Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ea1072-f326-4e51-adf1-ba9b0fa1b7a2/1/QnbajwSHyFCAm0qYcoysIXKycD0.mft
File: QnbajwSHyFCAm0qYcoysIXKycD0.mft (raw, json)
Hash identifier: 1ceaS6Uavts4vL0IEp8gFCIgBxD3x3zc+MttOpnLDbs=
Subject key identifier: 9F:03:61:F2:78:93:2A:42:6E:B1:E3:8E:E3:59:57:8A:CC:FF:F7:CC
Authority key identifier: 42:76:DA:8F:04:87:C8:50:80:9B:4A:98:72:8C:AC:21:72:B2:70:3D
Certificate issuer: /CN=4276da8f0487c850809b4a98728cac2172b2703d
Certificate serial: 0194BBCE5C4C4770229332AF799F8F7A1024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnbajwSHyFCAm0qYcoysIXKycD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ea1072-f326-4e51-adf1-ba9b0fa1b7a2/1/QnbajwSHyFCAm0qYcoysIXKycD0.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:00:50 +0000
Manifest this update: Fri 31 Jan 2025 10:00:50 +0000
Manifest next update: Sat 01 Feb 2025 10:00:50 +0000
Files and hashes: 1: QnbajwSHyFCAm0qYcoysIXKycD0.crl (hash: Uobaavn4wEVhNn1q1KAnkttq5j2m8hOI+EeUsWUhEpw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:5c:4c:47:70:22:93:32:af:79:9f:8f:7a:10:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4276da8f0487c850809b4a98728cac2172b2703d
Validity
Not Before: Jan 31 10:00:50 2025 GMT
Not After : Feb 1 10:00:50 2025 GMT
Subject: CN=9f0361f278932a426eb1e38ee359578accfff7cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:13:de:ef:83:c7:7c:a4:0e:0c:25:7d:e7:d4:
c6:b0:c7:57:70:4b:65:6f:16:ef:0d:35:e1:38:a8:
f6:42:32:72:ca:06:ce:7c:58:8e:3c:a3:18:0c:fd:
54:d7:bc:d6:4e:d1:4c:63:f5:dc:22:a7:a9:d2:90:
73:26:ea:2c:fd:de:75:04:34:6f:82:d3:fb:e3:90:
14:e2:4a:5a:24:d6:83:50:53:a2:a5:a8:fa:23:64:
5b:57:55:84:c2:04:62:ea:dd:d7:71:2b:92:cd:24:
d8:bf:ea:80:97:95:a9:56:98:7b:41:2d:70:9a:8b:
d0:96:ee:98:5f:a8:40:be:c9:9c:07:90:7d:63:e0:
73:ec:b3:6a:9c:f7:49:5e:87:e5:6b:cd:49:bd:14:
a3:6b:df:e8:4a:54:76:dd:e3:22:aa:35:e2:14:6d:
cd:b8:47:7e:33:72:69:e1:0c:c1:94:9f:7d:fe:72:
bc:35:7e:9e:1f:d0:57:64:2d:19:0e:a6:51:51:c2:
5a:01:7c:49:3e:59:fe:85:e4:5b:e7:bd:32:d2:67:
80:bd:fa:8e:02:de:fc:21:fb:b5:da:b7:92:33:28:
4a:99:79:01:a9:47:a5:c6:25:0d:50:f8:f8:9b:34:
e0:17:f6:67:4c:e4:51:8e:f7:f5:40:d0:52:d3:73:
11:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:03:61:F2:78:93:2A:42:6E:B1:E3:8E:E3:59:57:8A:CC:FF:F7:CC
X509v3 Authority Key Identifier:
keyid:42:76:DA:8F:04:87:C8:50:80:9B:4A:98:72:8C:AC:21:72:B2:70:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnbajwSHyFCAm0qYcoysIXKycD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea1072-f326-4e51-adf1-ba9b0fa1b7a2/1/QnbajwSHyFCAm0qYcoysIXKycD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea1072-f326-4e51-adf1-ba9b0fa1b7a2/1/QnbajwSHyFCAm0qYcoysIXKycD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:27:81:3c:66:e0:83:70:92:ce:fc:2b:17:67:ed:cc:1a:6c:
60:54:6e:66:9c:02:2a:ba:ed:da:0f:90:45:cc:6e:e4:60:32:
a0:09:49:7d:7d:2d:fd:64:86:fb:2b:8d:02:ee:c8:15:2d:fd:
35:6f:14:11:43:5d:3f:a9:8b:70:91:4d:e5:51:80:27:c0:90:
41:a8:5c:80:94:71:ef:76:5f:60:5b:1f:a5:b4:89:aa:88:f6:
da:57:f6:2b:55:f6:0f:50:d8:ef:2e:02:32:8a:82:81:a5:90:
ac:46:51:7b:a5:dd:a4:a4:77:02:38:c7:3a:03:42:55:ef:b5:
e5:69:df:51:ea:26:11:c7:96:3c:ba:da:55:f4:e6:7b:7a:af:
34:40:04:20:cd:15:ba:45:ad:eb:42:da:eb:e0:02:55:1d:c2:
cd:37:c8:bf:13:c3:dd:e4:a0:28:5b:f3:1f:d4:4c:5f:dd:51:
ed:cb:f0:89:49:79:71:04:18:4b:c0:50:f5:ee:e2:ee:7d:37:
d2:37:9b:d7:e6:4b:50:44:c5:dd:41:d1:2b:54:cb:a8:56:6c:
c9:ef:79:37:b1:48:92:57:14:e7:f0:b8:76:d4:97:5b:0e:bd:
2e:4d:df:7f:fd:b8:e1:e9:3b:ce:50:47:89:43:48:36:06:04:
cb:6e:0c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:02:36 2025 by rpki-client