Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b5da70-4210-463e-9dc6-979972a0014d/1/QB0ZYVrOK7vPoJFpCAgIdipksX4.mft
File: QB0ZYVrOK7vPoJFpCAgIdipksX4.mft (raw, json)
Hash identifier: BB3dv6wZtmvv5Is7e4lBADZHDGyBmJitGcdxHxISVVw=
Subject key identifier: 57:0F:84:96:DC:EA:C6:9E:00:16:EF:13:2E:0F:41:64:97:24:1D:6C
Authority key identifier: 40:1D:19:61:5A:CE:2B:BB:CF:A0:91:69:08:08:08:76:2A:64:B1:7E
Certificate issuer: /CN=401d19615ace2bbbcfa09169080808762a64b17e
Certificate serial: 0194BCE0EADFF545E26AA3A9C81CD501ED74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QB0ZYVrOK7vPoJFpCAgIdipksX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b5da70-4210-463e-9dc6-979972a0014d/1/QB0ZYVrOK7vPoJFpCAgIdipksX4.mft
Manifest number: 02F9
Signing time: Fri 31 Jan 2025 15:00:44 +0000
Manifest this update: Fri 31 Jan 2025 15:00:44 +0000
Manifest next update: Sat 01 Feb 2025 15:00:44 +0000
Files and hashes: 1: KrtTh6gsfptfdAcGq3CmJjqfV2o.roa (hash: eRRAdGSdFwP7Zvo2rxHWeAe37W0cOjnKNlia+tVBb+M=)
2: QB0ZYVrOK7vPoJFpCAgIdipksX4.crl (hash: 68H0qY9CY1xrO+nYE/u0D6YO8iQxUZT+QfMd79T17cQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ea:df:f5:45:e2:6a:a3:a9:c8:1c:d5:01:ed:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=401d19615ace2bbbcfa09169080808762a64b17e
Validity
Not Before: Jan 31 15:00:44 2025 GMT
Not After : Feb 1 15:00:44 2025 GMT
Subject: CN=570f8496dceac69e0016ef132e0f416497241d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ae:e7:85:93:ea:eb:57:b4:70:8c:03:ec:40:
9f:d9:26:d6:37:b5:4c:58:26:ef:2d:43:af:fb:0e:
be:ce:4c:5d:52:74:51:b3:4c:96:b6:1b:04:9e:54:
70:f0:a0:c1:52:69:b8:6b:48:b1:3c:0b:a8:50:d2:
15:7e:69:83:c6:8d:a2:bf:b3:d0:6f:37:5a:84:a3:
1b:f4:b1:27:28:4f:34:03:1f:20:ee:ed:27:58:a8:
64:fa:85:b8:0a:16:8c:e7:4f:01:90:dc:98:0c:b3:
ec:8e:2b:e4:16:89:31:f7:26:8a:37:01:3d:de:de:
d1:6b:56:e0:9e:1d:4b:24:78:53:8f:0c:83:81:64:
70:00:fb:28:a7:47:e4:75:53:71:76:05:b2:fa:29:
75:59:e8:ba:6d:1d:c6:04:95:90:81:a1:4f:d3:2d:
63:e1:87:49:fb:ac:10:75:12:6f:46:9f:9e:32:c5:
e0:15:a9:90:91:13:19:20:1a:f5:f0:f9:d9:06:d7:
c3:6a:5e:f1:a8:93:2f:0f:4c:3d:87:07:f6:cc:65:
93:8c:cd:33:6a:34:41:4e:7d:ed:33:39:bd:6f:84:
dd:d6:2c:7c:5d:b7:32:dd:a9:b8:6f:f8:82:dc:c1:
72:4c:dc:a7:53:b3:6d:a3:bd:78:d3:c2:8e:48:16:
60:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0F:84:96:DC:EA:C6:9E:00:16:EF:13:2E:0F:41:64:97:24:1D:6C
X509v3 Authority Key Identifier:
keyid:40:1D:19:61:5A:CE:2B:BB:CF:A0:91:69:08:08:08:76:2A:64:B1:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QB0ZYVrOK7vPoJFpCAgIdipksX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b5da70-4210-463e-9dc6-979972a0014d/1/QB0ZYVrOK7vPoJFpCAgIdipksX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b5da70-4210-463e-9dc6-979972a0014d/1/QB0ZYVrOK7vPoJFpCAgIdipksX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:e7:45:78:b4:33:e5:5e:4b:a7:e8:4e:74:6c:e3:3e:aa:5c:
28:2d:19:fb:90:29:0a:c2:86:2a:74:71:e8:c4:25:12:3e:9f:
ab:90:1d:1d:b4:d2:aa:80:c9:1f:10:53:ee:87:6f:e6:c0:92:
88:d3:83:14:0f:bb:69:c7:1e:cd:d9:62:34:00:e5:dd:7f:fd:
69:59:b1:ef:a8:f6:a2:4e:72:36:41:7a:68:c6:29:36:4b:a6:
de:c7:f8:cc:6f:76:b7:95:15:de:fb:d2:d9:e7:8e:41:28:ea:
da:51:72:67:05:67:37:dc:c6:74:82:0b:0f:1b:d2:12:44:3d:
ab:80:c2:61:80:29:f6:52:49:47:d5:8f:95:65:88:9f:be:70:
3d:1c:fb:c7:db:02:68:bd:dc:bd:db:78:f8:09:70:f2:1b:05:
cf:69:ec:b1:8e:c7:1a:25:1e:b5:c9:1e:99:a8:61:77:06:e8:
81:40:47:b0:54:3f:10:28:12:8a:38:f1:07:43:7d:3d:12:1c:
4a:96:92:9b:09:d4:63:90:3a:70:dc:5a:3e:a0:24:bc:9a:88:
03:60:71:90:1c:ce:9f:92:18:18:d8:39:a2:8a:28:ce:2f:26:
7c:05:d0:a4:ae:8e:80:49:fc:76:dc:94:a9:dd:55:d7:0b:0f:
ef:e9:98:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:30 2025 by rpki-client