Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/31f397-4315-44f0-bad9-2649e1fda0f5/1/qlY_UgCkkzAk57R9d4YZRYVorbA.mft
File: qlY_UgCkkzAk57R9d4YZRYVorbA.mft (raw, json)
Hash identifier: ApaFQ9Q5IULOTDZvnnCY5TRjFnnKOnpI57xPmMykKCs=
Subject key identifier: F0:2F:CC:DA:BF:F2:AD:12:65:D9:41:79:E8:9F:18:46:D5:BB:11:36
Authority key identifier: AA:56:3F:52:00:A4:93:30:24:E7:B4:7D:77:86:19:45:85:68:AD:B0
Certificate issuer: /CN=aa563f5200a4933024e7b47d778619458568adb0
Certificate serial: 018B7E4FCBA1C5C32C755CE3666EBB795EF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlY_UgCkkzAk57R9d4YZRYVorbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/31f397-4315-44f0-bad9-2649e1fda0f5/1/qlY_UgCkkzAk57R9d4YZRYVorbA.mft
Manifest number: 0851
Signing time: Mon 30 Oct 2023 02:00:40 +0000
Manifest this update: Mon 30 Oct 2023 02:00:40 +0000
Manifest next update: Tue 31 Oct 2023 02:00:40 +0000
Files and hashes: 1: YwXRHPMrguB-QT1wMDkWZvqFMXc.roa (hash: LyAByl8TbbDsCG5Zs+HdU9IYhT/pWmi9Q0CY0368PWM=)
2: ovbVZAHwXGRRxJgy_SMW87shNRs.roa (hash: TaxDLsvqULZdi6kUwQKFKH0yuGipBLR1RZlsshPm5TA=)
3: qlY_UgCkkzAk57R9d4YZRYVorbA.crl (hash: oWFW8LgTXyDD0GH3a3DhzSY+weQ8ApKugEsPkS3gP28=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:7e:4f:cb:a1:c5:c3:2c:75:5c:e3:66:6e:bb:79:5e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa563f5200a4933024e7b47d778619458568adb0
Validity
Not Before: Oct 30 02:00:40 2023 GMT
Not After : Oct 31 02:00:40 2023 GMT
Subject: CN=f02fccdabff2ad1265d94179e89f1846d5bb1136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:21:74:b1:24:e6:4c:5b:28:10:ee:99:c0:c2:
1d:8f:6f:1c:12:fb:75:66:80:6f:25:2f:5a:db:b4:
dd:32:52:5b:a6:76:83:38:f6:b6:d0:cc:25:71:f1:
94:81:4e:41:94:74:cf:52:9b:ab:d6:cc:7c:c3:15:
20:7f:69:d9:fd:7b:ee:df:45:c0:22:8b:7b:96:58:
27:af:fb:ea:71:47:f4:6d:bd:cf:fe:8d:d7:64:bc:
2b:58:75:17:53:ef:ff:d4:7d:c8:df:a8:d3:8e:dc:
1e:25:ce:35:7a:b7:80:ee:d1:c0:75:90:14:d9:5b:
a5:19:89:fd:43:81:be:45:5a:70:df:22:7d:99:95:
1c:9e:b1:56:25:d5:f9:cd:8f:31:a3:b0:21:f3:cf:
10:11:b3:9c:83:19:7a:0a:3e:65:3c:30:d7:fe:87:
be:2c:6a:89:3b:bc:b3:ba:5e:06:d4:7e:04:bf:ec:
b8:ce:e3:4d:08:2c:02:bf:91:df:53:ba:0e:50:b5:
48:6b:8d:a8:db:d9:c6:e7:65:8b:9d:3f:f3:6b:12:
e6:2f:3a:6b:68:e8:b7:be:d4:ae:13:6c:37:a5:4e:
02:4f:28:d4:b2:b8:66:3d:dc:dc:9e:99:e5:06:05:
84:48:b1:f9:45:ad:81:8e:c9:61:d1:ab:d2:b3:d8:
f2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2F:CC:DA:BF:F2:AD:12:65:D9:41:79:E8:9F:18:46:D5:BB:11:36
X509v3 Authority Key Identifier:
keyid:AA:56:3F:52:00:A4:93:30:24:E7:B4:7D:77:86:19:45:85:68:AD:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlY_UgCkkzAk57R9d4YZRYVorbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/31f397-4315-44f0-bad9-2649e1fda0f5/1/qlY_UgCkkzAk57R9d4YZRYVorbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/31f397-4315-44f0-bad9-2649e1fda0f5/1/qlY_UgCkkzAk57R9d4YZRYVorbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:4f:0e:4a:02:22:68:22:25:ef:28:64:a2:30:13:96:27:3c:
65:fe:5f:16:d0:08:09:e5:94:45:81:4f:40:7a:58:39:d6:e8:
82:9e:5e:29:b5:13:2c:d8:ac:5e:f4:7c:81:32:97:c4:12:28:
ba:60:3e:3c:d3:73:33:fd:ea:1c:aa:ab:e0:37:1d:20:6f:5e:
09:ff:f7:21:a5:d7:3b:9e:c0:f2:3d:4f:ee:2d:fb:b6:4f:6f:
13:c7:a5:4e:18:b5:af:e1:30:cc:c7:ec:db:12:53:24:d6:46:
62:56:25:c8:bd:9b:1a:2b:73:41:73:57:91:b7:59:e4:f4:8c:
3d:9e:d7:44:b0:18:bc:9b:d0:99:f1:a5:9d:3c:ff:33:d2:6b:
d3:04:f2:7f:e0:77:e6:c1:2e:89:f7:e9:52:e6:63:12:ad:47:
8a:9d:ed:d0:4a:2d:34:45:09:ca:95:1f:3f:4c:98:ed:38:52:
e2:04:9e:f4:3e:15:60:fd:58:11:d9:6e:6f:03:19:82:db:86:
56:73:3c:2f:97:75:88:2d:97:76:6e:dd:93:43:c6:5c:bd:7e:
b3:f7:95:95:03:8b:0c:85:76:cf:a9:a2:93:29:00:88:01:5a:
e0:ff:94:e7:a4:b3:be:6e:a4:5a:cc:31:d9:f4:63:1b:29:f8:
36:02:8f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:28 2025 by rpki-client