Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
File: qltHHQugidnp9GwpExlnT6yBKNA.mft (raw, json)
Hash identifier: d/FGKwy1zhzdnmCCEmif0iYFiPiEEEvNLfkOn4F1r+E=
Subject key identifier: 5C:05:10:4D:B7:FA:2D:F9:AB:F0:F1:B1:32:EE:0E:26:4B:FB:90:01
Authority key identifier: AA:5B:47:1D:0B:A0:89:D9:E9:F4:6C:29:13:19:67:4F:AC:81:28:D0
Certificate issuer: /CN=aa5b471d0ba089d9e9f46c291319674fac8128d0
Certificate serial: 0194BD1769DCCCBF359CE1CA3BEAFF667D1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
Manifest number: 0A7C
Signing time: Fri 31 Jan 2025 16:00:15 +0000
Manifest this update: Fri 31 Jan 2025 16:00:15 +0000
Manifest next update: Sat 01 Feb 2025 16:00:15 +0000
Files and hashes: 1: VNd90Fl0tWahsmhhQvhoAAT8f5U.roa (hash: U+zi8hpH0S9lksZLxaBLhZX/Hg0tdOzYwVmTSHbyaHY=)
2: oPUfgQs_gRyUUqFixo17ClnZdws.roa (hash: BRanyzZIskjVzme1gyyyKAnXC2WxzE9xAlEA/GqswiQ=)
3: qltHHQugidnp9GwpExlnT6yBKNA.crl (hash: mkjqbbVj+msL5L/kMa3PPnmhgDuNn6w0dtKefZdp3oU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:69:dc:cc:bf:35:9c:e1:ca:3b:ea:ff:66:7d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa5b471d0ba089d9e9f46c291319674fac8128d0
Validity
Not Before: Jan 31 16:00:15 2025 GMT
Not After : Feb 1 16:00:15 2025 GMT
Subject: CN=5c05104db7fa2df9abf0f1b132ee0e264bfb9001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:04:e2:65:00:7e:11:34:9f:6d:d5:99:b8:7d:
e3:85:3b:19:21:23:e8:3d:54:6d:4d:62:ca:41:ea:
09:b3:6b:85:93:bf:62:bd:10:19:f9:09:fe:bc:7f:
60:02:c3:fb:ce:43:b2:73:e2:6d:4c:3c:79:88:1b:
86:4c:a8:43:21:67:53:6e:f6:36:bc:1c:06:c5:85:
23:49:bd:78:db:62:4a:4a:8c:7e:3a:94:5b:17:e1:
82:9f:35:22:7e:db:3c:ed:21:ee:06:c2:72:ac:3b:
c3:99:e7:4a:7e:54:8e:21:ba:de:29:7a:be:19:b1:
b0:e9:1c:65:96:53:c4:72:c7:34:c8:02:04:6b:34:
ee:d9:c5:7a:b8:c2:fa:41:d6:3b:2a:9b:4f:a9:a8:
7a:6c:7c:cb:a3:d6:44:7e:3f:a1:0a:49:ee:25:ae:
fd:aa:19:d6:eb:a5:e1:21:f9:38:29:72:ae:af:cc:
16:30:bd:6e:e3:4e:26:b7:39:8c:9d:c0:93:7b:71:
40:b5:8f:80:03:7e:05:58:15:18:a1:c9:2a:7c:14:
90:79:a4:bf:40:c9:a0:d7:e7:6e:e9:35:a8:90:a2:
37:c6:45:38:59:66:85:e5:8f:ed:a6:b4:4c:03:14:
25:96:d5:83:c7:a1:2d:74:1d:8f:f6:54:a0:36:21:
df:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:05:10:4D:B7:FA:2D:F9:AB:F0:F1:B1:32:EE:0E:26:4B:FB:90:01
X509v3 Authority Key Identifier:
keyid:AA:5B:47:1D:0B:A0:89:D9:E9:F4:6C:29:13:19:67:4F:AC:81:28:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ac:52:60:41:7f:16:bf:15:66:8b:cf:ba:6a:c5:d7:eb:5e:
39:49:c1:11:42:8f:fc:fe:4d:80:f7:5e:49:47:d8:25:16:a5:
08:e3:18:03:3d:77:2c:67:3a:cb:20:a7:cf:dd:0f:cf:56:97:
7e:e2:f8:94:98:8d:20:cb:49:21:c7:ab:dd:0e:a7:c2:5c:ec:
20:e4:38:0e:08:10:de:5f:57:30:d8:33:ac:c6:be:6e:7b:eb:
29:f3:2c:a5:5e:91:c3:9b:8b:41:7b:6c:88:67:ad:7d:7b:91:
22:8e:0f:b1:9f:18:c8:d4:fd:50:ce:99:b2:dd:8d:77:a2:5e:
eb:5f:ef:99:c0:bb:d3:3a:14:36:ef:17:aa:bd:74:f9:a9:93:
c2:ef:a0:ff:8d:74:64:ae:0d:2f:df:10:4c:68:aa:7e:27:b4:
07:a5:ac:8f:87:10:b6:92:39:82:5e:bc:1c:b9:62:97:49:cf:
d7:73:4f:9f:f5:21:8e:94:4a:55:8e:ea:b7:0c:96:72:09:1f:
3a:64:2e:fe:7a:a9:3a:89:7e:a1:10:ee:0d:d7:cd:af:a0:9e:
3d:7e:38:70:c6:84:80:c2:a0:bf:20:66:97:b5:7f:b9:5e:14:
7f:a0:f1:13:cd:99:75:40:49:71:e8:f3:f6:e6:76:35:26:13:
af:a9:bb:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:17:35 2025 by rpki-client