Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3fd753-7327-4aa2-b556-f93692fc1818/1/qxAld_DIPIxnnu1DVox6vL7MtU8.mft
File: qxAld_DIPIxnnu1DVox6vL7MtU8.mft (raw, json)
Hash identifier: pkmgcSvyF2q2oP7Tvk8FQt/DfP1j5ClzVWXAfXFHjXQ=
Subject key identifier: E6:30:CD:FC:CD:D2:6D:9B:CC:A7:40:94:11:36:83:DA:DA:CC:2C:F9
Authority key identifier: AB:10:25:77:F0:C8:3C:8C:67:9E:ED:43:56:8C:7A:BC:BE:CC:B5:4F
Certificate issuer: /CN=ab102577f0c83c8c679eed43568c7abcbeccb54f
Certificate serial: 018AF75848E97AFD6172A6DCC058E6012CE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qxAld_DIPIxnnu1DVox6vL7MtU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3fd753-7327-4aa2-b556-f93692fc1818/1/qxAld_DIPIxnnu1DVox6vL7MtU8.mft
Manifest number: 0119
Signing time: Tue 03 Oct 2023 21:01:12 +0000
Manifest this update: Tue 03 Oct 2023 21:01:12 +0000
Manifest next update: Wed 04 Oct 2023 21:01:12 +0000
Files and hashes: 1: jdne--t4KSDI3CLlSCrxJzcwLtE.roa (hash: smvL8VtHisswUK7ImnMNMCRcqnIXXxAxnAT0+3LHfMU=)
2: qxAld_DIPIxnnu1DVox6vL7MtU8.crl (hash: liYQVASlLmgXKJWleydglhqTFsQJ41UfP+rEGvd2Ws0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f7:58:48:e9:7a:fd:61:72:a6:dc:c0:58:e6:01:2c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab102577f0c83c8c679eed43568c7abcbeccb54f
Validity
Not Before: Oct 3 21:01:12 2023 GMT
Not After : Oct 4 21:01:12 2023 GMT
Subject: CN=e630cdfccdd26d9bcca74094113683dadacc2cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:db:b3:fa:61:a2:21:30:c5:cd:cc:66:59:0f:
4c:b9:33:94:eb:af:11:0f:fb:5a:5d:ff:74:94:64:
3d:63:6a:aa:49:6f:df:8b:dc:a8:16:c9:21:de:59:
bc:e8:8c:2b:14:cd:a0:60:81:23:e1:47:7b:83:97:
b2:d5:85:af:a3:d1:15:67:4a:df:7d:7f:66:4b:d0:
18:66:d0:c6:95:6f:14:4c:83:13:b7:2f:f3:28:c6:
4d:13:9f:9c:15:13:ce:40:16:ee:c5:2e:2c:9e:31:
bd:8d:fa:bb:61:86:7b:3d:61:b4:83:fa:65:e2:05:
14:8f:77:89:f3:54:bb:4f:16:21:a5:07:c5:f2:53:
fd:47:d4:95:86:94:fd:5f:db:d9:ae:32:06:93:9b:
bd:aa:d0:2c:88:a5:a2:25:96:2e:db:c5:16:56:58:
56:24:69:e5:97:0c:9a:12:eb:5c:46:08:1b:49:c9:
1b:f1:40:93:c1:fc:9b:ad:2d:a6:25:70:6b:24:c0:
91:91:d5:86:90:a2:6c:6c:14:a9:d7:17:fa:6c:80:
a5:fa:29:be:79:74:89:bb:ce:83:60:3e:78:c7:d1:
8f:4d:69:45:71:da:80:fc:ce:07:8a:af:85:5b:2d:
c1:0a:52:b2:4a:fb:8c:d9:75:e2:82:d1:bc:c3:60:
74:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:30:CD:FC:CD:D2:6D:9B:CC:A7:40:94:11:36:83:DA:DA:CC:2C:F9
X509v3 Authority Key Identifier:
keyid:AB:10:25:77:F0:C8:3C:8C:67:9E:ED:43:56:8C:7A:BC:BE:CC:B5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxAld_DIPIxnnu1DVox6vL7MtU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3fd753-7327-4aa2-b556-f93692fc1818/1/qxAld_DIPIxnnu1DVox6vL7MtU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3fd753-7327-4aa2-b556-f93692fc1818/1/qxAld_DIPIxnnu1DVox6vL7MtU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d5:94:fa:e7:fc:d1:b2:c0:01:a1:eb:78:83:3a:2d:ad:17:
f0:2e:a1:dd:a8:79:a1:a9:36:b2:35:7a:60:3b:66:5f:b1:e2:
33:8a:a1:4b:55:8a:d4:3a:0b:21:d8:0b:aa:7b:c3:ef:27:01:
54:43:4f:44:31:81:fb:71:de:80:e0:e1:1e:0c:cf:1e:60:71:
1b:65:63:a8:25:b5:40:a3:6d:24:25:c9:14:00:bb:6d:f9:b3:
a9:76:62:70:52:94:08:e5:08:3c:fc:a7:8f:5e:64:d3:32:99:
b3:3b:a9:e2:0e:32:a5:41:97:2a:0c:e1:e7:c5:60:1a:33:3e:
89:f4:24:0b:bc:b1:3a:a2:77:d8:85:a5:96:e3:a7:bc:92:63:
95:91:f6:a4:bc:cb:2c:76:fa:cf:ed:3c:bc:97:99:68:09:71:
0e:d7:77:a6:60:60:00:a5:3e:9b:8f:85:3c:d1:b7:70:e7:69:
54:ca:ee:18:69:c9:48:86:ce:2e:35:81:6d:e8:a9:ee:0d:50:
a4:7d:94:4b:39:50:dc:ec:03:1e:9c:26:ed:23:6b:7c:ad:a9:
ce:dc:6a:ed:12:db:f6:c3:ce:1d:55:28:78:01:47:98:c5:7a:
44:5d:04:75:d5:08:39:c6:47:0e:78:f2:68:c6:68:9e:bf:ae:
fe:08:69:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 07:46:38 2025 by rpki-client