Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
File: qIXNvd_X0TFoRb609zmPPOZPrNA.mft (raw, json)
Hash identifier: p54Fn7nD980S4yybK9FpXruH+73iB5ZZMM+OJFWtEso=
Subject key identifier: 71:03:6C:E0:AD:57:EE:57:8C:7D:20:9B:F7:68:AE:DC:B4:6C:0F:5F
Authority key identifier: A8:85:CD:BD:DF:D7:D1:31:68:45:BE:B4:F7:39:8F:3C:E6:4F:AC:D0
Certificate issuer: /CN=a885cdbddfd7d1316845beb4f7398f3ce64facd0
Certificate serial: 0194BD17AC21CF6E454BB47EAAD27EC3C058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
Manifest number: 116D
Signing time: Fri 31 Jan 2025 16:00:32 +0000
Manifest this update: Fri 31 Jan 2025 16:00:32 +0000
Manifest next update: Sat 01 Feb 2025 16:00:32 +0000
Files and hashes: 1: qIXNvd_X0TFoRb609zmPPOZPrNA.crl (hash: Rm9mn98cvp3EA7ooB1gbd2sRztZyj7HFD0/w4COyY0w=)
2: xtTCfWlyctb3-ZIARtvZc7gD2_c.roa (hash: DoO5FfFnFM++vEGajImQDDKEPB+yqs7BrAr2CdTgfGs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ac:21:cf:6e:45:4b:b4:7e:aa:d2:7e:c3:c0:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a885cdbddfd7d1316845beb4f7398f3ce64facd0
Validity
Not Before: Jan 31 16:00:32 2025 GMT
Not After : Feb 1 16:00:32 2025 GMT
Subject: CN=71036ce0ad57ee578c7d209bf768aedcb46c0f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:99:13:7b:e0:41:59:a6:2e:65:95:ce:39:d2:
42:14:7c:36:84:43:7f:c9:20:42:46:94:0e:f8:df:
c1:bc:8b:6d:2f:db:3d:2c:87:73:92:04:ee:9e:a0:
bc:f0:93:f9:1f:b4:6f:45:66:e5:22:94:81:a4:4f:
2c:d6:08:1c:64:30:99:f5:e0:35:d0:b2:19:cd:8d:
a3:70:f2:36:06:15:70:9d:12:40:a3:ff:0c:23:cb:
84:d5:bd:fb:cb:c0:65:6b:b2:eb:dc:78:fe:eb:cb:
bd:5f:2b:33:f3:6f:7e:2e:e0:a9:3f:37:11:f7:0e:
1c:b4:9e:db:f9:41:62:22:f2:2d:76:7d:30:fa:b5:
ca:3d:70:66:26:cf:1f:51:c9:7d:6f:f8:7e:4f:0b:
81:f7:8f:8f:4b:32:99:fd:1c:6c:c4:bb:59:3d:4d:
16:c2:e3:51:6a:fe:5a:4e:2a:90:b8:c6:86:7f:99:
91:5c:45:fb:0f:e3:35:38:ec:78:bb:10:3d:3d:b7:
e3:a1:3b:40:a6:22:af:2f:fc:df:47:9e:9e:b7:9e:
a6:ed:17:ea:21:07:ab:6e:75:96:46:ac:b3:54:42:
16:b8:60:d2:de:07:ba:ee:f4:63:57:5b:5c:9c:7d:
24:b9:c4:12:5e:15:cd:e7:63:d9:fe:91:e9:dd:f5:
e0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:03:6C:E0:AD:57:EE:57:8C:7D:20:9B:F7:68:AE:DC:B4:6C:0F:5F
X509v3 Authority Key Identifier:
keyid:A8:85:CD:BD:DF:D7:D1:31:68:45:BE:B4:F7:39:8F:3C:E6:4F:AC:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:d0:d5:af:ba:f8:e1:71:34:17:83:d6:b6:b5:5e:56:4b:32:
e0:83:f5:32:4f:6c:11:05:d6:7b:2d:fa:65:44:c3:d2:96:b5:
33:02:c6:2e:9e:28:06:cf:ba:f3:18:04:cc:07:3b:e2:ce:a5:
3d:a3:54:af:1f:b4:c2:a2:89:b2:c9:9b:63:a5:42:62:df:36:
8a:5f:ea:f4:d8:a2:ab:e8:ba:70:75:36:f6:94:ec:02:bb:f0:
ac:5a:1e:94:b4:00:25:11:c7:3a:6f:72:7e:b2:bd:37:1b:b2:
9e:cb:8d:7e:b2:ef:6a:7a:43:1c:14:94:d8:da:df:ea:cf:00:
fd:b7:f6:8b:d6:d3:79:b0:a7:62:ef:54:8e:5d:1e:dc:62:31:
73:46:1d:ea:50:bc:f4:53:f0:59:95:80:a7:90:a8:44:73:39:
f2:0c:29:1f:80:20:00:08:3d:84:4a:ab:1c:e0:f6:71:20:8a:
d6:94:d0:69:05:66:05:e9:f2:40:ce:57:f6:aa:23:bc:f2:5e:
1b:91:b2:7c:31:17:f1:7d:d3:2f:63:4c:ff:88:aa:92:71:52:
18:49:c7:8e:4c:45:9e:28:bc:9f:a3:3e:0d:2d:94:01:0f:91:
7a:1e:a1:15:59:c1:87:80:cd:f5:76:19:1e:2c:27:b0:a9:5e:
95:b2:1c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:33:49 2025 by rpki-client