Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
File: qIrVRvGg74z3XJKnSL1chjYuIJs.mft (raw, json)
Hash identifier: VwZhWxGhiZRJ+nrHeI8Ydwc9WdIDZFkBNfJI+8yG+S8=
Subject key identifier: C5:EC:D7:E4:9F:D9:D7:8A:F0:B4:3B:82:5D:A2:EB:75:7D:81:33:D1
Authority key identifier: A8:8A:D5:46:F1:A0:EF:8C:F7:5C:92:A7:48:BD:5C:86:36:2E:20:9B
Certificate issuer: /CN=a88ad546f1a0ef8cf75c92a748bd5c86362e209b
Certificate serial: 0195E0EB4AC083C5D6FDE3FF80803FD10C37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
Manifest number: 0E6E
Signing time: Sat 29 Mar 2025 08:01:11 +0000
Manifest this update: Sat 29 Mar 2025 08:01:11 +0000
Manifest next update: Sun 30 Mar 2025 08:01:11 +0000
Files and hashes: 1: Y18PuvKbRb3I33NFZERrmAggZBw.roa (hash: ulNop87p1OPj11wBSOeR/0XOStdPoDj14N+Cgskicec=)
2: qIrVRvGg74z3XJKnSL1chjYuIJs.crl (hash: E3Y+/l6hXQs1VqM82cq8pt6/MsAyH9itWmQIls4PocI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:4a:c0:83:c5:d6:fd:e3:ff:80:80:3f:d1:0c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a88ad546f1a0ef8cf75c92a748bd5c86362e209b
Validity
Not Before: Mar 29 08:01:11 2025 GMT
Not After : Mar 30 08:01:11 2025 GMT
Subject: CN=c5ecd7e49fd9d78af0b43b825da2eb757d8133d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a3:00:a2:4f:67:60:b6:ff:9b:52:6a:05:4f:
8c:ab:95:ee:1b:fa:06:d1:7a:23:24:c5:8e:91:69:
5a:5e:4b:20:51:67:ea:98:af:cb:e7:4f:f4:d5:04:
4d:be:fa:9b:bf:4b:af:37:55:3b:16:d6:0b:41:01:
80:01:44:3d:f6:0a:14:c0:68:06:8a:86:db:30:d5:
d3:55:73:46:82:33:2a:2d:f2:ee:82:1f:63:48:be:
25:1c:b9:37:73:8d:61:7f:20:6d:48:2d:bb:81:15:
28:10:6e:a1:7a:28:80:d2:cf:bb:80:17:20:78:4a:
68:69:5b:fa:ca:69:34:ba:7e:17:91:9a:9b:53:bf:
c4:72:50:65:92:32:2a:d3:ea:90:7d:f5:6a:cc:b7:
49:ec:d2:2d:c5:ec:bc:66:1e:8b:e9:fb:2d:9b:f8:
2d:00:b9:f4:9a:3d:11:a7:7c:5f:68:8b:53:a6:6d:
24:e6:c0:79:fa:d5:42:2e:36:6e:31:51:f4:37:d1:
ec:40:91:14:8c:66:27:c9:05:63:2d:46:bb:cf:95:
f2:9f:39:cd:c0:61:99:8e:b9:70:2a:46:76:10:df:
af:11:96:2d:c7:4d:ff:1c:eb:79:be:1c:4e:cd:2c:
63:05:6e:91:1e:ed:c5:72:3c:e0:6c:df:1a:f5:5f:
a6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EC:D7:E4:9F:D9:D7:8A:F0:B4:3B:82:5D:A2:EB:75:7D:81:33:D1
X509v3 Authority Key Identifier:
keyid:A8:8A:D5:46:F1:A0:EF:8C:F7:5C:92:A7:48:BD:5C:86:36:2E:20:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e3:9b:e7:a2:4a:05:d5:ce:ab:7c:50:d3:aa:7d:5d:48:cb:
50:cf:a9:62:d5:75:91:66:1e:2f:bf:70:66:43:d7:b6:60:1b:
c9:54:5a:1f:7c:9c:12:1c:87:32:e7:02:20:cf:84:f8:da:0a:
3d:5b:7b:18:e1:a4:a5:82:a4:24:d7:b0:c1:60:f7:91:12:33:
59:43:49:9a:33:6f:84:f5:62:43:31:e8:9d:5f:cf:40:26:50:
c2:e6:1f:d7:c3:7e:57:73:94:d0:80:c4:00:e7:a2:2e:f1:4f:
05:20:f2:51:ab:f0:31:38:32:be:ef:6e:a1:06:fc:dc:47:f3:
14:c8:7a:29:e8:4a:78:7f:ea:70:a4:04:74:a7:fb:d5:1e:cb:
82:84:25:5f:56:ea:4f:15:3b:7b:50:a5:d7:a4:c6:9e:11:0a:
ad:72:94:95:9d:0c:02:2b:99:3e:92:6a:d7:30:5b:59:fb:5d:
dc:08:47:08:95:ef:0c:61:06:1e:94:68:4a:7d:58:b8:7d:84:
d2:1f:2a:f8:61:78:a2:dc:45:38:88:5c:ff:de:4f:2d:57:d7:
f5:f9:e4:6f:eb:b4:75:60:ad:18:6e:92:7e:ea:98:bd:7e:57:
fd:3d:c1:c5:2d:dc:5c:36:19:f9:9a:38:57:d9:7b:7b:f5:b6:
c6:66:ff:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:05:47 2025 by rpki-client