Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
File: qqxhl3mf1otuW74LV-ZS_YDdNiE.mft (raw, json)
Hash identifier: ThUpW93Bjo7uVgV/9o+V9JLVJf5Ur9ujlGKGKCV5gLg=
Subject key identifier: 77:93:C5:44:00:79:23:35:04:06:09:21:50:FD:8D:CF:72:FF:67:C5
Authority key identifier: AA:AC:61:97:79:9F:D6:8B:6E:5B:BE:0B:57:E6:52:FD:80:DD:36:21
Certificate issuer: /CN=aaac6197799fd68b6e5bbe0b57e652fd80dd3621
Certificate serial: 0194BD85452B63EE7E55F1BB54CC9AD7995B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
Manifest number: 18
Signing time: Fri 31 Jan 2025 18:00:15 +0000
Manifest this update: Fri 31 Jan 2025 18:00:15 +0000
Manifest next update: Sat 01 Feb 2025 18:00:15 +0000
Files and hashes: 1: HW--gyFyIjJfbbNnSxJATPWJGEI.roa (hash: shKJNjvcZlh2Drp2JswFM6L89Fwml75F7pDB0H15/3Q=)
2: qqxhl3mf1otuW74LV-ZS_YDdNiE.crl (hash: CZ3v3+OwcquczWwH3+mWZKXr+zDwry180BJsSWHhW+c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:45:2b:63:ee:7e:55:f1:bb:54:cc:9a:d7:99:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaac6197799fd68b6e5bbe0b57e652fd80dd3621
Validity
Not Before: Jan 31 18:00:15 2025 GMT
Not After : Feb 1 18:00:15 2025 GMT
Subject: CN=7793c544007923350406092150fd8dcf72ff67c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4a:e4:19:17:27:0c:42:df:bc:8e:52:1e:3d:
03:3f:3a:f5:b1:44:f0:d3:bf:23:a5:db:c9:b3:72:
fc:1e:e4:ce:1e:d7:4c:70:d1:16:41:fa:6a:f3:1b:
06:af:ac:ec:cd:91:ad:6c:58:4d:fc:6e:36:d7:d8:
ab:b3:ec:e8:bc:4a:87:5c:73:d2:9b:1f:ae:bd:e2:
d5:b8:47:a4:9b:d4:7b:f3:72:c2:85:23:f9:fa:e2:
45:21:b0:88:80:ea:42:99:57:85:d2:58:de:53:f1:
74:67:b5:cf:ca:56:99:67:c8:66:7e:a3:56:df:35:
be:13:7e:4f:a3:20:6c:b0:47:9b:10:4d:55:af:25:
76:bd:0c:d2:6b:d0:55:bf:09:a7:a8:28:78:99:4a:
e0:52:af:ac:a3:27:c0:7a:8c:e3:24:ab:f1:bc:f9:
9b:ca:10:10:45:77:c5:78:b2:0a:9b:fc:9b:3a:c3:
f3:55:07:4e:f4:30:cf:c4:c3:c3:13:7d:87:32:73:
53:dd:84:70:7f:cd:84:20:8d:a4:a3:1a:84:ec:1b:
a2:4d:12:e0:19:d0:8a:81:07:94:72:e4:ea:83:63:
fc:86:57:2d:a9:d8:b8:7e:c9:92:5e:d4:11:2f:1b:
e0:86:8e:ca:4c:f7:52:e1:48:0b:73:3f:53:72:49:
8f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:93:C5:44:00:79:23:35:04:06:09:21:50:FD:8D:CF:72:FF:67:C5
X509v3 Authority Key Identifier:
keyid:AA:AC:61:97:79:9F:D6:8B:6E:5B:BE:0B:57:E6:52:FD:80:DD:36:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:4c:11:77:38:a4:27:b5:0d:10:2d:ca:d3:fc:a9:21:c0:fd:
36:2b:64:1b:15:f2:39:7c:39:47:c0:11:cb:f3:d2:91:50:9f:
b6:93:25:98:2b:51:bc:7b:51:af:fb:7f:ed:fb:83:f9:d2:09:
ee:f2:28:ef:2f:84:48:78:9f:91:86:8f:1d:6d:7f:f9:8a:b3:
86:3f:08:0e:51:6c:d5:bf:74:19:9e:c7:9f:e6:14:dc:f0:9c:
e7:a0:c7:ea:43:75:2a:9a:86:d7:50:b2:86:1f:c9:5d:2d:6d:
0c:5f:55:0f:09:99:02:1f:b5:4b:70:e6:4c:17:89:8f:76:03:
d0:6d:9a:c9:62:95:ab:1e:3b:0a:e3:3f:54:e8:7b:c7:68:8e:
0e:8c:64:1a:ea:b5:21:d5:5a:78:d1:4d:4e:7f:90:13:46:ed:
79:f2:09:02:86:80:55:ab:c9:ae:4f:cf:a9:79:57:e4:04:f4:
a3:86:9b:4d:7b:d4:38:a0:3e:39:ac:c3:a2:d1:7f:eb:1c:c4:
e0:38:16:d6:b1:3d:e0:0e:fa:4c:47:bb:c1:98:85:b0:3b:db:
f8:b3:e9:27:96:3d:0b:5a:96:79:57:0c:7c:d4:09:11:8c:5c:
f2:98:70:50:35:0d:14:1e:e1:01:96:d0:bf:7c:5b:fe:52:40:
29:a2:c9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:49 2025 by rpki-client