Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
File: qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft (raw, json)
Hash identifier: 05qZjOLzoDvlDj2qPDw+copMAhC2Q2LRnfXd3RgHeiA=
Subject key identifier: EC:B3:3A:70:D2:03:7B:B4:E7:D7:01:EE:F8:E2:71:FD:6B:CB:16:31
Authority key identifier: AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
Certificate issuer: /CN=aa8551e851e69db165c6c632af45f21715512939
Certificate serial: 0194BD85B6F38655524F02796FFC90B51867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
Manifest number: 11FA
Signing time: Fri 31 Jan 2025 18:00:44 +0000
Manifest this update: Fri 31 Jan 2025 18:00:44 +0000
Manifest next update: Sat 01 Feb 2025 18:00:44 +0000
Files and hashes: 1: 1-3qrdz_tzhFoK7Ucjl6tCL0s2OM.roa (hash: kxTjIhZmXXDDNlqbd3Q2+gkjPCT2RJ+wWhOvQVmko/I=)
2: CvzVIxPE_Xl1M87JmAYQt0uyDD8.roa (hash: 2wAD/UrmgnStcRFk04oSlNoJEw3MlH57DosRki5ZylE=)
3: qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl (hash: fXzIZfCcedbCGoGg8L5+PV2YqbX1ppILKtDIi0e/zQg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b6:f3:86:55:52:4f:02:79:6f:fc:90:b5:18:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8551e851e69db165c6c632af45f21715512939
Validity
Not Before: Jan 31 18:00:44 2025 GMT
Not After : Feb 1 18:00:44 2025 GMT
Subject: CN=ecb33a70d2037bb4e7d701eef8e271fd6bcb1631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9c:b9:b4:33:1f:48:4c:55:60:30:68:b6:e2:
75:df:a0:f0:fe:80:94:85:d9:97:41:bb:a7:da:75:
dc:8b:dd:d1:a8:e9:d7:a0:19:3d:93:4d:68:e0:89:
19:d6:99:b7:4b:16:a2:8b:e3:1c:aa:52:50:08:61:
07:be:c0:a1:ba:1a:ba:cc:aa:ca:77:c3:c9:fd:29:
a4:b4:3d:c2:51:89:94:1d:4d:aa:03:45:e6:04:a6:
43:b1:c0:b2:17:b4:23:81:6c:ae:67:fa:a9:2f:76:
ab:82:ed:41:d7:51:74:73:b9:28:3e:98:e0:b9:b1:
00:7d:12:e0:5d:2c:f8:a7:d8:05:1d:33:ba:fa:92:
53:71:cc:d4:ab:2d:7d:45:11:ac:e4:7e:f8:3d:89:
21:58:22:22:da:71:95:64:32:2d:98:62:30:ae:c0:
70:e1:f5:82:e3:ed:ff:1e:82:fd:b0:1a:29:c5:3d:
be:04:08:15:f2:60:66:73:19:54:30:98:6b:d0:a6:
06:2b:ee:0c:af:8c:c1:80:9c:d3:fc:94:12:69:87:
61:73:42:4e:89:11:4b:2a:66:f3:71:42:8b:47:a3:
58:42:02:55:82:07:24:00:43:9e:66:9d:6d:58:70:
8f:47:9b:a9:25:42:e4:e3:a9:fd:15:c6:f6:cb:14:
a1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B3:3A:70:D2:03:7B:B4:E7:D7:01:EE:F8:E2:71:FD:6B:CB:16:31
X509v3 Authority Key Identifier:
keyid:AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:f5:13:14:c3:e5:4d:c7:b2:e4:8e:7b:eb:ac:ac:79:b4:ad:
b2:aa:d5:b4:b6:08:73:78:57:f5:99:b2:5b:9e:d5:a4:7d:b3:
6e:35:7b:59:3e:6d:77:3b:39:3f:dd:f8:1d:ad:06:7f:5b:2d:
42:aa:30:f6:a4:ef:90:05:b6:31:3d:28:df:a8:24:04:57:3e:
ab:65:b4:dc:bf:ad:b8:62:16:dc:44:e7:a6:dc:42:46:a7:0d:
16:17:63:08:fa:e2:b1:90:96:22:9d:69:63:57:b0:86:76:34:
ca:b9:8c:ec:18:b9:71:50:0e:59:d9:20:8c:6e:fe:35:b3:da:
1b:ea:fe:1d:19:d1:64:9c:db:4d:51:ec:39:4d:bb:e0:55:06:
77:9e:8b:79:e8:e7:13:9c:54:71:eb:c4:57:3e:73:ec:37:03:
07:91:e8:70:8d:6a:b3:fd:ee:1b:fb:dd:0a:0a:74:74:08:4c:
63:57:01:39:df:cf:c0:37:b4:05:c4:7c:6c:3f:5b:55:dc:3d:
a9:7f:72:48:42:9c:9c:54:33:ee:4d:df:d3:47:9a:1f:8e:a6:
2c:12:ec:10:c5:6f:12:2f:8d:ad:82:c8:55:16:52:54:dd:2d:
cf:74:8c:4a:91:09:c5:da:53:59:eb:f9:82:ca:5e:92:95:69:
99:83:69:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:17 2025 by rpki-client