Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
File: qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft (raw, json)
Hash identifier: AWLO26HlxQsFcb/KuvnToOiZPfETEj4RE9WBnUQ4thE=
Subject key identifier: BF:C9:68:4C:7F:AB:E6:9F:DD:E6:66:B2:D1:18:EC:65:67:63:F8:72
Authority key identifier: AA:A5:34:64:A8:10:AA:38:C9:36:D9:D9:8B:6A:2D:13:2F:CB:FF:58
Certificate issuer: /CN=aaa53464a810aa38c936d9d98b6a2d132fcbff58
Certificate serial: 0194BBCE895D67F7DD2D9025DCE8917BA14F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:01:02 +0000
Manifest this update: Fri 31 Jan 2025 10:01:02 +0000
Manifest next update: Sat 01 Feb 2025 10:01:02 +0000
Files and hashes: 1: nEGj30N7Wbasb6AnvF-74ldwKOw.roa (hash: 4FClR6vcMY2SCJnOebSa9NEF0JcRgbJiRCF7Wp1Q7zQ=)
2: qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl (hash: 1hmFz0TVtmHov6JJ4HYkrGSZTlVt+mTlaoaYQf0ovtw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:89:5d:67:f7:dd:2d:90:25:dc:e8:91:7b:a1:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaa53464a810aa38c936d9d98b6a2d132fcbff58
Validity
Not Before: Jan 31 10:01:02 2025 GMT
Not After : Feb 1 10:01:02 2025 GMT
Subject: CN=bfc9684c7fabe69fdde666b2d118ec656763f872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f5:20:7e:85:3d:30:81:02:2b:20:dc:4a:17:
d5:cb:05:bc:29:7e:30:41:22:6e:60:7d:96:c1:93:
5e:92:b4:e3:9f:21:01:ad:b5:74:85:d7:a7:91:57:
cc:b7:59:af:a0:a0:48:29:b2:26:f2:94:74:4f:ad:
d0:1c:3f:08:b0:11:56:98:52:1c:0c:ea:e6:d7:d6:
a2:dc:35:8e:71:24:8c:51:d9:9b:e0:88:42:38:db:
19:44:f1:48:1b:65:55:8e:a7:d5:77:2f:28:76:85:
87:a4:15:b5:70:e7:01:1f:74:41:bb:88:df:16:1c:
41:40:e1:1c:fa:3e:b2:ba:5c:26:20:c2:4a:3f:a8:
a9:7d:3e:43:4f:66:cf:3d:92:c2:95:a3:5b:97:20:
45:97:0b:df:0e:69:58:00:1e:ef:5d:b1:54:d5:e8:
89:fb:42:7c:01:41:1a:09:b5:e4:cc:2d:f3:2b:27:
6e:61:01:be:09:3a:5d:8e:c3:62:3d:1a:2c:f0:79:
a0:a7:ef:23:6e:d0:95:7e:e3:0e:2c:a2:b8:c8:8d:
01:5c:f1:86:18:80:13:eb:8f:0a:e7:e0:9b:2d:84:
17:2a:35:7c:32:3a:b7:2b:53:2f:06:9b:7d:17:92:
6b:10:fb:bf:57:b8:94:b0:51:ff:2a:00:bc:d9:de:
d3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C9:68:4C:7F:AB:E6:9F:DD:E6:66:B2:D1:18:EC:65:67:63:F8:72
X509v3 Authority Key Identifier:
keyid:AA:A5:34:64:A8:10:AA:38:C9:36:D9:D9:8B:6A:2D:13:2F:CB:FF:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:81:92:1a:f4:ad:dd:2e:ed:7d:8e:f0:40:a3:6a:25:e9:a0:
f1:bd:8a:dc:28:f7:8b:3f:24:13:a0:68:1a:84:b4:bf:be:e4:
2d:75:a0:d1:d1:e0:59:ad:d7:fa:78:0a:c1:9c:5e:12:eb:ad:
34:35:60:8b:92:a1:07:88:ba:6c:f4:ba:d8:0c:87:4f:76:34:
37:c1:6d:5c:a7:b1:1b:23:a2:ca:6c:c0:02:83:74:5f:cb:fe:
54:32:d5:bd:24:d1:24:b6:9a:ed:41:02:7a:33:01:fd:2d:07:
cb:22:66:d1:d9:81:95:ee:74:95:4e:89:be:90:3e:54:cb:77:
79:eb:c0:68:63:f2:9d:d8:47:0f:07:5b:c4:0a:59:d9:61:c5:
c6:d5:4b:cb:19:ad:e0:7c:b4:dd:77:87:d5:1f:79:7d:52:19:
0b:37:60:f5:0d:69:fe:03:bf:8a:bb:68:be:59:7a:e0:92:52:
3e:09:55:3e:27:2e:92:b1:72:6a:19:a7:15:c8:2f:ad:8a:40:
24:92:77:5d:ca:c3:3d:d1:97:5b:a6:cb:4b:17:4a:78:fc:a4:
26:34:bb:15:a1:a6:26:b5:bf:9d:5c:77:9f:83:48:9b:41:a4:
07:d8:60:59:68:74:68:62:10:ca:eb:66:19:ac:7f:97:24:de:
ad:bc:36:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:13 2025 by rpki-client