Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
File: qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft (raw, json)
Hash identifier: JwE/2Cy9XBppjG/tEvuB3Q/n7QVjzp4ornAANs+atdk=
Subject key identifier: DC:E7:52:B5:9E:6D:52:BE:78:10:07:C1:9F:8D:28:14:57:82:B2:60
Authority key identifier: AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
Certificate issuer: /CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Certificate serial: 0194BD177FDA3D0A5B8225EDBB5D7EF7A3E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
Manifest number: 1403
Signing time: Fri 31 Jan 2025 16:00:21 +0000
Manifest this update: Fri 31 Jan 2025 16:00:21 +0000
Manifest next update: Sat 01 Feb 2025 16:00:21 +0000
Files and hashes: 1: EtuX617xzyrB71Hjc1hl3WMzRjI.roa (hash: QSVoTvnTqOuhcGfy2h2iEu7xdB5mNRvXSamlWm6WYuo=)
2: MBp32VcQqAbMoARjt7V1PCPscvg.roa (hash: pI5Os3fewlyJzy3/SsAFuRA7NUz4NSu4MCASZkD0XZY=)
3: qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl (hash: xeapyqjn4mh+nNg6Veth4uqgHmbZT7nRbdMM5vuNuSg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:7f:da:3d:0a:5b:82:25:ed:bb:5d:7e:f7:a3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Validity
Not Before: Jan 31 16:00:21 2025 GMT
Not After : Feb 1 16:00:21 2025 GMT
Subject: CN=dce752b59e6d52be781007c19f8d28145782b260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:69:04:2c:1e:65:55:0e:bb:2b:a6:2e:2e:dd:
80:d7:2c:a2:cf:bc:13:db:da:be:93:48:7b:14:4b:
cc:35:89:9d:aa:9c:8f:23:02:50:61:47:1b:81:d3:
89:ca:c8:ee:b7:51:92:97:0f:97:80:d3:ba:4e:b4:
4a:c3:80:25:69:10:b2:8b:c5:3d:6e:e2:0d:32:53:
cf:31:ce:4f:85:b7:82:23:a2:a0:67:44:6b:a9:8c:
10:8a:5c:18:88:80:52:df:e5:30:13:8e:c9:b2:36:
77:47:1d:e2:e6:b3:4c:83:dd:de:48:d5:a4:9f:c7:
14:b1:8c:42:6e:03:b3:c0:1c:28:87:f0:32:e4:44:
21:17:b5:c8:df:b8:ea:5e:ef:84:7d:ba:46:48:b4:
2b:20:77:8e:e1:7d:ef:d3:e7:b4:5a:98:f1:55:3c:
00:0c:60:5b:e7:59:51:c6:49:31:00:56:a8:74:4d:
14:fe:0b:fa:d3:76:fa:8a:16:03:29:df:b3:2a:99:
a1:d2:c6:6f:d4:b9:cb:bc:7c:02:c7:a2:66:2a:f2:
78:4e:d3:1d:96:4a:48:27:ad:bf:9e:e3:25:33:c0:
cb:03:d1:3e:65:7a:0e:72:b5:4c:59:61:15:a5:ed:
63:d4:ad:59:4f:8e:0f:a2:f6:28:fe:07:c9:d0:7f:
05:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E7:52:B5:9E:6D:52:BE:78:10:07:C1:9F:8D:28:14:57:82:B2:60
X509v3 Authority Key Identifier:
keyid:AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:89:de:15:92:29:bd:57:79:8f:2e:2f:91:ff:4d:ca:08:aa:
fb:7d:54:cc:e8:04:41:f6:fa:10:56:a0:ff:a9:d9:a2:b2:b5:
1b:f7:cf:49:48:0c:d6:4a:3b:e3:c7:11:3e:04:40:7b:7d:2d:
30:19:8c:78:c3:be:5a:ee:57:88:3e:f2:ef:05:8c:0e:1c:d8:
f5:a0:83:97:38:e7:79:7e:90:6a:24:0a:03:93:bb:b6:b7:56:
fa:80:95:77:6d:26:f7:b2:d3:cf:cb:ff:c9:83:de:0a:e0:2a:
dc:54:31:e5:02:8a:19:cd:28:53:bb:b1:27:06:fe:57:a0:41:
f1:35:c5:44:37:26:bc:74:59:12:a3:5d:db:ea:f4:e6:6c:00:
99:08:cc:08:31:c4:df:05:e8:4c:08:4c:ae:f7:b2:e3:16:95:
1d:a6:0b:75:a6:c1:43:8f:4c:b6:e5:4c:66:2d:a6:8f:4c:69:
cd:51:9b:ab:46:02:1a:5e:68:0d:25:3a:0c:52:07:e6:0e:46:
94:73:dd:cf:de:ee:7b:54:da:52:91:cb:d2:0c:66:c6:a2:f5:
f5:6b:f8:87:4f:59:aa:42:05:e2:89:ff:c9:b1:e5:fd:15:f3:
c2:e6:f0:d7:6e:d0:ee:81:25:62:2c:f5:f9:87:cc:fb:d6:58:
72:60:5b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:47 2025 by rpki-client