Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft
File: qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft (raw, json)
Hash identifier: 2HJZAQ84n3pzqfNZRcrEUbOTNju2Iw19XKiM04JSx+M=
Subject key identifier: 03:00:9F:55:D2:D3:4F:47:DB:56:5A:57:89:EE:A6:CF:79:FE:34:6A
Authority key identifier: A9:48:D0:11:ED:B8:CD:33:E6:67:67:88:0C:A4:AB:30:61:D9:C5:23
Certificate issuer: /CN=a948d011edb8cd33e66767880ca4ab3061d9c523
Certificate serial: 0194BCE0B41DE0BBD17DE0EC1597B7617DC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUjQEe24zTPmZ2eIDKSrMGHZxSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft
Manifest number: 0142
Signing time: Fri 31 Jan 2025 15:00:30 +0000
Manifest this update: Fri 31 Jan 2025 15:00:30 +0000
Manifest next update: Sat 01 Feb 2025 15:00:30 +0000
Files and hashes: 1: qUjQEe24zTPmZ2eIDKSrMGHZxSM.crl (hash: LBDdRmh27BnhE94bwLM4Wg+Eg6a+QGoqBarhB/go1L8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b4:1d:e0:bb:d1:7d:e0:ec:15:97:b7:61:7d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a948d011edb8cd33e66767880ca4ab3061d9c523
Validity
Not Before: Jan 31 15:00:30 2025 GMT
Not After : Feb 1 15:00:30 2025 GMT
Subject: CN=03009f55d2d34f47db565a5789eea6cf79fe346a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e3:5e:21:e8:6d:ad:21:1e:bd:bd:5b:e2:a5:
eb:05:01:91:0b:ba:0d:ee:f8:3a:53:7c:6c:c7:9e:
c5:e9:4d:aa:bf:d8:52:5b:80:b5:b4:4f:e8:f2:7d:
8e:19:69:53:ca:99:af:65:66:f3:3c:bb:e8:c7:08:
42:fa:84:b7:f3:28:f4:d2:39:76:aa:5a:91:1c:e3:
f2:bd:32:2e:6e:63:bf:fc:93:c7:93:c4:52:dd:55:
93:c1:4e:25:85:b1:c3:ca:d1:b9:92:35:9b:ce:f7:
57:0b:17:ba:f8:0a:0a:8c:ca:fd:c6:80:8f:c0:63:
c5:5d:90:ef:ab:1e:ba:4a:91:38:da:a0:54:f5:d6:
24:f8:37:b3:10:d0:00:56:db:a9:09:cf:94:6b:e0:
94:ac:f1:d2:bb:6c:93:85:c2:1b:0e:ba:d3:82:a2:
e0:c6:5d:f6:df:99:8d:d7:53:95:7e:5b:15:d2:eb:
ac:02:53:39:13:6a:91:69:f4:2a:26:c5:4f:07:fb:
f2:da:48:55:2a:e1:59:f6:a3:8a:8e:69:f2:23:1f:
c2:cd:83:fc:ee:a9:15:77:fb:f1:ba:57:6b:e0:eb:
e4:65:38:62:95:7d:3a:f8:c0:81:4c:7c:39:e8:c3:
4b:55:d6:86:98:b0:17:93:03:f0:80:22:17:df:00:
6d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:00:9F:55:D2:D3:4F:47:DB:56:5A:57:89:EE:A6:CF:79:FE:34:6A
X509v3 Authority Key Identifier:
keyid:A9:48:D0:11:ED:B8:CD:33:E6:67:67:88:0C:A4:AB:30:61:D9:C5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUjQEe24zTPmZ2eIDKSrMGHZxSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:4d:ba:89:fb:f8:d4:fa:75:41:52:36:03:fd:ed:13:5e:6a:
7d:d1:bd:e0:4e:27:f1:7a:87:d3:de:3a:8a:a2:d5:2e:e6:58:
b6:7c:0d:2e:4f:26:ac:1a:33:e7:61:9e:74:38:2e:93:a9:b1:
a6:fe:00:ed:ae:99:68:f9:22:46:3b:79:9e:5a:07:4c:8b:7a:
b2:f4:10:bd:da:af:22:b5:32:54:f7:83:f5:7e:9a:37:47:3c:
a7:82:f9:53:c8:c2:1b:0e:52:f7:2e:9b:93:26:53:18:08:a1:
9f:6c:b3:88:b1:18:4c:b2:53:ed:32:9c:0c:f4:00:23:14:d9:
5a:36:2d:70:6c:98:1e:74:bb:c7:8d:e3:b5:81:05:af:aa:71:
42:0a:82:09:bd:37:6a:66:98:91:9d:9e:7a:ef:27:e7:87:cc:
87:c3:0d:f7:9e:c5:be:6a:97:15:9a:52:6c:4f:36:b6:38:7f:
0d:c0:20:d6:49:a0:fe:d1:f5:cb:8f:74:c9:88:32:01:45:78:
39:72:93:e0:22:a4:02:b6:14:d6:47:2e:00:69:1a:04:d5:60:
7b:91:7e:67:c3:cb:dc:e7:1b:88:14:cf:33:bf:55:f9:dc:04:
3d:ff:af:ca:df:a1:bb:1d:16:22:7e:52:7e:7f:0c:fe:c2:c4:
88:ed:ee:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:34 2025 by rpki-client