Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/58a62d-4ff1-4013-b554-2d930f23e4c6/1/qkJKdjqHmx5dQY0kzfs2cNuclwI.mft
File: qkJKdjqHmx5dQY0kzfs2cNuclwI.mft (raw, json)
Hash identifier: ZJTU5ATycqzq1S4V0b8r4Zg4xDTNTNZw88JxMKfrTnM=
Subject key identifier: 52:AC:3E:1E:4A:EA:A0:98:E6:5C:4E:B2:79:34:DB:34:5C:4C:8A:DF
Authority key identifier: AA:42:4A:76:3A:87:9B:1E:5D:41:8D:24:CD:FB:36:70:DB:9C:97:02
Certificate issuer: /CN=aa424a763a879b1e5d418d24cdfb3670db9c9702
Certificate serial: 018C39DA624A6C5CB90745E0ABD9AC461D23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkJKdjqHmx5dQY0kzfs2cNuclwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/58a62d-4ff1-4013-b554-2d930f23e4c6/1/qkJKdjqHmx5dQY0kzfs2cNuclwI.mft
Manifest number: 0807
Signing time: Tue 05 Dec 2023 12:01:02 +0000
Manifest this update: Tue 05 Dec 2023 12:01:02 +0000
Manifest next update: Wed 06 Dec 2023 12:01:02 +0000
Files and hashes: 1: BKu0wnguyoxLLXp7aVDlUhNYP2w.roa (hash: Azh8IBV0/sEoQ++dz+AAx6MsOAenEc3Ilmiw00cmWzs=)
2: OclxdoYj2Vx7UynuN_mB2bxCJt4.roa (hash: 9siJIfX0tc06s/FTNQnsfF4BAOkbrrN2GD/VAoyl31Y=)
3: qkJKdjqHmx5dQY0kzfs2cNuclwI.crl (hash: hMA6oozprYDouuR/Sl9v7VEeBdWmO7fHsZOyTQKhTSE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:39:da:62:4a:6c:5c:b9:07:45:e0:ab:d9:ac:46:1d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa424a763a879b1e5d418d24cdfb3670db9c9702
Validity
Not Before: Dec 5 12:01:02 2023 GMT
Not After : Dec 6 12:01:02 2023 GMT
Subject: CN=52ac3e1e4aeaa098e65c4eb27934db345c4c8adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:2e:ff:d1:f1:b8:26:95:78:fb:c0:c1:56:5b:
7b:5f:c4:86:48:27:03:a9:64:ae:b3:a5:0a:46:42:
84:1e:bf:5e:c9:8d:d3:f7:b0:28:8c:ce:0b:b0:02:
48:d5:ad:3b:f8:20:97:c8:0c:e3:82:5e:25:c8:3a:
46:ee:6a:79:f3:09:1b:0c:6d:07:7c:7e:1a:8c:b1:
96:f9:8b:56:d3:0d:ed:2c:b3:ac:7c:d9:c4:a1:62:
41:81:68:b7:f5:ee:a7:18:c3:fa:19:ca:39:61:16:
eb:4d:fa:37:93:eb:22:2b:82:6f:1b:89:17:20:55:
76:00:99:56:68:3d:c2:94:63:dd:00:d6:f0:ca:df:
f4:91:e2:36:da:0d:23:7b:c7:9e:89:f3:ba:bb:1c:
dc:a5:c6:b8:e1:e4:c5:76:2e:00:28:0f:75:ee:2f:
bd:2a:ca:6e:54:57:41:b2:0c:cb:49:6d:e7:c0:85:
ac:6e:b3:ed:ac:8a:fd:c4:d3:6f:a1:65:7e:0e:1c:
7e:b3:6b:a7:70:1a:9a:a1:29:6a:c3:5b:c6:ab:76:
dc:2d:33:26:22:db:60:5a:ca:68:06:c7:8d:88:5d:
38:31:5b:fc:a1:d3:b1:72:17:26:2d:3c:c5:0d:70:
93:71:e2:33:af:5f:37:1d:f8:fa:69:55:20:dd:40:
c3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AC:3E:1E:4A:EA:A0:98:E6:5C:4E:B2:79:34:DB:34:5C:4C:8A:DF
X509v3 Authority Key Identifier:
keyid:AA:42:4A:76:3A:87:9B:1E:5D:41:8D:24:CD:FB:36:70:DB:9C:97:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkJKdjqHmx5dQY0kzfs2cNuclwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/58a62d-4ff1-4013-b554-2d930f23e4c6/1/qkJKdjqHmx5dQY0kzfs2cNuclwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/58a62d-4ff1-4013-b554-2d930f23e4c6/1/qkJKdjqHmx5dQY0kzfs2cNuclwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:6c:ab:76:e5:61:59:71:80:5d:89:42:6c:35:03:2d:01:86:
d3:ac:8f:57:d7:97:fb:1d:bd:48:bd:2b:d1:52:50:d2:7e:28:
0e:af:0e:fb:ec:21:3f:d3:7e:a1:62:61:4b:47:b9:95:3b:f1:
32:7c:46:d6:68:4a:3f:f1:cf:b1:87:77:33:94:cb:5e:76:45:
68:c0:65:3c:83:82:23:b5:7c:57:a4:7f:40:21:48:f3:87:45:
49:f2:1d:3f:b8:14:80:4c:6d:b0:b7:a7:e2:6b:a6:7e:63:83:
15:b4:69:bb:d6:c7:cc:73:25:a2:26:09:d6:45:f0:eb:18:fc:
fe:7c:be:ac:d5:79:1a:dd:cc:5b:6e:9a:db:3b:64:26:17:6a:
c3:e0:eb:2e:35:d8:72:16:69:75:66:55:ae:21:56:e0:a1:57:
e6:5f:86:a5:a7:85:ed:dd:80:04:b1:de:31:85:7d:94:37:0a:
86:b7:b7:b9:3b:00:4b:f4:e3:9a:dc:11:92:83:2d:98:0e:76:
17:9e:8b:95:eb:5d:c0:41:5e:3f:32:7f:d7:96:03:b5:19:3f:
18:58:9f:93:71:df:1f:9a:60:27:32:42:e2:e6:40:d7:56:0f:
3a:ce:16:51:79:d6:23:a5:c8:74:47:a0:66:2b:52:8d:96:f2:
1b:9e:16:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:09:54 2025 by rpki-client