Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
File: qlfg60pFBqGasu_5iaZ9VZuYzBo.mft (raw, json)
Hash identifier: oPRO4TXpR09vwtsCiZ31t8jPe8OG7TFRSgfy63ITXww=
Subject key identifier: 50:96:D3:8F:A9:35:9D:0F:F1:09:ED:14:A6:99:57:D5:2B:80:24:CD
Authority key identifier: AA:57:E0:EB:4A:45:06:A1:9A:B2:EF:F9:89:A6:7D:55:9B:98:CC:1A
Certificate issuer: /CN=aa57e0eb4a4506a19ab2eff989a67d559b98cc1a
Certificate serial: 0194BD858F49664C7DB68C2285097DACC0D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 18:00:34 +0000
Manifest this update: Fri 31 Jan 2025 18:00:34 +0000
Manifest next update: Sat 01 Feb 2025 18:00:34 +0000
Files and hashes: 1: qlMDWlG-JNx16-NWJFTyN9idn8E.roa (hash: E945kOZUUQnkihDV8A7yVqNkz5KAfzQzs4QO1zB4q98=)
2: qlfg60pFBqGasu_5iaZ9VZuYzBo.crl (hash: Rm35RdtoQ9uM5Cn12vWyZ/fb/kHBOBaxW0He4sXKZms=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8f:49:66:4c:7d:b6:8c:22:85:09:7d:ac:c0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa57e0eb4a4506a19ab2eff989a67d559b98cc1a
Validity
Not Before: Jan 31 18:00:34 2025 GMT
Not After : Feb 1 18:00:34 2025 GMT
Subject: CN=5096d38fa9359d0ff109ed14a69957d52b8024cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1d:e9:91:45:71:22:4f:9f:1a:2d:f1:2a:a0:
52:1c:b0:83:b3:15:da:f9:7e:72:9d:0c:7a:77:6a:
a2:2d:55:4a:16:fb:a3:b2:88:f6:b0:0f:e1:94:d4:
4c:fa:7a:a6:59:6a:df:f9:96:31:80:54:f4:d7:56:
95:88:f8:89:3e:3d:10:39:2a:60:2d:fe:7c:81:6d:
59:32:b5:d7:0a:6c:8c:74:39:25:f4:c4:d7:39:5c:
81:b7:0b:74:36:00:56:08:4f:5f:19:a4:e6:af:a6:
38:ec:f1:cc:73:1f:59:4d:42:85:79:eb:fa:86:14:
a3:78:be:12:a3:dc:e6:65:25:90:44:16:a2:a3:81:
d9:3d:3e:02:8f:c8:f3:f4:6f:b0:44:ea:95:15:d8:
d6:c4:ab:e9:e1:71:f1:f1:54:d1:65:2a:4f:c1:a1:
c5:e5:c7:7a:6d:66:37:4f:a7:26:1d:77:ee:dc:aa:
4d:2c:a0:a8:86:ac:f2:d7:0f:7e:ad:05:37:2e:68:
f9:95:ed:54:ce:55:60:21:26:c0:11:14:d5:a1:d5:
74:12:ce:4e:c8:d4:06:0a:72:d9:0e:3b:43:ec:7a:
0e:3d:3e:25:06:5a:96:ac:4f:bf:dc:b5:ad:25:bd:
46:63:6a:c1:7d:ad:f2:18:10:b5:c5:82:c4:33:e1:
a0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:96:D3:8F:A9:35:9D:0F:F1:09:ED:14:A6:99:57:D5:2B:80:24:CD
X509v3 Authority Key Identifier:
keyid:AA:57:E0:EB:4A:45:06:A1:9A:B2:EF:F9:89:A6:7D:55:9B:98:CC:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:2e:5e:d9:ee:ee:a5:43:24:45:3a:8c:1d:e2:84:6a:5c:33:
37:03:c8:7f:b5:af:a2:0b:77:49:26:19:ab:d7:3d:69:dd:d8:
01:16:e8:93:e7:47:b5:9e:d9:a8:31:bd:f7:91:1e:5e:84:df:
d8:32:a9:f1:d6:32:aa:e7:2a:11:3a:7c:a2:cb:25:cc:22:71:
15:72:c0:ef:19:e3:dd:b3:2a:7c:3b:c1:1b:96:78:d4:1c:e5:
d2:23:d9:ae:a5:ca:8f:b7:8f:9f:52:7f:51:44:86:21:af:12:
b2:4c:0c:47:1e:d3:d3:c6:d9:fd:63:3b:da:3b:29:f2:87:c6:
7d:a2:65:78:b1:64:ed:49:18:4b:bb:ce:d1:8f:7d:08:19:27:
35:a7:d1:63:35:6d:80:01:8e:87:de:fa:0a:aa:93:97:ad:5e:
b1:81:68:a5:04:c6:94:bf:8a:d3:ac:a9:04:0f:af:44:2c:7a:
9c:a7:3f:53:1e:7d:40:7d:c1:dc:13:0c:17:f4:63:24:43:01:
27:36:51:ea:6b:95:c3:51:11:9c:ea:ec:4a:12:3d:95:7b:43:
d5:0b:29:c3:2f:92:81:8e:ce:27:cd:9c:ef:98:0d:5c:e2:10:
cd:e6:74:1d:60:b9:7f:9f:4d:0c:95:92:19:3f:a9:e8:ad:52:
f3:f9:65:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:54:07 2025 by rpki-client