Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
File: Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft (raw, json)
Hash identifier: 98dUHOpSy4Adc1yeb/JxOtIED3pPY/6OicGr4W9ooFE=
Subject key identifier: C7:C1:5E:2F:93:7F:93:83:86:54:6C:6D:CC:74:A4:7F:16:12:1A:50
Authority key identifier: 43:CF:41:61:93:A1:C2:ED:30:56:B6:47:E5:A4:65:03:14:8E:38:24
Certificate issuer: /CN=43cf416193a1c2ed3056b647e5a46503148e3824
Certificate serial: 0195E00FB34A5353F99944D2875DCF1B05D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
Manifest number: 0581
Signing time: Sat 29 Mar 2025 04:01:20 +0000
Manifest this update: Sat 29 Mar 2025 04:01:20 +0000
Manifest next update: Sun 30 Mar 2025 04:01:20 +0000
Files and hashes: 1: EVfs3Ty5us2kONM9lNbKxeOpQy4.roa (hash: XNAy20rJW1bN/SCZtyAydEWkC3qMnBorsPnV2qCqZ6A=)
2: Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl (hash: QQF00uqsoyghJe6Byv5jPpXs4l8iZJ8sQCKzwrM5is0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:b3:4a:53:53:f9:99:44:d2:87:5d:cf:1b:05:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43cf416193a1c2ed3056b647e5a46503148e3824
Validity
Not Before: Mar 29 04:01:20 2025 GMT
Not After : Mar 30 04:01:20 2025 GMT
Subject: CN=c7c15e2f937f938386546c6dcc74a47f16121a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:44:a3:dc:54:82:3a:10:05:76:cb:75:5b:d5:
0c:e8:d8:de:b3:6a:b8:f2:41:83:26:16:79:66:49:
ac:52:d2:c7:6b:5c:34:24:1b:90:de:04:3b:83:63:
b5:bb:4e:b9:c7:5c:d8:63:94:31:e3:2a:1a:0c:41:
7f:21:ab:d4:5c:37:4e:f1:8c:8c:f0:2b:c2:35:82:
c6:03:3e:d4:f4:25:a1:b2:4c:64:16:98:db:98:b3:
d3:37:af:48:c8:9c:42:cd:19:bf:16:c1:6d:49:ba:
5d:9d:0e:82:e3:4b:53:82:dd:c7:53:98:f1:42:cb:
4e:43:19:ba:08:f7:37:9d:a2:a3:49:cd:7d:8c:f1:
91:e8:4e:53:2e:85:19:29:c1:7f:73:37:46:53:2c:
ed:1e:5b:81:b8:a2:d3:44:7e:da:8d:76:f2:f0:52:
4f:79:da:30:e3:ba:49:66:a6:f0:e2:7d:1b:69:dd:
d6:3a:6a:16:d5:2b:f3:7a:9d:8d:18:3f:12:65:8e:
f0:c4:dc:2c:a7:cb:6e:48:3e:71:eb:82:0b:27:35:
15:37:65:c7:6a:e4:29:47:8f:bd:e7:ea:3a:48:54:
d1:b0:b6:6b:09:86:81:ee:25:83:ea:2c:3e:f0:29:
9b:65:da:b1:bd:55:ed:c7:f7:1b:a1:92:fc:de:5d:
21:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C1:5E:2F:93:7F:93:83:86:54:6C:6D:CC:74:A4:7F:16:12:1A:50
X509v3 Authority Key Identifier:
keyid:43:CF:41:61:93:A1:C2:ED:30:56:B6:47:E5:A4:65:03:14:8E:38:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:e1:36:19:4c:5a:14:b7:d2:a4:8b:52:16:f8:8f:59:6d:ae:
f6:ad:c7:da:fd:9c:e5:df:67:38:13:00:73:8d:c0:91:46:06:
23:6b:67:b5:89:00:55:e3:1b:2e:b3:eb:c3:bb:0b:ef:f6:b1:
3c:75:9f:23:52:b3:7e:e0:e5:8b:96:1d:73:a5:5c:a7:b9:90:
4f:9d:7e:eb:bd:b4:4d:23:d8:ea:f6:67:e2:48:a9:d0:f7:20:
c2:89:ba:3a:ba:04:e1:80:3a:15:12:23:b3:0a:e1:a7:63:74:
e5:a8:99:ce:8e:a7:bc:87:58:50:16:41:d6:cd:3d:51:1d:bd:
9a:00:d8:14:16:70:7b:61:0c:dd:7b:fa:27:18:c9:bf:d9:b2:
42:52:4d:34:a4:7b:6d:b0:55:b4:86:29:72:30:87:10:fb:69:
78:12:cd:75:2e:dd:6e:ca:48:0b:ac:be:1d:51:cc:5e:63:ce:
44:11:63:84:8c:44:99:4e:d3:0a:fb:19:3f:9d:0e:84:1b:cc:
37:f1:32:9a:d6:ab:65:b1:5f:1f:b0:96:07:ac:ca:30:ab:9f:
bd:6b:26:96:bd:1d:64:ef:89:dd:82:1e:34:5b:0d:15:b6:be:
68:57:3f:99:de:db:82:36:22:8a:aa:f2:31:48:6c:b5:d3:ec:
47:a4:ce:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:00:41 2025 by rpki-client