Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
File: 1-QN586_ZTA8mtn__o01ulGwp1iQ.mft (raw, json)
Hash identifier: PqnzzOMqrzx+aSMzupc0jpRk08+bdp8CVSQa5vB43sM=
Subject key identifier: 70:B4:ED:9E:BE:50:89:4E:D8:5B:FD:C6:53:18:84:BB:90:59:32:91
Authority key identifier: F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24
Certificate issuer: /CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
Certificate serial: 0194BC04B35A7B176DF42B647E1A75F07F73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
Manifest number: 1159
Signing time: Fri 31 Jan 2025 11:00:12 +0000
Manifest this update: Fri 31 Jan 2025 11:00:12 +0000
Manifest next update: Sat 01 Feb 2025 11:00:12 +0000
Files and hashes: 1: 1-QN586_ZTA8mtn__o01ulGwp1iQ.crl (hash: cgJb5ImsS0nBVTmywrtXbDdUGhyfjlkWjgZ3lbnlaYY=)
2: B9xdpXPKaKD7kATBDRUYPDrfJHM.roa (hash: xUpn/6yW+QKWLSXqnG2abjnoqVCxULjYMRU+slTa5PQ=)
3: YYzrkPDEMpFz0VlMFyfkPlvrIPc.roa (hash: ZTbSueGcUA5J+8KJD8a0DCRWPR/FrTGgSZg4efTERpc=)
4: z0hWnzSRmHLyAYMYl1nKCZOWbgw.roa (hash: GQY4W56WRkuweljajSL0/DPkbwKgksUsLIAtILepWM0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b3:5a:7b:17:6d:f4:2b:64:7e:1a:75:f0:7f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
Validity
Not Before: Jan 31 11:00:12 2025 GMT
Not After : Feb 1 11:00:12 2025 GMT
Subject: CN=70b4ed9ebe50894ed85bfdc6531884bb90593291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:49:fc:e0:01:49:f4:ae:1b:f6:2e:d0:eb:e1:
bb:28:51:8c:57:b0:bc:dc:af:e3:bc:2a:b1:c1:e3:
ad:a1:e5:a2:77:97:97:22:06:8d:da:6b:fe:74:71:
32:0d:16:80:89:eb:dd:cd:df:3a:eb:a6:d5:44:65:
9f:a8:e2:7d:de:01:47:27:4d:82:49:0a:b2:a9:30:
e2:61:d2:ee:f3:a0:5e:87:a2:59:03:d4:31:f1:ce:
d3:d9:65:24:04:63:48:d7:2b:d6:d3:32:d4:fe:03:
26:10:15:73:5a:24:e3:27:ba:6f:ae:a1:78:f9:4a:
9b:43:d6:5f:d4:76:ab:33:41:84:24:39:e6:49:ff:
67:5d:f6:ad:9d:bf:4d:21:8f:30:29:f7:2f:d9:a9:
64:46:fc:2e:08:e0:1b:d2:4c:b5:46:87:29:27:8a:
1c:3f:45:cb:22:2c:54:4d:70:7f:da:30:4d:41:a4:
e5:60:e8:74:98:15:0c:61:ab:4e:ca:d7:29:e8:ff:
6c:13:6e:5e:bf:3d:23:ae:d0:38:f6:13:57:dc:d9:
dd:4f:03:4d:3d:64:9c:3b:ee:a6:50:31:fb:5e:0b:
32:76:3c:07:2f:d9:35:9b:67:76:bf:d0:89:fa:18:
5d:61:df:9b:8e:9a:af:f2:e2:d6:27:a0:3a:d9:6c:
3b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B4:ED:9E:BE:50:89:4E:D8:5B:FD:C6:53:18:84:BB:90:59:32:91
X509v3 Authority Key Identifier:
keyid:F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:8d:ad:40:f7:99:85:07:1b:f1:0a:b0:3c:49:03:45:a5:96:
ab:41:7a:86:13:d5:6a:99:8e:df:b0:5c:9a:29:45:a2:94:fe:
0e:23:91:45:70:a7:46:d6:ba:58:07:9a:73:4b:34:e1:e7:c8:
5d:8f:3a:7d:d0:19:09:00:55:0a:7c:3c:10:b4:30:fb:90:f0:
a3:41:8b:a3:48:75:a2:79:8b:07:02:8e:16:58:af:7b:bd:f2:
37:7d:5c:07:d4:b1:1d:aa:57:bc:52:07:e4:66:dc:ab:01:8a:
6b:31:46:6d:29:ae:90:45:ce:0b:0e:e0:08:fe:0c:99:73:18:
d1:ad:b8:91:36:8c:15:ac:70:ee:76:94:2b:62:00:ca:10:99:
39:a8:75:90:4a:24:3e:73:6c:1c:9f:fb:ec:a1:b5:0b:88:60:
1e:dd:a7:7c:51:9a:50:c1:f7:5a:90:eb:8d:ef:0a:70:5d:80:
9f:55:24:92:a6:3b:ed:ec:54:45:63:b3:0b:74:bd:99:e2:7a:
a7:34:c2:d0:1b:a3:84:04:3f:cb:c7:5c:d5:ca:72:ef:7b:1a:
cb:26:b7:b2:68:0e:93:2b:03:2b:a9:d4:9b:1a:f0:3c:03:2f:
f9:80:e9:26:ab:97:21:3d:38:e9:3a:67:c8:7d:82:ca:3e:1a:
a6:c6:b0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:15 2025 by rpki-client