Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
File: QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft (raw, json)
Hash identifier: Kg9Eu6ylAsgM5wjX2p9BlaWeR4/304CvTF50+Ev4F90=
Subject key identifier: 6A:EE:10:33:FA:09:6E:2F:8D:54:5B:48:CB:02:F0:2D:97:AA:C9:CD
Authority key identifier: 42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA
Certificate issuer: /CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
Certificate serial: 0194BC04FA8E6D622E95D1394B3ED8C1C438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
Manifest number: 08BC
Signing time: Fri 31 Jan 2025 11:00:30 +0000
Manifest this update: Fri 31 Jan 2025 11:00:30 +0000
Manifest next update: Sat 01 Feb 2025 11:00:30 +0000
Files and hashes: 1: QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl (hash: +76Gaw4BOPXjR6WJIe6p4ic3GcrvfAfImfKr6WCN/W0=)
2: Y5evNC6nSTbaw2HNqlP-IIa_w8w.roa (hash: bcLU6wxFqb3pGDabhdJfOsSNGRX1c39YDi9EFe9onLk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:fa:8e:6d:62:2e:95:d1:39:4b:3e:d8:c1:c4:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
Validity
Not Before: Jan 31 11:00:30 2025 GMT
Not After : Feb 1 11:00:30 2025 GMT
Subject: CN=6aee1033fa096e2f8d545b48cb02f02d97aac9cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a5:55:7e:b8:a0:79:bd:59:6f:41:8a:09:73:
76:8f:50:22:98:65:2a:ad:a1:78:11:1f:96:9e:a4:
35:24:e4:3b:62:a2:d1:6f:57:4f:f6:36:e1:88:a8:
2f:f9:76:bd:d7:0c:c3:6f:c2:cb:00:40:f0:45:48:
1c:81:9f:a8:2f:2d:a6:d8:5e:10:2a:dd:fb:10:c4:
24:73:91:f2:7c:58:c4:17:47:20:f9:c5:14:d0:cf:
a3:ae:8e:15:48:41:ac:a2:f9:01:8d:40:f7:a6:c2:
c5:d1:6e:5f:95:81:3a:38:fd:ea:7f:b2:da:c3:b8:
06:96:a8:95:f9:32:11:e1:2f:a7:82:6d:83:40:e7:
4d:6c:61:f2:da:a9:78:9d:13:02:1e:45:61:79:83:
c3:9e:4d:f2:98:bb:78:e1:3d:3a:b2:da:09:6b:50:
f0:f9:4f:c3:4a:85:e0:f2:0e:53:6f:b3:3c:0a:c2:
cb:e4:9c:5a:0c:2c:a2:37:8b:4d:b4:9f:74:91:23:
a9:8a:a4:d4:86:90:9b:ca:04:9e:ae:b4:0b:82:87:
c5:9c:9d:8f:34:14:e2:fe:6f:a3:22:ad:08:0e:44:
eb:1d:e1:ca:23:c5:57:4b:95:43:b2:ba:58:9a:cb:
57:ee:99:6c:32:9c:3d:32:30:e8:77:63:5d:da:6e:
46:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EE:10:33:FA:09:6E:2F:8D:54:5B:48:CB:02:F0:2D:97:AA:C9:CD
X509v3 Authority Key Identifier:
keyid:42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b0:68:ee:5b:8d:fc:ba:bb:c7:b0:2d:14:94:a1:d3:c5:be:
f7:fa:f9:cd:0d:a2:9d:f4:bb:60:9b:05:2a:a2:4f:f8:7f:e8:
0b:3b:1a:f6:99:bb:42:a2:33:cb:36:fc:99:b4:88:c4:89:96:
7c:41:74:b6:86:5d:4e:37:a9:b1:e5:4b:8f:6b:82:95:46:25:
42:79:a2:4e:a6:c8:c7:80:03:e9:ee:8f:30:bd:cb:45:68:d5:
43:b5:12:55:11:36:04:5f:7a:6b:d1:23:a8:15:52:db:d1:0b:
15:99:96:22:ce:5d:08:ec:04:c2:fe:5f:82:b3:4b:06:8c:ae:
6b:d0:3c:6b:e7:b8:53:22:48:ba:8b:9e:e2:1e:64:be:26:32:
b2:88:d7:ba:c6:2e:2f:e1:a2:1c:0f:fd:a8:e8:59:a5:19:bf:
02:43:a9:fb:5d:b3:b4:24:2b:5f:8c:b1:f0:03:c1:c9:2e:3f:
e1:92:55:ff:37:b4:64:03:16:d9:8b:7a:da:f3:62:65:23:16:
d0:9e:a8:25:00:1c:63:49:31:5c:fe:bc:b8:d7:8d:ca:1d:c0:
e7:7f:32:13:ea:e0:7a:80:04:d0:a0:7b:bf:ea:18:61:b2:be:
61:f2:bb:db:d8:20:3e:f4:d1:81:e4:92:e2:3f:2f:43:2a:da:
f1:39:3c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:40:16 2025 by rpki-client