Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft
File: QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft (raw, json)
Hash identifier: nWEvAjgBxmpywvOE9HVtu4OTJ2PP4IXpvNNkhVnd3bQ=
Subject key identifier: 8A:93:AA:82:06:F4:BF:96:0A:CA:C4:11:04:66:24:18:12:22:8E:93
Authority key identifier: 41:03:29:20:68:EA:3F:B8:5B:C5:89:53:79:E2:0E:DB:D0:BC:65:06
Certificate issuer: /CN=4103292068ea3fb85bc5895379e20edbd0bc6506
Certificate serial: 0194BD4EA156A8B4004EA9BB25D4153BE3B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQMpIGjqP7hbxYlTeeIO29C8ZQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft
Manifest number: 10D7
Signing time: Fri 31 Jan 2025 17:00:34 +0000
Manifest this update: Fri 31 Jan 2025 17:00:34 +0000
Manifest next update: Sat 01 Feb 2025 17:00:34 +0000
Files and hashes: 1: QQMpIGjqP7hbxYlTeeIO29C8ZQY.crl (hash: lzUUyetndekb3aHSL5AyLCyUM2K73A60Vfeu/HeWzmI=)
2: ukNphFAe4cX3Zc-R26t80LykhN4.roa (hash: xXUTisVftHwOaoab4KLxi4q4wlsyXqJydXF1SwvOD0g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a1:56:a8:b4:00:4e:a9:bb:25:d4:15:3b:e3:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4103292068ea3fb85bc5895379e20edbd0bc6506
Validity
Not Before: Jan 31 17:00:34 2025 GMT
Not After : Feb 1 17:00:34 2025 GMT
Subject: CN=8a93aa8206f4bf960acac4110466241812228e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c9:5e:4d:16:c1:27:6a:f4:82:01:e4:96:ad:
6f:01:be:31:04:b7:8c:e3:f3:a4:06:f7:c9:4c:56:
4c:0e:7e:98:de:a4:c9:93:4b:c6:ac:99:c4:b4:f5:
e1:53:bd:0c:34:cf:c8:fe:b7:89:31:77:79:7d:cc:
b5:ea:8d:13:3e:42:2a:ef:69:81:b8:67:f3:15:06:
fa:ff:f3:d2:d5:da:d3:c5:5e:f8:1f:10:80:af:62:
8f:f3:3c:ac:17:61:53:20:15:f1:04:bd:3d:0a:c8:
ca:94:5a:c5:dd:9e:38:d3:69:8c:07:e5:92:a4:38:
74:2a:a2:2f:31:b8:68:63:fa:05:eb:8d:20:cc:b6:
fb:d3:a9:49:87:bc:45:5e:a0:26:37:d7:8e:3e:f3:
b6:48:c5:b4:f7:12:e5:5a:e4:08:8f:a2:a8:05:19:
8c:25:e4:e5:0f:c4:2b:6f:56:a7:c7:cf:3b:dd:5b:
e6:ba:3a:61:27:14:97:d0:fc:66:38:64:1b:2a:87:
a7:0f:06:53:51:45:8c:c9:f3:53:ef:3e:e7:43:ef:
c5:f1:1b:e9:c3:67:d3:ba:8f:e8:98:98:b6:69:5f:
fa:6a:c6:9b:51:76:d3:b0:8c:69:e7:4c:bb:1c:25:
e6:6f:5e:16:f8:0d:16:27:59:38:0b:53:94:29:0e:
53:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:93:AA:82:06:F4:BF:96:0A:CA:C4:11:04:66:24:18:12:22:8E:93
X509v3 Authority Key Identifier:
keyid:41:03:29:20:68:EA:3F:B8:5B:C5:89:53:79:E2:0E:DB:D0:BC:65:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQMpIGjqP7hbxYlTeeIO29C8ZQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/24c566-c74e-4232-a344-6072bb8b2bc0/1/QQMpIGjqP7hbxYlTeeIO29C8ZQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:53:a8:e2:ec:19:f6:73:fa:2b:5e:2f:89:0e:d7:9b:95:a7:
74:d0:6e:e6:89:4d:b1:b9:78:52:28:13:7c:d8:a3:b5:81:81:
e3:6e:f1:85:76:6e:8d:d0:30:2d:b1:d4:1d:61:8a:6e:8a:c7:
d4:46:4a:42:1c:e6:89:18:a5:61:3f:32:07:bf:e3:7f:b8:1a:
3a:7c:51:e8:96:4e:e7:03:55:a6:88:59:76:1b:14:93:6b:86:
e9:3c:27:09:ce:16:08:d7:b0:c1:36:dc:cb:d2:c4:4b:93:f6:
33:69:74:21:76:0d:9c:ef:56:21:59:a5:89:a4:6f:91:7f:20:
76:b1:f7:98:0c:82:c3:bd:19:b7:0b:9b:8b:94:3f:1d:cb:b6:
ae:45:18:18:e7:93:74:de:3b:7f:bb:45:a2:53:32:e7:9e:74:
3c:36:c5:98:03:4a:42:08:9d:a7:e2:8a:b5:26:e4:1f:05:a0:
97:f3:f1:ee:e9:f4:7e:b0:69:57:b7:97:14:da:fe:31:fb:19:
08:76:48:0c:3d:90:aa:23:1a:7e:a2:9c:43:da:b0:bc:f1:ec:
03:90:29:84:ee:96:ec:9f:fc:85:ec:46:c3:75:3d:69:1d:55:
f5:73:81:fd:15:45:a4:1e:ae:f6:20:2e:63:0f:88:fb:11:0e:
63:d8:1f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:07 2025 by rpki-client