Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/278cfe-eaeb-4bae-a0db-a17011e4557b/1/Qd6VK1JCO0AaqfTkniQJ0C06Yz8.mft
File: Qd6VK1JCO0AaqfTkniQJ0C06Yz8.mft (raw, json)
Hash identifier: YLxJQ0E403eoprwzkMCC7EAXmbDhzJcRIcVlxWNNaYc=
Subject key identifier: 74:0D:30:80:54:67:5C:B0:2D:AD:2F:41:37:89:A8:ED:78:51:B6:8D
Authority key identifier: 41:DE:95:2B:52:42:3B:40:1A:A9:F4:E4:9E:24:09:D0:2D:3A:63:3F
Certificate issuer: /CN=41de952b52423b401aa9f4e49e2409d02d3a633f
Certificate serial: 0194BD1784B5BC04BC1EB18732310BA3C2F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qd6VK1JCO0AaqfTkniQJ0C06Yz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/278cfe-eaeb-4bae-a0db-a17011e4557b/1/Qd6VK1JCO0AaqfTkniQJ0C06Yz8.mft
Manifest number: 09A9
Signing time: Fri 31 Jan 2025 16:00:22 +0000
Manifest this update: Fri 31 Jan 2025 16:00:22 +0000
Manifest next update: Sat 01 Feb 2025 16:00:22 +0000
Files and hashes: 1: Qd6VK1JCO0AaqfTkniQJ0C06Yz8.crl (hash: Uae/BGOultV6nznLwMAoQItf5uCGNLwb2abboJmeeF8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:84:b5:bc:04:bc:1e:b1:87:32:31:0b:a3:c2:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41de952b52423b401aa9f4e49e2409d02d3a633f
Validity
Not Before: Jan 31 16:00:22 2025 GMT
Not After : Feb 1 16:00:22 2025 GMT
Subject: CN=740d308054675cb02dad2f413789a8ed7851b68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:91:e8:7e:b3:d2:f3:0d:b3:01:e7:ce:96:42:
6a:a4:f9:92:aa:46:72:57:74:e3:4c:f9:fd:35:66:
de:0f:06:10:bd:cf:f6:08:e5:6e:15:85:3f:1b:44:
c5:e4:a7:89:09:cb:a6:93:4e:16:e2:57:7e:74:f2:
38:80:19:51:60:6a:d7:40:07:0a:4e:40:aa:6c:bf:
f2:29:a5:91:53:37:1f:0e:8c:38:49:39:b3:88:da:
5c:32:7f:b5:58:49:4b:11:91:0c:80:77:e4:f3:87:
68:65:14:ab:4c:cd:ff:39:2c:cc:4b:03:ca:0b:ae:
fb:f4:5a:15:8f:9f:d3:bb:a3:76:e7:10:7a:12:e2:
ee:3f:93:20:b2:a5:d5:86:75:53:26:65:53:06:ee:
2d:93:10:cc:f4:13:37:e0:d5:d1:f5:c6:85:a9:47:
99:21:f3:2d:0a:15:3f:87:08:e1:7f:1d:3e:fc:cc:
ac:f1:39:4f:b9:34:a8:45:71:1c:3a:58:2c:e3:06:
cc:a2:96:ee:4e:73:17:68:6a:7b:a6:ea:eb:79:6e:
19:f6:9a:7e:0d:2d:39:df:b6:bb:e0:cd:2b:b5:09:
ea:a3:9f:3d:38:2d:40:cf:21:36:23:a0:c9:3a:e7:
13:46:58:87:e8:d0:4d:0a:9b:e6:1c:b3:18:57:e5:
d0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:0D:30:80:54:67:5C:B0:2D:AD:2F:41:37:89:A8:ED:78:51:B6:8D
X509v3 Authority Key Identifier:
keyid:41:DE:95:2B:52:42:3B:40:1A:A9:F4:E4:9E:24:09:D0:2D:3A:63:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd6VK1JCO0AaqfTkniQJ0C06Yz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/278cfe-eaeb-4bae-a0db-a17011e4557b/1/Qd6VK1JCO0AaqfTkniQJ0C06Yz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/278cfe-eaeb-4bae-a0db-a17011e4557b/1/Qd6VK1JCO0AaqfTkniQJ0C06Yz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:a1:c4:a2:f3:fb:70:e2:59:3f:6d:bc:51:95:22:48:78:c5:
f5:3b:fe:34:f6:f5:c5:2e:13:0e:0f:5a:74:bb:18:57:f4:a1:
af:54:5c:04:50:9a:9c:47:1a:05:7b:49:fa:9f:d6:1b:2b:cd:
55:74:a6:c1:bb:68:ab:19:b6:16:60:eb:04:db:ed:13:a1:0f:
8c:01:d9:0b:2a:98:57:56:61:1e:8e:b2:b4:3d:1a:59:83:4f:
d4:67:97:06:ef:14:90:ae:20:fd:ce:62:9b:b1:9b:d3:6f:9c:
10:97:00:1d:38:14:11:51:71:c2:bf:22:53:4b:e5:d0:57:0d:
c7:5f:9d:90:52:0f:85:fa:55:ab:59:04:1f:f8:f1:34:09:c7:
f8:9a:6b:27:89:6a:0b:db:fb:c9:a6:98:d5:92:c2:51:09:6a:
4c:fc:d4:e0:6b:9b:72:5a:fe:98:f2:79:1d:8f:c7:4d:5e:e2:
80:a3:8a:f5:06:9e:3c:0a:05:90:a2:27:0c:cf:30:c7:5b:b2:
10:d8:83:d4:c5:e6:e1:97:35:33:b3:c6:c0:00:9f:f9:7d:b3:
de:d1:d3:fb:7f:d7:91:7a:ad:93:a4:27:83:25:b8:62:a8:cf:
c8:af:c6:9e:48:b8:e3:19:1d:50:21:e3:65:74:e7:15:dc:fe:
f8:4d:d1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:13 2025 by rpki-client