Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
File: qg-X5jUIIZuWy7IQY0P14bbcWk8.mft (raw, json)
Hash identifier: ya10Ygaw32ZtG+2XWjSpmA5QBVRvSzPHut6gzxRBRp0=
Subject key identifier: 07:A6:06:AE:DB:F6:88:38:6E:D3:FF:D9:DA:80:CF:DC:E8:3B:8F:D2
Authority key identifier: AA:0F:97:E6:35:08:21:9B:96:CB:B2:10:63:43:F5:E1:B6:DC:5A:4F
Certificate issuer: /CN=aa0f97e63508219b96cbb2106343f5e1b6dc5a4f
Certificate serial: 0194BCA9DC3E2B35283D3054FB4054D69625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qg-X5jUIIZuWy7IQY0P14bbcWk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
Manifest number: 0130
Signing time: Fri 31 Jan 2025 14:00:35 +0000
Manifest this update: Fri 31 Jan 2025 14:00:35 +0000
Manifest next update: Sat 01 Feb 2025 14:00:35 +0000
Files and hashes: 1: 9AnxnImjEc49reXZMK2FTMayLmk.roa (hash: 8tldiaw0Efa5JT0iNf3f5fRMFBv7jO6PfNRsCAPI7BY=)
2: qg-X5jUIIZuWy7IQY0P14bbcWk8.crl (hash: llzJhS7oGqR6MttSTKnzUuhhB+7D0eGA/wJf5gWqruM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:dc:3e:2b:35:28:3d:30:54:fb:40:54:d6:96:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa0f97e63508219b96cbb2106343f5e1b6dc5a4f
Validity
Not Before: Jan 31 14:00:35 2025 GMT
Not After : Feb 1 14:00:35 2025 GMT
Subject: CN=07a606aedbf688386ed3ffd9da80cfdce83b8fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d3:dc:e9:76:aa:85:82:e8:9d:0e:16:d7:99:
f8:ea:2e:ce:d5:cd:9f:8b:41:4f:c3:39:4f:5d:56:
f0:01:78:46:50:91:a4:57:00:d6:af:3f:6b:37:cd:
c0:26:99:c4:33:57:3f:66:97:ed:03:8e:ef:11:08:
cb:47:5c:c1:6c:cc:57:bd:f5:b0:25:d5:51:dd:f5:
88:f8:0b:6d:bd:fb:54:f4:bb:34:67:04:f8:f9:52:
27:1a:53:fd:ee:60:b0:91:81:f4:d3:f0:fb:7f:03:
97:d4:73:2c:54:74:7f:4d:59:a3:38:c4:2f:5f:dc:
5b:cb:5d:9f:2f:e9:ac:b5:5f:e0:08:4d:c3:3e:e5:
bf:2f:b8:51:b7:7b:55:9c:87:1b:7e:51:00:42:89:
36:fb:01:a2:93:bd:e5:32:a1:8c:fb:31:76:f2:0e:
29:6d:14:bc:5b:32:09:45:8f:52:1d:53:1c:bb:3f:
47:d1:1c:1e:aa:7a:33:3c:9d:e7:88:84:98:f8:92:
9c:e5:a5:47:af:13:44:2c:d4:2b:57:64:1b:25:b4:
eb:e6:71:21:46:0d:3e:bd:8d:7c:7c:af:f0:8b:e3:
e0:17:42:83:72:2d:8c:16:26:1e:9f:c5:94:28:89:
5b:bd:9f:22:73:1a:6b:b8:f7:5d:b4:e7:12:a7:d7:
b1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A6:06:AE:DB:F6:88:38:6E:D3:FF:D9:DA:80:CF:DC:E8:3B:8F:D2
X509v3 Authority Key Identifier:
keyid:AA:0F:97:E6:35:08:21:9B:96:CB:B2:10:63:43:F5:E1:B6:DC:5A:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qg-X5jUIIZuWy7IQY0P14bbcWk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:df:75:4a:d9:53:80:14:80:f7:36:52:80:bb:3e:fa:a0:37:
d8:ae:d2:ae:6d:3d:ba:4f:e1:4f:5d:d9:1c:18:53:f9:d2:df:
ca:06:06:14:25:67:4a:2e:1d:04:c1:49:4f:6c:89:a8:8b:e0:
4a:1f:15:a7:d4:03:04:0c:3a:92:f3:fe:62:1b:f4:b4:fa:0b:
72:ef:cc:6e:71:02:e7:3f:2e:b1:6e:45:2b:ad:6b:50:8e:4d:
57:74:77:18:bb:f0:47:75:46:67:64:fa:19:e9:cc:92:1e:8e:
16:15:68:d3:0c:d8:f1:b5:1f:53:dc:13:03:a8:17:34:99:89:
e1:69:75:ca:a4:fe:97:0a:96:aa:1f:58:af:8f:79:e5:ee:b0:
37:94:b0:df:88:47:b8:ae:ae:cf:44:27:ae:89:23:ae:1a:e2:
8c:89:62:56:93:ea:51:32:10:57:ab:c2:7c:de:bd:52:c0:14:
cf:8f:ee:42:37:ec:20:16:73:65:34:8a:f2:67:c2:c8:03:05:
42:54:b1:36:f9:3f:d6:8c:44:7f:a6:35:7a:38:df:18:71:61:
d8:09:fa:29:38:6d:9c:ab:e0:04:ff:a3:f9:56:93:f2:2b:8a:
53:4e:f1:64:75:2b:7e:ef:b5:07:c2:e6:04:28:5c:66:90:96:
b3:ff:ea:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:16 2025 by rpki-client