Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
File: qyftHOpDIcScPKEPOv-v29rVMsI.mft (raw, json)
Hash identifier: F7nXWsP4w/lbLiuLyNMvAr7EAMhS6CYW0FQdUvsZB0k=
Subject key identifier: 86:9D:23:46:86:59:BF:AB:57:D8:D7:D2:E3:07:BD:CD:84:84:8C:6C
Authority key identifier: AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
Certificate issuer: /CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Certificate serial: 0194BC04AC725E714C22711A44DF92B5CC20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 11:00:10 +0000
Manifest this update: Fri 31 Jan 2025 11:00:10 +0000
Manifest next update: Sat 01 Feb 2025 11:00:10 +0000
Files and hashes: 1: 7-MoQtEz0Sovzb__rGTdadrqw5M.roa (hash: U558036DeUJnZJMzXht2gtuVkX4ODtSCmM6m3SoWL4U=)
2: qyftHOpDIcScPKEPOv-v29rVMsI.crl (hash: cBtR0XKyXv9IhbPhlgbNGkk8IubVpFqfXI4XVh+sxc4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ac:72:5e:71:4c:22:71:1a:44:df:92:b5:cc:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Validity
Not Before: Jan 31 11:00:10 2025 GMT
Not After : Feb 1 11:00:10 2025 GMT
Subject: CN=869d23468659bfab57d8d7d2e307bdcd84848c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:72:7e:7e:f1:d0:90:de:b2:85:e2:5d:eb:e6:
05:23:2a:d5:75:b8:75:5b:bb:e6:24:3c:fd:92:dd:
76:2b:e3:f1:59:71:86:14:65:b7:9c:9f:4f:44:3b:
b1:8d:db:47:e7:59:32:2e:d0:c0:9a:a0:87:41:2c:
8e:6f:68:30:e1:1f:e4:2d:39:9c:36:42:ad:ea:ee:
5e:18:6d:c4:a3:6d:b0:54:0f:d9:ca:9b:db:3b:22:
3d:fc:0a:66:26:c8:b3:2f:44:00:07:9c:a7:4f:29:
54:4d:21:d6:4d:7d:d3:c1:1e:76:65:d6:5e:06:22:
56:a2:b4:38:21:27:db:c3:c3:cd:e2:84:1a:4e:b8:
a0:82:b6:f3:3d:02:d2:3f:0c:32:e6:5d:cb:6d:7a:
9d:56:e2:4d:86:e4:4c:26:dc:0b:f5:5b:61:b2:4e:
dc:07:95:0a:9d:24:45:6b:27:ff:a9:d4:0b:45:30:
27:c7:b6:41:99:b3:3b:3f:8d:0b:81:24:95:88:da:
77:30:da:6e:e3:f4:19:56:4b:10:4c:5a:5d:bb:81:
6e:8e:25:25:4d:42:eb:f8:bc:a7:12:04:00:9a:96:
4a:8b:10:86:99:58:b1:b6:6a:31:45:3f:5f:ab:3c:
ec:26:2d:14:22:91:46:10:19:2f:10:13:0b:82:1f:
8a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9D:23:46:86:59:BF:AB:57:D8:D7:D2:E3:07:BD:CD:84:84:8C:6C
X509v3 Authority Key Identifier:
keyid:AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:58:d5:33:22:e0:c9:9e:a6:e1:34:aa:1d:39:e7:d9:6d:ba:
45:ed:52:59:ee:d8:2e:3f:42:06:b9:a3:76:ae:9f:8b:b6:2a:
a8:da:e1:76:c1:8b:4e:f2:9b:e0:af:14:f5:85:73:e8:6c:14:
13:4f:c5:aa:41:b8:3e:f6:2d:b7:0c:4a:a3:8a:10:a9:2a:be:
5b:dc:29:af:5b:27:4d:cc:64:09:dc:9d:c1:09:b0:bf:6b:a3:
e1:3c:9c:da:e1:3a:b1:b2:7b:d7:eb:bd:d1:5c:5f:6e:c1:ae:
50:e4:6a:3c:f6:9e:62:2a:1c:c7:ae:fa:93:cd:d5:60:b5:18:
5c:83:d7:8b:2f:8f:e6:f8:9b:fa:b5:61:7a:ae:a0:a0:0b:14:
84:ca:65:75:60:46:0b:31:31:bc:08:32:1c:b6:c8:bf:7a:e1:
b9:7a:c0:69:02:18:a8:64:70:56:79:92:4d:74:12:c5:d8:00:
6a:eb:c8:9d:d1:bb:3d:7b:78:f3:00:de:23:05:4e:ba:bb:03:
a7:d1:de:eb:9f:a0:eb:f8:04:1f:c2:c6:7b:7f:fe:ae:03:1a:
4b:e5:c6:c0:41:32:dd:c1:f4:8c:97:fa:53:9a:8b:d4:8d:d7:
5e:75:f5:a1:8e:09:86:cc:a0:d4:db:f8:27:79:df:2a:6f:86:
c4:14:72:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:43 2025 by rpki-client