Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
File: qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft (raw, json)
Hash identifier: egEvnC/Ouou96b5m3PJJzHZyoGZ8o7QEgXOwgS63LTc=
Subject key identifier: BA:1D:A3:B8:59:7F:33:94:1D:F3:AD:E5:66:16:A0:B4:7C:7D:B7:BB
Authority key identifier: A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3
Certificate issuer: /CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3
Certificate serial: 0194BBCDC1A2776677DC04EB32A663E92AB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
Manifest number: 0534
Signing time: Fri 31 Jan 2025 10:00:11 +0000
Manifest this update: Fri 31 Jan 2025 10:00:11 +0000
Manifest next update: Sat 01 Feb 2025 10:00:11 +0000
Files and hashes: 1: ZuTxi79Ck2OCXbkDauPT87FQh1E.roa (hash: xuj1se8JvfBc00cfkDYRLRVr3K+o4nQ3N/ymEwvuis8=)
2: qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl (hash: kq+PKQD3BS7LTXor/RWEc8g1ZAOA/Y3wKLSob2vrOqo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c1:a2:77:66:77:dc:04:eb:32:a6:63:e9:2a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3
Validity
Not Before: Jan 31 10:00:11 2025 GMT
Not After : Feb 1 10:00:11 2025 GMT
Subject: CN=ba1da3b8597f33941df3ade56616a0b47c7db7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0d:d3:55:93:f1:07:2b:f8:e2:b8:21:20:e6:
7c:81:a1:68:fc:49:eb:b8:fe:0d:ea:d2:0e:96:8a:
aa:5c:85:8b:79:cf:3d:b2:84:d0:06:0b:dc:79:92:
03:9a:5c:64:ab:8c:63:75:9a:2b:08:37:13:37:6c:
60:b9:49:d6:c7:8b:8f:19:ac:23:fe:32:83:d1:24:
39:c3:bc:d0:f6:2e:39:12:ac:22:79:c1:cc:2d:e8:
63:f3:7c:a5:08:e1:31:35:84:a3:6d:f2:20:5c:a6:
7e:ca:12:0b:69:e5:85:b4:fb:56:5f:16:b9:38:84:
75:1f:9d:7c:66:de:2c:d4:43:29:69:86:e7:a2:8d:
87:e4:24:90:5f:6a:b1:90:b5:c2:7b:1d:d1:26:dc:
60:3a:37:6a:32:6e:f5:6d:e3:bc:d7:d5:09:db:8a:
62:08:a2:fc:b2:f6:ca:db:5e:c7:c1:28:cd:d4:d8:
46:c7:4a:ad:13:7e:b4:4e:73:df:c7:23:43:af:86:
dd:a6:f6:3e:cf:2d:f5:42:13:8b:28:fb:93:35:ab:
f0:5b:2c:c9:3e:f3:c9:20:f2:2a:87:f0:d1:5f:e8:
e0:cf:f0:5a:b2:4f:5a:5f:a6:ec:e6:ef:9b:e6:ba:
fe:c5:be:66:1e:6b:f9:0e:7a:5c:f7:ff:a6:29:dc:
56:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1D:A3:B8:59:7F:33:94:1D:F3:AD:E5:66:16:A0:B4:7C:7D:B7:BB
X509v3 Authority Key Identifier:
keyid:A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:6e:18:57:14:72:0a:68:7c:64:53:cf:14:7a:a8:ec:00:b2:
cc:25:d7:2a:e8:73:71:4f:45:7f:6a:e1:f4:04:78:15:fb:48:
86:19:45:c1:c5:39:cd:f4:92:27:ac:37:5e:b8:d8:41:0a:a7:
39:f4:d1:75:78:1f:5a:7c:e4:86:f1:ff:8e:f3:ca:87:71:96:
f1:80:4c:8d:b3:16:a1:e3:52:41:de:e8:67:cf:1d:d1:10:0d:
2a:0f:b1:a7:30:4e:12:e2:78:86:ad:8d:17:e7:62:d9:99:ed:
80:76:87:0c:10:30:1a:61:90:41:ab:8a:14:ae:a1:52:f9:c6:
61:87:67:31:88:0c:e3:0a:37:7f:0b:62:c6:1e:80:5c:01:17:
a6:27:99:9a:71:23:7d:70:eb:fa:29:a2:88:29:3c:ac:99:d7:
72:3a:b0:3f:cf:7a:e8:ce:ec:d5:61:25:80:b4:e3:85:7e:bd:
44:71:aa:0b:98:55:15:e1:74:c6:d6:6c:4c:da:67:aa:aa:7e:
ad:dc:ff:36:b0:44:a8:19:31:d7:f3:65:cb:2a:9b:41:fa:fb:
80:29:49:b2:6c:c9:4e:30:e8:c2:e4:8c:be:7a:fb:b1:0b:bd:
83:5a:de:df:dc:9b:4f:8b:73:9a:10:7b:d7:14:6f:2b:8d:7b:
b2:dc:10:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:29 2025 by rpki-client