Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/8111f4-18ec-4f39-8541-0775fbb8e81a/1/quE1bmQEwLcC1bOBOpNENarsDJg.mft
File: quE1bmQEwLcC1bOBOpNENarsDJg.mft (raw, json)
Hash identifier: /t0eUzXwVaep8c3nh77rQ5YkkJyhRxB+uq7wO9ModyE=
Subject key identifier: 6D:EC:D4:D7:C7:FE:EC:9C:06:CF:C5:B8:37:E1:CB:61:21:0E:39:FA
Authority key identifier: AA:E1:35:6E:64:04:C0:B7:02:D5:B3:81:3A:93:44:35:AA:EC:0C:98
Certificate issuer: /CN=aae1356e6404c0b702d5b3813a934435aaec0c98
Certificate serial: 019514A3FCFE831E82BBD9BC70AE7FDF8DE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quE1bmQEwLcC1bOBOpNENarsDJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/8111f4-18ec-4f39-8541-0775fbb8e81a/1/quE1bmQEwLcC1bOBOpNENarsDJg.mft
Manifest number: 1459
Signing time: Mon 17 Feb 2025 16:00:46 +0000
Manifest this update: Mon 17 Feb 2025 16:00:46 +0000
Manifest next update: Tue 18 Feb 2025 16:00:46 +0000
Files and hashes: 1: BOBgwQPsKXUo9GzpTtJWLmuHKao.roa (hash: t31DUf3VuVsE55kZKdOM/CwyGRToQ0y9LdW//yyGoxE=)
2: quE1bmQEwLcC1bOBOpNENarsDJg.crl (hash: 6BFAgurMd6zQcEmpH5+N3DKmyCCna5YBgNKpZAOerd0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:14:a3:fc:fe:83:1e:82:bb:d9:bc:70:ae:7f:df:8d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae1356e6404c0b702d5b3813a934435aaec0c98
Validity
Not Before: Feb 17 16:00:46 2025 GMT
Not After : Feb 18 16:00:46 2025 GMT
Subject: CN=6decd4d7c7feec9c06cfc5b837e1cb61210e39fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:22:c8:ba:4c:2a:ba:22:57:d5:b7:49:c6:63:
44:24:5b:48:2e:11:be:20:4c:98:8d:28:06:4b:d4:
9b:3a:26:92:f4:de:a2:4d:1b:9b:f6:ad:9f:c9:78:
fe:ec:aa:57:d7:01:1b:bd:59:3d:ec:a7:46:9f:40:
8e:28:cb:25:8b:9d:48:b5:f0:6b:f4:50:33:a2:35:
ac:3b:9b:48:80:8d:3f:b7:57:a5:3f:f0:6d:01:18:
8d:07:d8:67:32:c0:31:8b:4f:cf:df:01:e9:48:9a:
02:63:28:75:5b:c9:5f:38:c3:a8:47:bd:79:f2:4d:
3b:d0:4d:2a:02:09:26:9e:3e:aa:a1:87:26:39:60:
24:9c:6d:52:b7:f3:7c:f1:b9:27:c9:6e:b8:84:e6:
72:61:e4:e4:56:35:4f:ee:eb:8f:38:b6:4b:95:0b:
0a:b9:c0:d9:20:7d:5f:80:f5:3f:f6:c0:7d:30:6f:
92:af:23:0d:69:55:bf:f9:c4:f1:da:c6:b4:8a:af:
35:79:14:c0:f9:26:7b:19:51:01:f0:7e:7d:e4:59:
6e:04:21:d5:b9:11:74:56:f0:8a:48:34:1e:f1:03:
4e:df:f1:fc:11:1f:0d:64:c1:da:e4:ab:76:f0:3c:
ad:c4:e0:3c:90:45:4f:a7:da:d9:6f:2a:99:3d:e9:
03:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:EC:D4:D7:C7:FE:EC:9C:06:CF:C5:B8:37:E1:CB:61:21:0E:39:FA
X509v3 Authority Key Identifier:
keyid:AA:E1:35:6E:64:04:C0:B7:02:D5:B3:81:3A:93:44:35:AA:EC:0C:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quE1bmQEwLcC1bOBOpNENarsDJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8111f4-18ec-4f39-8541-0775fbb8e81a/1/quE1bmQEwLcC1bOBOpNENarsDJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8111f4-18ec-4f39-8541-0775fbb8e81a/1/quE1bmQEwLcC1bOBOpNENarsDJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d4:f2:bf:a6:08:17:4f:fe:42:6a:5b:99:5f:f3:5d:24:ae:
93:78:4a:9e:c3:c3:ca:62:c1:70:68:6b:4b:a4:44:d2:9f:de:
c8:78:7a:da:d5:bd:aa:0f:6f:50:53:a1:e7:74:27:a9:d0:0e:
53:f1:bc:8b:98:86:03:97:3b:63:5e:12:5d:0f:29:89:b0:a7:
b3:fe:f1:5d:46:a8:c1:9d:47:93:6c:1d:f5:9c:a5:d7:8f:a7:
fe:a1:c2:2b:0b:e1:03:d5:76:8a:d3:1a:67:d8:f5:a2:02:a6:
0a:90:84:92:9a:39:d2:08:0a:87:66:e9:dd:ab:7d:e2:8d:24:
8d:98:3b:e8:68:82:4d:8a:a2:eb:f0:ab:4d:e5:41:2b:0c:fb:
4e:f6:1e:47:1e:bd:ec:54:c1:94:11:98:71:da:07:45:9f:9b:
29:41:f8:48:14:44:45:a4:d2:66:98:03:80:05:35:a1:4c:a4:
e3:57:76:c2:c7:3a:55:82:23:c5:28:80:7d:cd:14:3d:d5:8c:
18:0e:03:44:33:dd:d7:aa:c9:e8:e7:82:53:04:cd:ed:46:d0:
a8:7c:e1:af:0e:ee:38:71:aa:f3:bd:87:89:8a:d9:55:95:46:
a4:04:99:57:5e:93:09:39:53:ad:4d:4e:cc:4b:d0:fe:e2:35:
a8:42:0c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:11:30 2025 by rpki-client