Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
File: qgYKY9op1_lWF6b_u09RzMvHhlE.mft (raw, json)
Hash identifier: stTyVCGMpFjNNxmcmGeMPh2Me2Wj6AMchNDqG1lY2wM=
Subject key identifier: 4A:26:E2:CD:8C:33:32:02:0A:75:AC:22:CC:AA:76:A9:55:A3:DC:CD
Authority key identifier: AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
Certificate issuer: /CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Certificate serial: 0194BBCE76BF09D56CA9F64B365F9E1D8EEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
Manifest number: 109B
Signing time: Fri 31 Jan 2025 10:00:57 +0000
Manifest this update: Fri 31 Jan 2025 10:00:57 +0000
Manifest next update: Sat 01 Feb 2025 10:00:57 +0000
Files and hashes: 1: 6vC7E9fCr2S2YLpYl9NYikdwrIo.roa (hash: 0lbRVN/oMU6y83Ly4EI44/lCqnm0TAJ8jhFyCAz5oJM=)
2: VFWfa5gKi_WVASZxLKD5EBmR-Vk.roa (hash: uLbbbwsMWu+2oa981JmoBqRGb6E5FUC1zqcIAUYzCRg=)
3: qgYKY9op1_lWF6b_u09RzMvHhlE.crl (hash: l05KzbV2evp0H58oIE/smJeopIrL0Y/qoD85l5bJAGw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:76:bf:09:d5:6c:a9:f6:4b:36:5f:9e:1d:8e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Validity
Not Before: Jan 31 10:00:57 2025 GMT
Not After : Feb 1 10:00:57 2025 GMT
Subject: CN=4a26e2cd8c3332020a75ac22ccaa76a955a3dccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:05:c9:58:c3:69:29:f2:c2:46:1b:0f:f5:2b:
a5:fb:9c:c1:93:22:b5:51:4d:90:37:a0:0d:72:64:
d7:32:b3:86:d4:2d:36:8d:9c:df:91:ff:a3:81:1d:
2c:a8:9d:c0:5e:b2:f8:fd:4f:ba:16:f9:46:d3:43:
e5:77:6a:76:21:be:e5:3a:f2:6e:f7:0f:cd:f3:de:
78:99:d2:47:b3:7b:c8:27:6e:d5:f8:c9:6c:d0:6d:
eb:dd:ce:97:20:c8:0b:42:c5:96:cc:be:34:02:9a:
a4:fd:1e:6f:4a:31:a7:8f:e5:be:ed:9b:ea:11:89:
b7:42:36:cd:5d:66:65:84:40:ca:dd:c9:79:a2:70:
eb:ee:fb:0f:f3:56:e3:75:27:fb:b1:41:b3:9c:4a:
10:cc:e1:b0:1e:98:11:e4:74:06:85:07:49:48:a7:
ba:28:a4:eb:c7:6f:29:50:e1:11:53:6f:6e:c8:42:
ce:d4:7b:67:8c:08:83:26:a8:ae:1b:e9:1f:32:5f:
c4:f9:d6:38:a9:1c:54:6e:5d:ab:57:c2:16:50:b3:
0a:62:c7:5f:51:3f:99:63:a4:36:fd:ff:51:51:1e:
48:ab:73:36:a5:54:0f:fc:1f:7f:73:e0:00:47:87:
71:e4:9e:30:67:8f:c0:61:04:f9:3c:ef:67:70:f7:
7c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:26:E2:CD:8C:33:32:02:0A:75:AC:22:CC:AA:76:A9:55:A3:DC:CD
X509v3 Authority Key Identifier:
keyid:AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:35:6c:d2:76:bf:b5:a7:8a:01:75:5a:4f:7e:64:24:f0:6a:
58:d6:c5:a2:63:a7:ea:bc:33:05:7c:f8:b9:4e:e3:1f:dd:82:
65:fb:8b:34:5f:33:e7:28:e4:f0:6f:63:6d:c7:21:4e:74:06:
e2:ed:5a:96:ff:86:cc:3e:5b:cc:ba:14:39:d2:67:c5:84:cd:
f1:3a:69:a8:bf:5f:2c:86:4f:07:21:cd:bb:e0:16:3a:16:b8:
bd:63:73:f6:ec:f3:5d:83:48:f1:9f:6f:a9:03:a7:d8:31:5c:
15:2b:14:54:69:51:ea:e7:cd:c0:63:91:17:c6:cd:00:9f:de:
b8:62:e5:02:c4:31:e4:cb:2a:d1:0e:df:d2:10:4c:bd:b1:ca:
32:c5:14:c3:94:e9:cb:c8:21:ff:0e:9c:e0:d6:84:97:24:6d:
f1:18:cf:2c:cc:c2:8d:22:88:8f:ef:13:24:20:a8:a7:16:9e:
9f:19:25:42:2c:21:e7:4b:85:67:de:21:d6:d2:46:72:be:f9:
63:29:ad:47:cb:b4:bf:26:b6:19:bc:e6:e9:9f:f7:34:c6:63:
75:c9:15:93:3d:9b:c8:c0:99:f0:f2:72:71:1c:ce:bc:f5:14:
7e:78:ba:2e:7c:a7:1a:50:8d:0a:ff:c6:78:38:3e:5c:bd:d0:
27:13:59:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:46:34 2025 by rpki-client