Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ba011-dbef-4577-9e00-588019a6b5cb/1/QL_eNYm0RMN59zNggxsd2OovhwM.mft
File: QL_eNYm0RMN59zNggxsd2OovhwM.mft (raw, json)
Hash identifier: RIowTtma4caFJRpA0gkiDidXRytNdXYLfu9avt4as1k=
Subject key identifier: 09:78:4B:86:89:9C:56:77:52:42:60:95:CF:74:F0:E5:35:A1:6F:AE
Authority key identifier: 40:BF:DE:35:89:B4:44:C3:79:F7:33:60:83:1B:1D:D8:EA:2F:87:03
Certificate issuer: /CN=40bfde3589b444c379f73360831b1dd8ea2f8703
Certificate serial: 0194BD1793BC674092E5724D6275DE157283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QL_eNYm0RMN59zNggxsd2OovhwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ba011-dbef-4577-9e00-588019a6b5cb/1/QL_eNYm0RMN59zNggxsd2OovhwM.mft
Manifest number: 063A
Signing time: Fri 31 Jan 2025 16:00:26 +0000
Manifest this update: Fri 31 Jan 2025 16:00:26 +0000
Manifest next update: Sat 01 Feb 2025 16:00:26 +0000
Files and hashes: 1: QL_eNYm0RMN59zNggxsd2OovhwM.crl (hash: 79Lx9N4zV2+Z72pd7N029fkWkRWmT0WcuHUrZSAweY0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:93:bc:67:40:92:e5:72:4d:62:75:de:15:72:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40bfde3589b444c379f73360831b1dd8ea2f8703
Validity
Not Before: Jan 31 16:00:26 2025 GMT
Not After : Feb 1 16:00:26 2025 GMT
Subject: CN=09784b86899c567752426095cf74f0e535a16fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f8:d2:12:13:ab:7a:21:fc:4a:7a:8b:ba:37:
c3:95:00:38:71:4c:e3:a9:3a:f4:01:29:32:13:ae:
a4:51:5a:30:f0:8e:67:c1:46:22:d7:88:79:db:b2:
70:a0:51:a7:b8:ce:fd:08:03:c4:6a:a7:61:2b:4a:
93:d6:7e:af:37:ed:04:37:09:59:d9:2c:f5:45:45:
01:8e:4a:ba:e9:97:69:5b:dc:0b:f6:6f:8c:9c:3d:
09:06:bc:a7:8b:4f:45:04:77:3a:75:ad:85:f3:1c:
29:e1:a4:7b:ac:0c:80:7e:3b:cb:ed:37:c5:64:3d:
e4:09:da:aa:3f:14:ee:f8:84:08:c6:97:65:df:cf:
9b:36:62:27:2e:b2:80:6c:0e:e2:2f:bd:c4:3b:af:
5f:17:bf:5a:fe:e5:1e:97:3d:ae:24:8c:2d:de:b3:
32:fa:35:77:6c:b8:ee:da:2e:72:c9:09:61:35:06:
53:fd:1f:23:ea:62:4a:01:9a:43:7a:7b:96:51:42:
71:5f:f0:4b:59:50:4b:ae:0b:02:6a:07:67:51:bc:
63:92:49:b6:82:01:14:74:bb:05:47:eb:1b:65:f2:
3b:01:a3:a9:17:53:60:2b:b1:78:2d:cb:be:a0:71:
06:83:8c:86:e3:15:bb:da:cb:78:70:46:cb:ac:a6:
a1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:78:4B:86:89:9C:56:77:52:42:60:95:CF:74:F0:E5:35:A1:6F:AE
X509v3 Authority Key Identifier:
keyid:40:BF:DE:35:89:B4:44:C3:79:F7:33:60:83:1B:1D:D8:EA:2F:87:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QL_eNYm0RMN59zNggxsd2OovhwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ba011-dbef-4577-9e00-588019a6b5cb/1/QL_eNYm0RMN59zNggxsd2OovhwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ba011-dbef-4577-9e00-588019a6b5cb/1/QL_eNYm0RMN59zNggxsd2OovhwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ab:c6:57:2a:f5:9d:2c:49:2d:54:fb:20:5b:43:c7:09:63:
f5:44:ff:b4:e4:96:53:9f:41:84:13:7e:51:74:fd:cc:b4:ed:
c0:de:69:e8:ab:f1:9f:6f:4e:64:10:c5:30:ad:9d:19:ad:09:
fc:ef:36:69:31:2f:7f:1d:c7:c9:e9:5a:ff:a8:d4:d6:5c:71:
ec:70:79:66:03:fd:35:8e:ef:1a:64:32:f1:75:1f:8c:07:c3:
c2:c3:4d:3b:8f:b4:03:f8:3f:5a:0e:d0:8c:a8:d7:d8:1d:21:
e3:46:3e:3a:6e:e7:2e:d5:ce:cc:56:22:a9:10:29:b4:54:08:
f2:49:b0:9c:05:fb:72:48:98:03:f2:27:48:42:1e:fb:90:62:
b6:a0:1e:78:25:3a:e1:0e:c6:3d:25:15:2f:0b:0c:40:a8:88:
54:08:f7:d6:8e:3e:d5:15:77:14:ff:cd:6b:ee:f4:12:1c:1e:
94:70:63:eb:b3:df:4d:4f:c6:b9:5b:0c:5c:64:91:90:47:92:
15:b0:01:ad:f4:7f:ee:0f:b2:fe:10:d8:6f:95:1d:2c:d1:80:
b7:e4:9f:f7:92:80:dd:c1:2b:0f:dc:a8:1e:29:81:de:41:54:
5f:b8:a4:07:a4:cf:61:77:b2:cd:85:d7:55:ed:65:58:53:86:
52:27:f8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:51 2025 by rpki-client