Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.mft
File: qxSu-APVDXALuYUq6LsrtAkmFqU.mft (raw, json)
Hash identifier: HGrnVJStTlJ28yD1y+6cjGsXP/zNTBmTTgjY17bYoIs=
Subject key identifier: F0:C2:AE:2A:90:5A:F7:F9:C5:AA:33:55:53:0C:2E:34:F5:94:E3:B2
Authority key identifier: AB:14:AE:F8:03:D5:0D:70:0B:B9:85:2A:E8:BB:2B:B4:09:26:16:A5
Certificate issuer: /CN=ab14aef803d50d700bb9852ae8bb2bb4092616a5
Certificate serial: 0194BC3BFD2A6ECA12BE7C071D450242CC30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qxSu-APVDXALuYUq6LsrtAkmFqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.mft
Manifest number: 0B42
Signing time: Fri 31 Jan 2025 12:00:35 +0000
Manifest this update: Fri 31 Jan 2025 12:00:35 +0000
Manifest next update: Sat 01 Feb 2025 12:00:35 +0000
Files and hashes: 1: qxSu-APVDXALuYUq6LsrtAkmFqU.crl (hash: rUr8idcLZKM62R9Y2CRRK1dDLJoV6VJY765lvF/BVS0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:fd:2a:6e:ca:12:be:7c:07:1d:45:02:42:cc:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab14aef803d50d700bb9852ae8bb2bb4092616a5
Validity
Not Before: Jan 31 12:00:35 2025 GMT
Not After : Feb 1 12:00:35 2025 GMT
Subject: CN=f0c2ae2a905af7f9c5aa3355530c2e34f594e3b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:10:ec:14:ac:9c:f1:43:f9:72:58:68:75:f2:
15:b4:b7:07:bd:92:f2:8d:af:67:46:17:df:45:c1:
e2:a3:c6:35:63:ff:e2:ee:04:04:24:ba:c3:5d:f0:
b3:2b:ec:e4:e5:e0:af:2c:51:e2:8f:77:4d:d2:d0:
06:69:0d:8e:9a:7a:f5:fa:74:a8:f2:35:01:54:19:
e8:3b:ee:88:fd:0b:33:36:01:c8:e6:13:70:f8:ff:
50:d5:de:5f:64:bb:6c:7e:90:12:1e:fa:bb:b1:d4:
f9:60:0e:70:d1:86:e7:5e:09:9f:ff:d0:cf:b3:f6:
bc:dc:12:05:1a:b9:9c:f6:b0:31:87:16:85:11:15:
f9:e6:67:84:70:26:c4:14:d5:29:14:99:e3:c2:eb:
90:f5:e3:1b:42:d9:bc:01:24:2e:89:a1:c2:4d:ab:
aa:38:03:d9:dd:ff:6d:15:26:f7:60:bc:b3:11:e8:
57:32:dc:d4:fc:08:74:1d:8b:d9:67:f4:ad:40:8c:
23:cb:c2:82:65:9f:bc:8e:9b:35:28:26:1d:d8:74:
69:57:f8:90:d7:63:44:38:1a:3c:65:60:80:2b:8f:
c7:e3:22:50:14:39:d2:62:3f:6e:d0:ff:64:69:c0:
0e:2e:2b:fc:e1:ab:4d:d1:33:17:9f:1e:0a:b6:db:
45:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C2:AE:2A:90:5A:F7:F9:C5:AA:33:55:53:0C:2E:34:F5:94:E3:B2
X509v3 Authority Key Identifier:
keyid:AB:14:AE:F8:03:D5:0D:70:0B:B9:85:2A:E8:BB:2B:B4:09:26:16:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxSu-APVDXALuYUq6LsrtAkmFqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e6:57:0d:bb:db:fd:5b:a3:f4:34:bb:9e:ec:51:1c:aa:4d:
41:84:26:b7:d2:85:64:d1:37:e6:04:a1:d7:44:8f:b2:b4:7d:
3d:a8:a2:44:76:f7:1c:92:d3:79:2e:ec:6b:84:d9:77:a4:84:
d6:4c:6e:5b:67:e0:f5:32:51:69:3e:30:2c:5d:98:27:27:03:
fe:f1:e5:f4:ce:ce:d4:e5:db:55:70:af:10:79:b2:17:ce:ee:
61:b8:77:1c:e6:7e:90:52:47:bb:17:f8:f9:8d:f9:bd:5c:3c:
9e:2c:18:9a:0d:79:18:b2:f0:5d:db:9f:c1:6f:21:80:0e:bc:
90:fd:d9:1e:a9:1e:a0:25:9f:bc:8b:60:dd:6b:3e:22:42:2c:
9c:ac:e8:c0:41:8c:9c:31:1a:dd:20:ab:4f:4a:7f:12:b2:09:
46:99:98:18:69:82:a2:4d:0d:67:82:3c:8b:4b:4b:9f:58:15:
c5:f5:fe:04:83:da:66:7f:08:b3:a8:c1:62:dc:d5:15:10:a5:
2e:ee:fe:8c:56:b7:f6:cc:7b:f1:e8:1c:22:4b:07:39:40:9c:
8e:ca:6c:46:ca:24:d1:c5:22:2f:41:31:6e:9c:fc:c4:a6:a7:
74:6b:d5:ee:4a:48:a8:ba:be:85:2f:b6:37:8e:8f:96:3d:04:
e4:5d:1d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:19:57 2025 by rpki-client