Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft
File: qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft (raw, json)
Hash identifier: 7EO9Sm7Tjp70yj1aT/GLZmHALR4LyuFbySjJBuRG9WM=
Subject key identifier: 58:42:C2:B9:02:FC:DF:5F:2E:D6:5E:EB:13:15:22:9D:1C:53:B8:8E
Authority key identifier: AB:34:4B:32:F5:8B:56:4C:89:7A:1F:FA:69:67:08:91:98:F2:C8:22
Certificate issuer: /CN=ab344b32f58b564c897a1ffa6967089198f2c822
Certificate serial: 0194BC3C4B9C594CFD9E919FE95CD7868C90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qzRLMvWLVkyJeh_6aWcIkZjyyCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft
Manifest number: 0216
Signing time: Fri 31 Jan 2025 12:00:55 +0000
Manifest this update: Fri 31 Jan 2025 12:00:55 +0000
Manifest next update: Sat 01 Feb 2025 12:00:55 +0000
Files and hashes: 1: gS2YYEML9M4UNWK3VVDTZTM54bA.roa (hash: mr7+UlZRci6ZTeqcdGCeGzmY9P3YX+uy/+4p1bdlnM4=)
2: qzRLMvWLVkyJeh_6aWcIkZjyyCI.crl (hash: 2tC+jyJJQD6KFVc/xxfECWRARHxaOtBrgR/1TDhSvZ0=)
3: tSdceX3_WKYPOSqNpQt9_4TBFn8.roa (hash: zZjSigYgJ8knWkj4u0ar/HI7QTSKBL8PUuzQf8DJQWE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4b:9c:59:4c:fd:9e:91:9f:e9:5c:d7:86:8c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab344b32f58b564c897a1ffa6967089198f2c822
Validity
Not Before: Jan 31 12:00:55 2025 GMT
Not After : Feb 1 12:00:55 2025 GMT
Subject: CN=5842c2b902fcdf5f2ed65eeb1315229d1c53b88e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:29:e4:ea:69:1a:9f:0c:df:49:f2:2a:fe:69:
c6:c1:02:a7:4e:b3:94:d2:53:d2:89:09:4a:fc:b4:
68:7a:49:4a:7d:25:5e:93:9b:f9:e5:9a:82:65:86:
ff:bb:3b:28:34:00:67:85:39:9f:78:5d:64:d4:df:
b2:c2:8f:e0:04:bf:4d:df:e0:d9:78:ff:50:ed:86:
eb:d0:42:c3:97:cc:54:dc:72:de:df:7c:f3:e9:68:
39:49:70:55:32:20:e1:2e:a0:69:96:89:9a:f5:18:
00:b2:a6:9e:eb:2a:d6:c5:78:7f:0e:64:e4:96:41:
6b:0d:2d:63:52:f4:71:8b:fd:58:4e:97:95:b4:31:
80:b2:f1:94:79:d1:a7:5b:d0:ac:36:91:46:21:29:
bf:8c:0c:b0:f2:64:b9:50:a5:7c:06:62:60:16:67:
ac:60:15:1a:06:bb:2e:f4:aa:ef:9c:c4:8f:13:5d:
9f:53:c5:33:2e:99:b8:7e:24:b4:27:db:7c:51:37:
a9:ca:86:be:07:85:bf:68:a9:ce:4c:c0:d0:09:68:
d3:fd:35:fb:62:d9:ba:a2:a7:50:ae:d9:8c:d5:78:
5b:7e:66:74:ca:49:03:42:f4:6f:af:5c:26:6d:85:
b1:e3:ca:90:24:79:a2:5f:82:80:b4:c8:38:5b:42:
bd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:42:C2:B9:02:FC:DF:5F:2E:D6:5E:EB:13:15:22:9D:1C:53:B8:8E
X509v3 Authority Key Identifier:
keyid:AB:34:4B:32:F5:8B:56:4C:89:7A:1F:FA:69:67:08:91:98:F2:C8:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzRLMvWLVkyJeh_6aWcIkZjyyCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:2c:b8:08:13:7c:19:87:f4:ae:ef:e0:78:1f:31:ea:25:02:
b5:1f:a0:a8:3b:8f:69:2b:21:5f:03:9c:4d:0e:0b:36:8e:72:
93:e1:bf:07:99:81:b7:f8:47:11:cd:70:1b:5d:59:02:58:aa:
73:1e:00:04:df:93:fe:e9:47:d6:6d:61:36:bc:78:b1:29:43:
d1:a3:45:c8:33:0f:20:ca:cb:28:8b:22:ad:dc:2b:94:18:81:
3f:d3:e0:5b:fc:a9:61:ee:a1:88:ce:52:fc:0e:36:db:66:1d:
78:4a:4d:5d:1f:de:14:d0:96:10:ca:92:d1:6a:1d:64:b6:9e:
4f:53:1c:24:80:9f:4a:8e:80:9a:fd:09:5a:e7:b6:e0:28:1a:
93:81:84:91:80:cc:82:11:dd:7d:20:d9:7b:50:2c:c8:2a:fc:
96:df:f4:e6:d4:00:26:19:4a:b2:8e:f3:5f:06:1b:97:7f:29:
4d:5f:45:9e:01:67:6b:1a:f9:11:09:3a:c9:28:9a:d3:6d:23:
ba:fb:9b:89:ce:30:ed:07:9a:0e:74:b4:95:3e:72:55:0b:80:
d9:01:ec:ed:56:15:b4:7c:d1:f2:a1:9d:12:e0:74:07:11:27:
70:9a:cd:f6:3a:f4:62:1a:d9:3f:e7:d7:7b:d7:53:4e:e2:f0:
37:1b:b0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:20:43 2025 by rpki-client