Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
File: QbpsBQULUMcLmjXTQjC3rDCdTZo.mft (raw, json)
Hash identifier: vlMr0BQ+IF95gOGkg78JZulhDaP+sRZV2DK5k5oIyNc=
Subject key identifier: 17:FA:E0:03:A1:80:8F:96:1E:BB:9D:50:12:1E:26:47:71:9E:2F:CA
Authority key identifier: 41:BA:6C:05:05:0B:50:C7:0B:9A:35:D3:42:30:B7:AC:30:9D:4D:9A
Certificate issuer: /CN=41ba6c05050b50c70b9a35d34230b7ac309d4d9a
Certificate serial: 0194BD17EBE34D681E69F37CEDBBFBABB864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
Manifest number: 0117
Signing time: Fri 31 Jan 2025 16:00:48 +0000
Manifest this update: Fri 31 Jan 2025 16:00:48 +0000
Manifest next update: Sat 01 Feb 2025 16:00:48 +0000
Files and hashes: 1: QbpsBQULUMcLmjXTQjC3rDCdTZo.crl (hash: +rHW0Z/smPG24XI7f4WP4pHUpJF5DVdN47R/nrXlIlo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:eb:e3:4d:68:1e:69:f3:7c:ed:bb:fb:ab:b8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ba6c05050b50c70b9a35d34230b7ac309d4d9a
Validity
Not Before: Jan 31 16:00:48 2025 GMT
Not After : Feb 1 16:00:48 2025 GMT
Subject: CN=17fae003a1808f961ebb9d50121e2647719e2fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:80:82:05:f6:64:0c:8f:d4:52:42:e2:36:9b:
28:91:40:72:bd:d0:e2:6d:29:04:bc:4b:f2:aa:bf:
17:d1:10:a2:9a:19:73:e7:95:63:24:76:ad:cb:b5:
6d:0c:e3:30:37:ed:85:db:80:7b:e7:d8:ec:cc:31:
05:72:a7:24:80:5b:45:22:fd:74:a7:53:41:cf:e0:
aa:28:9f:ab:a8:0e:d7:af:b0:08:a1:28:d2:1d:7b:
b9:2d:58:6a:27:f9:04:e1:17:d4:0a:d1:be:3e:fc:
f9:e9:c9:92:65:43:85:f4:4b:b0:27:be:86:e0:5f:
06:25:f4:21:a5:22:b3:26:7f:23:40:5e:88:a7:84:
bd:ec:b1:b6:1d:91:22:6f:9f:4a:4d:f3:61:be:ed:
3a:11:b2:5d:9c:a4:c5:63:7f:ee:41:b8:55:e5:15:
c1:ef:8c:02:da:2f:b0:5f:25:e2:8b:89:1e:7c:cd:
86:c2:7a:a7:7b:49:74:6e:26:2d:29:3c:1b:66:ed:
e6:e7:8f:45:f2:eb:2f:a5:20:24:6a:39:7a:ff:55:
08:05:e4:d5:a8:a3:fb:f3:e2:59:b6:d2:76:72:64:
30:34:48:1a:78:b1:69:ab:7e:f9:f9:2b:ba:fa:5e:
7a:94:5c:cb:94:ed:79:83:c1:ce:ea:e0:89:12:bb:
8c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FA:E0:03:A1:80:8F:96:1E:BB:9D:50:12:1E:26:47:71:9E:2F:CA
X509v3 Authority Key Identifier:
keyid:41:BA:6C:05:05:0B:50:C7:0B:9A:35:D3:42:30:B7:AC:30:9D:4D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:8f:fc:0b:bb:7c:08:29:38:49:28:c9:5e:2e:59:94:37:e8:
67:ea:0a:94:5f:81:ff:fc:a9:42:9b:e6:ee:30:b3:6b:48:0c:
ac:5a:24:b7:12:5d:8b:54:df:c7:ea:55:ce:e7:92:85:df:cb:
a1:92:20:2c:0a:09:30:e1:22:5b:3b:bd:b0:3e:11:8e:d3:c6:
2d:c5:4e:bc:55:0d:07:41:15:2b:68:13:0c:6c:8e:cc:d0:77:
43:37:7a:de:7e:2b:3c:8c:bd:fd:6a:06:09:bb:fc:a0:08:df:
b6:00:91:e5:6b:a1:bc:1e:23:6d:fe:d6:3d:96:d3:2f:90:cf:
63:13:f6:a9:c6:17:38:44:67:d3:5c:91:9f:7e:de:17:1e:4c:
30:29:1a:58:1d:17:11:e3:54:2a:5a:79:8c:02:e8:25:2e:b8:
cb:a4:bc:36:b2:5a:b5:0f:e1:2f:2f:6b:c4:5f:6c:b9:d5:c4:
72:a3:97:fa:09:ce:fc:b2:61:b9:11:eb:84:8f:de:03:33:7f:
84:e7:a9:86:90:6a:4e:f2:e3:0a:89:40:74:4a:7f:b2:b8:84:
11:e2:de:1f:c1:5d:8d:fb:e6:a5:9a:7d:7b:18:27:4d:62:18:
56:d8:4b:5c:28:8f:74:db:b6:3b:25:97:b4:1a:cc:f6:a2:73:
ca:10:f3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:29 2025 by rpki-client