
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/04019c-ad17-428d-b3a2-1be13ba8d456/1/qmWvaX3x9s2vTLvWbePUO-2GnpA.mft
File: qmWvaX3x9s2vTLvWbePUO-2GnpA.mft (raw, json)
Hash identifier: mCQQK9jCnI4CZbTkt2On7wT1ZDfdIgZMOLrRTK4az74=
Subject key identifier: AE:2D:2F:8B:3B:FB:D2:C6:AD:D1:9C:21:A8:D6:CD:3A:CF:FE:59:D5
Authority key identifier: AA:65:AF:69:7D:F1:F6:CD:AF:4C:BB:D6:6D:E3:D4:3B:ED:86:9E:90
Certificate issuer: /CN=aa65af697df1f6cdaf4cbbd66de3d43bed869e90
Certificate serial: 0194BD85614A27917CF6B33A3B6E656AD8EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmWvaX3x9s2vTLvWbePUO-2GnpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/04019c-ad17-428d-b3a2-1be13ba8d456/1/qmWvaX3x9s2vTLvWbePUO-2GnpA.mft
Manifest number: 0A47
Signing time: Fri 31 Jan 2025 18:00:22 +0000
Manifest this update: Fri 31 Jan 2025 18:00:22 +0000
Manifest next update: Sat 01 Feb 2025 18:00:22 +0000
Files and hashes: 1: qmWvaX3x9s2vTLvWbePUO-2GnpA.crl (hash: 94V59kKf+eLShh9UVWucF8nF6C0pNMMulgA5fu13obQ=)
2: u25_l7rqpA4jc9Mn9X_nn6jE1D8.roa (hash: XxkiW8kKfa52GpQHHiGBtUNZJLczRvJy5PTfiodYsrs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:61:4a:27:91:7c:f6:b3:3a:3b:6e:65:6a:d8:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa65af697df1f6cdaf4cbbd66de3d43bed869e90
Validity
Not Before: Jan 31 18:00:22 2025 GMT
Not After : Feb 1 18:00:22 2025 GMT
Subject: CN=ae2d2f8b3bfbd2c6add19c21a8d6cd3acffe59d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:18:6b:c0:ef:66:b1:54:20:62:80:f7:55:d0:
dc:af:56:1c:26:44:61:a5:f6:94:b7:79:21:47:db:
60:de:59:0e:db:46:a3:9b:62:5d:e6:9e:15:92:9b:
d6:43:a9:4d:d5:05:5b:d6:f9:de:1b:9d:f0:0c:ec:
c2:dd:90:fa:3b:23:ad:86:7c:cd:7f:0a:d3:49:4b:
b4:39:c4:04:01:98:b5:1b:57:64:e4:13:de:80:eb:
e1:c2:e9:36:b8:2f:20:ed:a9:6d:25:2a:cc:6c:99:
f5:29:db:8e:49:c0:f3:f0:9b:c8:3d:c3:fb:51:74:
0f:20:ac:3c:dc:ad:00:80:ee:2a:71:6e:bf:d2:2e:
ce:fb:e6:4e:20:4f:1c:ff:b8:aa:76:41:ad:06:27:
71:e3:f0:81:30:c2:6d:04:fd:c5:ae:00:b3:46:f5:
c3:19:67:d6:f5:1c:cd:3f:41:83:d5:50:7b:78:de:
eb:b0:1c:a6:c8:63:b1:e6:b3:b4:b9:8a:29:23:2b:
9a:53:27:16:a3:cb:6d:6f:9b:f1:70:9d:84:e5:14:
1c:46:b9:7c:b6:b0:97:13:df:1e:ff:4e:b4:94:d7:
b7:3a:0a:64:48:9e:6c:ac:a5:c2:1b:ce:a5:00:33:
90:8b:2b:76:c6:f5:62:d8:ea:10:a9:ff:0d:c5:bf:
f2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2D:2F:8B:3B:FB:D2:C6:AD:D1:9C:21:A8:D6:CD:3A:CF:FE:59:D5
X509v3 Authority Key Identifier:
keyid:AA:65:AF:69:7D:F1:F6:CD:AF:4C:BB:D6:6D:E3:D4:3B:ED:86:9E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmWvaX3x9s2vTLvWbePUO-2GnpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/04019c-ad17-428d-b3a2-1be13ba8d456/1/qmWvaX3x9s2vTLvWbePUO-2GnpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/04019c-ad17-428d-b3a2-1be13ba8d456/1/qmWvaX3x9s2vTLvWbePUO-2GnpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:81:6c:4b:33:1e:45:f7:1a:37:92:0d:b1:14:b4:96:77:21:
c3:cf:15:43:f4:0d:c1:b5:34:65:74:36:f3:9d:c2:7f:c0:d2:
7d:36:25:3c:fd:a0:35:ff:e1:c4:cd:ee:32:e4:e7:8a:7a:cb:
bd:97:aa:e2:47:fc:be:72:6f:68:6c:b7:23:22:25:20:b4:57:
ff:95:17:74:a6:52:bc:bf:2b:f4:97:d9:06:63:34:a2:be:b7:
e7:24:4e:17:f4:0a:3d:98:3c:bd:0e:d2:94:7e:e1:87:e5:c3:
64:e5:36:21:0f:34:1d:aa:05:1a:3f:35:1c:98:49:bf:02:e7:
97:14:79:bd:3e:7c:06:cc:77:c5:c2:22:06:06:80:2a:7b:a0:
94:f3:a8:c2:1a:07:c2:ca:95:6d:9d:9f:5b:75:46:34:9b:ea:
a0:bc:dd:42:25:26:63:20:8d:34:fe:00:43:59:88:81:6c:06:
29:34:82:a0:42:b4:6f:56:01:15:df:75:bb:90:f6:a9:74:28:
42:8b:06:ef:d6:15:06:d1:b4:0a:d7:ed:08:13:5c:39:2c:13:
9b:10:19:e3:62:99:f2:02:58:d4:21:bb:2f:ba:51:a7:ee:f2:
6d:f5:23:c5:ca:2d:0c:1c:23:8a:8d:e0:5a:f8:24:63:db:13:
35:9d:b5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:25:03 2025 by rpki-client