Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft
File: qqMUWS716ou-hNBkslYXH-KvyD4.mft (raw, json)
Hash identifier: QJ2/behvnJkm8QPBhtkTUZklftQP3cH4YEKAmROpMLo=
Subject key identifier: 55:72:13:81:A3:BC:FA:2D:D7:EB:C8:C9:A0:FC:AA:39:BE:22:DA:49
Authority key identifier: AA:A3:14:59:2E:F5:EA:8B:BE:84:D0:64:B2:56:17:1F:E2:AF:C8:3E
Certificate issuer: /CN=aaa314592ef5ea8bbe84d064b256171fe2afc83e
Certificate serial: 0194BC3C53483B5814CFE5719BDFEB5B94A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqMUWS716ou-hNBkslYXH-KvyD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft
Manifest number: 08AC
Signing time: Fri 31 Jan 2025 12:00:57 +0000
Manifest this update: Fri 31 Jan 2025 12:00:57 +0000
Manifest next update: Sat 01 Feb 2025 12:00:57 +0000
Files and hashes: 1: qqMUWS716ou-hNBkslYXH-KvyD4.crl (hash: Wqc83LfgcdWZR5u8YWz1FepS6D3v2NftnLWO9Jmn/0k=)
2: svg34J6rFMVB3i_8SEjkmyJCwjg.roa (hash: sxr7df0i+WFpR1Zcb5aW78WjZKAtxDkC7tuYAw5Z5pw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:53:48:3b:58:14:cf:e5:71:9b:df:eb:5b:94:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaa314592ef5ea8bbe84d064b256171fe2afc83e
Validity
Not Before: Jan 31 12:00:57 2025 GMT
Not After : Feb 1 12:00:57 2025 GMT
Subject: CN=55721381a3bcfa2dd7ebc8c9a0fcaa39be22da49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:61:e7:4f:24:5b:1e:e7:90:f6:a9:c9:1b:de:
45:fb:09:f1:25:e6:85:db:c2:41:0a:00:31:55:0a:
e0:b2:7f:40:47:ed:b0:77:e5:71:fc:8b:28:c0:aa:
a0:a6:3e:01:aa:7b:35:ed:08:86:c7:2a:44:64:3b:
31:72:61:d6:be:8d:7e:3b:96:83:46:f3:bf:cf:39:
dc:30:c5:d6:18:52:8c:73:15:b3:87:74:c6:e3:a3:
48:9d:57:c8:4e:3c:9a:da:dd:e4:8f:b5:fe:16:b6:
2c:cb:c9:d6:aa:70:bf:82:ca:86:83:1d:5c:06:a5:
0c:20:55:93:c4:88:e5:84:13:72:13:d1:51:13:99:
2f:07:9d:52:91:4a:6d:b3:08:9e:36:c7:54:ae:d7:
53:93:94:5e:6d:89:f1:8b:1b:fe:85:c5:33:12:a5:
73:18:37:51:66:68:7c:38:65:94:5c:8f:93:4a:9f:
fe:87:7d:26:52:44:a1:c4:25:2e:40:38:cb:ce:4d:
ac:38:11:3d:9d:5b:45:f7:26:3a:a0:85:c3:4d:3e:
bb:d5:1f:ce:e3:14:50:34:04:86:75:1a:21:1e:44:
58:47:9b:38:7e:cc:2e:74:10:c6:fc:16:4d:de:8b:
89:81:6d:10:bb:34:58:3f:10:29:90:b7:d4:b7:5a:
4d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:72:13:81:A3:BC:FA:2D:D7:EB:C8:C9:A0:FC:AA:39:BE:22:DA:49
X509v3 Authority Key Identifier:
keyid:AA:A3:14:59:2E:F5:EA:8B:BE:84:D0:64:B2:56:17:1F:E2:AF:C8:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqMUWS716ou-hNBkslYXH-KvyD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7e8c17-e201-4ff4-8366-f0df23898f64/1/qqMUWS716ou-hNBkslYXH-KvyD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b9:02:e6:97:fb:e0:17:cf:a0:2b:f8:04:14:50:fb:d4:7d:
7f:7d:65:64:ae:68:24:9d:54:75:5f:bb:7b:57:19:7d:4e:55:
84:07:64:64:43:0b:f6:54:1d:0d:69:e7:0c:f1:78:e9:04:1a:
77:46:87:90:ae:19:cb:5b:89:39:f4:f5:79:f3:09:49:cc:37:
62:b4:47:0b:9f:4a:d9:02:86:da:0a:10:78:ea:64:44:c1:72:
f0:00:2e:70:93:c1:53:44:17:d5:94:44:6a:c5:a7:55:31:65:
5c:0a:9d:a4:69:c7:78:de:0e:6f:ac:5d:93:1b:b3:3a:65:76:
64:57:46:d3:ab:d1:cd:76:65:b2:e2:ae:6b:e0:42:ea:fd:fb:
4f:1a:d6:5d:b1:e0:79:dd:22:24:db:e5:2a:64:d8:cd:32:07:
22:8a:52:72:6f:e9:b2:81:f3:33:f5:40:d3:12:68:17:f0:3b:
a6:e7:95:b4:63:fe:7c:1c:83:12:9c:89:2f:f3:5d:34:5e:ce:
a6:aa:70:9e:57:31:3f:16:26:15:6a:d8:eb:c5:31:1c:bb:3b:
4c:0f:3c:45:d0:06:30:e4:19:74:3b:d6:3b:9d:95:bd:f3:63:
da:d6:42:d2:95:82:81:af:7c:3a:64:6e:f9:10:3f:c5:3b:59:
b9:74:bc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:36:19 2025 by rpki-client