Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
File: QZYjDljezAy8-xX1aqZN7dHzifU.mft (raw, json)
Hash identifier: LGSezOsCYewATMRGsTfgPLsw/I7qNWU+pKS3jjcgChs=
Subject key identifier: 4B:8A:EB:F4:D8:A2:10:10:29:59:4D:CA:72:73:28:70:DF:CA:65:28
Authority key identifier: 41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5
Certificate issuer: /CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5
Certificate serial: 0194BD4E6BC5CFAB0A9B372FAF49536DFF8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
Manifest number: 0CEC
Signing time: Fri 31 Jan 2025 17:00:20 +0000
Manifest this update: Fri 31 Jan 2025 17:00:20 +0000
Manifest next update: Sat 01 Feb 2025 17:00:20 +0000
Files and hashes: 1: 3MDGg1OHtAL-geuqk_TgrHeNJds.roa (hash: UTv0UG9oxSEa8ZKyczNWu3GLgSXbEFX86w4PXZf/pcw=)
2: I-aNNYTyAuN1OPn_fraC4znA_R0.roa (hash: 7RI6xnS3LhT7DAfUQN8iG2vxZJyE8Si58lqfelc7Ygk=)
3: QZYjDljezAy8-xX1aqZN7dHzifU.crl (hash: 6jhO7dsFsHPmt6Xselan+GkHtsHr5VwRN+2iW7jwXMw=)
4: YXNgqkH32mHlbxjAP4XMYGxuX-A.roa (hash: U+xr/pCSHTkJQcJTemkszlIrTDWL9g14UMPWkZKLV+k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6b:c5:cf:ab:0a:9b:37:2f:af:49:53:6d:ff:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5
Validity
Not Before: Jan 31 17:00:20 2025 GMT
Not After : Feb 1 17:00:20 2025 GMT
Subject: CN=4b8aebf4d8a2101029594dca72732870dfca6528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a1:d3:e9:20:86:0c:41:36:87:f8:8e:d1:02:
7f:bc:69:96:83:8b:30:5c:6b:a3:f4:4d:47:07:c5:
07:fd:bb:2e:bb:6d:7b:2d:c9:2b:4d:57:21:87:b2:
f3:3b:ec:36:f7:a5:26:ea:e9:88:36:f4:89:1a:08:
6e:16:32:9a:85:6a:54:28:24:b1:55:3a:70:ce:8a:
d6:4e:05:7a:f3:45:3b:5f:13:64:ef:c8:d5:60:d8:
97:c1:3a:fc:5a:8f:c5:90:07:e8:4e:e8:9e:b6:4a:
99:0a:d0:ee:0c:de:50:1e:41:8b:50:2d:ec:4e:c7:
e9:e4:3c:a5:09:e6:77:d6:76:69:c5:6b:8f:f6:18:
1c:da:07:2f:f1:09:78:43:75:22:63:71:cc:9b:3a:
6a:7b:99:d1:b2:db:12:b9:25:be:bc:ba:5d:02:aa:
3e:61:1f:82:a0:5f:b2:83:13:b8:19:6e:78:86:3d:
98:25:45:85:f1:1e:b3:a2:bd:60:74:8b:21:3a:37:
07:66:d4:9d:a6:b3:fc:9f:b7:b1:32:2f:1b:f7:6a:
a1:f4:ad:92:5b:f2:b9:40:f7:23:f5:23:a6:17:cd:
59:d7:7a:ef:5b:08:5c:68:43:3c:45:83:f9:6b:09:
f2:32:9d:bd:f2:39:cf:5a:d9:36:12:53:5e:ed:c7:
d4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8A:EB:F4:D8:A2:10:10:29:59:4D:CA:72:73:28:70:DF:CA:65:28
X509v3 Authority Key Identifier:
keyid:41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:fe:01:e8:5d:ea:18:96:c6:c5:f3:23:b4:81:6c:c1:95:43:
bc:71:ca:8b:bf:8d:3d:f1:87:ab:44:18:e3:45:75:dd:ff:15:
f5:ac:f9:52:22:f8:ff:3f:bf:81:6e:d8:a8:aa:98:a7:d2:3d:
a0:3c:27:09:c8:28:95:d3:c5:34:04:e9:b5:53:cd:b9:73:25:
a3:5f:68:0e:32:24:43:63:64:16:48:c6:8d:72:e5:3b:4b:77:
d7:bb:50:46:63:61:52:89:33:c0:b7:5a:a3:a5:3c:d6:46:73:
fc:1a:a8:b6:a2:0a:ff:22:27:ea:05:65:c9:dd:fa:e0:e5:41:
b7:6e:87:82:b5:5e:40:1c:bc:4d:c0:56:a1:8e:e6:53:0e:83:
53:b3:0b:69:56:0a:7e:67:af:68:d5:e9:e6:53:cc:65:42:3e:
65:b4:f8:18:cf:07:ac:86:19:62:b8:c2:3e:1e:bf:19:9d:da:
16:fb:1a:94:ef:98:16:6b:5c:97:8a:ae:ff:33:48:d2:3f:1e:
e2:ba:b5:c2:97:31:e0:54:90:be:95:62:82:a0:63:7e:83:09:
95:5b:15:80:55:6f:7c:ba:57:e9:cd:a0:96:60:0d:9b:31:0b:
a4:9b:25:c5:00:98:2a:7e:8d:37:97:93:b1:8d:06:2d:bc:b6:
dc:24:be:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:09:38 2025 by rpki-client