Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
File: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft (raw, json)
Hash identifier: ZsTE+RJENKaDxZF2+tb3hc+93dd13mfMty15qT5tS/o=
Subject key identifier: D8:B3:15:8E:DB:6C:79:22:A4:FE:42:D8:5B:03:EC:35:34:B8:42:43
Authority key identifier: A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78
Certificate issuer: /CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978
Certificate serial: 0194BBCE73929AABB58E1F8B554EDC88C2D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:56 +0000
Manifest this update: Fri 31 Jan 2025 10:00:56 +0000
Manifest next update: Sat 01 Feb 2025 10:00:56 +0000
Files and hashes: 1: N5E83UpLjMoi8mpIjadF8EBEZHc.roa (hash: cZc2s8T64g7zUGVGUfnt3YLhqIDpL+dicIuuj0vLjiE=)
2: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl (hash: jl1curxFxDn7cgoMavdCmm3mUdphTIby52uYPUiryT4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:73:92:9a:ab:b5:8e:1f:8b:55:4e:dc:88:c2:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978
Validity
Not Before: Jan 31 10:00:56 2025 GMT
Not After : Feb 1 10:00:56 2025 GMT
Subject: CN=d8b3158edb6c7922a4fe42d85b03ec3534b84243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ec:d8:02:42:d2:a9:fb:be:d6:d3:44:80:76:
83:fa:be:44:a8:2e:a5:89:8a:78:5e:45:3b:d7:81:
0b:da:18:65:e2:51:ef:29:96:1d:1b:2c:85:70:3f:
0a:0f:b2:90:92:b1:17:a6:ce:54:49:c9:a6:e5:e7:
21:1b:ca:96:f8:4b:c8:6f:fc:51:2d:f9:98:31:36:
33:30:91:6d:e7:48:57:22:24:2d:51:77:21:b5:bb:
ec:e6:87:5d:01:5b:c5:ad:ef:2c:bc:31:73:80:cd:
c7:aa:76:32:43:53:89:19:d5:c5:6f:3b:e1:86:36:
97:0f:6d:97:74:1d:7c:f0:5f:74:99:25:3b:55:4b:
4c:3a:d4:a9:2b:20:fc:c2:4c:a2:a1:2a:37:5b:fe:
60:23:a9:42:80:de:dc:ee:bc:3e:ba:0c:b9:04:9c:
ba:69:5e:81:17:f9:54:8a:44:e4:d4:bd:2a:62:ff:
e9:6c:18:85:0f:2f:d7:8b:18:90:ab:cf:72:23:ee:
9c:d6:bb:dd:0b:fe:34:4a:d7:af:47:66:3a:41:35:
50:76:b4:60:36:c7:c1:84:95:d3:b7:44:b5:86:49:
81:3a:b2:70:85:9b:47:f4:70:cc:c8:a3:27:7d:40:
00:d4:5c:dc:77:8a:be:33:0d:ea:be:bd:f9:3c:d7:
55:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B3:15:8E:DB:6C:79:22:A4:FE:42:D8:5B:03:EC:35:34:B8:42:43
X509v3 Authority Key Identifier:
keyid:A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:8a:86:9a:83:8e:b1:c8:99:6e:50:dd:28:e7:f9:7c:05:2f:
70:fd:1e:f8:7e:66:9d:69:bf:53:0e:e3:e9:ad:8a:fc:dc:d7:
90:de:4c:5a:f1:bd:bf:2c:db:60:81:1b:c7:51:3e:09:d8:4a:
4c:29:e6:6a:73:81:30:c8:3d:89:44:e7:32:ec:1e:dc:99:31:
0f:8d:4b:4e:df:08:c0:69:fa:ea:0b:37:f2:74:a1:fa:52:f7:
68:0a:50:e5:e5:72:8c:5c:97:db:fe:18:f0:8c:a5:ae:37:53:
69:de:b6:64:8c:dc:5e:9a:0c:81:97:68:63:c6:50:1a:64:7f:
df:9c:8d:f0:da:36:d4:c6:2e:b8:54:3c:4b:e2:c2:cd:94:d7:
c6:c5:71:b1:14:42:f4:c5:57:a6:28:65:5c:06:f3:99:0c:f7:
fb:e6:ab:7e:9d:78:e6:17:d2:f0:25:ca:e2:89:8d:f5:f1:05:
ba:4a:ca:8f:1c:ec:64:b2:19:1e:9d:dc:73:5a:e4:d3:6f:eb:
11:90:98:54:06:60:9c:21:13:11:5d:11:50:81:8f:7c:bf:40:
81:10:c4:2e:10:50:5f:ef:e8:e3:0c:73:f9:50:6e:2a:f8:93:
0a:82:c3:a7:6f:a8:25:0e:2e:4e:a2:b9:65:55:f2:dd:9b:50:
74:cd:00:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:59:19 2025 by rpki-client