Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
File: qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft (raw, json)
Hash identifier: Od+UruC4IKn9qcbBaC+mOke0GVh3Blxdwxc8zWh70Ok=
Subject key identifier: 74:BA:D6:48:C2:3E:F5:D2:84:5C:8F:FF:06:E8:78:29:8B:06:0E:7F
Authority key identifier: AA:4A:AC:19:48:CE:E2:3D:DF:4D:71:5F:80:35:22:F9:3B:0C:DD:B4
Certificate issuer: /CN=aa4aac1948cee23ddf4d715f803522f93b0cddb4
Certificate serial: 0194BD1752CD4655B41C36FFE236319D0132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
Manifest number: 05D7
Signing time: Fri 31 Jan 2025 16:00:09 +0000
Manifest this update: Fri 31 Jan 2025 16:00:09 +0000
Manifest next update: Sat 01 Feb 2025 16:00:09 +0000
Files and hashes: 1: 4F9izwsHHxNkuKU97mIzesCX1fA.roa (hash: 9EEtKc3sBCyfxrwHugYM/2yhW3k3q6DEwjqGSNZdJ9g=)
2: qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl (hash: K8n7nA++zANf3Vluue5RZEV/RpGvDjlJQQ0ZdCBgxB8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:52:cd:46:55:b4:1c:36:ff:e2:36:31:9d:01:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa4aac1948cee23ddf4d715f803522f93b0cddb4
Validity
Not Before: Jan 31 16:00:09 2025 GMT
Not After : Feb 1 16:00:09 2025 GMT
Subject: CN=74bad648c23ef5d2845c8fff06e878298b060e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:26:bc:2d:1c:62:bb:40:23:e4:f2:42:57:b2:
d4:2f:1f:bc:26:53:2b:80:6a:41:b4:fc:65:52:4a:
a6:2f:af:2c:d1:95:ac:6e:1d:15:b9:d5:40:d0:11:
ee:f2:de:7a:22:92:32:5c:a5:07:69:07:d8:0b:15:
be:bb:f7:80:6c:86:22:fa:76:e4:ea:0a:92:25:56:
49:5e:c9:c5:a7:a9:33:87:9b:38:0b:b3:32:29:b3:
0d:3f:03:0a:2d:53:a8:53:58:6d:3a:42:93:54:49:
c4:a5:79:40:2d:81:6a:f8:07:ee:46:5e:d4:05:18:
2b:5f:8d:ad:56:ff:3f:89:72:ea:68:2b:86:74:f3:
ac:cb:65:4d:47:88:cb:e4:b3:7f:ae:2b:08:5a:7d:
e8:4f:e9:32:04:21:c2:84:76:f4:1f:7a:9c:83:04:
a1:0d:de:f5:c1:29:b5:ee:ff:10:68:a3:52:90:b6:
08:fe:19:6f:91:8c:03:b9:50:38:47:14:33:d2:03:
2f:a1:27:14:df:7a:30:0f:9e:ef:4a:da:6d:f1:02:
73:61:ef:b7:49:fc:99:8c:20:87:86:e2:bb:b0:26:
c3:97:aa:e5:cf:60:8b:45:0a:6a:11:1c:d6:ac:9c:
c4:e9:c6:a2:86:4e:17:12:54:3a:e5:c8:1a:85:ec:
63:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BA:D6:48:C2:3E:F5:D2:84:5C:8F:FF:06:E8:78:29:8B:06:0E:7F
X509v3 Authority Key Identifier:
keyid:AA:4A:AC:19:48:CE:E2:3D:DF:4D:71:5F:80:35:22:F9:3B:0C:DD:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:0a:bb:20:61:75:11:8c:fc:c4:31:c3:25:3d:a1:14:ac:8a:
d9:72:f7:82:97:d6:4c:f0:99:6d:4e:72:c0:78:5d:ce:18:3b:
2d:ee:f8:99:2b:46:40:8b:68:f4:f3:55:21:fd:50:06:64:10:
91:56:0d:bd:64:cf:58:e1:5f:56:e8:67:00:ab:ac:00:fe:52:
a5:90:66:1a:34:b9:0d:b7:5c:91:0b:de:d8:4f:15:d2:26:c8:
d4:98:8a:8c:ee:21:9d:b1:85:46:98:51:87:f6:4d:8d:5f:ed:
2d:cc:ac:4e:02:45:0c:38:7e:9a:a1:7b:65:49:cc:fd:2b:b4:
98:55:61:5d:b2:cf:db:7d:9d:d5:5a:2a:8d:48:08:f8:d0:e6:
f8:c5:5e:05:73:01:72:23:4b:80:a7:61:0d:33:68:84:ab:71:
63:4c:15:a1:fc:85:83:c5:6e:a4:21:9b:26:bf:75:35:55:91:
ae:8e:7d:49:e8:a7:37:4e:a3:2f:2f:33:4f:cf:7c:d1:36:8f:
a7:f4:0c:8e:f1:96:72:04:4d:5d:39:3b:95:38:f2:f1:3d:a8:
ea:cc:42:12:82:48:a9:b0:7f:e5:d1:b2:7f:69:54:26:a2:08:
0f:c2:b3:99:a7:3a:c6:6d:dd:f8:1d:a0:87:2e:38:3e:30:fa:
8f:e9:46:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:38 2025 by rpki-client