Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1f4d56-bdd9-4116-954c-2240d27402fe/1/_qLamRGzG_Ww1hSRL9v5W_HXA1s.mft
File: _qLamRGzG_Ww1hSRL9v5W_HXA1s.mft (raw, json)
Hash identifier: LhXZWUT66QwyfWmJ7RS51HGck1fQL5HoUMSKKDMaqsw=
Subject key identifier: 85:3A:87:3F:FD:07:12:3A:83:07:A8:15:AD:43:D8:04:14:27:69:10
Authority key identifier: FE:A2:DA:99:11:B3:1B:F5:B0:D6:14:91:2F:DB:F9:5B:F1:D7:03:5B
Certificate issuer: /CN=fea2da9911b31bf5b0d614912fdbf95bf1d7035b
Certificate serial: 0197586D8F40639E508D93EC405D250CF065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_qLamRGzG_Ww1hSRL9v5W_HXA1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/1f4d56-bdd9-4116-954c-2240d27402fe/1/_qLamRGzG_Ww1hSRL9v5W_HXA1s.mft
Manifest number: 052D
Signing time: Tue 10 Jun 2025 06:01:04 +0000
Manifest this update: Tue 10 Jun 2025 06:01:04 +0000
Manifest next update: Wed 11 Jun 2025 06:01:04 +0000
Files and hashes: 1: LVji7-hNinMvh2uZfU9itRxK6Eo.roa (hash: yz8p8NyEKPeKdywG9T51h7CGBtQCcml/qAuFdNgc+wQ=)
2: _qLamRGzG_Ww1hSRL9v5W_HXA1s.crl (hash: PkPBPL5uS+U+Y+xzgke9rRjSykCFoocdb1To2P4KA9A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:6d:8f:40:63:9e:50:8d:93:ec:40:5d:25:0c:f0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fea2da9911b31bf5b0d614912fdbf95bf1d7035b
Validity
Not Before: Jun 10 06:01:04 2025 GMT
Not After : Jun 11 06:01:04 2025 GMT
Subject: CN=853a873ffd07123a8307a815ad43d80414276910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:28:21:53:07:67:03:39:44:55:a4:11:5e:ab:
59:18:73:d3:46:9b:2a:25:ba:a9:8c:d9:a9:86:6b:
77:b4:3a:9f:5d:b4:24:f5:b7:85:a4:4e:a9:a7:0b:
c5:c5:8b:71:5a:34:43:ae:1d:31:19:9f:72:4c:de:
eb:fc:ef:12:df:ba:60:e5:92:5f:42:19:c0:c4:a9:
a9:bb:10:6e:15:dd:bc:ad:46:52:c0:6c:1f:61:da:
b7:6a:78:2f:a2:a9:ed:ad:98:74:9a:47:7c:21:77:
41:8c:cc:49:90:d7:1d:d8:22:60:21:72:c0:ae:db:
2e:0a:7d:7c:06:3d:d0:87:06:ab:54:78:de:8a:5b:
45:6d:20:4a:4c:de:bb:5b:d2:46:6f:e4:1e:0a:d2:
ce:b0:0e:6b:83:03:10:08:bb:ac:b4:5d:4f:fb:26:
7e:61:b9:1e:55:ab:c9:64:86:d6:f8:fd:4e:fb:1c:
0c:b4:e9:3a:1a:81:26:75:5e:c2:8c:a6:4f:57:9a:
0b:77:51:8e:b3:29:f0:58:c4:ba:95:39:84:51:d7:
09:6a:e9:76:bf:16:2d:55:84:ce:7b:44:a0:92:47:
d8:ba:6f:14:d9:9c:19:88:cd:de:11:b0:4c:37:11:
5d:b1:f4:02:0a:77:f4:4a:a2:bf:8a:d1:05:ac:49:
d4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3A:87:3F:FD:07:12:3A:83:07:A8:15:AD:43:D8:04:14:27:69:10
X509v3 Authority Key Identifier:
keyid:FE:A2:DA:99:11:B3:1B:F5:B0:D6:14:91:2F:DB:F9:5B:F1:D7:03:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_qLamRGzG_Ww1hSRL9v5W_HXA1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1f4d56-bdd9-4116-954c-2240d27402fe/1/_qLamRGzG_Ww1hSRL9v5W_HXA1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1f4d56-bdd9-4116-954c-2240d27402fe/1/_qLamRGzG_Ww1hSRL9v5W_HXA1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ba:da:ae:b7:49:f8:db:b6:56:fc:1b:ba:20:68:0b:a7:6e:
d9:47:15:05:92:cd:bb:6d:b6:84:48:8b:d5:1f:cf:f7:47:16:
88:08:a7:48:9e:9e:22:11:51:18:1e:16:9c:29:3d:a9:97:8a:
25:33:38:20:39:c4:64:1e:7e:cf:4b:11:ef:ed:a5:35:f8:79:
f2:e9:97:ea:a6:32:09:0b:9d:fc:45:85:fb:f3:28:6c:39:80:
b2:52:6e:57:f1:92:29:3f:d3:96:63:a1:c8:4e:80:0c:18:ef:
32:77:f4:30:93:c9:1d:c6:3e:30:ca:80:77:70:79:c6:ed:ae:
71:3f:6f:dc:54:6c:97:72:bd:90:a2:ca:8a:85:58:72:a0:b0:
6e:0f:ca:d3:cd:b2:62:24:95:1a:46:3e:52:26:8f:bb:b3:98:
05:b0:15:29:64:cf:29:f4:8e:af:38:74:dd:3e:41:52:57:51:
b3:58:a3:3e:c9:61:d6:6f:a0:1c:54:07:0c:66:e3:2f:dd:f6:
d5:41:08:a9:85:28:b0:22:b2:f1:34:24:2a:f0:03:ac:8d:7c:
80:c9:26:6f:ef:53:3f:93:7e:de:3f:3d:6b:d3:14:af:01:ac:
bc:93:a6:fb:bc:67:91:bc:af:fb:89:86:e4:c8:86:9b:85:f3:
00:8a:55:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:03:50 2025 by rpki-client