Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cdaaea-6118-490e-84f5-967f2e506548/1/u_Q-Fz94LwHDOzNpOYW9PAjU0FQ.mft
File: u_Q-Fz94LwHDOzNpOYW9PAjU0FQ.mft (raw, json)
Hash identifier: qZQBRMfgvFBkETySt07IlUr7mcJ+clizjSfNZ3y2iQ8=
Subject key identifier: 65:71:E9:27:51:53:CE:90:74:43:ED:E3:CF:11:D5:91:A4:9E:AD:AE
Authority key identifier: BB:F4:3E:17:3F:78:2F:01:C3:3B:33:69:39:85:BD:3C:08:D4:D0:54
Certificate issuer: /CN=bbf43e173f782f01c33b33693985bd3c08d4d054
Certificate serial: 01941A71BFD91AB85B12070020E5DFF0DD05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_Q-Fz94LwHDOzNpOYW9PAjU0FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cdaaea-6118-490e-84f5-967f2e506548/1/u_Q-Fz94LwHDOzNpOYW9PAjU0FQ.mft
Manifest number: 1076
Signing time: Tue 31 Dec 2024 02:00:49 +0000
Manifest this update: Tue 31 Dec 2024 02:00:49 +0000
Manifest next update: Wed 01 Jan 2025 02:00:49 +0000
Files and hashes: 1: mEHPfDbqX4-VVROOELQqvWMqVl8.roa (hash: Gd0gjJGXdjtHisCT7nNdOQk09yLpbDqSLlG6hfXZeH8=)
2: u_Q-Fz94LwHDOzNpOYW9PAjU0FQ.crl (hash: xxFZ5Pf/YBVaoI8WJLNN6jLtC3I8QdzziSAtl6JREVs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1a:71:bf:d9:1a:b8:5b:12:07:00:20:e5:df:f0:dd:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf43e173f782f01c33b33693985bd3c08d4d054
Validity
Not Before: Dec 31 02:00:49 2024 GMT
Not After : Jan 1 02:00:49 2025 GMT
Subject: CN=6571e9275153ce907443ede3cf11d591a49eadae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:05:87:19:59:52:d1:e9:7d:0f:37:9d:e2:90:
8a:7b:33:01:ed:4c:37:aa:63:8e:ea:ed:5c:bc:ef:
f8:9f:72:38:1d:70:85:e7:98:c6:d5:59:1f:7e:02:
46:4d:99:ea:53:f6:c4:31:68:6a:d9:b6:e8:e4:aa:
f1:b4:bc:35:c7:f1:af:f0:6d:bb:f7:d8:72:b9:be:
9a:11:c3:49:e0:2f:28:83:3c:af:f5:bf:d6:50:b8:
a2:d1:89:6a:17:36:80:b3:65:a6:8e:d7:22:f8:96:
18:cc:5b:77:3e:9e:31:be:40:25:c7:70:00:24:cf:
91:f6:5e:41:7a:84:0e:0d:a1:c9:08:d3:6e:60:7d:
09:26:4a:79:c8:6f:eb:75:29:10:7b:e5:4e:2c:02:
dd:75:c0:84:84:60:63:c8:a9:3b:12:7a:42:7d:cb:
8d:72:d2:88:1b:14:f1:c1:68:ab:c4:69:f1:3d:9d:
56:ef:c0:d2:df:fd:41:11:9a:60:5e:b8:3e:be:fb:
27:cd:cd:7b:57:5b:07:bf:f1:b1:f0:f5:95:8a:d2:
a4:cd:d9:da:3a:15:7d:e8:e5:5b:f8:6f:2e:68:28:
86:57:42:b2:b4:5f:38:0c:2f:87:6d:55:9f:fe:55:
09:64:44:2d:ea:c7:7d:e8:56:c1:52:48:d0:64:c6:
52:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:71:E9:27:51:53:CE:90:74:43:ED:E3:CF:11:D5:91:A4:9E:AD:AE
X509v3 Authority Key Identifier:
keyid:BB:F4:3E:17:3F:78:2F:01:C3:3B:33:69:39:85:BD:3C:08:D4:D0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_Q-Fz94LwHDOzNpOYW9PAjU0FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cdaaea-6118-490e-84f5-967f2e506548/1/u_Q-Fz94LwHDOzNpOYW9PAjU0FQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cdaaea-6118-490e-84f5-967f2e506548/1/u_Q-Fz94LwHDOzNpOYW9PAjU0FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e1:bf:af:df:a1:ff:30:30:36:a1:bd:f5:aa:1c:6b:d6:89:
72:b5:9a:ee:a9:05:ab:9f:f4:f8:65:7b:53:42:96:a6:9c:ee:
b0:bf:42:83:04:c8:3f:72:a8:a1:4e:87:2b:9b:eb:93:f8:e4:
29:41:b4:47:1e:b2:8b:0d:18:f4:e0:c1:e9:a1:2e:af:82:5c:
99:1e:d3:0c:72:97:77:7d:03:39:b5:a5:3f:82:84:44:ae:c4:
b1:19:92:36:0c:37:8f:5b:ac:b8:94:e7:7e:b0:09:1e:c4:d1:
18:a4:67:72:80:9d:bc:7c:b6:5b:be:81:8a:7f:36:de:42:61:
6b:93:0f:3e:28:de:da:62:73:f8:7b:0f:63:3f:e5:62:d0:70:
e6:31:4a:d6:1a:6e:a0:32:6d:53:2b:c2:42:70:e7:30:ef:59:
32:03:da:b5:5a:7a:9a:eb:81:11:5f:74:dc:2a:25:80:87:9b:
5d:46:64:25:6c:d2:84:80:f7:f7:0d:5d:c1:c6:01:7a:1d:be:
71:2e:f1:4f:50:19:a1:7b:39:b7:62:1c:6c:54:31:e7:86:5f:
ba:8a:06:11:91:a4:5d:43:59:f8:d6:f1:9b:4b:b5:d1:a5:c3:
48:ab:5b:60:83:9a:58:95:61:26:5f:bc:f2:55:79:e2:eb:a4:
d8:82:03:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:36 2025 by rpki-client