Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft
File: qiK__S1aBw4uyKP8RueRGvlv6q0.mft (raw, json)
Hash identifier: 6q8i7v7ghhQYceI1P2b7LMcM3DOm4ZBO+Z1c0PQL1n4=
Subject key identifier: FA:17:12:C9:84:0B:C8:9F:94:C4:AB:83:7E:E5:BE:49:B4:94:7B:63
Authority key identifier: AA:22:BF:FD:2D:5A:07:0E:2E:C8:A3:FC:46:E7:91:1A:F9:6F:EA:AD
Certificate issuer: /CN=aa22bffd2d5a070e2ec8a3fc46e7911af96feaad
Certificate serial: 0194BD17B032E447BA15336C79E748AC19BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qiK__S1aBw4uyKP8RueRGvlv6q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:33 +0000
Manifest this update: Fri 31 Jan 2025 16:00:33 +0000
Manifest next update: Sat 01 Feb 2025 16:00:33 +0000
Files and hashes: 1: eo9SLFo6ECy5DSd_dzNUwxtWG90.roa (hash: rwEptqLCRKuvmeB6qGhTimOttQv2kDracTxXGRGGlyc=)
2: qiK__S1aBw4uyKP8RueRGvlv6q0.crl (hash: V1z4BmZof4MV46WbtLWML+Oev9ermJ6gBS0KxmKWby0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b0:32:e4:47:ba:15:33:6c:79:e7:48:ac:19:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa22bffd2d5a070e2ec8a3fc46e7911af96feaad
Validity
Not Before: Jan 31 16:00:33 2025 GMT
Not After : Feb 1 16:00:33 2025 GMT
Subject: CN=fa1712c9840bc89f94c4ab837ee5be49b4947b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:85:f2:b5:be:2d:59:02:b8:0b:0b:96:aa:5c:
d1:3f:c1:dd:ed:cb:4c:15:f0:0e:d3:ac:8d:8a:5c:
0a:db:4c:49:64:8f:e5:5d:ee:68:b4:74:08:4b:17:
9b:24:3e:3b:8e:ae:23:c5:ec:a4:fb:ef:ac:f4:da:
62:12:f1:52:87:b5:fd:1a:71:82:e1:5d:92:49:5c:
ce:8d:74:0f:06:95:fa:f2:69:8e:f4:e5:f4:b6:99:
68:db:c9:40:4d:42:f8:e4:d7:b6:78:af:a4:89:63:
f1:fd:c4:de:be:69:bd:39:39:09:24:12:81:b4:4f:
cb:52:0e:11:89:b6:1f:11:7b:0d:a6:42:82:73:e7:
2b:ca:72:60:26:eb:06:22:a5:70:37:b5:6e:3a:7b:
79:7d:81:14:35:8d:95:26:0a:41:0d:17:6f:58:65:
7f:76:9d:ca:81:1a:5f:c4:b6:ca:d1:7f:16:17:77:
a1:bf:fb:c1:91:37:d7:e7:bd:71:c6:37:c3:35:ee:
1c:65:9c:52:61:7c:dd:09:aa:eb:9a:a6:f8:33:a6:
50:9c:ea:7f:0d:9b:b7:d0:c0:ad:8e:02:c0:14:ea:
16:ce:d4:44:d0:62:86:8f:00:83:87:e7:0e:fe:bc:
d9:d2:9f:47:72:9c:00:d9:af:a6:9c:b2:dd:9b:56:
d7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:17:12:C9:84:0B:C8:9F:94:C4:AB:83:7E:E5:BE:49:B4:94:7B:63
X509v3 Authority Key Identifier:
keyid:AA:22:BF:FD:2D:5A:07:0E:2E:C8:A3:FC:46:E7:91:1A:F9:6F:EA:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qiK__S1aBw4uyKP8RueRGvlv6q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:d3:d1:6d:8e:10:88:eb:fd:e4:55:20:16:33:37:07:a5:d0:
dc:cc:cc:ae:df:bd:8c:37:eb:05:2d:11:d1:64:c5:6f:b9:97:
be:30:a6:13:da:81:a7:0b:83:7d:55:f4:4f:0f:52:a8:dd:55:
85:dc:a3:0e:4b:c9:fa:37:0d:fa:05:24:5a:b6:96:b1:51:db:
0f:9b:46:a5:06:11:ed:de:d8:00:1e:17:28:82:c0:8b:1b:64:
86:37:44:79:ab:b3:3d:cc:6d:aa:63:24:06:d8:4d:35:3b:5a:
9c:9e:06:d9:49:35:e3:5a:3a:a2:cb:bb:d8:09:51:cc:d2:ad:
3c:1a:5a:6f:dc:de:7d:2e:1c:91:f6:e2:03:20:37:82:6c:ab:
e6:2a:e2:6d:87:51:8e:9d:81:e0:2a:61:b2:bd:67:fb:26:3c:
90:84:7d:f4:59:04:13:18:80:6c:4d:fe:e0:e5:37:a6:da:e7:
6c:2e:7e:44:6c:ac:bb:29:32:1a:76:7c:52:93:e0:e4:7e:27:
ba:d7:02:7d:05:74:f8:d4:69:76:fa:1b:f6:ea:92:0f:c1:ab:
f3:1d:dd:a4:4e:87:da:77:51:24:da:32:28:5a:ba:53:a5:5b:
9b:66:5f:8c:b4:4f:98:5a:9c:06:3e:2d:dd:c0:ae:fe:38:e8:
2f:5e:39:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:37 2025 by rpki-client