Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/dba306-9199-4b75-a2c3-4f6af0883979/1/qoxALCO4BeCVMBFbvkREAg9PIDQ.mft
File: qoxALCO4BeCVMBFbvkREAg9PIDQ.mft (raw, json)
Hash identifier: i9lyUwvyR3T0NV5YmZ8nVjEfP5ckqSD2FkUBsfsGWhA=
Subject key identifier: AB:C6:D9:15:CD:90:6C:DF:07:C9:2F:1B:06:01:77:EB:E4:6A:48:F4
Authority key identifier: AA:8C:40:2C:23:B8:05:E0:95:30:11:5B:BE:44:44:02:0F:4F:20:34
Certificate issuer: /CN=aa8c402c23b805e09530115bbe4444020f4f2034
Certificate serial: 0194BBCE3BA7554EBF25A74CAAE77B893913
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoxALCO4BeCVMBFbvkREAg9PIDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/dba306-9199-4b75-a2c3-4f6af0883979/1/qoxALCO4BeCVMBFbvkREAg9PIDQ.mft
Manifest number: 0528
Signing time: Fri 31 Jan 2025 10:00:42 +0000
Manifest this update: Fri 31 Jan 2025 10:00:42 +0000
Manifest next update: Sat 01 Feb 2025 10:00:42 +0000
Files and hashes: 1: qoxALCO4BeCVMBFbvkREAg9PIDQ.crl (hash: 1vI3K979UrCdMkcAe3O9SIfGQ+SFCwPelBIsCjIl0QM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:3b:a7:55:4e:bf:25:a7:4c:aa:e7:7b:89:39:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8c402c23b805e09530115bbe4444020f4f2034
Validity
Not Before: Jan 31 10:00:42 2025 GMT
Not After : Feb 1 10:00:42 2025 GMT
Subject: CN=abc6d915cd906cdf07c92f1b060177ebe46a48f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5b:d4:f4:33:44:fb:b9:03:bf:fa:03:d2:3d:
95:e7:92:97:aa:0d:80:ab:6a:f9:dd:82:2a:03:fa:
65:5e:6a:eb:12:35:a3:7a:3f:25:31:cb:54:96:fc:
34:96:cb:2f:1c:0e:d9:4e:4b:52:ff:c6:ae:62:27:
50:8e:51:f8:9c:9d:73:56:34:ed:4f:33:c9:99:b4:
9a:07:b4:ca:bc:02:3a:6d:45:9e:91:10:50:6f:e9:
da:1d:b1:8b:d4:6f:ca:9b:66:b7:91:2e:98:6b:58:
df:22:42:a9:d9:f9:35:3f:c7:d5:8f:24:fe:1c:9c:
0e:bf:5b:34:c7:33:b5:e9:81:0f:c4:89:52:a4:ed:
95:de:c5:34:ed:81:c4:39:8b:75:b3:0c:2d:b3:aa:
82:26:cd:bf:28:c6:fb:75:d4:83:85:ab:3a:5f:a7:
10:11:62:1a:26:7d:85:b5:c4:08:29:e5:0f:7e:89:
7b:9f:6f:49:4f:e3:3b:08:38:fb:24:5a:f4:4d:97:
6b:f1:33:c9:5b:84:94:ba:e8:39:e7:c2:cc:c1:fb:
58:09:26:60:bb:4b:17:25:bd:4a:d6:c4:59:2f:55:
51:fb:43:af:5d:ac:db:9a:fc:ea:c3:0e:c0:87:2e:
ed:c8:3a:f9:db:4b:1b:e1:bd:69:ea:6e:1e:7f:a1:
18:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C6:D9:15:CD:90:6C:DF:07:C9:2F:1B:06:01:77:EB:E4:6A:48:F4
X509v3 Authority Key Identifier:
keyid:AA:8C:40:2C:23:B8:05:E0:95:30:11:5B:BE:44:44:02:0F:4F:20:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoxALCO4BeCVMBFbvkREAg9PIDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/dba306-9199-4b75-a2c3-4f6af0883979/1/qoxALCO4BeCVMBFbvkREAg9PIDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/dba306-9199-4b75-a2c3-4f6af0883979/1/qoxALCO4BeCVMBFbvkREAg9PIDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3c:bb:6d:02:2d:9f:5c:19:72:26:27:1d:1a:f5:23:6b:23:
81:89:b0:f1:ec:e3:72:5c:d3:d3:80:95:b3:72:98:ba:49:cd:
bf:9d:5f:c8:75:6f:68:26:85:88:6b:91:c8:c4:44:ad:7c:23:
d5:06:b4:6e:9a:a2:20:5c:57:66:b7:15:e5:53:65:95:fb:49:
c5:f3:e4:23:15:b7:21:8b:48:c9:8d:34:9f:0e:67:89:dd:e8:
2d:cb:8a:d1:b2:00:cf:2a:e2:77:b4:d3:be:dc:82:be:fe:15:
9d:af:11:65:72:eb:8c:b3:f8:4b:43:45:01:f3:a6:c5:b8:0a:
66:3d:20:e9:12:56:78:ca:b0:5c:b6:58:e5:d6:16:52:fb:ed:
8e:db:a2:b7:9e:11:4c:c4:b3:9e:11:cb:b2:a8:04:13:5c:f9:
b4:e9:31:cb:dd:fa:63:03:e4:05:d9:81:1a:6e:1e:29:35:6f:
e8:a9:fe:f5:d1:9b:da:19:58:d4:a3:39:f1:03:4f:7f:a3:27:
87:9c:de:0d:82:87:dd:23:12:81:da:01:1f:94:3d:75:dc:1e:
01:32:c2:d1:1c:d1:46:01:1d:2d:ad:de:b0:49:94:e1:5c:47:
a8:e5:c8:c5:b7:12:82:a1:96:d1:09:a5:32:44:f2:fe:56:3b:
4e:a8:9f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:17 2025 by rpki-client