Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft
File: qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft (raw, json)
Hash identifier: IaCjNQnH3ftFU5qPbyeaQJBc0Ok9Wvs4/40MXw0C30g=
Subject key identifier: E7:4E:65:F9:74:DB:45:71:66:06:02:49:14:E9:85:C2:A1:8C:66:D6
Authority key identifier: AA:4D:72:EC:DC:15:37:8B:E7:17:BB:4C:A0:97:10:70:D5:76:49:A3
Certificate issuer: /CN=aa4d72ecdc15378be717bb4ca0971070d57649a3
Certificate serial: 0194BC3C6E137CC762070F1CF561F77FDFC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qk1y7NwVN4vnF7tMoJcQcNV2SaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft
Manifest number: 02E3
Signing time: Fri 31 Jan 2025 12:01:04 +0000
Manifest this update: Fri 31 Jan 2025 12:01:04 +0000
Manifest next update: Sat 01 Feb 2025 12:01:04 +0000
Files and hashes: 1: dr0aQwlMd5wprYGuM-4A6wgZRyk.roa (hash: 5kfUYUIepAA22bF94//hZe6cokijIGlywb6OIAlIy1Y=)
2: qk1y7NwVN4vnF7tMoJcQcNV2SaM.crl (hash: gnB05LD6bbQK2v6q6YncorcQD+Z3y6l/VpuNafRBw5o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:6e:13:7c:c7:62:07:0f:1c:f5:61:f7:7f:df:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa4d72ecdc15378be717bb4ca0971070d57649a3
Validity
Not Before: Jan 31 12:01:04 2025 GMT
Not After : Feb 1 12:01:04 2025 GMT
Subject: CN=e74e65f974db45716606024914e985c2a18c66d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3f:00:31:66:60:c4:b8:bd:36:d3:3f:f0:b1:
d5:61:91:51:25:03:7b:36:61:7a:71:37:5b:3b:e7:
ef:2b:25:44:be:93:15:a5:0e:9d:c8:b6:23:40:23:
29:f4:b2:34:66:71:b0:72:a7:fe:82:60:ce:dd:54:
c5:13:73:f4:3a:a1:82:13:6c:26:b1:65:ea:21:24:
a8:61:17:c4:b2:d1:75:37:e4:b6:94:5b:db:9d:9c:
17:e7:5d:3e:f6:f9:98:c0:75:4e:4c:90:d5:b6:46:
0d:58:84:fe:41:5a:c0:36:25:65:29:96:e3:1f:2b:
3f:85:0b:e9:1b:5a:19:7e:ea:d5:7c:8f:85:57:c0:
b9:75:ef:8f:13:fa:c4:aa:1f:f8:be:15:e3:23:13:
44:46:9a:e8:77:d3:09:a4:5d:8d:61:77:15:93:c7:
58:f7:67:cd:18:80:f5:4a:34:cc:98:ce:e3:d4:18:
29:6d:f4:97:f1:c3:23:5c:46:ea:e8:61:f3:1d:79:
f2:3d:65:5f:63:25:99:bb:6c:68:cf:ff:04:36:1c:
6a:71:c3:5c:c4:27:79:9c:13:38:2f:2b:53:6d:34:
d1:d3:11:7d:ae:86:58:b1:73:a8:39:ef:5e:0b:55:
8e:9e:8d:08:7c:70:10:ad:18:f4:ab:95:66:93:dc:
4a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:4E:65:F9:74:DB:45:71:66:06:02:49:14:E9:85:C2:A1:8C:66:D6
X509v3 Authority Key Identifier:
keyid:AA:4D:72:EC:DC:15:37:8B:E7:17:BB:4C:A0:97:10:70:D5:76:49:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qk1y7NwVN4vnF7tMoJcQcNV2SaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/507a57-4a62-4b95-b1a3-b4057621bba6/1/qk1y7NwVN4vnF7tMoJcQcNV2SaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:35:6c:85:d5:b9:86:86:15:2e:7d:40:40:09:df:ff:ae:10:
5a:da:06:cb:05:5e:ae:2d:4b:f2:34:10:34:90:d2:cc:d4:14:
8e:50:93:89:75:9f:b8:b4:38:67:00:54:e4:38:0c:3f:49:fb:
df:99:57:d9:37:97:08:93:20:e4:72:57:ee:fa:54:e0:57:2b:
01:25:68:bd:05:68:75:25:bf:33:64:b7:80:69:99:d5:a5:65:
6f:41:fd:4a:7e:4d:b6:7a:b0:1a:43:85:8f:ab:0f:2c:f3:af:
17:82:e3:d0:28:df:42:1d:9a:a7:59:7a:33:37:b3:6c:d4:28:
f1:e0:1d:53:1b:92:ce:14:25:9e:c8:61:81:0f:46:d5:28:2d:
9b:19:42:83:26:c4:9f:07:b5:68:a2:42:a5:70:0a:cb:3e:91:
cc:af:b5:53:22:6c:00:f1:32:05:e1:eb:e3:3e:2b:db:29:0f:
21:fc:5f:15:f4:ef:9c:0a:fb:b9:eb:aa:6c:8a:a5:77:65:6d:
7c:0a:81:9b:0b:d4:3e:ee:cf:d2:5b:ac:af:27:ac:3e:a8:6d:
97:aa:b8:fd:23:1f:1f:a3:20:16:2e:af:88:a0:cf:0b:67:c0:
94:81:fb:7e:75:5f:3a:23:49:96:7e:82:22:42:e1:7c:3f:c4:
02:2b:bb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:52:59 2025 by rpki-client