Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
File: QgOHyUE02aCP_TJjCWdwOtxYK2w.mft (raw, json)
Hash identifier: rjtf41UqcEgoWd1N7tif0j3vx7+wePwlQ4I49T9kqP0=
Subject key identifier: AA:B6:84:4A:50:27:DC:36:E6:C0:A4:54:0B:8D:DA:80:09:4E:FD:60
Authority key identifier: 42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C
Certificate issuer: /CN=420387c94134d9a08ffd32630967703adc582b6c
Certificate serial: 0194BD4E6A372434561EE403EA64A6579E95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
Manifest number: 0B4B
Signing time: Fri 31 Jan 2025 17:00:20 +0000
Manifest this update: Fri 31 Jan 2025 17:00:20 +0000
Manifest next update: Sat 01 Feb 2025 17:00:20 +0000
Files and hashes: 1: 6rV9eDtLqjrWZLXprUqcr99pZaA.roa (hash: dlsrhoQ5PwXdAjp/9r3Vgwhl3pAOBofCxgLlYlDOE18=)
2: QgOHyUE02aCP_TJjCWdwOtxYK2w.crl (hash: BrFrW2doJz/QtDee7DGnEbvmy/+bBlZpfHT0PnkKKy0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6a:37:24:34:56:1e:e4:03:ea:64:a6:57:9e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420387c94134d9a08ffd32630967703adc582b6c
Validity
Not Before: Jan 31 17:00:20 2025 GMT
Not After : Feb 1 17:00:20 2025 GMT
Subject: CN=aab6844a5027dc36e6c0a4540b8dda80094efd60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:76:0c:8d:49:39:9b:16:c9:c1:24:a2:10:a7:
ec:eb:78:d1:29:33:67:66:f0:7d:e7:cc:e8:ad:45:
61:4e:d8:10:84:b1:5d:0e:bb:08:07:7c:05:99:f6:
57:a3:37:a1:41:08:d2:2f:b8:af:ee:91:3d:e1:a8:
fd:71:1f:45:2f:94:15:d6:76:e7:a9:ca:9a:54:ec:
08:2b:f5:55:20:ba:3d:c7:3b:59:16:0f:da:24:e6:
5a:c2:78:0a:90:34:be:17:41:c0:7a:f5:5e:ee:1a:
1f:c8:3f:bc:78:c2:b0:72:29:5d:89:7c:16:a3:90:
f7:b5:ea:86:1b:91:90:95:61:ea:89:87:83:24:5b:
83:cd:5f:dc:f9:3b:6e:31:dd:e7:0d:9e:f5:0a:18:
8b:b3:bb:94:02:f7:6b:72:a8:bc:75:a3:36:1e:d0:
76:76:b4:5d:b5:18:ea:da:c2:5c:26:b8:c0:f9:a5:
f9:21:6c:09:d2:b3:0a:05:87:7f:1f:50:9c:cd:64:
b7:6f:18:52:2b:64:10:9b:d1:01:7f:eb:fa:95:11:
42:78:4a:66:8a:08:67:4d:5a:f0:e7:90:d2:b1:1a:
bd:c5:4c:f5:0a:7b:20:b5:11:0c:01:3e:d6:2b:1b:
d5:2f:02:06:2f:e3:a5:85:bd:32:95:27:8a:e4:03:
b2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B6:84:4A:50:27:DC:36:E6:C0:A4:54:0B:8D:DA:80:09:4E:FD:60
X509v3 Authority Key Identifier:
keyid:42:03:87:C9:41:34:D9:A0:8F:FD:32:63:09:67:70:3A:DC:58:2B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgOHyUE02aCP_TJjCWdwOtxYK2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a38a87-0159-490e-b69c-376f4b4d9da6/1/QgOHyUE02aCP_TJjCWdwOtxYK2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ac:34:45:e3:48:3e:bd:e5:2b:04:fa:b5:40:7c:c6:4c:d3:
77:7b:cf:7d:b9:f0:0e:15:c8:42:f2:27:cb:d1:e8:cf:79:ec:
e7:81:ab:14:b9:a1:6c:a2:d7:56:26:b0:a3:5e:b1:8d:15:da:
d6:27:34:c3:b0:e3:08:31:e9:41:a4:41:dc:4a:6e:de:4d:21:
0a:6f:f9:29:bc:6b:e8:60:7d:eb:1e:7a:fe:f8:3b:aa:d6:cc:
6f:47:1a:66:76:4d:b1:08:d0:4d:aa:db:cd:5e:18:01:c7:c1:
cb:ed:ea:17:2f:af:ba:e5:6c:32:c7:b0:04:cf:19:e9:31:0e:
85:79:a7:b0:74:f0:38:ef:4f:5d:9d:8f:d6:0e:2d:d3:c1:c1:
e3:44:2d:e7:0e:95:d1:02:4a:d0:94:cb:47:dc:5d:45:47:0c:
57:27:cd:5f:af:f6:1b:bb:ff:f5:93:55:27:bf:01:db:ad:e3:
b5:75:bc:84:16:da:1d:f2:c2:eb:b4:c7:96:8f:6a:da:1d:c4:
71:f5:84:64:70:9a:90:a0:e8:cd:08:52:6b:b4:da:9d:20:04:
a6:8f:33:b6:10:68:74:f1:b3:05:0f:77:9a:f0:34:82:19:a8:
a2:ae:cd:ee:f7:11:2c:7e:de:80:c8:1c:3a:1f:2d:1f:af:f3:
c9:03:ba:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:05 2025 by rpki-client