Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.mft
File: sq89ZYtJTLFxUgbFzXbnkuckfvc.mft (raw, json)
Hash identifier: +1CWwZGlIuqDSYXN98kRKjBFxAKjWnVJrDAUcRkdlgQ=
Subject key identifier: 66:A8:00:01:C8:56:78:E8:94:8D:F9:17:59:50:6C:CA:8E:2C:18:22
Authority key identifier: B2:AF:3D:65:8B:49:4C:B1:71:52:06:C5:CD:76:E7:92:E7:24:7E:F7
Certificate issuer: /CN=b2af3d658b494cb1715206c5cd76e792e7247ef7
Certificate serial: 0194BD1766FD008379BC5B7DF9C37CC790F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sq89ZYtJTLFxUgbFzXbnkuckfvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.mft
Manifest number: 02B8
Signing time: Fri 31 Jan 2025 16:00:14 +0000
Manifest this update: Fri 31 Jan 2025 16:00:14 +0000
Manifest next update: Sat 01 Feb 2025 16:00:14 +0000
Files and hashes: 1: 53_H80-AjcuM7a-7V7Ni8CDVxmc.roa (hash: TnMZlgDSn2wGls3cni5JDswiMtfBk15EprIHZOUPW18=)
2: sq89ZYtJTLFxUgbFzXbnkuckfvc.crl (hash: hzwqC2IxCxt1PqCeGXwyGIh05Vr1F3fCe8zexH3VB5Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:66:fd:00:83:79:bc:5b:7d:f9:c3:7c:c7:90:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2af3d658b494cb1715206c5cd76e792e7247ef7
Validity
Not Before: Jan 31 16:00:14 2025 GMT
Not After : Feb 1 16:00:14 2025 GMT
Subject: CN=66a80001c85678e8948df91759506cca8e2c1822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:87:d8:9e:16:f5:60:69:6a:61:9d:f8:9f:71:
39:e2:b0:fe:17:3a:7a:64:64:12:99:72:df:00:56:
0d:11:a3:68:3d:c0:22:e4:b4:67:9e:35:de:aa:e7:
94:de:d3:3c:17:b8:5b:ba:b4:bc:96:93:65:38:e0:
c9:c8:49:54:59:40:45:ee:3b:75:4d:89:a6:24:07:
8c:a7:37:ec:aa:77:95:9c:8f:14:1a:cf:c1:6a:8c:
4f:79:e4:a2:51:57:e8:1c:cf:b8:b7:ff:83:ed:b1:
0e:4b:5a:6b:94:3d:20:75:6d:5b:16:bc:a9:77:79:
cc:87:cb:d1:16:43:f2:fd:3a:e7:e8:9a:6d:d5:37:
e9:58:b7:51:9e:fb:7e:6f:37:ae:2c:ed:47:47:35:
42:15:7e:e0:b4:19:6f:0c:a3:bd:b1:44:34:59:fe:
96:f7:67:d0:ad:c1:1a:4c:69:94:7f:d3:ac:64:cd:
ba:3f:2c:b0:f0:71:66:93:26:03:99:6f:72:62:cd:
35:a9:3c:7d:de:55:08:33:6a:f3:87:aa:a5:11:b2:
13:f7:c0:29:10:53:06:9c:13:9f:6e:f7:44:fd:9f:
ba:a0:cb:80:66:78:77:16:65:c0:20:5e:2d:a8:7c:
5b:fa:be:02:c1:e6:1b:d8:76:7f:e3:7f:f1:07:6a:
2e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A8:00:01:C8:56:78:E8:94:8D:F9:17:59:50:6C:CA:8E:2C:18:22
X509v3 Authority Key Identifier:
keyid:B2:AF:3D:65:8B:49:4C:B1:71:52:06:C5:CD:76:E7:92:E7:24:7E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sq89ZYtJTLFxUgbFzXbnkuckfvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:76:fa:f3:4a:6b:f2:19:5f:91:36:5c:4b:b1:60:76:e6:06:
ed:1c:5e:95:71:4b:d6:3e:e0:b7:d8:54:3d:d1:07:28:59:1b:
c4:86:95:52:b1:0c:2f:e0:fa:43:02:d5:c3:a0:7d:ca:ee:0f:
cf:97:4d:7a:b1:7a:7d:e5:ea:4b:78:4c:22:0e:9c:55:97:af:
02:d5:ef:60:9e:44:d4:ff:6a:3d:78:64:31:3a:3d:af:0a:6e:
a2:ce:33:e0:fc:2c:d0:be:03:c0:21:5c:b2:2f:a6:6b:65:9b:
e1:0e:90:59:ad:9d:10:1e:f3:f9:8a:c8:d7:91:38:8e:1a:d0:
b6:d4:ab:da:54:39:2a:df:5c:ee:b8:79:ca:cb:7a:b2:86:f5:
7a:fc:64:ee:39:61:3c:9d:46:b3:05:3a:4b:ab:5b:ee:46:81:
b2:8d:2e:59:34:43:06:50:67:68:94:bc:d2:57:ae:05:8c:99:
45:dd:34:81:d9:ed:b2:33:fb:45:41:c8:07:33:82:de:50:9a:
30:33:5f:5a:55:b9:65:37:b7:3f:0f:fe:34:ee:fb:b0:4b:82:
0d:d3:2f:a2:cd:eb:f6:71:1d:8c:fb:47:df:c2:c1:61:57:a1:
e9:83:c0:74:41:3f:2b:58:e7:bb:f7:e2:32:0f:d5:15:9a:2a:
78:a2:a5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:05 2025 by rpki-client