Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/156aa7-54b5-417a-8365-d9828b495f61/1/qm8-2qZkBOfwW473306dIqOWBAc.mft
File: qm8-2qZkBOfwW473306dIqOWBAc.mft (raw, json)
Hash identifier: rIIDXzihYn0ks2SNiPkSjLw8B8IEBxOXa/bFPvmwGl0=
Subject key identifier: 69:12:93:C1:A0:4B:90:40:42:1F:17:54:BA:7F:9B:98:FB:DE:A4:FE
Authority key identifier: AA:6F:3E:DA:A6:64:04:E7:F0:5B:8E:F7:DF:4E:9D:22:A3:96:04:07
Certificate issuer: /CN=aa6f3edaa66404e7f05b8ef7df4e9d22a3960407
Certificate serial: 018EC0601DFEA2B629F326D2F67DA80D3128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qm8-2qZkBOfwW473306dIqOWBAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/156aa7-54b5-417a-8365-d9828b495f61/1/qm8-2qZkBOfwW473306dIqOWBAc.mft
Manifest number: 06D7
Signing time: Tue 09 Apr 2024 01:01:48 +0000
Manifest this update: Tue 09 Apr 2024 01:01:48 +0000
Manifest next update: Wed 10 Apr 2024 01:01:48 +0000
Files and hashes: 1: 8g8VhBAjd-fgDYen0_Ji3cCa1hw.roa (hash: mq02kYSNAubiAf9QnW3ovVhQHj+4Be2vJPPoThcPjKM=)
2: qm8-2qZkBOfwW473306dIqOWBAc.crl (hash: PrW87OgEFbRdGfXx6BZ5cWitBcFF4bw1N5X15VIqSz4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c0:60:1d:fe:a2:b6:29:f3:26:d2:f6:7d:a8:0d:31:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6f3edaa66404e7f05b8ef7df4e9d22a3960407
Validity
Not Before: Apr 9 01:01:48 2024 GMT
Not After : Apr 10 01:01:48 2024 GMT
Subject: CN=691293c1a04b9040421f1754ba7f9b98fbdea4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b3:9f:87:52:8e:7a:0a:41:6b:68:fd:35:45:
3e:77:92:6a:e9:ca:3c:b9:b9:57:30:b0:62:8b:d6:
28:e1:4f:80:6f:ec:fe:b3:53:93:0f:59:46:a8:5e:
f0:ae:15:b9:2a:7d:cc:1a:ab:f6:d0:33:fb:3e:2e:
3e:88:33:3a:9d:0e:b9:3e:85:7f:af:ef:7f:2c:80:
d1:c6:c7:b1:76:99:14:90:d2:33:7b:40:28:f7:d8:
56:36:62:c8:e1:a2:6f:48:af:35:ad:c8:32:0d:0a:
9f:96:b1:99:9b:00:13:d4:2e:87:d4:c9:4d:c9:de:
6c:3d:d2:f9:45:11:2c:81:0a:ff:fb:67:f8:4d:0f:
db:be:d9:eb:f3:3e:17:9b:8f:5b:f8:e1:e7:e1:45:
c0:90:f1:9a:6e:9e:2e:a7:55:45:0d:22:3d:61:28:
fe:eb:d0:12:39:03:b1:ef:c1:1d:d0:d2:68:dd:98:
27:b0:42:14:5f:62:76:13:8f:a5:bf:38:63:d4:cb:
ac:23:b2:7a:2f:8a:2c:b9:97:d0:17:3d:28:31:93:
aa:2a:69:bd:60:b3:36:bf:e4:c3:45:31:92:d0:d1:
bb:8b:15:6c:8f:db:52:94:18:00:b8:3c:cf:9d:64:
54:cc:f2:e5:b4:71:6d:6a:4c:d7:3e:8d:2b:fb:27:
94:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:12:93:C1:A0:4B:90:40:42:1F:17:54:BA:7F:9B:98:FB:DE:A4:FE
X509v3 Authority Key Identifier:
keyid:AA:6F:3E:DA:A6:64:04:E7:F0:5B:8E:F7:DF:4E:9D:22:A3:96:04:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qm8-2qZkBOfwW473306dIqOWBAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/156aa7-54b5-417a-8365-d9828b495f61/1/qm8-2qZkBOfwW473306dIqOWBAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/156aa7-54b5-417a-8365-d9828b495f61/1/qm8-2qZkBOfwW473306dIqOWBAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:48:a3:e8:fb:1c:9c:3e:35:1c:3c:65:45:b0:54:44:16:3f:
f5:62:1c:fd:8b:5c:6a:07:d4:21:c6:60:4b:22:f8:22:f9:59:
7e:58:69:27:29:6f:c1:2f:66:ae:a2:bb:cd:ee:3d:ff:38:a1:
c0:db:96:9c:39:89:21:44:a2:7e:3e:88:b5:2c:f0:6f:16:41:
6c:9d:c4:62:87:97:53:11:4c:1c:fc:25:b1:d5:4c:17:57:90:
7c:47:81:05:a7:fd:c4:9d:a2:e7:56:14:7b:3a:7f:07:07:23:
d8:2b:34:99:3a:7a:7f:dc:7a:af:48:d6:89:14:73:be:2d:e3:
1a:51:b4:b3:7b:0c:3d:90:d7:06:9d:46:db:ac:38:24:20:9f:
9c:b5:a3:1e:05:a7:2c:80:22:3b:af:8e:6a:f4:85:47:7b:03:
04:a0:d1:bb:85:05:f6:0f:c1:88:7f:2a:b3:d4:33:31:69:2e:
89:5c:44:44:61:b4:9d:7f:7e:74:46:28:72:0f:e1:cb:d6:2f:
28:48:e5:b5:7b:e8:8b:71:8e:a5:36:e9:4f:c0:a1:61:9a:44:
10:6c:2f:be:00:46:63:05:3b:74:17:09:f5:3d:53:07:dc:fa:
80:05:74:ab:f4:7a:6f:57:b4:cb:f8:08:6d:4d:36:3e:e1:36:
de:79:5f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:46:13 2025 by rpki-client