Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft
File: q22oNLMssSxL2uM_Zy80jZg_MXY.mft (raw, json)
Hash identifier: p6jkoxnUAqHfsG3s/wzUdkv1h+h9sO8qydwr8D1HZ2s=
Subject key identifier: FE:35:74:FB:54:53:88:23:87:66:34:EE:58:03:B0:96:5C:68:4D:F1
Authority key identifier: AB:6D:A8:34:B3:2C:B1:2C:4B:DA:E3:3F:67:2F:34:8D:98:3F:31:76
Certificate issuer: /CN=ab6da834b32cb12c4bdae33f672f348d983f3176
Certificate serial: 0195DFD89A7355F137859E31D1F0D6250C71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q22oNLMssSxL2uM_Zy80jZg_MXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft
Manifest number: 0D29
Signing time: Sat 29 Mar 2025 03:01:09 +0000
Manifest this update: Sat 29 Mar 2025 03:01:09 +0000
Manifest next update: Sun 30 Mar 2025 03:01:09 +0000
Files and hashes: 1: evpxyC_xQr6-9_i5vhF3SSD60QY.roa (hash: F+Lkz2iLknBGekmgWZevszL+qAh6hnFUDMady9RqMNg=)
2: q22oNLMssSxL2uM_Zy80jZg_MXY.crl (hash: wHEyYe0ogW7WXWpCf+Dgqsv/f54dDyUYEyJftXDyjG8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:9a:73:55:f1:37:85:9e:31:d1:f0:d6:25:0c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab6da834b32cb12c4bdae33f672f348d983f3176
Validity
Not Before: Mar 29 03:01:09 2025 GMT
Not After : Mar 30 03:01:09 2025 GMT
Subject: CN=fe3574fb54538823876634ee5803b0965c684df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c5:c9:de:c5:2d:9b:83:5e:ad:b1:9c:56:71:
6f:52:de:5b:e0:66:92:ec:20:71:e3:d8:19:a7:20:
17:18:dc:bb:71:fe:f9:ac:3a:43:42:83:e5:12:ed:
87:79:b8:e7:1d:7e:f7:b3:cd:e0:e8:aa:cc:2e:88:
a9:f0:77:bf:5e:8b:36:16:7e:1c:5d:6b:7e:39:9a:
a0:80:e2:e1:3a:81:86:71:24:3f:b0:e7:45:64:36:
4f:f9:78:bf:25:19:ce:53:ff:2c:3a:04:e9:8a:b5:
dd:ab:f9:56:97:c7:c7:17:e5:8b:0a:5e:cc:be:10:
e0:09:a1:50:27:e6:b0:7c:d8:e7:e4:d0:d1:36:4a:
e5:c3:da:49:62:13:7f:2a:89:e8:b9:05:ad:a2:60:
c9:37:7b:67:8a:05:15:5e:ad:1c:6d:89:15:5c:d5:
d7:c1:bf:4c:06:aa:ee:97:39:07:5d:5b:dd:a0:3b:
4a:34:f7:39:5d:6d:2e:67:e8:a3:bf:e3:e8:34:b1:
93:9f:d9:be:6f:f0:c5:90:ce:4e:ce:c1:a0:2d:d9:
2f:45:19:f7:cd:bd:57:ba:e8:65:c8:fd:21:ac:a9:
f9:d9:86:bd:8f:09:4b:93:1b:7e:2b:c2:5e:f8:a4:
84:92:91:55:62:f5:1c:e5:7c:71:f1:68:b3:fc:fa:
bf:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:35:74:FB:54:53:88:23:87:66:34:EE:58:03:B0:96:5C:68:4D:F1
X509v3 Authority Key Identifier:
keyid:AB:6D:A8:34:B3:2C:B1:2C:4B:DA:E3:3F:67:2F:34:8D:98:3F:31:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q22oNLMssSxL2uM_Zy80jZg_MXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ce:5b:dc:e9:6e:db:90:a4:d7:e4:76:88:0f:25:c3:d0:ff:
75:f0:9c:6c:a4:9f:30:ed:8b:79:3b:6a:ec:36:6a:d1:fd:98:
f4:2c:cd:88:3c:01:38:1f:12:e1:c0:eb:f6:4c:13:1b:8d:3f:
90:ca:b5:7c:3b:4f:95:34:a8:50:5e:26:84:64:21:13:7d:aa:
44:cd:84:b3:cf:fe:7f:c7:62:bd:74:64:e4:aa:61:ac:1f:3e:
b8:d4:83:c1:3c:87:a0:4b:4a:f1:02:fc:22:44:40:c3:20:c1:
49:ea:fc:ce:22:49:56:ce:b0:77:05:a6:bb:9f:a4:dc:96:21:
a6:3e:8e:b8:f1:14:b6:73:54:ec:5b:a7:7f:08:e0:11:16:69:
74:fe:1a:fd:ef:54:0e:5a:0b:05:53:24:a1:42:0c:84:fd:9a:
4c:f1:e1:b9:36:38:21:57:10:0e:df:c3:51:fb:f7:e4:0f:f8:
5c:24:ec:33:f7:db:69:5b:a1:62:60:e2:6a:e9:68:05:95:c0:
cc:8d:c6:51:ce:52:85:ba:86:2f:40:f2:6f:f5:ab:57:c9:a4:
2a:c8:b9:5f:14:82:fe:13:51:1a:dd:96:a1:34:3e:0d:09:e5:
7e:32:cd:aa:01:15:33:98:3d:a2:b7:c4:33:27:e8:a0:48:b7:
06:b9:81:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:51:11 2025 by rpki-client