:6b:77:80:4b:6b:bb:
a2:16:8b:e0:b1:46:d8:9f:c4:2e:7f:34:0a:a9:c8:
a3:26:3b:e9:20:59:fb:32:34:0b:36:3a:92:54:2a:
0c:83:f0:50:fe:da:2e:6a:25:0c:5d:84:52:02:f2:
a5:78:7a:fd:82:c1:db:3d:e8:2c:6a:cd:ea:02:61:
99:73:14:fc:3c:d6:87:63:69:8b:01:34:1f:e6:73:
bd:92:9d:9e:27:a0:98:2f:48:e0:e3:ac:00:f0:b2:
81:0e:a1:09:b9:6b:6b:63:11:7b:6c:15:c9:1d:2f:
83:71:6d:cf:57:2f:7f:7d:74:b7:5f:e4:33:52:9a:
42:a0:14:8f:20:27:1e:41:7f:a3:c9:01:60:3a:dc:
ce:76:b8:f7:05:9c:05:50:e3:25:6b:27:e7:ae:90:
ff:68:2c:78:50:73:8f:1a:1c:c3:6a:20:19:81:cc:
42:a6:9e:5d:89:29:4f:e2:52:69:0b:4f:86:59:d3:
ae:f5:98:02:73:d0:3f:87:02:1d:c8:7b:05:9a:c1:
6b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C5:E7:28:9D:89:DD:91:56:CF:D3:4B:86:47:8D:36:C9:30:21:75
X509v3 Authority Key Identifier:
keyid:43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:2e:bc:ff:ad:cc:b9:c7:65:41:d2:86:24:17:3b:a1:fd:69:
ad:f8:18:ec:7f:c7:eb:ef:a2:e7:23:5f:31:86:5b:e2:2c:07:
15:a8:e3:19:1b:0e:89:c9:6a:dd:03:9a:79:0f:a0:9c:1f:b7:
91:90:ba:ef:f9:67:d0:3d:1c:bb:6d:df:4f:73:4f:d8:91:fa:
ea:0e:2c:e6:5e:a2:fc:54:f7:ac:45:24:8d:ba:21:7c:7b:6d:
29:79:e7:02:ef:fe:d6:28:09:43:31:0c:ea:66:de:bf:92:d6:
02:72:bd:52:5c:b9:4c:19:63:f2:74:eb:c7:da:45:53:23:c4:
59:9b:08:4f:00:b4:19:12:de:14:5e:b2:eb:39:b7:cc:4a:b6:
92:a3:0d:18:3c:77:1a:78:43:5f:c0:e3:b2:ce:5f:71:c6:0f:
09:1c:78:56:9a:3b:78:b5:ed:2b:f2:90:dd:7d:43:a5:17:11:
d3:bf:0f:6e:d8:05:32:7a:4f:87:9b:6d:36:8d:05:8a:8e:87:
18:dd:e5:bb:fa:f0:d7:a5:9e:62:9e:57:be:7d:ca:b1:86:07:
17:38:c6:a6:65:15:e7:ea:b8:52:f6:ce:82:9e:b6:1f:3a:ec:
de:d3:20:08:58:c8:6f:ad:eb:2f:ff:ff:9e:99:7a:7b:ed:dd:
7e:e7:7c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:51:11 2025 by rpki-client