Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
File: q7zPUQ4allMK2M8UI_0lmLgv46Y.mft (raw, json)
Hash identifier: PByIjakNQrsy9ba+vXPSrVmY6My8N0oUXk2Vot9kW6E=
Subject key identifier: B1:B4:CC:D6:3F:19:BC:BE:20:B2:84:BF:9E:6E:6E:67:01:D7:C9:81
Authority key identifier: AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
Certificate issuer: /CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Certificate serial: 0194BC3C4EEA13118A30D8719F3B1F71F6DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 12:00:56 +0000
Manifest this update: Fri 31 Jan 2025 12:00:56 +0000
Manifest next update: Sat 01 Feb 2025 12:00:56 +0000
Files and hashes: 1: q7zPUQ4allMK2M8UI_0lmLgv46Y.crl (hash: a7MM/91tXzTs9SnSi9EbCabEnNAvmxtHBMu8kJV20Mc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4e:ea:13:11:8a:30:d8:71:9f:3b:1f:71:f6:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Validity
Not Before: Jan 31 12:00:56 2025 GMT
Not After : Feb 1 12:00:56 2025 GMT
Subject: CN=b1b4ccd63f19bcbe20b284bf9e6e6e6701d7c981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9a:35:d3:bc:54:2d:9c:86:d8:e1:ba:95:af:
cc:38:8b:b8:ac:ff:2d:fb:7f:62:92:33:bf:b7:0f:
e3:53:b4:14:90:5c:e0:f6:64:69:38:ff:4c:f1:0c:
8d:de:a9:00:53:c0:54:82:cb:d0:b8:00:b9:c7:cd:
88:b2:0a:ac:58:80:6f:17:1c:55:e3:f3:7f:cc:f9:
fe:48:97:ff:db:a2:4d:a5:00:42:e0:c6:e6:5a:a0:
7e:84:44:e7:e8:08:39:82:31:5f:18:ff:d8:72:d8:
87:7c:ef:b3:08:ae:7b:41:4b:ba:1f:90:ac:2e:30:
33:f5:7d:5b:5f:78:9a:d6:06:e0:5b:2d:14:e4:b3:
c1:93:20:3f:6b:ef:8d:5f:3e:4c:41:67:ec:bd:bd:
37:32:33:4f:2d:6f:39:26:c7:ea:36:84:e8:49:4c:
fc:ea:81:16:71:1e:b6:5e:66:68:06:c7:e6:a8:3f:
6e:f3:58:87:66:be:f2:c2:78:09:12:fd:7f:ff:a6:
ff:55:7e:d7:96:ca:66:23:6e:1b:41:77:e2:a7:26:
c5:99:16:bc:80:65:51:6c:5e:ab:44:63:a2:db:c2:
4a:04:bc:1f:6b:ea:35:c9:de:54:e2:8c:64:37:31:
98:aa:95:8b:4b:43:91:ce:89:a2:60:c8:bc:44:4b:
ea:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B4:CC:D6:3F:19:BC:BE:20:B2:84:BF:9E:6E:6E:67:01:D7:C9:81
X509v3 Authority Key Identifier:
keyid:AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:37:1e:d7:2c:1e:f4:f6:8d:8c:c7:f1:bd:30:16:4d:ca:1e:
f2:b5:37:15:b6:79:12:14:a0:49:c8:de:c9:44:72:64:8a:42:
81:cf:2b:af:1a:a4:04:cb:11:ec:7d:ab:30:7b:58:51:07:87:
e4:6c:31:2c:df:6b:1a:5f:8c:ec:86:0b:d2:4c:e0:41:36:e0:
99:3f:db:d1:30:41:94:9d:e4:c2:0a:46:06:41:45:da:fc:58:
cb:a3:d2:1d:4a:da:57:4c:85:18:0a:aa:f9:d8:85:da:77:c5:
24:c9:de:78:b8:4e:c9:77:3e:9f:eb:66:f6:bf:4d:91:99:58:
0f:5e:86:c5:bc:a1:ff:13:2e:dd:04:d6:32:55:d0:a0:e1:59:
ae:25:19:08:54:75:6c:26:be:7d:18:98:ca:9a:c3:03:63:94:
64:cb:f4:df:11:b3:93:34:5a:98:77:c2:a3:9f:58:d5:c5:2d:
c1:cc:84:4a:3c:71:ff:e5:06:27:9f:52:b0:ba:ce:04:13:b8:
91:e3:01:f3:6e:bd:2d:8d:6d:d4:b3:d8:3b:be:f4:c9:ab:88:
d0:5d:2c:a9:c3:62:c9:ff:3a:e7:4b:b6:ca:db:4f:a7:08:35:
cc:2a:77:ee:87:c5:81:f2:29:8d:f8:80:08:51:36:55:30:b1:
c9:ce:75:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:53 2025 by rpki-client