Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/24fbb6-86bc-46cb-88e5-b5873ba8fe47/1/q3rQAuSQheSApRIaeaJvztr_oZs.mft
File: q3rQAuSQheSApRIaeaJvztr_oZs.mft (raw, json)
Hash identifier: g/CDtkmziCxNwZg078CwKB2aOZNsbRW3wDi8UmwYB0Q=
Subject key identifier: 5E:29:C6:3C:1E:C6:B7:A7:2F:23:42:29:55:E4:FA:3A:C1:5C:C1:1B
Authority key identifier: AB:7A:D0:02:E4:90:85:E4:80:A5:12:1A:79:A2:6F:CE:DA:FF:A1:9B
Certificate issuer: /CN=ab7ad002e49085e480a5121a79a26fcedaffa19b
Certificate serial: 0194BBCDB26F84384BD153DF9017C8801BF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3rQAuSQheSApRIaeaJvztr_oZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/24fbb6-86bc-46cb-88e5-b5873ba8fe47/1/q3rQAuSQheSApRIaeaJvztr_oZs.mft
Manifest number: 1126
Signing time: Fri 31 Jan 2025 10:00:07 +0000
Manifest this update: Fri 31 Jan 2025 10:00:07 +0000
Manifest next update: Sat 01 Feb 2025 10:00:07 +0000
Files and hashes: 1: q3rQAuSQheSApRIaeaJvztr_oZs.crl (hash: Dwj91CYTstOJixuU+X+NrdidyLq0KtW9PDaH4pJrNSA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b2:6f:84:38:4b:d1:53:df:90:17:c8:80:1b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7ad002e49085e480a5121a79a26fcedaffa19b
Validity
Not Before: Jan 31 10:00:07 2025 GMT
Not After : Feb 1 10:00:07 2025 GMT
Subject: CN=5e29c63c1ec6b7a72f23422955e4fa3ac15cc11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2d:41:31:35:71:94:5f:e0:8a:6c:b1:a3:a0:
c2:c6:46:ac:0f:fa:00:b0:be:97:39:6d:82:31:61:
4b:68:76:32:9f:7a:97:e3:d1:57:d8:d5:57:f1:c6:
bf:d7:ee:bb:f4:29:0a:b0:46:20:d7:40:13:47:c1:
b2:98:43:22:30:97:44:2a:dd:c0:63:ec:4c:61:48:
7a:75:ab:58:94:df:f5:ea:97:ce:0a:38:71:b2:1f:
fd:12:44:05:1f:e2:cd:91:a7:a1:99:83:cd:b1:d2:
d5:57:6a:77:9b:71:4d:12:f1:55:85:f6:2c:11:f0:
1b:f1:0b:51:78:8a:1a:4a:fb:de:25:36:cb:95:54:
0e:d3:19:3b:2f:d9:a6:7e:ab:fb:20:d7:1b:de:77:
d0:b5:4a:d1:5a:00:f0:0e:88:c8:1f:84:d2:c9:49:
34:a9:c4:aa:65:d9:45:c9:b2:97:e7:3a:85:c4:c0:
c9:f7:44:59:95:f5:01:ce:9a:82:9b:2b:1d:6f:b4:
51:dd:b2:58:96:b7:c8:0a:26:3b:8c:22:0a:56:4b:
90:2b:d1:d2:8b:37:80:cc:ae:88:a0:df:e9:99:a2:
5a:e6:0f:20:ba:96:aa:c5:54:f5:1c:e5:5f:44:da:
02:06:19:25:9b:f8:70:33:74:2c:d1:28:e7:37:1d:
a9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:29:C6:3C:1E:C6:B7:A7:2F:23:42:29:55:E4:FA:3A:C1:5C:C1:1B
X509v3 Authority Key Identifier:
keyid:AB:7A:D0:02:E4:90:85:E4:80:A5:12:1A:79:A2:6F:CE:DA:FF:A1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3rQAuSQheSApRIaeaJvztr_oZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/24fbb6-86bc-46cb-88e5-b5873ba8fe47/1/q3rQAuSQheSApRIaeaJvztr_oZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/24fbb6-86bc-46cb-88e5-b5873ba8fe47/1/q3rQAuSQheSApRIaeaJvztr_oZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:07:cc:0e:fd:a6:d4:98:b8:60:8f:ab:08:ef:a8:07:78:3e:
aa:74:d0:5c:41:92:12:ba:1c:6c:81:55:16:d1:ae:71:07:61:
a7:fd:e2:44:45:2c:7c:28:f7:b5:07:a7:ac:72:ca:9c:72:86:
06:cf:f0:2a:f8:30:9c:ab:c5:d6:3d:6b:8b:2f:08:82:2f:a4:
ca:f9:9b:50:a8:68:a3:f6:32:d9:3e:fa:61:92:9b:ed:d6:88:
da:12:59:6a:46:f6:e7:9f:47:08:b5:c0:90:90:fd:87:a0:27:
98:8d:55:e7:97:43:d5:89:18:f9:8b:c8:50:50:93:74:28:b9:
ce:3d:51:48:40:cb:0b:71:dc:33:03:da:bb:28:0f:e6:cf:34:
7d:97:cb:35:88:c3:af:29:50:9c:78:26:22:03:2d:6e:76:fc:
23:3a:6e:f2:20:62:a1:a1:78:66:26:d6:c5:0f:8f:8f:39:eb:
55:25:9c:d1:76:22:7f:93:af:54:a0:45:62:1f:ca:b0:f9:57:
93:42:79:92:62:c5:5a:66:e0:d4:4c:46:c8:8c:3f:3f:fb:59:
16:01:2c:54:ee:28:35:4d:c3:97:ae:55:dd:4d:98:79:2e:61:
15:a8:9c:32:3a:50:72:3d:6a:1f:f0:6a:c2:30:33:4e:cd:b3:
ce:a3:38:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:13 2025 by rpki-client