Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
File: qsIj-xlCEV5IqXVCByktAKCC7N8.mft (raw, json)
Hash identifier: AcpsfHmGPqIEQhamrADabDWRLWAWMKLISIZEjJAAEJY=
Subject key identifier: D1:C8:E4:1B:B0:AD:93:11:B8:A6:5D:50:99:9F:B6:23:A2:30:1C:12
Authority key identifier: AA:C2:23:FB:19:42:11:5E:48:A9:75:42:07:29:2D:00:A0:82:EC:DF
Certificate issuer: /CN=aac223fb1942115e48a9754207292d00a082ecdf
Certificate serial: 0194BC3C9CD157C039AA9E9155FFB338E46B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsIj-xlCEV5IqXVCByktAKCC7N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
Manifest number: 067B
Signing time: Fri 31 Jan 2025 12:01:16 +0000
Manifest this update: Fri 31 Jan 2025 12:01:16 +0000
Manifest next update: Sat 01 Feb 2025 12:01:16 +0000
Files and hashes: 1: f7H4NvJn5XG9ZEVLvo3rzyryem0.roa (hash: FIvnUTIH/WyzVRn7SNngTErOpdYKzvrkMjSyoAbXEio=)
2: qsIj-xlCEV5IqXVCByktAKCC7N8.crl (hash: yGnf4J750UQinkwq0uIqJip5IH7GSGDJmbm9HsJ7so0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:9c:d1:57:c0:39:aa:9e:91:55:ff:b3:38:e4:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac223fb1942115e48a9754207292d00a082ecdf
Validity
Not Before: Jan 31 12:01:16 2025 GMT
Not After : Feb 1 12:01:16 2025 GMT
Subject: CN=d1c8e41bb0ad9311b8a65d50999fb623a2301c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:82:d5:e5:eb:f4:d6:f7:7d:f9:c9:5a:83:3a:
9b:0f:1b:e8:c2:b5:9a:58:1f:71:83:e4:12:d9:8e:
97:54:7e:9e:4a:a0:5c:d6:25:1b:ed:3b:32:f7:6c:
a1:20:ca:e3:e6:a7:99:86:5f:3b:4d:ee:e6:81:16:
46:b7:2a:0d:2a:7a:a8:70:dd:ec:c2:12:17:5c:b1:
8e:21:79:9d:22:17:d3:7d:14:c0:f5:7d:fa:63:7c:
9e:aa:f3:b4:1d:0b:6e:49:e0:5f:7c:a6:11:d6:3b:
f0:6f:30:30:35:f3:1d:b6:05:b0:84:14:ae:a8:3f:
a0:21:f4:2d:9b:ef:e7:6c:e4:f9:75:cd:f8:a4:a8:
55:0b:8b:e9:4c:70:bf:08:62:ee:ed:45:e7:f1:5d:
44:f6:8f:1e:e8:e0:b3:e3:b2:9c:e5:21:4d:e3:a9:
81:1c:75:60:4e:69:f5:fa:75:66:33:63:49:72:12:
57:28:b0:84:79:b1:5f:65:86:90:95:35:24:9f:46:
44:79:c3:8a:75:54:3b:d6:08:28:ef:6f:e0:45:7b:
5e:14:c5:84:36:ab:cc:66:30:b3:37:3d:bc:58:50:
9a:bd:d8:95:b9:06:41:4d:6b:26:80:4c:1f:13:69:
a9:9b:fa:78:44:10:64:d6:3e:bf:02:46:2e:ba:65:
e0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C8:E4:1B:B0:AD:93:11:B8:A6:5D:50:99:9F:B6:23:A2:30:1C:12
X509v3 Authority Key Identifier:
keyid:AA:C2:23:FB:19:42:11:5E:48:A9:75:42:07:29:2D:00:A0:82:EC:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsIj-xlCEV5IqXVCByktAKCC7N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:46:da:7e:3c:0b:e2:d9:32:75:15:e1:20:08:79:9a:d3:f0:
15:a2:83:72:d8:65:ce:d0:80:41:80:29:42:17:25:c8:a0:f1:
a0:d3:04:32:16:d6:7c:9b:e7:7c:fd:9f:cb:c2:a4:db:e9:d1:
06:f3:b2:aa:f6:80:e3:1e:c7:e4:b3:71:27:ce:9d:dd:96:f9:
01:93:ee:7f:09:bc:ae:81:52:dd:43:eb:e8:73:c4:f5:5c:3e:
16:ec:34:6f:1b:1b:89:01:f6:ff:89:e6:18:9e:8d:0a:b3:6c:
71:d5:64:28:4d:8c:8f:3e:d2:17:40:39:20:f1:ea:96:8a:f9:
36:d8:9d:ea:d2:67:83:7e:61:e7:b7:47:5a:8b:b3:03:61:54:
b0:ce:9e:7a:03:4f:64:ca:08:cb:a1:50:85:23:7a:63:e8:f0:
8d:98:50:8f:0e:ee:29:b5:25:65:42:a4:b0:cc:f0:9e:f4:75:
b4:19:24:99:f6:f2:7d:5c:37:d6:25:08:af:85:94:aa:70:a0:
26:c2:ca:56:90:26:5b:26:ec:9f:6b:3e:36:5d:b1:52:13:08:
d0:2c:8a:12:9b:d3:9b:41:2d:8f:13:4e:59:82:ea:87:b7:a2:
16:1d:ff:c0:9c:de:d9:5b:10:00:c1:93:9c:e9:3d:f0:4c:e5:
bf:e1:cd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:36:29 2025 by rpki-client