Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft
File: QtzU0b098prdQHW2jymvkHBHRDw.mft (raw, json)
Hash identifier: Y0lI0IrybHOzYae8VuQK4glEpJVhhfbd7LYGGJXk2Zo=
Subject key identifier: 6C:DF:C0:FA:36:10:89:F0:BD:25:3F:D4:A2:9E:C9:40:32:72:C5:38
Authority key identifier: 42:DC:D4:D1:BD:3D:F2:9A:DD:40:75:B6:8F:29:AF:90:70:47:44:3C
Certificate issuer: /CN=42dcd4d1bd3df29add4075b68f29af907047443c
Certificate serial: 0194BC3BD2534C82AF5218DC2619BC4E2723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtzU0b098prdQHW2jymvkHBHRDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft
Manifest number: 0158
Signing time: Fri 31 Jan 2025 12:00:24 +0000
Manifest this update: Fri 31 Jan 2025 12:00:24 +0000
Manifest next update: Sat 01 Feb 2025 12:00:24 +0000
Files and hashes: 1: 21zXl1VT2wOLl9fEbNkRa053DOE.roa (hash: 5emuQVjcm3y58xrRXNGECOspFNylmBXZoEALIIh48B4=)
2: QtzU0b098prdQHW2jymvkHBHRDw.crl (hash: WQHjCOR1CmQbXwi+rA/EKyyzg/vvYBQhOxbFN86rM3o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d2:53:4c:82:af:52:18:dc:26:19:bc:4e:27:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42dcd4d1bd3df29add4075b68f29af907047443c
Validity
Not Before: Jan 31 12:00:24 2025 GMT
Not After : Feb 1 12:00:24 2025 GMT
Subject: CN=6cdfc0fa361089f0bd253fd4a29ec9403272c538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:35:44:21:68:cf:3e:fd:64:67:ad:d8:27:e6:
1f:6d:b5:5a:3c:c4:43:e6:59:07:38:56:e9:b1:8a:
6b:9f:2d:c3:3f:19:13:0d:cf:da:a5:aa:7c:67:92:
b5:b8:b0:19:c7:c2:2a:c2:02:36:5c:fa:3d:6e:aa:
89:c5:39:f0:38:b8:04:d4:83:11:29:5d:82:fc:a9:
c6:21:1b:07:15:74:7f:81:ed:c6:56:fa:55:90:d2:
f2:6b:63:4b:d3:34:69:13:c3:3b:d8:37:96:61:7b:
ce:98:ad:09:f1:49:37:96:08:e3:65:c2:40:0c:18:
7b:cc:d7:68:1f:bd:03:f0:5a:93:1a:db:aa:b5:8a:
02:7e:95:9d:6d:16:5a:f2:12:2f:ec:68:c7:8c:91:
45:ec:69:21:63:f4:93:ef:24:6d:a5:0e:c4:a1:27:
77:50:4b:db:41:54:21:2a:bc:ec:84:9a:aa:9d:0c:
c1:a8:69:bb:f4:1d:22:91:c8:71:fb:f1:88:ee:a5:
08:c9:4d:b3:fa:20:bf:12:87:c6:ca:71:de:59:8a:
bb:3d:98:54:ad:9a:8c:53:99:bd:b3:94:56:85:8c:
dd:56:6e:95:e8:66:29:93:3f:52:04:ec:24:50:85:
22:08:ef:6c:f4:43:8f:2a:9c:b6:2e:0d:79:69:9a:
5c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DF:C0:FA:36:10:89:F0:BD:25:3F:D4:A2:9E:C9:40:32:72:C5:38
X509v3 Authority Key Identifier:
keyid:42:DC:D4:D1:BD:3D:F2:9A:DD:40:75:B6:8F:29:AF:90:70:47:44:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtzU0b098prdQHW2jymvkHBHRDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:17:ed:98:1d:44:25:52:fe:ac:78:1d:45:45:db:ae:6e:09:
64:69:90:85:4f:ab:fe:d0:6b:26:6d:c0:22:81:a3:77:e4:b5:
81:32:d4:90:46:f8:65:04:9d:d3:f4:90:ce:3b:44:b9:5b:85:
40:31:49:22:c2:3a:9a:84:39:88:64:86:9a:91:0b:4a:84:8b:
69:45:91:a1:f7:6a:cb:d8:59:6e:e2:3b:c8:03:d4:3e:b4:09:
44:ad:ae:71:41:3e:e2:07:6e:80:fa:0d:10:7b:e2:a9:a1:26:
36:34:c4:7e:00:ad:42:e3:4b:ce:44:b6:f9:81:ca:48:2f:55:
bc:e8:22:99:66:d2:56:a5:5e:c3:1e:ca:46:ca:d5:91:b3:31:
41:4e:3a:16:91:70:27:f7:a9:e4:eb:5f:ed:9c:56:33:14:4e:
13:97:c6:c5:c2:47:37:33:98:60:49:84:f3:9e:ea:f3:e6:47:
d7:57:7a:84:81:6b:02:53:76:a2:e7:7a:3d:a4:06:49:56:2a:
f6:30:cc:6c:2a:88:6e:65:3b:a1:d4:c4:75:ea:7c:ff:e6:80:
1d:51:42:dc:66:07:23:cc:2f:1e:87:a9:23:90:f8:99:1d:1b:
0e:9e:28:63:e2:88:29:3c:66:89:e1:f2:81:e4:f5:cd:ef:c5:
66:53:71:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:05 2025 by rpki-client