Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
File: qycpZC0uNTfZq3xFxR_ibepGi4I.mft (raw, json)
Hash identifier: fzOMGdqj7dobz1IMCn/scDstNIVh4P8rAR1nmptIchM=
Subject key identifier: 72:D9:40:3E:B6:CB:C8:00:D9:85:25:E9:98:AE:8F:FD:1E:09:1F:6B
Authority key identifier: AB:27:29:64:2D:2E:35:37:D9:AB:7C:45:C5:1F:E2:6D:EA:46:8B:82
Certificate issuer: /CN=ab2729642d2e3537d9ab7c45c51fe26dea468b82
Certificate serial: 0194BD4E4608963261EEC094E66A4969324B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 17:00:10 +0000
Manifest this update: Fri 31 Jan 2025 17:00:10 +0000
Manifest next update: Sat 01 Feb 2025 17:00:10 +0000
Files and hashes: 1: DjJbJVK4ViblB5hs7VL09DEef2k.roa (hash: cqb7/wQBvYXWlhU0RsJ/gn+FwdkM5gkB/GQuwkcLWgs=)
2: qycpZC0uNTfZq3xFxR_ibepGi4I.crl (hash: KSdW+g/tRyct6UXoC94TdfF3gWbhUi6SKocnhfj3ac8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:46:08:96:32:61:ee:c0:94:e6:6a:49:69:32:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2729642d2e3537d9ab7c45c51fe26dea468b82
Validity
Not Before: Jan 31 17:00:10 2025 GMT
Not After : Feb 1 17:00:10 2025 GMT
Subject: CN=72d9403eb6cbc800d98525e998ae8ffd1e091f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8b:44:d0:39:09:55:24:0e:3f:4e:08:f5:9e:
dc:48:34:1b:37:26:07:f4:59:eb:b2:5e:b0:2f:08:
92:24:31:81:c3:36:89:60:44:8c:60:73:41:84:22:
c8:18:b6:07:6c:a6:f4:34:dd:d7:cb:1c:fb:2f:ae:
58:e8:fe:f7:3f:8d:17:af:a6:30:2a:35:58:36:46:
59:89:92:9c:56:c2:b7:c9:b8:18:eb:3e:e4:1b:6d:
2d:c8:72:43:ef:d9:70:3c:47:5d:99:11:b8:26:05:
92:f0:4c:ae:24:9e:b1:fd:d6:b8:73:3b:07:6c:38:
79:59:0e:54:1d:60:ab:0b:33:63:bf:c6:b0:06:0e:
c7:ff:45:59:95:9c:8e:12:62:48:43:bb:f0:b4:e6:
60:9c:90:04:f5:7d:9c:16:6a:37:7c:39:c6:1f:75:
cb:9c:bc:54:aa:09:52:25:61:e8:0f:18:ab:f3:b6:
3d:bd:ee:aa:21:33:dd:3a:40:63:21:05:e5:b3:3b:
8c:1a:c9:df:5c:fa:88:9c:78:f7:8a:8e:85:8c:3f:
f6:e4:2d:4a:70:ae:99:1b:a4:9d:21:b1:46:de:6e:
dd:35:f5:63:71:cc:b5:d5:0b:93:0d:8c:ca:11:2b:
e6:06:ea:d4:8e:3f:e8:db:4d:d8:72:ee:57:7e:f8:
a0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D9:40:3E:B6:CB:C8:00:D9:85:25:E9:98:AE:8F:FD:1E:09:1F:6B
X509v3 Authority Key Identifier:
keyid:AB:27:29:64:2D:2E:35:37:D9:AB:7C:45:C5:1F:E2:6D:EA:46:8B:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:9a:d5:e2:ed:5f:bb:50:67:0c:e0:40:64:2e:af:cf:66:19:
28:06:10:3f:91:e2:de:fa:8e:89:e6:63:6b:cb:fd:61:d7:4e:
14:3d:d0:ee:7a:7d:06:cc:cb:ce:4e:d4:25:38:2c:85:3b:65:
2f:01:77:26:65:06:99:87:99:e5:8e:e0:61:2b:54:6e:5b:d5:
06:d1:e2:e1:7a:ba:39:32:34:f5:3d:97:53:4d:13:09:94:58:
67:5a:19:7a:38:a7:e1:8b:ff:c2:50:94:64:4e:76:ce:51:f4:
d1:bf:d8:1e:f3:9e:e2:c0:d3:de:da:1b:0d:13:1f:06:81:22:
59:c1:b4:07:01:ba:3b:fa:7f:8e:fa:a7:9e:97:84:9e:2d:71:
74:a5:ec:ab:6c:54:d2:e6:f1:79:18:22:7b:b9:60:79:57:82:
e0:c8:58:38:c0:d0:2f:f3:73:50:92:6d:c1:a9:06:15:7d:de:
9b:5f:c0:bf:15:e7:5e:c2:99:99:d6:94:7b:68:e0:cb:ef:2e:
99:16:d8:4b:43:be:3f:f1:a4:b7:47:7d:9d:60:17:6a:48:f5:
d9:f9:62:2d:f2:12:22:7e:a2:dc:49:ef:af:6c:43:97:7a:7d:
48:81:ba:ae:86:ce:a9:dd:a1:6c:49:ad:13:34:0b:cc:cf:5a:
44:63:8f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:22 2025 by rpki-client