Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
File: QJxwBWp431-Pxw_wA9EvYNFR15E.mft (raw, json)
Hash identifier: C9ogFbQhVb24UwhQsBLbGy6vAqUAUxd9cvoWGudPDds=
Subject key identifier: CE:4C:4A:0A:0E:34:C3:93:C9:6D:B0:88:D7:15:83:B5:40:72:F8:B3
Authority key identifier: 40:9C:70:05:6A:78:DF:5F:8F:C7:0F:F0:03:D1:2F:60:D1:51:D7:91
Certificate issuer: /CN=409c70056a78df5f8fc70ff003d12f60d151d791
Certificate serial: 0194BBCEE7C16F7322D741DCEE181D8C1918
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
Manifest number: 03A9
Signing time: Fri 31 Jan 2025 10:01:26 +0000
Manifest this update: Fri 31 Jan 2025 10:01:26 +0000
Manifest next update: Sat 01 Feb 2025 10:01:26 +0000
Files and hashes: 1: QJxwBWp431-Pxw_wA9EvYNFR15E.crl (hash: WBrutZksqakl2p7q2cv2RDBxJ4ploXACS+9+iGHUrJs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e7:c1:6f:73:22:d7:41:dc:ee:18:1d:8c:19:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=409c70056a78df5f8fc70ff003d12f60d151d791
Validity
Not Before: Jan 31 10:01:26 2025 GMT
Not After : Feb 1 10:01:26 2025 GMT
Subject: CN=ce4c4a0a0e34c393c96db088d71583b54072f8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:22:7d:71:6d:25:35:71:28:e7:9a:83:27:47:
6a:8f:c6:74:f1:d7:99:ab:df:0a:56:06:8e:92:79:
69:fc:d8:91:3e:0e:52:6c:96:e0:f9:cb:f8:25:f2:
0d:83:17:18:fa:35:22:e1:ac:1b:96:a1:ca:76:81:
d2:df:d3:6c:20:33:fc:73:dd:18:12:44:5d:b7:15:
db:b7:55:23:32:4b:3c:e7:3b:b5:bf:14:48:33:e8:
e2:b6:1d:a2:55:a5:29:df:a4:4f:70:09:76:55:ec:
b3:95:81:16:8c:81:1d:93:01:24:d8:34:6c:82:59:
ba:f4:58:ac:a0:60:09:27:18:f4:a6:a6:c8:ab:12:
d4:a0:2e:ae:69:44:54:7d:d1:04:42:c4:64:9f:51:
56:0a:e3:e1:97:4e:c4:48:0e:85:7f:ac:d3:8f:b8:
79:ac:92:f1:6d:84:a7:25:1d:74:10:2d:9f:b7:e0:
70:0e:50:1e:8a:32:a3:24:2a:1b:d6:86:d1:01:c3:
4d:27:41:c8:2d:e0:09:c9:d4:eb:72:76:68:64:89:
d1:d8:4d:92:ef:20:9f:f4:13:27:a7:f7:ef:96:03:
b5:cb:32:88:80:b3:30:49:40:5a:01:a2:72:45:b1:
39:63:60:2b:dd:34:19:bd:4e:dd:d1:f8:78:1d:7b:
00:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4C:4A:0A:0E:34:C3:93:C9:6D:B0:88:D7:15:83:B5:40:72:F8:B3
X509v3 Authority Key Identifier:
keyid:40:9C:70:05:6A:78:DF:5F:8F:C7:0F:F0:03:D1:2F:60:D1:51:D7:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:18:88:fc:df:1e:0e:8b:c0:59:ed:54:ee:26:6a:ac:ba:c4:
37:20:a0:9c:04:66:61:6f:c3:1f:0c:99:8d:d6:a6:d2:b4:e6:
49:7d:a8:56:aa:06:23:7d:07:05:76:70:c3:0c:26:a6:53:67:
f7:9d:03:d2:c4:9f:5c:0a:14:85:55:96:93:a3:7b:59:de:67:
87:5b:88:4f:a6:1f:c0:82:74:17:c6:02:b2:dc:4b:49:72:dc:
9a:4c:99:b8:98:22:35:02:a1:d3:ba:ff:7e:77:a6:a9:f1:58:
96:25:73:2e:01:29:b2:33:df:b9:47:93:f5:bf:06:07:ab:3b:
7b:49:a5:3b:90:c1:81:d7:82:32:6f:87:af:17:ac:f2:ed:e3:
20:44:fa:c5:03:b6:28:48:a2:2c:2a:bb:22:4b:e8:5b:c9:9a:
9e:75:5b:77:6e:bb:aa:96:20:60:1f:31:67:f8:d7:24:eb:ab:
04:d0:d9:94:52:1f:19:d9:de:94:32:5b:6d:04:b5:1a:ac:39:
70:9e:4c:aa:6d:3f:97:47:d3:54:4c:7c:21:d1:37:ee:f0:e4:
7d:6d:cc:ae:2c:d0:8a:a9:db:c1:13:95:a6:8a:e1:e5:bc:ef:
06:15:b1:1b:87:73:9f:63:6b:60:ed:42:67:e8:87:3f:4b:ca:
a3:73:23:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:52:44 2025 by rpki-client