Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
File: Qk_v-1duQR3lEYcdweC9eiDixNc.mft (raw, json)
Hash identifier: lXRB+CBesH2g4+Grm07mla/ppB7d/ZH9qAb1pZSr6tU=
Subject key identifier: 1C:1B:B6:2A:7F:EE:A4:5B:25:02:87:D8:BC:49:32:23:AE:26:51:7A
Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Certificate serial: 0194BC051AA73C9C774B94063C4E34420C81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
Manifest number: 1009
Signing time: Fri 31 Jan 2025 11:00:38 +0000
Manifest this update: Fri 31 Jan 2025 11:00:38 +0000
Manifest next update: Sat 01 Feb 2025 11:00:38 +0000
Files and hashes: 1: DkWRQ6AFjFv7rFQxgp89eDWwZzQ.roa (hash: k4LFdro8EdWirWfXizr76ZtFjuGb6M0FW+ROBsiX2e8=)
2: EqxrefdyqjYZzrCHrTrk9NHiht0.roa (hash: PPHZGYMZ3zZjXKQA0ijIhbbL3UF83eAk3Rgwiwv4iE0=)
3: Qk_v-1duQR3lEYcdweC9eiDixNc.crl (hash: BaxcQ1FSuoq51/pvkvExjmbsFt+O+VZ3k7BQWjA6ks0=)
4: WZk41uDGz8aqTuMK5_6Ovbbhicc.roa (hash: 5tAgdvaBn8Xzr7bEMaN+4RyehKAGk3MjK0uZbZfdeTE=)
5: XLX74-2fz_xcT8jjeK7YOxawwwc.roa (hash: b+kTBN0QlzOTjI1a+jkjVcwIWZ2nk7a5/iBtKxwJ0UQ=)
6: bfcBA_m7rGFWZUrLHbxdnwQav2M.roa (hash: 4dU7FEoFdtXhvQL59inDOPJXsvneQJU94I/fuz7sgSI=)
7: dE-dE1C98bzQfzFp4viryEzVGNI.roa (hash: keoRfTd2k6052VngqSZmL9fG3jF6ZyNryRy3nAsLGG4=)
8: msTbd_cRgqE8u0I4x9SddZe62KE.roa (hash: mupJQETdaQVPnbs2vC2bYij0saRrza6SHsY1QyVDaJY=)
9: tM1Yq2bXiB1kWHQqw1R7qqhyJN0.roa (hash: oZHMmFERFSMV3UaFbDA8Gmy32zJZA3mRLZIu5Egtw7c=)
10: zLAA5CUhIEdukEthrOgBOAwbyZM.roa (hash: MW2hOZqoAax6b0hos7zyQQFLCe7uqIGCikNzhGtl+O0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:1a:a7:3c:9c:77:4b:94:06:3c:4e:34:42:0c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Validity
Not Before: Jan 31 11:00:38 2025 GMT
Not After : Feb 1 11:00:38 2025 GMT
Subject: CN=1c1bb62a7feea45b250287d8bc493223ae26517a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5c:f7:11:77:5c:c8:bb:7a:63:5e:3a:f3:72:
68:de:7d:89:bb:27:6f:c8:47:35:d3:1c:5b:1c:2d:
ee:70:a1:2f:11:74:3b:db:59:81:54:1b:ca:90:cf:
d6:f8:ff:2a:81:ee:70:08:e4:97:d2:1e:e7:3e:bd:
4b:91:e7:10:8b:27:8b:f5:ab:0a:aa:f1:94:74:bb:
15:bc:19:96:a6:63:8d:80:b4:44:ea:9c:1c:00:d1:
89:d3:9d:aa:0a:99:83:a1:e7:fa:cb:3e:ab:8c:f4:
d2:f8:ca:9b:23:6c:77:9e:d4:5d:5f:f5:7f:ca:18:
a5:c8:68:72:fc:c0:63:71:a0:1c:5f:89:50:fb:f6:
49:69:13:8b:93:a6:42:48:ac:17:ac:fd:2d:d0:d9:
ea:a2:83:7b:48:be:1e:1f:75:46:41:17:3c:7c:cb:
dc:c7:e3:0b:d8:5d:6f:ec:d9:19:af:0c:bb:34:7e:
e8:fd:21:d4:e9:ca:7d:e2:cf:53:80:6e:b5:82:55:
92:f6:c5:90:4e:d1:0e:06:65:0c:da:f6:57:dc:ff:
10:00:0e:de:fd:31:d5:3b:06:8b:f4:af:2f:d0:4a:
d6:93:89:05:9f:6f:6f:05:46:1d:bb:d0:ce:b3:ce:
9b:d6:4a:6c:74:ca:1a:12:ed:3c:59:23:54:79:42:
ba:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1B:B6:2A:7F:EE:A4:5B:25:02:87:D8:BC:49:32:23:AE:26:51:7A
X509v3 Authority Key Identifier:
keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:eb:5f:ad:d6:a6:91:e5:bc:d7:53:55:57:fa:5c:1c:4e:1e:
81:91:2c:04:42:b6:65:2e:e3:a3:cf:5c:d1:06:c2:35:5b:22:
fe:3f:d6:ae:43:26:e3:38:35:bc:a2:c8:ce:e7:88:28:8d:26:
bb:71:db:87:c4:44:9e:04:2f:b4:5a:de:b0:e2:37:4f:b0:f5:
fe:22:9c:8b:67:f9:d7:74:80:4e:f3:0f:44:ab:11:22:d1:54:
9b:da:99:79:ab:9b:71:bd:56:71:24:92:c9:6b:ad:c7:59:f9:
7a:f2:ea:b2:21:aa:47:f3:b0:1d:f3:15:51:2d:50:8b:dc:ce:
2f:b0:60:43:d2:a8:b4:6d:fa:bd:a0:a2:e7:41:0a:78:8a:71:
21:68:e9:69:e7:95:cc:80:0b:15:88:a4:c3:af:30:0f:f8:61:
e0:28:ee:98:68:b4:b8:71:9d:85:33:ce:75:e3:80:31:3d:09:
20:b3:78:94:fe:22:24:0d:87:67:46:f5:c4:11:86:ae:0e:17:
0b:6d:e6:47:1e:e4:5b:12:8a:10:f1:01:30:09:fe:43:d3:d3:
90:80:95:47:91:3d:5b:3f:82:dd:d4:04:11:f7:f1:9f:29:c7:
be:85:01:36:19:92:97:ea:d1:00:c3:9f:07:21:c6:72:c5:b3:
c2:03:1f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:34 2025 by rpki-client