Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/qvHI3UCIS0nwiAZNPBANKhiahHQ.mft
File: qvHI3UCIS0nwiAZNPBANKhiahHQ.mft (raw, json)
Hash identifier: rIMx3MBBGAxJpqCDUYdzM01PhjblTJzH3148e9MKvrE=
Subject key identifier: EE:D2:68:4E:82:D8:98:3B:A9:B1:E2:A4:CB:5C:82:42:B4:1D:34:08
Authority key identifier: AA:F1:C8:DD:40:88:4B:49:F0:88:06:4D:3C:10:0D:2A:18:9A:84:74
Certificate issuer: /CN=aaf1c8dd40884b49f088064d3c100d2a189a8474
Certificate serial: 0194BD856157449BCE2251032F7008565BDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvHI3UCIS0nwiAZNPBANKhiahHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/qvHI3UCIS0nwiAZNPBANKhiahHQ.mft
Manifest number: 87
Signing time: Fri 31 Jan 2025 18:00:22 +0000
Manifest this update: Fri 31 Jan 2025 18:00:22 +0000
Manifest next update: Sat 01 Feb 2025 18:00:22 +0000
Files and hashes: 1: UGApytPJPEIPFbzs4L0oU_KIdHM.roa (hash: cf5ZtJTmEf4eW9FhhtNmIkoS04da9/P7WQkJtlas3+0=)
2: qvHI3UCIS0nwiAZNPBANKhiahHQ.crl (hash: gN7XsjtIXyZCbdranII320Jt7VS21C0xDnxbYGd8Xs4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:61:57:44:9b:ce:22:51:03:2f:70:08:56:5b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf1c8dd40884b49f088064d3c100d2a189a8474
Validity
Not Before: Jan 31 18:00:22 2025 GMT
Not After : Feb 1 18:00:22 2025 GMT
Subject: CN=eed2684e82d8983ba9b1e2a4cb5c8242b41d3408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a3:70:b0:04:7a:d3:be:cf:29:88:42:f7:7e:
5d:4f:dc:ab:c1:e3:60:ff:0b:57:1f:56:1e:f9:f0:
d9:3d:a0:ff:5e:93:d0:98:75:87:ac:76:c6:56:e0:
5d:d1:8f:23:57:6f:69:1b:43:36:48:8e:6c:ff:a6:
2a:2e:68:5c:b1:6d:53:cb:77:b8:47:67:4c:c7:da:
eb:99:17:77:e3:da:e1:13:b8:8c:07:b6:e9:93:bc:
05:61:eb:ad:9e:79:6d:e3:d4:11:6e:3b:68:e7:6d:
1e:85:dc:9b:20:67:63:25:bc:d9:05:9c:a2:74:7c:
10:e1:7b:94:27:d3:81:85:29:6e:aa:8d:91:e6:99:
18:8d:e3:33:c8:b5:e6:f1:29:70:80:a5:e2:1c:b4:
d9:75:0e:be:47:2e:75:50:a2:a7:48:37:75:09:2a:
6c:fd:7a:b8:74:0d:81:e1:67:00:d9:90:3e:84:43:
97:e9:9a:61:a2:64:c6:7e:72:49:bc:bc:7e:f0:79:
dc:60:dc:dc:fa:43:61:cb:dc:1a:9a:b0:51:2d:50:
8c:69:3b:18:5e:56:8a:60:0c:ae:28:01:b6:78:09:
27:7a:20:5f:5b:5f:f6:41:1f:34:33:fc:45:92:fe:
fd:3a:57:6a:d0:58:b2:9f:c6:e2:70:8b:f5:02:15:
a8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D2:68:4E:82:D8:98:3B:A9:B1:E2:A4:CB:5C:82:42:B4:1D:34:08
X509v3 Authority Key Identifier:
keyid:AA:F1:C8:DD:40:88:4B:49:F0:88:06:4D:3C:10:0D:2A:18:9A:84:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvHI3UCIS0nwiAZNPBANKhiahHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/qvHI3UCIS0nwiAZNPBANKhiahHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/33900c-e6ce-444e-bc96-3b339d081f83/1/qvHI3UCIS0nwiAZNPBANKhiahHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:31:1b:1b:bd:39:c2:b7:24:8c:ec:b1:1d:1e:7e:07:54:be:
e7:17:6e:4e:c1:8a:a4:4f:0d:72:a8:68:20:a2:c7:81:68:bd:
45:87:d3:fc:45:e2:5f:6d:fb:03:2e:7c:7c:e2:55:60:31:23:
4b:a0:23:b9:52:0a:52:a6:55:83:5e:3c:fa:96:e3:4e:cb:44:
79:ed:d4:06:9f:55:db:62:49:37:72:8b:8e:9a:1d:21:cf:1d:
ea:41:a2:f6:1a:7e:73:df:55:21:ea:50:b9:05:c0:6b:70:95:
b9:fb:9b:8b:04:83:28:a1:9f:30:07:10:c0:25:c7:cf:c7:e4:
98:0e:e3:9b:6c:2a:3e:f0:7d:b8:3b:48:e8:12:c8:40:6f:88:
6e:dc:d6:39:8f:ba:90:d9:c4:ec:5d:47:50:5d:8c:1c:48:8d:
c9:ee:f5:99:2c:93:f9:bc:24:fa:64:c0:50:7e:d3:a8:ef:76:
b2:f7:21:c2:12:e7:42:be:49:af:d2:5a:3e:1d:03:91:d0:29:
8d:6f:e5:a8:56:64:37:4f:a9:70:f4:d5:7e:e9:95:73:b5:f7:
4c:6b:20:68:df:b2:de:c4:95:b4:37:71:30:e9:a1:56:df:ac:
28:10:b4:7c:ca:e4:a4:5e:b3:17:e9:dd:7a:b1:f1:cb:72:ad:
1f:24:15:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:37 2025 by rpki-client