Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/9f4053-dd88-4fbc-ad90-2eeb0c14a470/1/Ql4wOPdecP7PjSNH8EZMiNMWGvc.mft
File: Ql4wOPdecP7PjSNH8EZMiNMWGvc.mft (raw, json)
Hash identifier: V5b+nEQaTcfXUE0zWVnnZNgT3hJaj/xGC4GdAxa1500=
Subject key identifier: F6:C9:C7:6B:AB:0F:2B:F4:38:47:07:15:F2:3A:B2:FD:22:A0:8D:E3
Authority key identifier: 42:5E:30:38:F7:5E:70:FE:CF:8D:23:47:F0:46:4C:88:D3:16:1A:F7
Certificate issuer: /CN=425e3038f75e70fecf8d2347f0464c88d3161af7
Certificate serial: 018D9BE732404C7942937BE9312140AE0E4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ql4wOPdecP7PjSNH8EZMiNMWGvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/9f4053-dd88-4fbc-ad90-2eeb0c14a470/1/Ql4wOPdecP7PjSNH8EZMiNMWGvc.mft
Manifest number: 0841
Signing time: Mon 12 Feb 2024 06:00:36 +0000
Manifest this update: Mon 12 Feb 2024 06:00:36 +0000
Manifest next update: Tue 13 Feb 2024 06:00:36 +0000
Files and hashes: 1: Ql4wOPdecP7PjSNH8EZMiNMWGvc.crl (hash: 4nV8U5s9eBUSYAvsEFE1bdE9N51p5dilzjZ2SMe76Dc=)
2: bDiZe-WvLdMxEsavA2JPINyupcg.roa (hash: x+ay2d9IS8SL2uGAoNAx5U9DnUDyIK/CBC7QyU3GrLI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9b:e7:32:40:4c:79:42:93:7b:e9:31:21:40:ae:0e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=425e3038f75e70fecf8d2347f0464c88d3161af7
Validity
Not Before: Feb 12 06:00:36 2024 GMT
Not After : Feb 13 06:00:36 2024 GMT
Subject: CN=f6c9c76bab0f2bf438470715f23ab2fd22a08de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0e:21:9b:12:c8:99:8b:44:9c:e1:7f:ea:36:
6c:d8:59:b0:fe:b0:7f:c1:8d:c6:70:0a:56:ea:1c:
ef:9c:1f:b5:e5:58:a9:ac:fd:47:1e:c8:0a:8d:db:
51:1c:80:85:33:0f:a3:bb:4a:d0:fd:3c:01:4b:1a:
5d:19:2e:01:cb:ae:4d:c0:2f:6f:e0:0b:0d:82:c5:
b3:23:ba:97:2a:68:72:31:51:45:21:94:ac:3a:d0:
c9:75:18:ca:b9:64:aa:48:32:95:f9:cc:56:d9:af:
d4:05:46:bf:1e:5a:26:b1:b0:3b:0a:c7:f7:39:d5:
50:00:20:ee:3e:7e:5c:00:1b:49:ee:00:7c:fb:77:
d7:61:9e:d9:56:5e:9e:85:1d:3c:a3:7c:db:dd:b3:
da:0b:77:01:31:b4:8f:d6:38:91:b8:16:bc:64:a5:
95:42:90:28:11:1f:25:a3:c6:42:7b:a4:9f:8b:39:
1d:a2:91:e3:14:e4:97:b0:1d:18:c2:6b:67:45:34:
d1:2d:3e:2e:82:4c:14:e1:ea:ed:54:80:b7:36:e3:
73:f6:80:94:61:95:b8:5a:6c:f0:fa:bd:d6:d9:1d:
45:59:b6:e1:79:ea:14:41:13:f9:44:c8:8d:66:cd:
ee:8c:b4:ca:fa:e7:ae:67:2d:1f:53:0f:1b:f1:bc:
f7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C9:C7:6B:AB:0F:2B:F4:38:47:07:15:F2:3A:B2:FD:22:A0:8D:E3
X509v3 Authority Key Identifier:
keyid:42:5E:30:38:F7:5E:70:FE:CF:8D:23:47:F0:46:4C:88:D3:16:1A:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ql4wOPdecP7PjSNH8EZMiNMWGvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/9f4053-dd88-4fbc-ad90-2eeb0c14a470/1/Ql4wOPdecP7PjSNH8EZMiNMWGvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/9f4053-dd88-4fbc-ad90-2eeb0c14a470/1/Ql4wOPdecP7PjSNH8EZMiNMWGvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f7:f5:c9:4e:4f:14:e0:a0:a8:c7:7f:48:59:7c:3d:89:5f:
eb:b0:8c:fa:0d:8a:d1:37:ee:88:20:d9:62:28:e1:40:47:7b:
97:6a:8d:ca:d5:6d:95:2f:95:49:62:cc:4f:46:12:fc:2f:ee:
61:75:98:9a:9e:81:9f:b9:4f:67:a0:f8:d8:e7:a1:b6:d4:4d:
0c:bb:b7:4d:87:c9:a0:67:f0:06:d9:7a:73:b8:b8:80:2c:b5:
de:29:46:8d:11:05:f5:71:0f:45:b5:f0:98:e8:4b:12:31:6e:
f9:8b:aa:3a:75:d6:b9:d1:af:7a:4b:c9:f5:eb:b0:28:55:0a:
28:47:08:33:47:0d:e2:d4:6d:0b:1c:14:01:34:1f:87:1f:43:
de:53:af:1b:79:b3:9b:04:60:35:de:5c:c1:79:0c:7a:82:52:
4d:e5:11:8e:ab:cd:c9:e3:a3:f9:90:46:00:36:23:ff:96:28:
1e:c6:97:7a:c6:4c:2a:c0:8e:78:e3:6f:ab:8a:fa:82:16:02:
69:6b:76:36:c7:e2:fe:3a:2d:88:a3:8a:64:7e:69:84:35:11:
4c:8a:cc:48:e6:b2:ae:55:0b:26:8f:7c:26:eb:e4:89:30:dd:
a1:71:d2:e2:d9:3b:4f:d1:b4:b5:6f:ad:f5:9e:cd:fa:e8:40:
78:32:4a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:57:05 2025 by rpki-client