Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.mft
File: QqjNSXm8XdMbENe3GFDvEurDz7U.mft (raw, json)
Hash identifier: nTBcZ9/nj/MUtTxWObqzpmATUwMuhqE4rfgOcWYgnc0=
Subject key identifier: 6D:FD:5B:C9:67:66:FE:72:BB:4D:CC:10:E3:DE:83:9A:D9:99:8C:B9
Authority key identifier: 42:A8:CD:49:79:BC:5D:D3:1B:10:D7:B7:18:50:EF:12:EA:C3:CF:B5
Certificate issuer: /CN=42a8cd4979bc5dd31b10d7b71850ef12eac3cfb5
Certificate serial: 0194BCA98ACFF2E12D8F0614F3D4D255B3D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqjNSXm8XdMbENe3GFDvEurDz7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.mft
Manifest number: 01B5
Signing time: Fri 31 Jan 2025 14:00:15 +0000
Manifest this update: Fri 31 Jan 2025 14:00:15 +0000
Manifest next update: Sat 01 Feb 2025 14:00:15 +0000
Files and hashes: 1: QqjNSXm8XdMbENe3GFDvEurDz7U.crl (hash: caSFmVkVG7qEdJ7h0zLnIcPBiMToYIqoQyg+g6ZX1y0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8a:cf:f2:e1:2d:8f:06:14:f3:d4:d2:55:b3:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a8cd4979bc5dd31b10d7b71850ef12eac3cfb5
Validity
Not Before: Jan 31 14:00:15 2025 GMT
Not After : Feb 1 14:00:15 2025 GMT
Subject: CN=6dfd5bc96766fe72bb4dcc10e3de839ad9998cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9d:6b:c7:93:6a:88:9e:ed:32:81:ba:33:56:
93:84:42:f8:51:20:19:c1:00:b0:01:71:91:98:4f:
b4:b3:db:ea:bf:d9:8e:95:13:c3:00:41:aa:64:1e:
1a:f2:c9:07:38:71:72:da:7e:da:ca:72:32:6e:f2:
37:66:ae:58:69:2e:cb:cc:32:c5:24:a9:b0:7a:65:
2a:24:ef:81:5d:30:3f:6e:e2:6f:2e:2a:e0:e3:e7:
a1:23:4d:d7:4d:a4:ce:37:25:99:d5:7b:4c:90:1a:
b3:ba:e5:ab:52:61:11:a5:81:e2:8f:e6:e8:10:0d:
fe:3a:86:91:eb:70:9e:a5:bb:25:63:8d:8e:63:45:
67:58:3a:c1:6b:0b:8f:9f:cc:0c:8e:82:fe:9c:e7:
f7:2b:7f:e0:b1:83:e9:b7:35:0a:7f:64:0e:81:5b:
cd:71:7c:d0:b3:62:c0:da:8d:46:d0:a1:4e:a0:4d:
6e:b8:d5:9f:85:6a:d5:c8:59:c2:7a:7c:cc:af:b3:
ea:44:90:f3:d7:64:5b:8b:7f:88:1a:8d:25:a1:2f:
56:9a:7f:33:a3:77:ef:44:36:25:63:2e:53:6e:b9:
c5:34:94:3f:6d:23:c2:b2:6f:c8:06:cb:dc:71:bd:
d4:62:8e:ef:70:48:a2:7d:ba:0b:1f:f3:a8:73:46:
5b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FD:5B:C9:67:66:FE:72:BB:4D:CC:10:E3:DE:83:9A:D9:99:8C:B9
X509v3 Authority Key Identifier:
keyid:42:A8:CD:49:79:BC:5D:D3:1B:10:D7:B7:18:50:EF:12:EA:C3:CF:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqjNSXm8XdMbENe3GFDvEurDz7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:91:d8:9f:f7:ce:8d:d2:ec:b9:1e:7a:c2:22:0d:3d:ee:b2:
fe:29:51:6e:a7:eb:00:b9:5a:ff:e4:d3:03:60:a2:ee:ea:b0:
3e:87:e6:12:f5:51:05:f7:12:fd:12:2e:c8:ab:71:e0:07:87:
a0:9f:26:03:cf:a5:07:5d:ca:a1:b4:40:b0:36:36:c5:1e:10:
4d:b1:e3:c2:78:15:a5:ef:c5:17:c6:82:5f:2e:0a:40:df:ca:
e7:b3:c9:77:71:10:2c:d9:ac:7a:cb:f2:df:9f:51:99:bb:c2:
7f:d1:51:24:7a:d9:6c:59:37:8f:d8:c7:b8:87:9c:90:ff:ea:
37:e1:ea:63:a3:1a:58:b6:97:0a:5b:5e:68:9a:fe:12:ba:fa:
9d:ab:fc:17:58:a2:2b:3b:2d:e8:01:ff:cc:fb:d5:70:26:c8:
03:54:7a:55:a2:e4:c8:91:5e:f8:c3:9a:85:36:a8:bc:c4:a4:
59:18:b2:b1:c5:84:f8:94:21:5b:a4:b2:8f:88:e4:b1:90:6f:
6e:54:70:8f:37:a7:ed:08:0b:d2:13:b6:41:47:a6:36:66:0f:
42:75:60:eb:c8:d8:d7:b7:02:1e:2a:bf:58:eb:a0:ad:9e:2f:
ce:69:c4:29:36:2c:00:64:07:47:cd:45:27:35:e0:9f:6f:d7:
3f:4c:9d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:15:25 2025 by rpki-client