Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft
File: qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft (raw, json)
Hash identifier: 8ia78BExWT8aSjfhEgqNjgdiHBWlR47RbNqVp7k73jQ=
Subject key identifier: 81:E5:0C:47:1D:38:D3:FF:A6:D6:18:51:CF:43:2E:8E:2F:21:22:DB
Authority key identifier: AA:CA:4F:4A:73:7E:C0:9F:33:5A:C4:06:33:13:33:28:21:3E:FC:3D
Certificate issuer: /CN=aaca4f4a737ec09f335ac40633133328213efc3d
Certificate serial: 0194BBCDE294F3A75B87CE94494E225FE664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qspPSnN-wJ8zWsQGMxMzKCE-_D0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft
Manifest number: 0B3B
Signing time: Fri 31 Jan 2025 10:00:19 +0000
Manifest this update: Fri 31 Jan 2025 10:00:19 +0000
Manifest next update: Sat 01 Feb 2025 10:00:19 +0000
Files and hashes: 1: 3FxUxvyalEPW74QSSmy9O2QWzSA.roa (hash: K7i9DvkPZQGo1B9Tr53E+YnX3gzSBh7iAMkmSak9hOM=)
2: qspPSnN-wJ8zWsQGMxMzKCE-_D0.crl (hash: C/pHjf9nLCJL10LuIeRZfOd9+mSEogdstW5rHPHJtfU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e2:94:f3:a7:5b:87:ce:94:49:4e:22:5f:e6:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaca4f4a737ec09f335ac40633133328213efc3d
Validity
Not Before: Jan 31 10:00:19 2025 GMT
Not After : Feb 1 10:00:19 2025 GMT
Subject: CN=81e50c471d38d3ffa6d61851cf432e8e2f2122db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:28:97:12:5d:5a:78:05:09:81:59:46:46:94:
ed:74:0d:a6:73:bf:2a:b8:14:c4:10:13:43:35:b8:
ee:e2:14:9c:57:9c:05:e1:5a:db:65:51:73:7e:23:
25:12:c3:79:c4:cc:14:bf:8c:49:8a:99:44:f0:b7:
1c:7f:66:83:b8:c5:93:91:09:b8:70:dc:29:a8:94:
6b:64:6b:b7:87:3d:ef:ed:b8:f8:c7:d5:f4:fc:ec:
98:71:8d:4f:ed:f4:08:6e:d5:2c:1e:0b:ae:d7:1e:
8e:4b:4e:2e:23:c3:7e:95:00:db:9e:f5:32:be:ec:
ef:ab:2c:8a:0d:d4:ad:e3:78:27:c6:0c:0a:35:c2:
0e:d3:d1:06:7b:f1:e1:aa:53:19:3a:05:e4:7b:cb:
c6:a9:14:36:7a:5e:cc:fc:ff:f8:a5:01:81:f0:95:
eb:f1:c4:0e:b0:8c:33:11:5f:d7:87:21:44:85:c8:
b6:7f:08:95:63:52:8c:64:4f:24:60:30:c6:0f:36:
2b:3b:35:17:5e:9b:f3:64:20:b7:c6:e3:80:c2:01:
c8:84:31:b6:4e:59:21:3c:bd:40:82:b3:9b:36:14:
17:f6:82:40:a1:a3:cb:e4:cd:ae:ea:d4:9c:0a:79:
21:bb:c8:c3:6a:e8:2d:cc:38:96:4a:53:78:51:86:
2b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E5:0C:47:1D:38:D3:FF:A6:D6:18:51:CF:43:2E:8E:2F:21:22:DB
X509v3 Authority Key Identifier:
keyid:AA:CA:4F:4A:73:7E:C0:9F:33:5A:C4:06:33:13:33:28:21:3E:FC:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qspPSnN-wJ8zWsQGMxMzKCE-_D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c5:34:77:54:5e:a8:d1:4b:0c:0e:9f:83:75:31:e5:a4:bf:
13:86:f4:49:4f:ac:2f:2b:c1:39:38:ad:6e:9f:3d:2f:68:2f:
e6:5e:da:af:4a:26:9d:84:df:45:56:49:77:f6:54:35:12:99:
5b:d0:90:06:83:e1:78:5b:c6:7d:09:7f:0e:6b:3c:ab:1a:1c:
61:0c:ef:bf:8e:30:b1:cc:b5:c1:83:23:57:f0:6d:2e:f6:0f:
66:93:c3:a6:ec:7f:24:e8:d5:c7:08:b9:53:d7:c5:3e:b8:af:
4e:4a:ec:1a:94:b7:f2:05:6a:e1:56:7d:0e:95:78:47:12:e6:
3a:b8:1c:50:7e:5a:39:26:b0:b9:1c:64:3d:05:c6:38:bc:ae:
05:84:99:7a:2a:f8:09:d7:dd:9b:51:0d:e0:0c:ff:89:03:09:
46:a4:84:66:e7:c0:fe:e5:64:46:73:94:15:d6:56:b4:b7:59:
bb:37:12:4b:cf:a0:6a:ae:94:e0:bb:69:50:ca:86:69:6d:fe:
f6:4c:49:13:1f:52:78:29:b5:2b:54:bc:29:22:e0:c9:84:3a:
78:8f:9c:df:3b:d9:8b:37:6d:af:6c:f1:87:15:3a:8f:5f:8e:
8c:6f:ba:22:a8:fd:38:21:8d:71:87:45:8b:15:3c:f5:bb:fc:
a2:45:69:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:09:51 2025 by rpki-client