Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/db2316-429d-4425-b39e-1264f20180e9/1/qEslqyV3CjWNpfX7QnBysKLiRYI.mft
File: qEslqyV3CjWNpfX7QnBysKLiRYI.mft (raw, json)
Hash identifier: 24d7t34I33QJCM2VgwfR/mu54TtbJEyeEwWdrOdDWQk=
Subject key identifier: D4:8C:EE:CD:89:FD:6E:F3:8B:CE:C4:BF:38:91:2B:28:C4:90:D2:22
Authority key identifier: A8:4B:25:AB:25:77:0A:35:8D:A5:F5:FB:42:70:72:B0:A2:E2:45:82
Certificate issuer: /CN=a84b25ab25770a358da5f5fb427072b0a2e24582
Certificate serial: 01929949B7E73634EBD79A2C4D14FDAED4A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEslqyV3CjWNpfX7QnBysKLiRYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/db2316-429d-4425-b39e-1264f20180e9/1/qEslqyV3CjWNpfX7QnBysKLiRYI.mft
Manifest number: 130F
Signing time: Thu 17 Oct 2024 07:03:17 +0000
Manifest this update: Thu 17 Oct 2024 07:03:17 +0000
Manifest next update: Fri 18 Oct 2024 07:03:17 +0000
Files and hashes: 1: fRADibRNqWN0AtGTn2-utszPj7w.roa (hash: hCmrqKrqlmVQfyvKs2Uss/nWOgWITRqpXaMpzWoZvOo=)
2: qEslqyV3CjWNpfX7QnBysKLiRYI.crl (hash: jvov5LrOOWTZ3/p6YfD7CouGJqfiTFwKpduKW70fi9M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:99:49:b7:e7:36:34:eb:d7:9a:2c:4d:14:fd:ae:d4:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84b25ab25770a358da5f5fb427072b0a2e24582
Validity
Not Before: Oct 17 07:03:17 2024 GMT
Not After : Oct 18 07:03:17 2024 GMT
Subject: CN=d48ceecd89fd6ef38bcec4bf38912b28c490d222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b8:dc:10:f2:a3:1f:23:d2:f7:4b:59:16:34:
65:f7:00:f3:69:ef:e6:ef:b2:86:9e:8c:40:6f:bc:
f7:bc:99:f0:d5:84:35:f2:89:b9:88:5c:db:d1:52:
dc:32:65:b4:52:be:14:b4:7d:08:88:8c:e8:02:d5:
f0:fa:fc:51:99:c7:44:ea:24:d3:46:2c:ae:c1:88:
a3:65:bb:44:56:fb:9b:49:05:64:56:fb:a5:55:da:
e4:79:c1:b7:27:e7:a9:e2:52:cd:4c:f3:a3:74:a0:
fc:a6:7c:da:00:d4:f5:91:0a:b9:80:a8:2e:b7:fb:
c0:eb:51:10:3a:1d:80:af:a2:ff:25:06:6c:80:95:
68:5d:38:51:d5:6f:91:9c:1a:d3:0b:b2:1d:a2:0c:
17:85:29:40:10:c0:b0:9b:9b:55:72:5e:0c:ab:a1:
0c:53:9d:38:84:d5:33:0b:66:26:7a:ef:46:6d:d8:
20:e4:f0:36:f8:ac:c6:20:60:8f:86:fc:a6:14:68:
87:71:a9:1f:41:9d:eb:86:f0:4a:7e:71:98:12:c7:
b2:8b:0d:31:ef:06:59:f6:62:76:1e:b8:af:ca:0c:
7b:b9:6e:fc:b4:f2:13:6c:e1:a7:2f:c9:05:3e:56:
52:92:e8:5d:76:db:ea:d4:a1:d1:a4:c5:aa:c3:da:
55:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8C:EE:CD:89:FD:6E:F3:8B:CE:C4:BF:38:91:2B:28:C4:90:D2:22
X509v3 Authority Key Identifier:
keyid:A8:4B:25:AB:25:77:0A:35:8D:A5:F5:FB:42:70:72:B0:A2:E2:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEslqyV3CjWNpfX7QnBysKLiRYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/db2316-429d-4425-b39e-1264f20180e9/1/qEslqyV3CjWNpfX7QnBysKLiRYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/db2316-429d-4425-b39e-1264f20180e9/1/qEslqyV3CjWNpfX7QnBysKLiRYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:2e:84:ce:1f:36:55:4e:96:62:f2:8b:d2:43:c6:6b:ef:b7:
e8:23:bb:b2:c0:de:d1:0a:9a:e3:4b:e6:07:0c:5f:db:22:41:
40:00:21:2f:e3:34:45:02:84:44:45:80:a8:f8:8a:eb:25:b8:
83:34:1d:9a:af:35:34:5c:ef:2f:27:d6:41:42:c6:b1:a4:d1:
eb:5b:b3:a2:af:59:8e:0f:8c:a1:74:c2:91:e0:8f:20:e4:21:
20:87:cf:25:43:68:56:da:67:d3:51:22:6a:c4:12:b7:5f:eb:
be:5c:86:5b:b1:20:92:ba:3a:b8:9e:a2:e1:43:1f:85:fb:60:
0f:c9:b9:58:db:ba:0d:09:64:e5:67:23:52:7b:f7:e8:ed:51:
52:c0:47:a2:84:14:f6:e2:36:c3:21:8b:12:3c:93:7c:3a:35:
6e:9e:4c:b4:8e:cf:d4:77:2c:c1:10:09:2c:fa:7f:c5:46:13:
b2:4e:ff:c5:32:1b:a6:1d:22:62:68:98:63:db:cb:d6:b0:32:
87:ac:69:84:eb:36:1e:41:5e:6a:c4:aa:2c:c3:b6:b2:83:d8:
cf:ec:54:ac:89:d4:3a:dc:e5:60:50:c8:72:49:3d:76:48:72:
85:e3:57:d3:a0:d4:b3:d9:6c:1f:67:b9:4d:04:2c:76:57:93:
d6:87:e6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:12:55 2025 by rpki-client