Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
File: qKp6dXaxsilZDAkP01bDgt_zFbc.mft (raw, json)
Hash identifier: fLGuwo5KUx/RbV5yXqVGBlXAvwaB95BJu5FmWeF2Umw=
Subject key identifier: 82:85:E3:87:67:65:C5:E6:3A:1A:4C:BA:42:29:4F:2B:1B:23:9A:3D
Authority key identifier: A8:AA:7A:75:76:B1:B2:29:59:0C:09:0F:D3:56:C3:82:DF:F3:15:B7
Certificate issuer: /CN=a8aa7a7576b1b229590c090fd356c382dff315b7
Certificate serial: 0194BC04CB6AE351D6BB98459C72D1A0F981
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
Manifest number: 11F3
Signing time: Fri 31 Jan 2025 11:00:18 +0000
Manifest this update: Fri 31 Jan 2025 11:00:18 +0000
Manifest next update: Sat 01 Feb 2025 11:00:18 +0000
Files and hashes: 1: YiH83ySN13U92VHOYGZ1qNFCvj0.roa (hash: B8hbjbe1F86HPut31UQL0FZp1i37mwSF9nd5leIYsNo=)
2: qKp6dXaxsilZDAkP01bDgt_zFbc.crl (hash: rOtXyDzpZxfQ7LNmmuF8y4AnrRAhjpFYFwcxh33Sa+k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:cb:6a:e3:51:d6:bb:98:45:9c:72:d1:a0:f9:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8aa7a7576b1b229590c090fd356c382dff315b7
Validity
Not Before: Jan 31 11:00:18 2025 GMT
Not After : Feb 1 11:00:18 2025 GMT
Subject: CN=8285e3876765c5e63a1a4cba42294f2b1b239a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:df:f1:21:c5:36:45:a3:35:a7:d1:9b:93:ab:
08:4f:3e:ae:24:82:d1:0f:f2:f9:14:1b:d6:b1:dd:
a0:1e:d0:44:06:dc:0a:fd:7e:28:e7:a4:e1:8a:e7:
84:f9:55:73:09:68:b6:09:6e:e3:61:19:89:3a:1a:
64:5d:f2:14:4d:5e:b4:65:94:91:30:21:ec:96:01:
6d:e8:21:62:66:d3:3c:9f:98:b4:bc:e1:9f:32:fc:
7d:62:59:65:11:7d:16:e8:e6:a0:18:12:5b:95:64:
8e:f5:18:c6:fd:d6:32:fa:ed:a0:07:a3:5c:17:95:
e3:07:87:83:20:c3:b3:15:91:27:70:04:e8:8f:83:
6d:72:c3:16:de:ef:1d:11:27:39:7a:72:96:26:78:
7b:94:54:f9:d5:41:ae:41:ba:b9:f7:31:04:19:2c:
95:93:2e:7d:8e:4a:0c:41:b9:73:3e:b6:4b:7c:ac:
58:49:cd:ff:22:2d:d6:3d:38:38:3f:7c:89:a9:90:
5c:62:39:d1:95:48:68:3a:07:69:12:9e:52:f1:9d:
81:58:1d:bf:55:e4:c4:bd:c1:10:27:9e:f2:60:b0:
36:9b:95:5d:50:eb:74:e9:0e:1f:a9:3e:1f:38:f1:
ae:af:fa:81:47:a1:62:50:65:a2:70:c9:9d:8d:ce:
bd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:85:E3:87:67:65:C5:E6:3A:1A:4C:BA:42:29:4F:2B:1B:23:9A:3D
X509v3 Authority Key Identifier:
keyid:A8:AA:7A:75:76:B1:B2:29:59:0C:09:0F:D3:56:C3:82:DF:F3:15:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:37:73:dc:35:66:f6:69:b4:0c:78:87:13:f2:81:c3:fb:30:
14:8e:7b:52:12:53:67:48:8b:ce:20:42:5a:c3:2f:c5:6b:f2:
c7:47:8b:fb:68:ca:a9:b5:9a:5d:10:b5:81:88:f3:be:6f:1b:
f8:b9:be:72:09:53:7c:3a:14:0d:64:bc:91:81:7b:46:27:96:
4a:8f:c8:0e:8d:c1:ef:40:1c:20:e3:d7:27:b9:8a:cd:48:6c:
eb:0b:04:ac:4e:be:f2:e1:eb:b4:44:e6:15:6e:f9:51:f6:77:
7b:d9:91:d8:a0:6a:09:e7:38:96:80:eb:90:96:22:3b:48:ee:
51:fb:c4:1d:22:65:24:21:9a:32:f8:c9:91:d0:e7:67:66:52:
e2:3a:f0:22:b1:d9:ba:3e:5b:ec:e7:5c:17:8b:26:fc:9a:13:
4b:c7:80:5b:f4:b7:ac:24:3a:d3:cb:87:d8:39:5c:77:14:c9:
ce:3d:fd:46:9f:41:85:36:9b:8b:3c:f8:2b:dc:a3:cd:c7:fb:
79:e8:67:ff:df:ed:67:0d:5d:bb:8e:59:38:b9:10:c2:45:ea:
32:4a:04:35:56:dd:01:e1:5e:a4:12:4f:f5:50:ab:ee:6c:52:
3e:61:83:00:fd:82:b1:b0:49:8d:23:02:79:60:46:ee:90:bc:
dc:94:ea:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:19:38 2025 by rpki-client