Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
File: qlTEdj6gGMPccCA9BO_nH9SxsGY.mft (raw, json)
Hash identifier: KyH8ppjzaX2iHAqV8UxxyeOwoWQ9YXkSn/oWRExahEw=
Subject key identifier: C9:18:8C:55:6A:22:6D:18:F5:C9:78:92:41:F0:62:15:01:6A:38:32
Authority key identifier: AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66
Certificate issuer: /CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
Certificate serial: 0194BC3C4C49A2103EAAC291D6C0F7D68E8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
Manifest number: 1109
Signing time: Fri 31 Jan 2025 12:00:55 +0000
Manifest this update: Fri 31 Jan 2025 12:00:55 +0000
Manifest next update: Sat 01 Feb 2025 12:00:55 +0000
Files and hashes: 1: 3uOrqvmP8Ja1Ais3wLBFc-Yv8js.roa (hash: exOhjbpn5m/SyHb+kmTmnk1GW2qg2u8lsLmmerL5o9w=)
2: IzP3cDAX9aykSDzKdoH0u3AyA2M.roa (hash: NC8YDjUxW5EM3pV7QmdgO/vAJ9HwNpXuNP3EpqENObk=)
3: f2dJVu8muGYFnZFPcMivMl98KP8.roa (hash: rWmOSQ2QhYKl4L1IyTfTDLKWAGfQI+Kz8vdUqnsATxs=)
4: qlTEdj6gGMPccCA9BO_nH9SxsGY.crl (hash: TgOoK+u4wb3GpbL9pwc0r+XMGfwOmq3sDb2QlD7nKVk=)
5: svOlfPLlFDJ0sGLcz6b_IG_H3W0.roa (hash: zsvLBGGbQT+oIT4diXH9qGrVZIYbNUKP7yL6prMLg/0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4c:49:a2:10:3e:aa:c2:91:d6:c0:f7:d6:8e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
Validity
Not Before: Jan 31 12:00:55 2025 GMT
Not After : Feb 1 12:00:55 2025 GMT
Subject: CN=c9188c556a226d18f5c9789241f06215016a3832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:de:f2:2b:0d:f0:c4:79:ea:31:a3:2d:d3:bf:
2e:ac:65:17:d2:a0:85:cf:53:77:2c:88:82:41:57:
91:1b:23:46:06:a1:87:87:e4:4c:70:d5:1b:2a:e0:
50:6a:e1:eb:9d:94:e2:c1:e8:85:34:1b:06:7e:38:
e3:58:0a:00:41:af:1d:f3:c2:39:cb:a2:06:1a:43:
82:a7:df:00:ef:c2:c1:2d:08:06:49:e3:7d:33:88:
bd:bf:b1:af:e9:4a:22:0e:d4:30:97:22:48:c5:9e:
25:3d:ba:a2:2b:80:9e:61:6c:e4:09:da:1d:2a:a1:
34:c8:2e:6e:4f:fb:99:64:e0:bf:8f:99:45:48:1e:
c5:77:89:0a:57:f9:cf:24:84:7c:bb:34:f3:99:6e:
65:51:e8:6c:a6:2d:6b:f6:55:3c:db:c4:e0:77:42:
14:d5:b2:06:7d:ae:d9:d4:1a:7e:eb:e9:86:99:e2:
bb:2d:02:31:e4:1f:94:ee:40:22:aa:62:99:0e:e9:
87:8f:f3:3d:b6:0b:22:da:8c:e6:66:3d:25:cf:18:
a4:0d:08:72:93:12:55:5e:0d:b4:aa:e6:0b:89:ce:
cd:0e:fa:d8:1b:ef:be:e6:01:ad:e0:6d:e7:fe:76:
d1:ad:03:09:f4:73:17:b1:ee:82:92:17:9f:ca:76:
0b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:18:8C:55:6A:22:6D:18:F5:C9:78:92:41:F0:62:15:01:6A:38:32
X509v3 Authority Key Identifier:
keyid:AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f4:e8:12:88:de:cb:68:7a:0e:0a:0c:a4:dc:67:52:25:40:
f5:c2:42:09:a0:6e:04:f1:59:41:05:30:d8:ed:43:2d:08:00:
ab:5b:af:81:cd:a2:57:bc:da:8a:03:23:2f:e6:0f:5e:cf:49:
e5:e9:1b:65:39:ce:93:5c:b4:48:48:4b:f9:f0:2e:af:39:fa:
83:cf:c1:b8:c2:3a:04:de:45:6b:c9:ea:8f:2c:8a:2e:0b:78:
48:03:63:dd:24:73:6e:69:91:65:ff:9b:0d:fd:6b:34:5b:16:
b6:74:03:9b:1e:d3:74:38:8f:a3:5e:23:2e:c3:2c:61:52:ff:
20:18:67:e2:46:2e:52:c4:28:1c:af:3a:a7:9e:60:82:2c:e2:
81:f9:e1:55:3a:3d:58:78:79:83:69:2f:76:04:73:a5:fb:a0:
29:74:82:7d:9f:8d:c2:91:6d:5e:28:e6:bd:c5:36:57:c7:8d:
e0:8e:05:fe:96:33:f5:0a:25:b1:04:62:51:cd:b8:14:95:10:
bb:dd:c5:8d:83:19:6b:ee:3e:05:4f:a8:38:39:21:8d:4f:a0:
ef:fb:15:ca:e9:bf:ac:01:03:da:48:16:36:2e:cd:74:61:3a:
fa:f5:b4:70:b6:3b:c4:a0:cc:9c:3d:69:13:19:8e:36:3f:1a:
2e:49:fb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:44 2025 by rpki-client