Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
File: QL_SbwstE2mcNW7Di5bGqCXSG2o.mft (raw, json)
Hash identifier: dEnVpw4pTJdMzJDGQV97SNqnJHkKL4cbuyOUGHZcIDs=
Subject key identifier: 08:28:98:29:62:49:9F:06:03:9A:79:4F:85:72:7D:E4:AE:FF:6E:90
Authority key identifier: 40:BF:D2:6F:0B:2D:13:69:9C:35:6E:C3:8B:96:C6:A8:25:D2:1B:6A
Certificate issuer: /CN=40bfd26f0b2d13699c356ec38b96c6a825d21b6a
Certificate serial: 0194BBCEF25A193C41B88A3F7AFAC937C4E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
Manifest number: 058F
Signing time: Fri 31 Jan 2025 10:01:28 +0000
Manifest this update: Fri 31 Jan 2025 10:01:28 +0000
Manifest next update: Sat 01 Feb 2025 10:01:28 +0000
Files and hashes: 1: QL_SbwstE2mcNW7Di5bGqCXSG2o.crl (hash: bSLj3iFDMgkec5reQPeDM4Dy9LgYB6S2qtjnAZAO5Vk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f2:5a:19:3c:41:b8:8a:3f:7a:fa:c9:37:c4:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40bfd26f0b2d13699c356ec38b96c6a825d21b6a
Validity
Not Before: Jan 31 10:01:28 2025 GMT
Not After : Feb 1 10:01:28 2025 GMT
Subject: CN=0828982962499f06039a794f85727de4aeff6e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6c:51:62:83:40:fa:00:6e:39:47:0f:38:8a:
bf:e4:12:e5:40:a5:cc:83:93:4d:af:a4:4e:9e:d8:
40:ec:d6:e6:49:c3:3d:50:48:a7:bb:59:10:89:de:
67:7b:3d:a1:2f:e6:7a:53:69:56:f3:de:5d:0b:64:
71:35:47:8e:e1:d0:22:10:08:2a:42:cf:7c:c7:7b:
00:98:f3:6c:23:c5:2b:7a:87:ae:ee:7e:1d:77:42:
68:c6:b1:67:5e:79:18:cc:24:34:0f:4d:f2:c0:ee:
86:fb:1e:a3:1f:d1:60:74:fb:1b:f4:92:f9:d3:6b:
35:3e:9d:01:fd:bf:a6:88:a3:ac:5c:fc:2e:7c:5a:
10:e7:7e:4d:cb:36:83:e8:40:a1:ef:20:44:3f:26:
f0:23:41:3d:bd:db:da:c5:7c:d0:bf:42:7d:9d:41:
2d:7f:f4:b5:f1:1a:43:e5:33:7d:2e:0e:13:5c:74:
b8:f9:2c:8a:c6:0b:78:a8:19:cd:8e:09:df:77:3a:
44:7b:74:0d:7f:a9:b9:55:ef:86:01:8f:d7:34:61:
18:a8:d5:9f:48:2f:78:69:56:64:1e:21:e4:a1:15:
9b:b8:5f:a7:f9:b4:54:cb:33:23:45:fa:bf:48:ce:
ed:2c:79:86:7b:f2:e1:5c:cc:72:f4:73:1b:b7:73:
0c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:28:98:29:62:49:9F:06:03:9A:79:4F:85:72:7D:E4:AE:FF:6E:90
X509v3 Authority Key Identifier:
keyid:40:BF:D2:6F:0B:2D:13:69:9C:35:6E:C3:8B:96:C6:A8:25:D2:1B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QL_SbwstE2mcNW7Di5bGqCXSG2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/315b4d-6ceb-4098-bfd2-5093c52e02ce/1/QL_SbwstE2mcNW7Di5bGqCXSG2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:1f:79:25:2e:1f:39:9f:7b:c1:13:68:c2:60:2f:a0:d3:c1:
4b:fd:76:56:4f:a6:b3:cc:81:fe:99:78:25:a8:df:fb:11:57:
d0:44:65:1e:35:1d:ae:8a:3d:ea:f8:87:e1:eb:cd:50:b3:6b:
60:aa:41:e5:f7:ff:27:97:1c:c9:0e:4f:dd:36:cc:00:2e:18:
54:d0:f7:e2:a8:7e:85:44:59:f7:2f:36:0c:28:80:0f:99:59:
c7:5c:d3:ca:a7:c8:40:b2:56:58:44:e4:74:8f:ef:ca:54:24:
b6:6b:3d:30:22:f5:dc:e9:c8:ed:a3:79:3f:b4:90:28:1a:f8:
66:67:af:a8:44:b7:13:4d:2a:c5:9f:c6:53:ff:7b:49:db:38:
a4:76:2b:ec:56:3f:f8:7d:a3:84:19:34:c2:4c:df:ee:04:3f:
b6:68:b9:e1:ae:c8:ae:dd:18:db:3b:79:36:8d:31:28:f1:87:
e3:77:0c:07:02:39:f6:8d:29:77:c0:5b:0a:a4:0e:a0:14:5d:
cf:2b:27:71:5f:b9:ba:eb:39:d8:6f:f3:92:2a:a8:b3:a0:35:
17:8f:c9:88:29:c9:32:dc:85:2a:df:a5:1a:c8:70:0d:42:17:
f2:81:8d:8c:77:a5:f1:73:12:b5:3f:eb:a3:95:f2:5d:b5:7e:
c1:7b:97:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:26 2025 by rpki-client