Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
File: qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft (raw, json)
Hash identifier: 8Fdll6ojbhz8ooH20BKxJumSKRcYKZGfCzgacDw+Ko4=
Subject key identifier: 92:97:F7:C1:41:2F:68:09:C9:85:12:A0:17:18:6B:91:06:19:FF:CA
Authority key identifier: AA:A5:34:64:A8:10:AA:38:C9:36:D9:D9:8B:6A:2D:13:2F:CB:FF:58
Certificate issuer: /CN=aaa53464a810aa38c936d9d98b6a2d132fcbff58
Certificate serial: 0195E15A19B1A974A24BBD1AC8BD6D94DA21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
Manifest number: 14C2
Signing time: Sat 29 Mar 2025 10:02:12 +0000
Manifest this update: Sat 29 Mar 2025 10:02:12 +0000
Manifest next update: Sun 30 Mar 2025 10:02:12 +0000
Files and hashes: 1: nEGj30N7Wbasb6AnvF-74ldwKOw.roa (hash: 4FClR6vcMY2SCJnOebSa9NEF0JcRgbJiRCF7Wp1Q7zQ=)
2: qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl (hash: H/w9Kdp+AWvMB4lOmQDFVCzQtPsl/pIB8F8FSVzpoVk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:5a:19:b1:a9:74:a2:4b:bd:1a:c8:bd:6d:94:da:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaa53464a810aa38c936d9d98b6a2d132fcbff58
Validity
Not Before: Mar 29 10:02:12 2025 GMT
Not After : Mar 30 10:02:12 2025 GMT
Subject: CN=9297f7c1412f6809c98512a017186b910619ffca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d0:e5:1b:63:bb:8d:44:65:1c:0c:8f:94:3b:
e4:98:9a:74:09:89:94:16:bf:ff:40:cb:28:64:96:
b3:e3:da:fb:3b:b9:72:d1:b4:aa:d5:79:1e:52:da:
0b:39:55:06:89:b1:5f:5c:e1:dd:b9:8c:5e:ad:a2:
56:7f:46:52:56:b3:ea:79:56:0d:be:c1:87:38:fd:
7c:d3:81:53:46:74:d4:55:47:0c:aa:e2:aa:49:a3:
c6:df:aa:9f:6b:b1:fc:cf:68:a4:ab:44:0c:fa:04:
df:1a:0c:6f:f1:88:82:7f:b2:5d:57:ec:44:6c:47:
24:70:e2:9f:e9:45:23:9a:e4:90:08:7a:ca:35:9c:
ca:7f:49:81:c6:fc:4f:a3:97:7e:d5:5d:8d:1a:cf:
35:d2:62:f7:3c:00:46:02:4c:85:4e:65:d7:be:03:
b2:44:7f:b2:b8:b1:4a:39:e5:79:2a:8e:63:55:f6:
c1:22:2d:46:cc:26:f0:91:27:5f:c5:ff:44:b6:cc:
90:ce:0e:bc:1f:b2:65:ac:ad:36:50:ed:78:77:2f:
61:f2:d4:af:06:f9:d6:d5:89:e7:99:b5:3a:19:0b:
5e:48:d9:fa:38:4d:6f:df:43:ee:6c:15:7b:12:33:
1c:f0:de:8f:64:77:b3:3d:ad:f5:c0:f8:ab:59:6c:
bc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:97:F7:C1:41:2F:68:09:C9:85:12:A0:17:18:6B:91:06:19:FF:CA
X509v3 Authority Key Identifier:
keyid:AA:A5:34:64:A8:10:AA:38:C9:36:D9:D9:8B:6A:2D:13:2F:CB:FF:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:4d:44:8d:37:e3:fe:b8:85:7a:75:6d:8f:3e:88:22:97:96:
fc:d3:7a:60:22:ce:e8:9c:be:10:35:7d:78:44:be:01:bf:23:
4c:49:5b:4b:a3:cf:62:9b:a9:00:a5:1c:45:2a:68:61:05:48:
aa:78:d5:44:0a:d1:2a:23:95:0b:da:94:d3:dd:bf:75:28:58:
c4:8f:f3:8b:41:7f:d0:08:86:8e:dc:d0:16:09:5e:13:42:73:
31:36:70:db:38:92:06:c3:9d:29:ea:86:57:63:45:fd:27:af:
d0:0e:b9:55:e1:f0:31:3a:c0:09:f6:45:30:e8:96:12:c4:97:
e3:5a:0c:56:28:47:8e:92:1a:d0:ba:51:63:bc:d8:f2:7b:05:
82:4d:5c:88:59:19:e9:b5:47:0d:39:d8:c7:89:46:ef:df:92:
68:7b:e9:2d:c2:c2:90:ff:03:d3:81:65:f4:f5:75:84:7f:44:
02:04:89:98:68:86:65:3f:ff:a8:74:70:dc:98:8d:ed:26:82:
33:81:84:2b:dd:db:ab:39:45:ea:91:3f:ea:09:7c:3e:9c:fd:
e9:39:7c:ab:73:c6:94:9c:47:c7:83:bc:d6:32:d0:38:9b:20:
53:2e:53:42:54:f7:df:bf:c6:53:dc:4f:f9:55:bb:18:37:fb:
30:58:16:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:18:37 2025 by rpki-client