Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/bfad4b-079b-477d-9c70-65308d8c6f4c/1/zQRxhmuDSpq6D2YJjG60MpX8VYE.mft
File: zQRxhmuDSpq6D2YJjG60MpX8VYE.mft (raw, json)
Hash identifier: e+Jxu7hioz6POd/GqxJWosurEjItRr4nKCdYE6ixWgI=
Subject key identifier: 14:3B:94:BE:87:14:3E:1E:98:22:9B:C3:11:4E:3C:A5:02:50:A0:25
Authority key identifier: CD:04:71:86:6B:83:4A:9A:BA:0F:66:09:8C:6E:B4:32:95:FC:55:81
Certificate issuer: /CN=cd0471866b834a9aba0f66098c6eb43295fc5581
Certificate serial: 01864EA7462B19E4FD246783FD63EE33F5C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQRxhmuDSpq6D2YJjG60MpX8VYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/bfad4b-079b-477d-9c70-65308d8c6f4c/1/zQRxhmuDSpq6D2YJjG60MpX8VYE.mft
Manifest number: 01
Signing time: Tue 14 Feb 2023 06:40:30 +0000
Manifest this update: Tue 14 Feb 2023 06:40:30 +0000
Manifest next update: Wed 15 Feb 2023 06:40:30 +0000
Files and hashes: 1: zQRxhmuDSpq6D2YJjG60MpX8VYE.crl (hash: w/xQs325j9HVeOp8NFFSIvNYh0RSHCBtvdvuP23M2HE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4e:a7:46:2b:19:e4:fd:24:67:83:fd:63:ee:33:f5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd0471866b834a9aba0f66098c6eb43295fc5581
Validity
Not Before: Feb 14 06:40:30 2023 GMT
Not After : Feb 15 06:40:30 2023 GMT
Subject: CN=143b94be87143e1e98229bc3114e3ca50250a025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a7:8c:05:d7:51:d1:5c:17:d3:24:a2:35:fa:
3b:20:0b:68:6d:2f:32:3e:42:d1:ae:59:2c:ae:9d:
49:d9:b4:f9:22:9a:89:03:26:c6:ab:e0:1c:af:41:
55:c4:85:e2:74:08:45:2a:c4:c7:ad:fb:6e:43:5a:
e2:71:51:b1:7f:59:97:57:6d:ea:56:4b:a5:97:48:
7b:cc:b8:cb:56:0b:73:72:19:8b:a4:15:61:3d:34:
2c:21:c5:df:8e:d5:e7:82:ea:63:f4:28:6a:12:9b:
6c:e5:e9:36:29:6f:ad:a8:8b:40:10:f6:ab:2f:21:
67:28:5c:f6:72:73:f0:ff:5a:28:db:d5:b9:1d:d2:
5d:70:8f:eb:e4:41:de:4d:f7:b8:f6:ab:ae:34:b4:
86:bd:e7:8b:9f:9c:a2:d5:a8:cb:53:3d:3a:88:25:
ec:0d:64:b8:93:f9:c2:87:01:8d:f0:81:f5:a7:ff:
84:bd:90:45:61:5e:fb:0f:a9:33:df:f2:b4:e2:be:
08:eb:99:5d:42:a6:35:41:08:04:1c:80:0a:03:26:
32:42:78:2a:9a:78:30:be:81:ce:f3:f7:c6:7a:3b:
6c:28:5e:8d:62:51:b0:ea:bc:99:09:90:b6:88:1b:
fa:41:2c:f7:00:d5:d8:ab:bb:8d:f0:c0:ff:e5:2a:
28:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3B:94:BE:87:14:3E:1E:98:22:9B:C3:11:4E:3C:A5:02:50:A0:25
X509v3 Authority Key Identifier:
keyid:CD:04:71:86:6B:83:4A:9A:BA:0F:66:09:8C:6E:B4:32:95:FC:55:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQRxhmuDSpq6D2YJjG60MpX8VYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/bfad4b-079b-477d-9c70-65308d8c6f4c/1/zQRxhmuDSpq6D2YJjG60MpX8VYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/bfad4b-079b-477d-9c70-65308d8c6f4c/1/zQRxhmuDSpq6D2YJjG60MpX8VYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a6:fb:db:a5:46:6a:d7:df:c3:b6:53:4f:71:1b:42:94:6a:
00:28:4d:45:83:04:44:f2:98:e0:b9:5b:39:df:69:d5:4b:e0:
de:d0:6a:00:a2:45:2d:51:27:5f:c8:74:64:e4:96:36:7a:30:
59:ac:c2:e8:0d:2e:e8:b2:81:b1:28:82:a0:3f:da:26:60:96:
18:22:a3:67:35:31:4b:5b:14:8d:1a:bb:b7:a5:d1:47:6d:cf:
86:2e:57:61:9d:25:7a:57:5e:ef:09:5f:1a:44:35:fe:21:ce:
e5:30:60:41:0a:a8:19:4e:1c:53:e7:fd:71:5a:78:35:2f:7c:
f3:51:3b:42:25:fc:80:d5:a3:ba:2a:cc:75:24:0e:33:89:24:
ea:c4:1c:25:bc:37:12:d4:ca:b0:c7:bc:21:4a:2f:11:26:43:
4f:c8:83:e3:44:a0:6b:6c:ca:02:6d:45:6a:4e:a6:9a:9d:6a:
13:b7:e6:de:e4:11:d3:80:54:a6:57:65:b5:04:48:5b:dc:12:
63:13:2e:49:b2:dc:c1:03:91:5f:4e:55:10:6a:98:28:16:39:
2b:5a:81:74:3b:15:78:31:bc:c2:39:72:b3:c9:aa:3c:b2:60:
a4:a2:5f:52:17:4e:72:63:f8:27:80:96:76:27:e9:b3:02:1b:
2f:b1:de:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:27:09 2025 by rpki-client