Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
File: qmffuIKufY5V0lhlF0L05s5DcBk.mft (raw, json)
Hash identifier: 2lWQ1AWwIe80HdnF53NnJTPyCiITA0jy6MTs0dNf1pw=
Subject key identifier: F7:8B:B0:64:4D:8A:B1:C9:44:57:0B:EB:55:80:B9:B5:E7:06:97:EA
Authority key identifier: AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
Certificate issuer: /CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Certificate serial: 0194BCA9E47845152B3D94E2E1C9F62965B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:38 +0000
Manifest this update: Fri 31 Jan 2025 14:00:38 +0000
Manifest next update: Sat 01 Feb 2025 14:00:38 +0000
Files and hashes: 1: qmffuIKufY5V0lhlF0L05s5DcBk.crl (hash: JxGoI6gyT42c5DP/AcBjXZSoV4ZhqHgGgFeZWTQ58HI=)
2: sEET-ptT1wSBoWPjjCsZ2dSnAsI.roa (hash: f9CQV7WSxI4NmikFhldnkXK2NLP+yhZAq8+zP2dx5cg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e4:78:45:15:2b:3d:94:e2:e1:c9:f6:29:65:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Validity
Not Before: Jan 31 14:00:38 2025 GMT
Not After : Feb 1 14:00:38 2025 GMT
Subject: CN=f78bb0644d8ab1c944570beb5580b9b5e70697ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:13:ad:b6:4c:be:be:45:3e:54:33:41:67:b4:
2c:00:8f:7c:51:7d:81:11:f7:16:02:41:51:0e:18:
51:2f:e0:7b:a3:1f:9b:98:0d:4e:b4:66:47:9c:d7:
7d:86:39:5b:8e:e6:1e:95:03:e7:ea:43:cb:56:a4:
b7:ac:cc:2e:68:88:89:5d:92:e6:8a:dc:fe:94:1a:
a7:36:40:d4:1b:e1:d5:7a:57:cf:48:ed:51:6b:6d:
3d:6d:60:70:b8:ae:62:c3:ee:ae:92:c5:7c:0d:47:
96:1a:b5:cd:58:09:47:4f:1c:54:3b:cf:21:c4:eb:
a2:d0:32:86:87:9d:8b:eb:7f:f4:9b:88:86:cc:c9:
8c:cc:16:24:01:be:48:4e:62:c8:6d:1a:13:20:13:
3e:02:36:51:98:98:81:06:fd:5a:1f:e6:85:c5:a9:
30:00:84:55:30:a9:0d:2a:74:14:66:bc:dd:cb:25:
00:e5:d1:6d:bc:1d:fb:6e:16:b9:03:bc:50:47:47:
1b:8d:55:67:3b:1c:7b:b9:89:60:1d:9d:db:cd:70:
b0:60:49:42:3c:19:36:df:13:2c:ca:bd:25:b8:0a:
22:94:aa:5a:c1:9a:a7:45:37:bd:2b:f1:3e:86:d9:
fa:26:85:c6:ae:77:8e:f5:d4:41:0f:9d:80:92:ff:
d0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8B:B0:64:4D:8A:B1:C9:44:57:0B:EB:55:80:B9:B5:E7:06:97:EA
X509v3 Authority Key Identifier:
keyid:AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:f9:20:7c:ee:14:89:be:0f:47:5c:5c:25:52:d6:8f:ee:b4:
74:4b:fa:4c:f9:89:4d:1c:37:29:5b:aa:ab:4d:a6:77:36:e7:
4f:78:80:fd:bf:64:ac:4c:d7:6c:ec:51:c8:eb:51:c9:df:0c:
8d:2a:50:77:f6:ff:b9:96:c9:70:2e:cf:a1:eb:64:5c:4a:bf:
27:a4:1f:08:af:93:9d:e1:30:65:8b:69:d7:4c:35:1e:11:66:
76:f7:7f:f9:8b:f8:44:da:e9:ba:13:4e:a3:d9:2d:c5:4d:1b:
47:eb:71:f3:9a:ef:ad:0d:69:3c:b4:d7:87:79:3f:ed:e5:9d:
de:b6:ca:68:6f:01:62:3d:2e:31:0d:01:19:19:8e:6d:c6:c4:
1c:c0:2b:1e:26:86:4c:17:02:53:1f:7f:65:06:57:8d:05:51:
66:f0:c8:41:c8:d1:9c:9e:c6:86:c8:d6:50:2b:05:89:e6:67:
3b:56:6d:34:2b:7e:18:2d:f3:ef:6b:ae:33:ea:99:58:89:39:
7b:65:26:38:5b:f6:91:f8:ef:31:8a:90:0b:3e:06:28:f4:c3:
29:c6:44:0b:06:c1:fc:34:55:4e:79:34:93:28:e2:91:22:86:
18:7b:d0:6a:3f:ae:3b:7d:e9:de:5d:bd:69:c4:41:c6:0f:d0:
00:27:fa:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:36 2025 by rpki-client