Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
File: qh3FCktSbfGOiwplZde51Yp10xU.mft (raw, json)
Hash identifier: /I6jyNHUxZIxREOjf5Z+6I4znuJ6JuRiE9cPRS8MVWM=
Subject key identifier: 66:CD:6F:DB:5E:3E:CD:AA:C7:3B:85:AB:91:9B:1F:2F:9A:4F:57:BE
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial: 0194BCE0CD6D8E16BC2349AD91316DBFE98C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
Manifest number: 1435
Signing time: Fri 31 Jan 2025 15:00:36 +0000
Manifest this update: Fri 31 Jan 2025 15:00:36 +0000
Manifest next update: Sat 01 Feb 2025 15:00:36 +0000
Files and hashes: 1: 2D_sNr6LCkwTuTal-mPrYj8UHIs.roa (hash: /l1Yc3OQ+lo/otr90FJcr/UD3kDLNT0VbUXP3aw22fY=)
2: 4m5zxgIpcpLPeYwAolQiZO3OfJg.roa (hash: OQBGj0xAcvnf7DgtTAHxl/RhajJjDdIaXO2XNvZqjbE=)
3: Dlbvp3R98LlEu08WYGasx1T_LuI.roa (hash: qx2q+wnLl8fh2dLVy0eZydoQ+J+Xun6ifBd9DluCaL4=)
4: Xc8Qyh1LirsUEn7RQ8UyXB3RH0o.roa (hash: J+DRmxT7YhmhWsrfnEFIQoC5CTBLXKphVIrLyARlJ+w=)
5: XsUV3yVUcv5weCqiqsURBEgaXXY.roa (hash: 2vI6p11F93XXFNfMhYK7zAMvScbfypBZSjvbJS+JGeY=)
6: bWBHLDLXAN-AoH5BcE0MpR6eMI8.roa (hash: 1kLGiKwdqoK2K8B7I5XFtIe5sNN2BCN7xnm7j0LEaA4=)
7: oIKeScBXNP08SzFzC94DmvUIs80.roa (hash: NFvZgh8Blc1rDmTWkTD21o0JAYAkx72d5ckrzpZJxzc=)
8: qh3FCktSbfGOiwplZde51Yp10xU.crl (hash: zxlIiD+JUabdKI/0+QylXjNgQYiG7wZf9VaXD4KPyUc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:cd:6d:8e:16:bc:23:49:ad:91:31:6d:bf:e9:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Validity
Not Before: Jan 31 15:00:36 2025 GMT
Not After : Feb 1 15:00:36 2025 GMT
Subject: CN=66cd6fdb5e3ecdaac73b85ab919b1f2f9a4f57be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:27:57:4d:0e:30:35:51:12:93:65:2a:b7:f1:
c5:0a:0d:fe:75:95:7b:4a:4f:0f:2a:43:6b:60:34:
28:ad:74:82:1f:a0:66:1c:92:11:89:09:d8:86:c8:
82:fb:d0:b6:9d:60:1b:a5:25:f6:13:98:00:d8:e5:
16:ce:28:d0:22:7c:68:64:76:4b:b2:8c:b6:81:8e:
aa:01:ad:f3:9a:21:22:56:11:f3:93:0c:7e:d4:dc:
de:3f:ad:09:35:33:d5:4d:15:58:0a:21:22:81:ca:
ce:17:d9:19:e8:e2:91:55:e8:29:98:53:8f:6e:63:
f3:28:00:bb:8e:50:24:45:8f:9d:0b:40:dc:86:1b:
29:38:2b:7f:f9:dd:d3:07:ad:96:83:ab:9e:65:57:
a8:cf:48:a9:aa:dd:15:8e:7f:13:06:11:61:93:38:
b9:06:0f:8d:ff:cc:b5:77:88:d3:ae:69:d4:87:49:
6b:a6:00:ce:a1:58:8c:7a:fe:3a:9f:c0:7a:5e:91:
05:71:af:d7:c3:97:a4:45:56:dc:6b:0a:ef:d5:5a:
3b:f5:03:3f:72:cd:09:ab:b6:a6:d7:f4:b7:80:1e:
02:9a:19:c4:9d:1f:4c:ad:7d:07:b0:ab:21:31:6b:
f3:0c:4c:67:68:42:1a:f7:53:42:95:d7:f5:ed:4b:
b5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CD:6F:DB:5E:3E:CD:AA:C7:3B:85:AB:91:9B:1F:2F:9A:4F:57:BE
X509v3 Authority Key Identifier:
keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:82:f0:f8:00:32:f4:4b:98:4f:e4:a5:30:28:88:3f:99:5f:
24:3b:fb:6a:b6:f9:c4:8b:3b:32:6c:0b:c6:7f:2e:8e:70:67:
8c:20:57:67:4a:e2:0f:e9:d9:c3:50:d0:0e:49:df:99:0e:a1:
8a:5f:7d:33:54:10:ff:82:17:e6:68:ef:d5:38:0c:f7:d6:e5:
2a:1a:32:3a:72:22:86:99:29:e4:8d:7e:43:4a:f2:58:b1:45:
c5:5b:0a:88:f4:b3:ae:5a:99:23:77:e0:89:01:5c:25:f4:4c:
73:0f:27:bb:cd:2f:9a:9d:db:57:51:ef:e7:4a:24:22:02:7c:
bc:35:83:7d:4d:dd:72:55:a7:6e:ab:21:0f:22:72:08:f5:79:
83:ad:e3:09:6b:2f:b3:6c:32:a1:bd:48:e5:eb:af:58:4f:a7:
d9:3a:57:bc:06:ca:28:27:79:f8:7d:8c:6a:94:cf:b8:42:4e:
0c:75:65:6d:03:5f:72:f7:1b:05:54:b3:1f:86:51:fb:d8:dd:
d1:68:23:02:64:46:9a:ff:35:b3:01:40:2f:5c:24:2d:d3:9a:
eb:62:40:52:cb:0f:d6:c9:35:17:ac:9a:3e:fa:44:2e:7b:ee:
5e:3d:a0:73:e1:e0:f7:29:f0:80:f5:05:6f:12:70:2c:fd:36:
76:66:91:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:35 2025 by rpki-client