Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
File: qlemjwii4wun1z1EyabiQA_Qo7E.mft (raw, json)
Hash identifier: n/2EM8Z71QzlmqR1UH65Myi402+BmDVtKvL0whuBtXc=
Subject key identifier: 20:42:38:8F:7A:97:69:6C:29:01:D0:C7:6E:F3:C4:49:7D:D0:21:51
Authority key identifier: AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
Certificate issuer: /CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Certificate serial: 0194BD85975639C5980B8FB255A36F7F405A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
Manifest number: 0602
Signing time: Fri 31 Jan 2025 18:00:36 +0000
Manifest this update: Fri 31 Jan 2025 18:00:36 +0000
Manifest next update: Sat 01 Feb 2025 18:00:36 +0000
Files and hashes: 1: _uIcjPbTo2tZZuPbQQgAGU6uFaU.roa (hash: mFbVT5EqFo/vqgifNq4fzGvwXcCU4t6Rafq12c4CSak=)
2: qlemjwii4wun1z1EyabiQA_Qo7E.crl (hash: fXMtMjhBUamaBqdtWJLShyIcF9vekiMNjoRD4D7oPQE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:97:56:39:c5:98:0b:8f:b2:55:a3:6f:7f:40:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Validity
Not Before: Jan 31 18:00:36 2025 GMT
Not After : Feb 1 18:00:36 2025 GMT
Subject: CN=2042388f7a97696c2901d0c76ef3c4497dd02151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2e:78:90:ca:08:c8:8f:8e:eb:7b:1d:32:25:
be:3d:3b:5d:99:c3:a9:79:d7:84:94:46:77:0f:b4:
ed:24:ee:69:36:e0:8f:38:5a:81:2b:fb:d7:24:a3:
7e:15:23:e0:ac:de:39:c7:a5:43:07:13:b3:80:44:
82:f2:fa:c5:3b:f9:d8:d0:6d:14:06:3f:ef:90:e5:
8b:57:de:0e:d0:3c:06:90:46:0e:5e:5b:e4:6e:f0:
dc:d2:0f:2e:68:bf:ad:bc:64:78:40:eb:7a:15:74:
fd:3a:a0:fd:8f:45:f9:af:ce:e2:17:3e:a4:75:be:
a9:92:38:98:3a:46:be:b1:24:b4:6b:94:c9:ee:f7:
78:56:b1:4e:11:d9:74:5c:c1:6e:74:97:2e:a0:3b:
83:84:ad:5b:58:d6:ff:34:b5:90:95:d1:44:1f:08:
d0:17:b0:71:0c:1a:44:72:08:92:a4:79:97:34:cd:
21:c9:19:db:85:33:9b:81:64:5d:09:57:ca:b1:2f:
d3:39:a4:b2:07:4b:fd:1a:9a:03:4d:47:02:d5:54:
53:11:37:33:e7:b9:09:37:f2:b5:66:c3:c0:b2:08:
fc:a9:65:5d:86:4d:96:e0:0d:cf:a0:59:41:a3:20:
cc:5e:2e:4a:2a:db:3d:7d:84:9c:81:6d:b7:25:d3:
84:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:42:38:8F:7A:97:69:6C:29:01:D0:C7:6E:F3:C4:49:7D:D0:21:51
X509v3 Authority Key Identifier:
keyid:AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:79:44:d7:98:dc:9d:88:5f:58:0f:5b:92:e3:ff:61:bb:bf:
20:b5:83:49:a8:a5:9a:a5:0f:2c:63:cc:4a:00:e1:86:92:13:
3e:b5:3b:60:8c:6c:f9:da:df:9a:d9:4b:35:63:f3:29:d9:9c:
38:7e:db:39:51:e9:5c:c6:72:c5:dd:73:f7:36:7d:cc:1e:1b:
a2:99:ce:7b:18:44:9e:6a:e0:d5:5b:b8:23:cb:46:38:e2:04:
74:fa:dc:71:9f:97:27:0e:93:38:5d:95:61:13:72:5f:c9:c7:
23:6d:69:05:82:27:a1:26:50:00:5c:42:d1:99:a4:b7:af:62:
5f:45:fe:65:8d:8f:cb:12:e1:20:63:34:6b:62:03:39:7e:9e:
b7:9f:0c:39:9c:51:bd:68:47:db:ef:60:51:da:13:01:22:9d:
cf:e3:07:5a:e0:e2:5e:b5:7c:79:c2:53:bb:25:6a:2a:f9:8f:
2a:a0:5a:5e:ba:d2:b3:fe:62:10:33:71:f2:d4:34:94:7c:ac:
79:b9:e3:e9:6f:d0:39:f3:57:eb:94:d6:16:0f:6a:e2:27:24:
df:27:f5:82:ce:0d:ed:b1:b8:c4:c6:74:a4:df:68:29:e2:52:
94:55:16:d8:47:e0:ce:62:20:49:b0:85:9e:01:16:37:b4:2b:
cf:1b:4c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:06:29 2025 by rpki-client