Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
File: qyt5QmiS7R2nsuYYZ3DPsErmA80.mft (raw, json)
Hash identifier: tdolCpMroMHbVQWWI/8GBFFT2HjbOvqGUA3Xnl27D/0=
Subject key identifier: 00:B9:17:6B:43:9F:17:E4:00:64:D4:35:61:20:F9:0C:F6:BC:51:51
Authority key identifier: AB:2B:79:42:68:92:ED:1D:A7:B2:E6:18:67:70:CF:B0:4A:E6:03:CD
Certificate issuer: /CN=ab2b79426892ed1da7b2e6186770cfb04ae603cd
Certificate serial: 0194BCA9B40325A5605411FAA6A2717F6789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
Manifest number: 06D0
Signing time: Fri 31 Jan 2025 14:00:25 +0000
Manifest this update: Fri 31 Jan 2025 14:00:25 +0000
Manifest next update: Sat 01 Feb 2025 14:00:25 +0000
Files and hashes: 1: qyt5QmiS7R2nsuYYZ3DPsErmA80.crl (hash: g0btF2huUlK4Ne3Z9EX9vCJc+egk+cSJWY3/vF3sPg0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b4:03:25:a5:60:54:11:fa:a6:a2:71:7f:67:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2b79426892ed1da7b2e6186770cfb04ae603cd
Validity
Not Before: Jan 31 14:00:25 2025 GMT
Not After : Feb 1 14:00:25 2025 GMT
Subject: CN=00b9176b439f17e40064d4356120f90cf6bc5151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7e:47:4e:71:6c:c9:94:98:f6:20:81:29:96:
52:72:65:3c:49:86:d9:35:17:3e:6a:5f:e6:97:d9:
44:52:b7:4d:44:98:9d:ab:8f:bd:d2:d1:16:ec:ce:
28:38:f3:c6:9d:54:62:d1:cb:64:19:80:f4:e6:aa:
2b:bd:0b:3d:25:0a:69:2b:2a:06:d8:d5:5d:11:a1:
b7:6b:4d:55:0c:47:1e:54:68:0a:09:7c:8a:b6:87:
65:70:e0:b1:96:3a:d4:ad:92:14:f7:73:04:a8:84:
40:9c:24:c6:67:77:79:45:69:1f:62:16:2e:57:6c:
da:74:72:58:2a:e0:3b:c5:bf:c7:01:71:cf:b2:8f:
89:ee:3e:42:e2:c8:cc:9a:39:20:d9:7a:8b:f7:a3:
8a:f9:54:6e:5d:96:22:eb:04:8c:59:2d:7b:de:b2:
a2:23:1d:eb:13:7c:8d:08:98:a4:fa:b4:b8:06:fa:
dd:4b:a7:53:30:8b:5c:01:89:3d:12:43:eb:57:4a:
02:5c:dc:4e:27:c7:c2:74:40:cc:4e:a4:7e:1d:01:
cf:e6:37:7b:0e:bb:aa:be:7c:0a:c8:bb:e2:16:57:
1e:8e:3f:80:aa:9e:e9:38:c3:8c:1f:f6:67:d9:e6:
b8:ed:f4:6e:21:c0:67:b3:fe:e3:b9:8c:e1:ef:36:
78:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B9:17:6B:43:9F:17:E4:00:64:D4:35:61:20:F9:0C:F6:BC:51:51
X509v3 Authority Key Identifier:
keyid:AB:2B:79:42:68:92:ED:1D:A7:B2:E6:18:67:70:CF:B0:4A:E6:03:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:53:46:25:09:b4:a1:da:2f:99:83:21:53:d4:1e:d7:36:94:
1a:39:7b:55:6a:7e:e3:08:18:4d:19:b0:66:df:d7:de:73:f7:
b4:0e:55:ac:ab:99:83:49:37:97:a9:da:54:6d:4a:04:68:0d:
29:6c:87:6c:bd:41:72:5c:51:11:a3:67:a0:10:8a:49:91:78:
a1:a7:b1:d1:d3:76:f1:f7:fb:5d:9f:c5:c0:43:be:71:52:73:
ea:f8:72:f3:a4:e5:aa:75:6b:b3:09:ef:92:f2:7d:f9:75:47:
d7:97:8d:ed:3c:c4:48:45:79:42:7d:63:eb:f4:a7:e5:c6:e2:
71:b8:57:b6:7d:f2:7c:e8:f0:fe:38:91:80:8a:f4:a1:31:b7:
c0:fd:88:96:f9:b5:32:46:68:96:53:24:bf:66:cc:74:eb:82:
03:5a:07:9b:0c:85:9a:d5:5c:ab:ab:0e:36:12:b2:f4:27:1e:
85:7a:5d:04:b9:80:45:0a:84:38:c3:bc:b0:cb:aa:11:87:76:
84:bc:6f:d5:84:85:6a:b4:f4:18:cb:7d:e1:51:a6:26:50:95:
0a:ba:18:c6:bf:d0:4c:21:8a:fe:17:95:86:05:98:b7:82:ec:
79:9a:b7:b2:e0:91:d9:7d:ed:c1:f0:f3:26:de:25:44:bf:9c:
9e:af:28:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:06:48 2025 by rpki-client