Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
File: q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft (raw, json)
Hash identifier: 2U9drbiMBo+7V5RbL0P4eyRn6e+POJ00G8sZQCHTdpY=
Subject key identifier: 3F:65:E5:22:50:1F:06:F8:F9:DE:B6:94:E6:98:3D:C0:11:D8:DE:FF
Authority key identifier: AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18
Certificate issuer: /CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
Certificate serial: 0195E0B48C4B54C9267B5A0EC3654F8B7019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
Manifest number: 14CB
Signing time: Sat 29 Mar 2025 07:01:23 +0000
Manifest this update: Sat 29 Mar 2025 07:01:23 +0000
Manifest next update: Sun 30 Mar 2025 07:01:23 +0000
Files and hashes: 1: EV5m5XkVlwJiCAVuE-Ap-f7iyzE.roa (hash: 5PDn99juoAn/xETBDuvN6m9sq91U6NavWyjHbCXKOeQ=)
2: FAhtWfmDEr62tA8-MdL4s1_WH2Q.roa (hash: GtQmguJ7Q5PK416zswB+RN8W/nrjymWunr8cc+Q6G9I=)
3: q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl (hash: epB8hCuC17Cc8m4CflGDpAKzPYJDO86tzE/ZUmPPmJw=)
4: q_qPSgEpylFC-voOECXeWUWdHJM.roa (hash: jFOGBq/GXOLKGj5Jj8L6FPHFg+Kwe4gyyf67qENLLPY=)
5: tS4qFuiX3ntHvDjVyJpnqQIgubM.roa (hash: N7idUn1lSpqbvStbcsN5u6MjxI9pbc7GDDAuvP2mI1U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:8c:4b:54:c9:26:7b:5a:0e:c3:65:4f:8b:70:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
Validity
Not Before: Mar 29 07:01:23 2025 GMT
Not After : Mar 30 07:01:23 2025 GMT
Subject: CN=3f65e522501f06f8f9deb694e6983dc011d8deff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:65:e0:3f:25:39:15:50:a8:c7:29:4b:97:cf:
92:7a:52:1e:7b:79:4f:ac:00:46:cd:6e:63:b7:1e:
07:48:fd:55:cb:d5:c7:39:45:0b:35:44:28:13:c8:
7c:33:77:4b:09:35:8a:4d:f3:df:f6:82:3e:b5:ad:
c4:9b:e5:39:d8:99:5e:31:f9:80:ed:21:11:3f:30:
dd:ee:e4:5f:9f:9a:5b:f1:dd:6f:be:a2:84:27:b3:
e4:e0:ce:f9:81:3e:a9:21:bb:66:ad:20:b6:f6:54:
d4:a8:bb:e8:a1:aa:9e:2c:c4:1b:cc:91:4d:f1:28:
85:72:d7:e4:29:f3:15:39:81:86:5e:fa:4f:ba:b4:
3e:71:e9:7a:6b:32:ae:b0:cf:a1:f3:b9:22:1e:7e:
1c:51:3d:e4:dc:a9:2d:6c:23:37:c8:25:41:e1:d2:
2f:fb:eb:a3:65:4e:86:93:0e:6e:b9:f4:db:c4:8e:
22:97:92:2d:ad:b1:d0:9f:3d:81:9b:4f:7c:fa:f3:
a6:3f:d6:b6:a9:1f:fe:36:a2:0e:3b:99:0a:7c:54:
0e:e0:dc:c8:4e:f1:9a:b9:46:99:39:e0:71:e9:b0:
d8:a2:cf:64:22:c3:ae:73:e9:a0:eb:fd:b8:3a:16:
82:8a:46:95:84:35:36:2b:28:07:4a:10:2a:d0:61:
29:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:65:E5:22:50:1F:06:F8:F9:DE:B6:94:E6:98:3D:C0:11:D8:DE:FF
X509v3 Authority Key Identifier:
keyid:AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:04:f4:c7:14:88:d6:20:79:ab:5c:fd:50:88:ed:5b:c4:67:
10:be:c9:01:d2:27:9d:89:ad:6c:86:71:64:88:97:e2:b2:9d:
94:01:8b:9b:ed:f5:f0:9d:31:1d:40:08:34:1b:9d:ec:41:eb:
be:f8:3b:eb:b6:ff:d4:db:b6:e3:8c:09:57:08:f3:c3:92:2d:
b0:98:0a:8e:6d:a6:3d:51:c9:5c:5d:8b:d1:6c:79:23:36:d7:
28:20:5f:b8:78:26:41:15:6d:ef:c8:0e:eb:f2:8e:28:96:96:
e3:42:b8:09:f8:a0:6e:1e:62:5e:a7:eb:90:ea:32:02:69:7f:
7b:d7:e5:34:dd:46:94:df:7b:ce:ac:be:7e:7e:63:56:6a:14:
b9:8a:d1:50:76:6e:da:e5:c3:eb:eb:15:d3:d7:03:38:f0:6e:
80:0b:5a:e8:94:8d:51:87:f0:c8:3c:c2:6e:b0:e7:83:a3:dc:
c2:e5:c1:ea:b0:bb:71:de:d2:6a:94:fd:20:9d:84:d5:e1:20:
a2:05:cd:c9:29:ab:20:44:c2:cb:59:2d:c9:3f:68:10:58:b8:
81:3f:14:ab:7d:9b:80:ad:28:31:b6:4a:e9:da:8e:8e:c3:c4:
48:00:8f:0d:e1:00:4d:ef:af:20:c3:21:62:99:10:96:b1:5a:
8c:ab:45:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:33:12 2025 by rpki-client