Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
File: qlPNLFhKPcFiCLqTsNt0dzs_I74.mft (raw, json)
Hash identifier: bwCQagMNfXFZfRNdjrjGrYFhF9U59v+Zoty2ZO8CQC0=
Subject key identifier: FD:D4:BD:E2:C4:77:C5:10:2B:87:CA:F1:2B:3F:D1:A7:39:D1:F9:DB
Authority key identifier: AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE
Certificate issuer: /CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be
Certificate serial: 0194BD8554AECB025A0900ACDDFC1BFE3955
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:19 +0000
Manifest this update: Fri 31 Jan 2025 18:00:19 +0000
Manifest next update: Sat 01 Feb 2025 18:00:19 +0000
Files and hashes: 1: eIuvCKiUKqnjxChjtjEAvL7JvnI.roa (hash: wyV3lMaUUP7vVQqM6FlcaWTPKvU8kW+p1xMsgVv6OJA=)
2: qlPNLFhKPcFiCLqTsNt0dzs_I74.crl (hash: aaMU1OrT5Z4iBwL2t68p/TilM548IU8Eb6n3Qot7Wqc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:54:ae:cb:02:5a:09:00:ac:dd:fc:1b:fe:39:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be
Validity
Not Before: Jan 31 18:00:19 2025 GMT
Not After : Feb 1 18:00:19 2025 GMT
Subject: CN=fdd4bde2c477c5102b87caf12b3fd1a739d1f9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a1:ce:2b:c6:75:e4:2b:f5:c2:05:40:33:f0:
c6:cf:a0:06:c9:5d:88:1d:d7:cd:36:3e:17:4f:6f:
d7:89:4e:23:42:a7:1f:d8:e2:73:0c:47:0b:89:88:
04:1d:b4:d1:b2:3f:e3:46:66:a3:31:5a:25:3f:7f:
3b:30:a2:2b:68:87:8e:54:bd:1d:58:4f:ff:d9:c7:
dd:cf:09:b5:35:88:16:a3:50:15:cf:c3:59:a5:dc:
1c:34:77:65:0b:1d:80:83:bb:2c:9c:5c:e6:e5:7f:
28:48:58:48:5b:7e:83:16:c4:57:ba:ce:f5:b8:49:
54:cc:bd:1d:1d:16:71:ba:c2:07:89:be:09:c8:2e:
d5:c8:af:62:78:e2:cc:3c:c8:ad:fd:64:9b:e9:39:
6c:7a:f3:1b:3a:2a:f8:5e:33:a9:ed:b5:91:9c:56:
01:f2:02:c7:6f:e1:a6:c8:f8:31:8b:e1:50:44:6c:
33:ee:95:e0:62:c2:67:a1:ec:b6:d6:28:a6:c0:9b:
e3:d3:b9:2b:04:1f:e6:83:e3:e1:65:cf:56:15:fb:
ab:e5:ad:fe:98:cc:9a:6e:c1:65:bf:6c:9f:75:c5:
1e:24:34:6a:06:67:4f:25:af:9e:fa:68:39:8e:26:
2e:20:ac:3d:f2:a9:83:f4:28:7e:c3:49:7d:32:a3:
b8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D4:BD:E2:C4:77:C5:10:2B:87:CA:F1:2B:3F:D1:A7:39:D1:F9:DB
X509v3 Authority Key Identifier:
keyid:AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:29:a3:cd:f6:4b:e1:5f:b5:50:6d:fa:e7:75:01:1a:28:bc:
a5:37:f0:4d:35:84:1f:93:97:ce:78:1b:dd:a2:ed:4b:52:55:
dc:da:0d:51:9e:1b:4a:ec:ef:35:e4:3a:d5:ed:ad:67:0f:3b:
c4:7e:eb:92:ea:41:86:29:c0:11:a9:0d:e3:0d:35:32:ff:dd:
2a:52:e7:78:4a:a1:2a:31:b6:26:de:6c:c3:e9:1d:9f:6c:1d:
b6:60:0c:84:42:e7:1a:9b:7a:35:7f:9a:0c:f8:cc:d3:07:9b:
bb:ae:1b:c3:54:e7:f3:6f:f5:19:20:ea:ad:b7:6d:76:f7:6a:
00:2b:a8:45:66:55:ae:c4:2d:cf:3a:0e:9e:cb:78:5f:b6:42:
f1:3b:c3:99:9e:5c:5c:71:3b:be:ef:cb:d8:e0:21:bc:a4:1c:
3b:34:13:69:92:b7:7f:54:ee:20:7b:ba:56:67:62:d4:59:4c:
fa:34:02:b9:7e:21:3a:33:4a:39:46:dc:df:01:c7:89:c9:09:
69:eb:04:8d:c2:fb:f8:12:b7:b2:a7:d8:3c:67:0e:09:2a:41:
1c:ee:28:46:ca:10:33:15:7a:0e:1f:10:97:cf:ad:00:d5:bb:
bc:31:1d:40:e7:e9:74:d8:d7:f8:2d:91:16:92:7e:76:41:49:
8e:f4:4d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:32:28 2025 by rpki-client