Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
File: qnNO9a4hwOiX-hhkRxhOya1K4p0.mft (raw, json)
Hash identifier: WjxVcmRvrnbsfK52iszQs256xxYvNXxYnERBqqwizbE=
Subject key identifier: 6D:01:68:6C:ED:07:20:86:F8:82:E6:DE:DE:17:B1:A4:DA:76:0D:4B
Authority key identifier: AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D
Certificate issuer: /CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d
Certificate serial: 0194BC72DF30F7916F4502E0266B87567641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
Manifest number: 05DC
Signing time: Fri 31 Jan 2025 13:00:32 +0000
Manifest this update: Fri 31 Jan 2025 13:00:32 +0000
Manifest next update: Sat 01 Feb 2025 13:00:32 +0000
Files and hashes: 1: Ot7K37c41MVu-6Ir2VOkUuixgHw.roa (hash: 7Ylv6CILYrMD9u/uD4SkYHlbdsDQ05xlERBBPqPUVnQ=)
2: qnNO9a4hwOiX-hhkRxhOya1K4p0.crl (hash: hFVgPF40QANjK+ICcQq+/YJz+t0ajiD/ID7b+yEQj2g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:df:30:f7:91:6f:45:02:e0:26:6b:87:56:76:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d
Validity
Not Before: Jan 31 13:00:32 2025 GMT
Not After : Feb 1 13:00:32 2025 GMT
Subject: CN=6d01686ced072086f882e6dede17b1a4da760d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1f:f5:77:51:12:d1:19:ff:ec:67:e7:70:b2:
02:b6:9e:74:69:47:cf:05:b0:59:d1:b0:3d:4f:fb:
30:bf:4f:90:bf:f5:3e:4d:cb:e5:aa:ba:03:75:b5:
20:dc:57:cf:bb:79:0c:39:fe:0a:bd:87:7e:e0:45:
32:ab:93:b8:a7:30:ee:1c:d2:64:f6:c4:4e:00:d4:
b5:8a:65:ee:68:cc:dc:f7:0c:ee:ce:91:66:28:f0:
33:4c:ea:7f:0d:71:7a:36:97:cf:44:b7:6f:54:43:
51:8a:70:df:32:77:a9:d7:39:93:cc:48:71:5a:82:
21:4a:d4:97:66:92:08:2c:84:18:0b:83:c9:00:f6:
24:1c:4f:2f:eb:60:bf:c0:6b:0f:44:8b:c1:49:4f:
21:cd:f5:22:f5:2a:43:aa:3b:f3:aa:74:10:7c:83:
08:d4:00:ce:ce:6e:21:00:f7:cc:bf:1f:49:16:a5:
14:d3:02:f7:51:33:0e:c6:6f:7d:6a:5c:c0:cf:3e:
da:99:bc:22:6d:55:c8:e6:a6:18:91:7e:4a:87:56:
f0:51:f2:88:46:5e:c7:aa:5c:40:90:da:1c:50:40:
ee:66:f6:47:c3:59:b4:33:da:00:72:4d:88:50:30:
44:ac:51:02:aa:1c:1e:d7:d9:28:bc:8b:bd:1b:39:
60:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:01:68:6C:ED:07:20:86:F8:82:E6:DE:DE:17:B1:A4:DA:76:0D:4B
X509v3 Authority Key Identifier:
keyid:AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:f4:b9:97:ae:b4:fc:a0:3a:fc:0d:b0:b6:d0:05:88:98:a4:
0a:2b:c6:67:02:4e:77:c5:b7:a8:8c:aa:56:1e:3d:a8:12:22:
79:a0:dc:7a:ff:d4:2b:a4:08:d2:49:30:fb:e0:ac:a9:fd:a0:
8c:46:99:e1:13:f8:cd:f0:c6:13:c6:e7:5e:9e:c2:0f:12:3b:
03:ac:bd:18:49:1c:e0:8e:76:80:6a:b4:3c:b9:e0:65:13:75:
03:1b:01:53:78:a4:b7:10:45:f2:67:ec:ec:ec:7a:cb:9f:af:
dd:b2:1c:61:f4:26:6a:ea:a9:85:15:32:7e:e5:84:a6:76:cb:
c0:f5:ca:0c:9e:63:cf:94:8c:35:8d:6c:e8:c3:49:59:59:f1:
47:a7:b7:45:4a:1f:4f:75:5a:40:49:f9:af:82:48:bf:94:41:
9c:cc:85:9c:89:a9:ed:e6:f6:1e:6e:70:58:d9:1e:93:86:3f:
77:a9:40:4a:0e:97:16:14:a0:b1:3c:48:62:0e:6f:68:64:cf:
56:3f:78:6f:56:af:60:f4:85:1c:95:44:89:9f:ab:b6:c7:98:
de:e3:e4:7c:c3:d9:eb:79:75:0c:9c:a3:61:05:4c:e0:2a:11:
80:45:a2:47:60:88:10:fc:94:73:2c:02:f0:0d:7c:dd:da:26:
4d:1b:83:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:58 2025 by rpki-client