Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
File: qjV0fbQXDtRXVsyaOk52iaDrYsc.mft (raw, json)
Hash identifier: 9vY9YGFIc521ToC5FR/cfy7wx/eNDI4G2apCME16MKk=
Subject key identifier: 61:61:3B:C3:9C:AB:64:25:54:50:42:3A:D1:C8:83:57:6D:56:F6:97
Authority key identifier: AA:35:74:7D:B4:17:0E:D4:57:56:CC:9A:3A:4E:76:89:A0:EB:62:C7
Certificate issuer: /CN=aa35747db4170ed45756cc9a3a4e7689a0eb62c7
Certificate serial: 0194BC3BDC33F055CDB7C23E9EBCCBDE33D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
Manifest number: 0111
Signing time: Fri 31 Jan 2025 12:00:27 +0000
Manifest this update: Fri 31 Jan 2025 12:00:27 +0000
Manifest next update: Sat 01 Feb 2025 12:00:27 +0000
Files and hashes: 1: c4TxJnX6SULpOIlEbtsYVcPO_1E.roa (hash: mprESb6/2u0lim3u1bjN8fuUSWrOypjztHMO2wyLys0=)
2: qjV0fbQXDtRXVsyaOk52iaDrYsc.crl (hash: Uzf7xI9QQWrk0imcB1fgNFwITJorix1G365kPsOaNuE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:dc:33:f0:55:cd:b7:c2:3e:9e:bc:cb:de:33:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35747db4170ed45756cc9a3a4e7689a0eb62c7
Validity
Not Before: Jan 31 12:00:27 2025 GMT
Not After : Feb 1 12:00:27 2025 GMT
Subject: CN=61613bc39cab64255450423ad1c883576d56f697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1e:0f:00:86:e6:e8:15:0f:5e:69:af:5b:77:
64:90:fe:70:74:5b:4b:c4:ad:9b:60:92:de:36:bb:
c6:a3:5c:9a:da:e7:8b:4f:c0:59:33:03:25:b6:f7:
8b:4e:15:6a:40:85:11:70:92:e7:70:d2:d4:11:27:
44:4d:9c:d7:2e:f2:ed:1b:a5:36:c3:c3:aa:14:6c:
78:ca:2d:b8:9b:93:91:dc:1f:d3:95:74:ad:83:90:
90:4c:94:5a:c5:99:b3:37:9d:10:98:a5:a0:99:76:
c2:6e:f8:3d:ec:af:24:8d:ca:e7:9a:59:60:1f:0a:
86:a7:af:38:64:c7:42:69:d1:40:d3:f9:58:69:e8:
4a:32:95:70:3b:43:be:2a:9d:62:be:57:4e:94:ed:
5e:06:b0:cd:51:4c:ec:51:00:63:b3:d5:64:82:9c:
d5:f4:7c:57:c5:61:43:0f:08:93:b9:ef:94:2d:ce:
b2:30:94:9f:ab:d9:36:bb:e7:8f:34:2e:0e:47:01:
48:9e:e4:20:f3:f1:94:bb:92:00:d7:df:70:dd:bb:
5e:50:97:38:b0:bf:99:d3:bb:a7:02:b5:eb:60:40:
71:df:3f:80:17:19:d5:c0:a5:4e:f4:dc:de:d3:0e:
23:1a:5b:95:f5:8c:da:74:4b:88:91:90:34:c1:dd:
27:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:61:3B:C3:9C:AB:64:25:54:50:42:3A:D1:C8:83:57:6D:56:F6:97
X509v3 Authority Key Identifier:
keyid:AA:35:74:7D:B4:17:0E:D4:57:56:CC:9A:3A:4E:76:89:A0:EB:62:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e5:8f:20:d4:bf:19:46:a8:9a:ba:89:d8:32:87:af:6d:01:
8e:cc:5c:e3:12:c6:47:05:3b:b9:a5:e7:24:42:b3:07:9a:c2:
0b:2d:a3:81:41:8c:ee:7e:0f:ec:09:fd:89:72:a4:83:48:28:
f4:21:c2:42:64:b7:37:bb:77:4a:94:6e:cd:bb:ae:cc:0d:6d:
c4:b3:b2:a7:c0:ef:ca:df:36:62:61:27:8e:93:a1:d0:cc:ce:
6d:90:1f:c8:9a:5f:82:76:ad:af:64:f1:ed:39:be:1d:e5:00:
3a:21:e4:e1:ef:4d:5a:08:f4:36:15:f7:45:83:d6:a6:bc:85:
c4:64:b5:ab:e6:dc:e0:a3:38:4e:3a:f4:d8:07:b9:7b:e5:2f:
1e:63:54:92:99:c9:4a:d7:b2:90:90:94:f7:d0:d6:4b:85:6c:
56:ab:1e:4a:29:03:d2:ab:a7:88:00:c4:3e:72:fb:11:ad:3f:
61:73:7b:73:b1:05:2e:85:a0:ca:98:fa:92:49:ec:f4:ef:eb:
37:f8:3d:0a:b7:a3:f2:aa:71:1e:43:ba:c7:15:1c:f8:03:08:
60:dc:9b:f0:af:f7:d3:42:9b:63:9a:7a:c2:9b:a8:12:85:d8:
0b:34:99:05:06:97:37:ae:2b:b3:d0:1b:63:7e:71:6f:0c:39:
cc:3c:17:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:06:32 2025 by rpki-client