Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f1e405-fa46-4be9-b1db-167b7b55ee14/1/qtdbGLTFgKB52wvMKpyBhvqf5qE.mft
File: qtdbGLTFgKB52wvMKpyBhvqf5qE.mft (raw, json)
Hash identifier: ba5lX/8xgmcpVdVZXvN9XMprJYK5Zy43iq1W/Wnscdg=
Subject key identifier: C3:39:67:2D:DB:FD:B2:B2:F1:E2:B8:7F:CB:B5:5A:13:BB:F0:E6:7E
Authority key identifier: AA:D7:5B:18:B4:C5:80:A0:79:DB:0B:CC:2A:9C:81:86:FA:9F:E6:A1
Certificate issuer: /CN=aad75b18b4c580a079db0bcc2a9c8186fa9fe6a1
Certificate serial: 018432B317AB16C3696139440FB03DF045E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qtdbGLTFgKB52wvMKpyBhvqf5qE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f1e405-fa46-4be9-b1db-167b7b55ee14/1/qtdbGLTFgKB52wvMKpyBhvqf5qE.mft
Manifest number: 02CB
Signing time: Tue 01 Nov 2022 10:18:28 +0000
Manifest this update: Tue 01 Nov 2022 10:18:28 +0000
Manifest next update: Wed 02 Nov 2022 10:18:28 +0000
Files and hashes: 1: V4Vg7FR8TvZ6BrVkuC0GV8HiVHM.roa (hash: oubk8kT7f/PCTPzMQUAjRwdm9UgIAUwosk58AH+M1/E=)
2: qtdbGLTFgKB52wvMKpyBhvqf5qE.crl (hash: IpKBnpwOCjbBMoadkqwEN/YrTAHw0LR3SziY0ElEPmk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:32:b3:17:ab:16:c3:69:61:39:44:0f:b0:3d:f0:45:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aad75b18b4c580a079db0bcc2a9c8186fa9fe6a1
Validity
Not Before: Nov 1 10:18:28 2022 GMT
Not After : Nov 2 10:18:28 2022 GMT
Subject: CN=c339672ddbfdb2b2f1e2b87fcbb55a13bbf0e67e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c5:4d:7d:ab:18:46:49:c8:bf:6c:3f:66:4a:
e6:7b:c5:a4:f4:6e:64:7f:86:ea:0c:0f:6f:ae:66:
13:54:27:e1:01:d4:df:93:55:40:70:1a:65:ee:d9:
ca:8b:35:d8:3b:14:a8:9f:b7:ee:5f:1e:b6:5d:80:
2e:2a:60:69:be:a8:1a:24:e9:91:1e:0c:2b:f2:57:
99:22:e4:47:20:b1:cc:1c:da:37:29:f7:d3:e7:a7:
5c:ba:34:dd:96:76:ca:34:b2:ee:e6:b9:b9:02:3c:
5c:73:f3:5f:41:d1:29:e4:23:36:72:f8:db:1e:90:
d2:dc:fe:ab:20:fb:f4:d1:00:0a:a5:82:c8:0c:1e:
68:a9:41:a3:61:aa:2b:18:66:40:a1:ac:f4:cb:f8:
81:70:96:77:2d:f0:d0:28:f6:02:e0:5a:a0:41:97:
9c:8d:3e:af:7e:db:f2:16:3c:d0:49:ed:10:dd:7f:
2c:db:fd:24:b8:0b:2d:6e:1b:e8:b9:49:95:b6:4b:
6c:f6:45:1a:a8:96:a3:af:8a:b8:cd:65:bd:c1:44:
8b:52:1d:50:c6:11:d0:b0:ab:b7:4a:e9:71:4f:3e:
cb:3d:ab:20:e2:81:2f:4e:6d:e7:19:10:72:94:e0:
61:d4:7a:18:cf:31:39:e5:a3:bd:b0:b6:13:b6:29:
20:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:39:67:2D:DB:FD:B2:B2:F1:E2:B8:7F:CB:B5:5A:13:BB:F0:E6:7E
X509v3 Authority Key Identifier:
keyid:AA:D7:5B:18:B4:C5:80:A0:79:DB:0B:CC:2A:9C:81:86:FA:9F:E6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qtdbGLTFgKB52wvMKpyBhvqf5qE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1e405-fa46-4be9-b1db-167b7b55ee14/1/qtdbGLTFgKB52wvMKpyBhvqf5qE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1e405-fa46-4be9-b1db-167b7b55ee14/1/qtdbGLTFgKB52wvMKpyBhvqf5qE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ab:66:f1:ef:f6:4c:5a:a1:54:9a:07:4c:68:a7:34:d3:4f:
1b:aa:8b:b5:8f:61:b3:24:dc:09:f0:78:98:d4:ff:9d:c1:da:
c3:d3:81:52:77:01:6b:70:73:76:45:6b:b4:8e:36:fb:48:a4:
c7:cf:ac:a1:af:c9:a1:eb:93:08:c6:30:e6:ba:89:2c:01:9f:
6d:a5:49:8e:99:1e:ed:3d:1e:03:12:dd:cb:6d:b3:2c:6f:88:
71:18:84:8d:6a:6e:95:47:e8:90:05:fd:1d:0d:f2:c2:a0:56:
50:30:77:da:c5:88:55:85:5c:0f:59:47:5c:58:06:40:f6:cc:
31:88:fd:c0:1f:4f:9f:4c:86:05:59:ad:e2:1d:1c:2a:1e:26:
4e:40:30:f6:32:b3:ce:cf:4d:a7:f2:ac:20:73:07:5e:2a:2c:
0a:bb:59:c6:b8:d0:dd:d0:52:f9:05:99:34:cb:a6:cc:94:24:
77:07:8b:cb:6f:31:98:b8:de:d2:87:e1:d3:3c:83:be:ba:59:
58:54:90:b3:bf:f6:72:95:b7:a9:40:6c:8c:33:6c:ef:b3:82:
63:b7:45:2c:45:e8:cc:24:e9:a9:4e:29:9d:a8:27:4f:8f:06:
bb:79:0c:0b:39:85:ef:27:c3:8d:75:63:ff:99:28:1a:20:78:
38:92:c4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:23:43 2025 by rpki-client