Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft
File: Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft (raw, json)
Hash identifier: F88dCIhW/oR+GS1VBAp1IFcyvXn96DS2j+hUDTstPa4=
Subject key identifier: 6D:DE:26:58:06:7E:D6:4E:AC:97:1F:CD:8B:39:3E:9D:51:8D:AB:CE
Authority key identifier: 46:AB:3B:F8:36:26:5F:2A:AB:8F:91:9B:E8:CF:B6:EB:74:7E:5F:78
Certificate issuer: /CN=46ab3bf836265f2aab8f919be8cfb6eb747e5f78
Certificate serial: 0194BBCEEECF91424991B257F0028C4C438A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rqs7-DYmXyqrj5Gb6M-263R-X3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:01:28 +0000
Manifest this update: Fri 31 Jan 2025 10:01:28 +0000
Manifest next update: Sat 01 Feb 2025 10:01:28 +0000
Files and hashes: 1: Rqs7-DYmXyqrj5Gb6M-263R-X3g.crl (hash: lenYV/lVdwm7tqE5ZQ2buC0gt3WV/noCNvImNDyeaTM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ee:cf:91:42:49:91:b2:57:f0:02:8c:4c:43:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ab3bf836265f2aab8f919be8cfb6eb747e5f78
Validity
Not Before: Jan 31 10:01:28 2025 GMT
Not After : Feb 1 10:01:28 2025 GMT
Subject: CN=6dde2658067ed64eac971fcd8b393e9d518dabce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:29:c3:0b:62:c9:ce:18:0b:1a:41:36:5a:c8:
30:40:20:df:f3:66:43:d4:8d:6d:5d:9a:f1:5a:84:
0e:d2:eb:29:f0:e8:64:46:c7:dd:32:b9:38:73:34:
c5:69:f5:12:aa:5d:d2:1f:ca:05:92:e0:a7:f8:da:
2f:69:4a:94:c4:4b:30:c5:fc:40:17:9b:1b:15:fd:
84:a1:b4:ae:1f:c9:1a:2f:0e:30:c2:83:3b:74:cf:
3b:68:1c:e2:43:b0:af:21:36:02:55:8c:df:3c:f3:
40:a7:08:c4:04:ab:1b:ff:7f:43:ec:2d:8a:db:b1:
ac:c2:e1:11:8d:09:ee:d6:66:8c:1b:e7:00:f5:e8:
95:38:e6:7e:55:ea:1c:d7:c6:e1:3c:30:5c:b4:c5:
e4:b1:78:26:d4:7e:25:db:53:ed:c8:26:9d:d6:76:
c0:8f:a4:47:1d:04:35:df:6b:49:72:03:ac:80:a4:
3d:7a:32:86:da:b7:86:d7:2b:23:8c:c0:42:27:f7:
81:a7:65:ef:6a:f7:af:68:02:74:46:06:c7:cc:4f:
19:05:55:93:9b:fb:e7:9a:36:be:aa:e2:6a:33:8c:
e3:f9:3b:fb:39:c7:85:2e:fa:81:f9:52:50:28:aa:
dd:f2:3c:8f:1b:f8:ea:7f:47:13:63:43:ef:bc:f2:
32:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:DE:26:58:06:7E:D6:4E:AC:97:1F:CD:8B:39:3E:9D:51:8D:AB:CE
X509v3 Authority Key Identifier:
keyid:46:AB:3B:F8:36:26:5F:2A:AB:8F:91:9B:E8:CF:B6:EB:74:7E:5F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rqs7-DYmXyqrj5Gb6M-263R-X3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:77:38:30:e3:e7:b5:c2:86:11:78:9b:16:a0:97:51:4c:25:
1d:7e:43:1e:e7:28:42:f7:24:e4:a3:a5:88:44:4e:16:53:72:
a0:19:f5:e4:c7:f5:b8:7f:69:f5:20:84:cf:8f:ab:09:bf:70:
26:28:a3:a6:4b:38:9b:bf:87:1b:2a:66:3d:38:97:86:9c:0c:
d9:a2:06:5b:9f:9a:80:7e:ec:c7:ba:ff:f3:4f:3f:f6:ea:d9:
db:ce:2a:01:ad:7d:28:76:b6:dc:b2:38:7e:1b:4b:05:a4:ac:
51:0b:1b:d1:4a:06:c5:1e:c0:0c:27:48:f2:57:8e:e4:39:65:
70:83:15:7a:48:55:c1:74:3e:e1:2c:3d:fc:09:1b:b0:b8:d5:
fa:00:84:4e:ed:e7:80:f2:54:c3:c7:f5:98:c8:62:4c:0d:2b:
05:3e:3e:0a:e0:9c:28:cc:af:d5:aa:35:a5:6f:43:dd:36:11:
cf:20:76:f3:28:49:98:84:1c:54:81:7d:27:16:0b:d6:86:0d:
91:7a:47:cf:38:a8:18:38:97:4c:5b:0e:e2:a3:95:89:09:ed:
50:b7:37:33:95:bf:c3:00:fc:f0:4b:00:35:7a:3d:00:00:ce:
9e:d6:16:54:05:76:a2:0d:ac:c3:af:6e:3a:7d:37:21:4b:28:
14:7a:88:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:59:02 2025 by rpki-client