Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
File: qipYxpehRJl2sNEdbxJgJeFAicY.mft (raw, json)
Hash identifier: YvpgYLi2ig9qQ3ivl6JV1PZKWr1KHRqpr0xGL02TN4k=
Subject key identifier: D3:E7:CD:50:25:A1:94:5D:1E:87:64:4E:E2:24:B9:1E:D7:9E:BF:E3
Authority key identifier: AA:2A:58:C6:97:A1:44:99:76:B0:D1:1D:6F:12:60:25:E1:40:89:C6
Certificate issuer: /CN=aa2a58c697a1449976b0d11d6f126025e14089c6
Certificate serial: 0194BD85830EFB25F2D0F28683C92E605E99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:31 +0000
Manifest this update: Fri 31 Jan 2025 18:00:31 +0000
Manifest next update: Sat 01 Feb 2025 18:00:31 +0000
Files and hashes: 1: VAOvYC0rpjyTuLuRBfTKmUOuh7I.roa (hash: 0vjmq1kF1TMQbQcMXUeFVD45hSzNPAtogdVXVCWqxwQ=)
2: iBm_nleUbu7zG2yhTM8e6MdS9CM.roa (hash: 6E9IJHdRNDgzTSIdwSFE5QhmL7tpMyjTB0okAPytvXs=)
3: qipYxpehRJl2sNEdbxJgJeFAicY.crl (hash: N1aU5vL7+51c/G5J+Uhf+AXEQiLL1uxs8FDW2FKhGBE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:83:0e:fb:25:f2:d0:f2:86:83:c9:2e:60:5e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa2a58c697a1449976b0d11d6f126025e14089c6
Validity
Not Before: Jan 31 18:00:31 2025 GMT
Not After : Feb 1 18:00:31 2025 GMT
Subject: CN=d3e7cd5025a1945d1e87644ee224b91ed79ebfe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ec:30:7c:f9:27:13:4a:78:2f:8f:bd:86:a4:
cc:54:eb:3d:2c:a3:95:8f:f5:ee:d5:ce:79:f9:81:
31:9f:51:9d:cb:48:69:4a:8e:93:f9:5e:f8:e2:93:
f6:92:33:9c:51:70:1d:06:c8:78:81:e3:90:ef:1b:
01:2d:a1:7e:a6:3b:0a:8d:ae:f0:ae:d9:8a:f3:e7:
7b:04:bd:11:8c:ab:30:37:ac:e4:72:50:ec:c8:bb:
d5:c8:1c:25:1c:8d:ca:9f:ab:9b:3f:52:4c:65:a9:
6f:ed:45:1e:28:54:10:3f:29:cb:0f:fe:48:28:66:
b1:e5:d0:df:e9:3f:96:98:40:10:0b:8b:18:4d:eb:
31:a7:ea:72:f5:dc:0e:90:55:eb:9c:40:64:63:d7:
4d:fe:38:55:ea:91:41:9a:9c:94:bd:f2:6b:b6:d1:
6d:7f:58:8e:09:52:43:c1:a2:6d:16:62:fd:90:a0:
84:17:7d:81:a6:7b:73:2e:45:29:21:59:c4:36:48:
fd:57:9f:2d:c1:51:a7:70:d0:00:1b:de:a8:39:88:
d8:41:9a:1f:ed:5a:a7:b3:5d:79:a9:b6:38:5b:5b:
9e:10:90:10:d3:9f:0c:82:bc:18:58:97:6d:9c:c3:
00:51:16:39:10:f3:ec:29:f8:ee:1c:02:6e:ac:6c:
f4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E7:CD:50:25:A1:94:5D:1E:87:64:4E:E2:24:B9:1E:D7:9E:BF:E3
X509v3 Authority Key Identifier:
keyid:AA:2A:58:C6:97:A1:44:99:76:B0:D1:1D:6F:12:60:25:E1:40:89:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:53:d6:27:95:dc:08:62:b2:c0:f1:44:64:10:65:f6:45:43:
70:4c:95:81:54:24:a6:d4:9a:bc:9f:16:ea:cc:1b:3f:17:cb:
89:1b:9e:69:29:e5:b2:2c:f0:21:01:f9:8c:64:50:5a:79:5b:
97:f2:20:be:19:c9:8c:fa:ae:d6:04:44:62:fe:93:1a:a3:02:
79:ec:49:48:49:28:cf:f1:3e:62:ac:f7:50:e2:c0:65:44:18:
73:71:4d:4d:9b:5f:36:ff:b8:18:7b:0a:6c:e3:00:36:f1:52:
f5:1e:1c:54:a3:4f:93:d7:7c:b5:f5:94:54:73:cc:ca:07:b5:
2f:f9:f0:91:42:8b:1e:06:5b:1a:4a:85:2e:57:9a:13:75:04:
58:48:d1:25:c1:74:57:cb:65:d3:a8:f6:d0:82:58:ce:6f:f1:
c6:af:dc:4e:f8:86:ef:50:af:2c:28:f8:4a:11:98:89:20:82:
ac:02:24:d9:7d:c3:4c:cc:45:9f:6b:17:5e:9e:55:d8:30:40:
f4:84:48:64:cf:83:f2:70:17:06:09:7e:2a:a2:10:58:f5:0e:
3e:d3:b4:b8:0c:a3:53:f4:3e:56:c5:f3:38:6d:7c:0d:59:33:
43:04:18:70:57:f4:c0:12:39:01:bb:33:bb:03:62:76:eb:7c:
cb:4a:00:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:46:00 2025 by rpki-client