Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft
File: qW_WWYUaNLt3wyE8pL93JRHghzQ.mft (raw, json)
Hash identifier: ExM1uB/4SVoHTcjCNdiMbu2w2cdw00nnie/N3UhzDpo=
Subject key identifier: 70:85:39:C6:17:40:8B:D2:64:B5:C2:10:E8:76:79:B9:53:AC:76:E2
Authority key identifier: A9:6F:D6:59:85:1A:34:BB:77:C3:21:3C:A4:BF:77:25:11:E0:87:34
Certificate issuer: /CN=a96fd659851a34bb77c3213ca4bf772511e08734
Certificate serial: 0194BD4E701840B752A4530EC448C4D0B8D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qW_WWYUaNLt3wyE8pL93JRHghzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft
Manifest number: EC
Signing time: Fri 31 Jan 2025 17:00:21 +0000
Manifest this update: Fri 31 Jan 2025 17:00:21 +0000
Manifest next update: Sat 01 Feb 2025 17:00:21 +0000
Files and hashes: 1: qW_WWYUaNLt3wyE8pL93JRHghzQ.crl (hash: Es3qieW77pojSjTFHcq51uiD+bENKgtQo25G8f5kyUo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:70:18:40:b7:52:a4:53:0e:c4:48:c4:d0:b8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a96fd659851a34bb77c3213ca4bf772511e08734
Validity
Not Before: Jan 31 17:00:21 2025 GMT
Not After : Feb 1 17:00:21 2025 GMT
Subject: CN=708539c617408bd264b5c210e87679b953ac76e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c9:9f:17:45:ca:fc:cc:bd:a0:26:85:e1:56:
b7:83:81:df:8e:3f:8a:23:de:89:a7:87:e9:d7:d4:
28:ab:d0:a7:53:1e:8d:22:f2:94:c4:bd:6b:57:42:
69:e8:69:8d:ef:8e:4d:ed:c3:3e:5d:e0:ed:fb:f0:
69:1c:d0:c3:f4:35:07:58:10:0a:b6:06:49:b7:b8:
79:3e:7e:04:54:8e:19:6a:1c:47:35:cf:4d:d4:91:
92:bf:0f:fd:09:58:53:03:ba:72:8c:e5:85:78:71:
e7:9a:05:09:d6:a3:09:39:6a:44:b7:b5:cb:ba:7f:
78:42:2f:c8:14:e0:03:3d:75:ed:a9:e0:35:b9:d4:
28:86:a1:fc:a4:af:c8:b3:51:90:f3:6d:3f:38:81:
6b:79:18:ff:85:e9:18:c8:86:3d:c1:1c:18:fe:99:
3e:e6:d3:83:57:ce:47:47:33:bb:93:af:60:30:52:
d8:d9:ea:81:a8:ec:d8:a0:7c:d0:91:9d:da:7d:d4:
34:a9:e4:97:29:e5:ee:12:b2:57:f8:f5:4f:e0:be:
1e:3e:c2:40:c6:33:03:2e:02:89:40:9b:c4:a7:35:
59:8b:32:e9:52:63:35:74:bb:80:62:36:c2:05:5e:
b6:ea:be:53:f2:40:53:53:aa:66:82:5b:30:8d:9d:
0c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:85:39:C6:17:40:8B:D2:64:B5:C2:10:E8:76:79:B9:53:AC:76:E2
X509v3 Authority Key Identifier:
keyid:A9:6F:D6:59:85:1A:34:BB:77:C3:21:3C:A4:BF:77:25:11:E0:87:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qW_WWYUaNLt3wyE8pL93JRHghzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:de:14:29:a2:6d:a8:08:1f:2a:7e:10:0e:b4:a0:76:89:68:
87:6f:29:0c:31:59:1c:82:88:bd:44:ac:a9:ed:97:f1:3d:0c:
62:d7:b5:da:b4:4c:fd:96:45:6e:b8:d0:b9:18:0f:cb:71:a8:
4c:9b:49:62:68:42:4b:7e:32:3b:a4:3e:5a:a0:eb:a8:bc:a0:
76:82:54:fc:53:90:e6:fb:48:18:50:cc:09:88:d1:ca:b1:e7:
f6:8a:63:a5:af:3d:2a:48:95:a9:9d:82:1c:19:cb:d1:20:de:
b0:9a:b7:f3:a3:a1:24:9b:b8:bf:30:cb:5b:da:f2:f1:8b:32:
01:76:cd:3c:79:5e:43:cf:1d:67:04:3d:45:c8:9d:f1:94:b4:
67:72:f8:f6:60:dc:87:d2:1c:11:6c:e6:27:14:45:f8:e5:85:
3a:e2:d7:cc:ef:9b:e4:f8:96:84:c2:27:5b:16:95:6c:1f:18:
a1:b4:c0:4e:98:d5:f9:e9:b2:96:fc:68:bf:d4:71:8f:06:db:
f4:53:94:2e:2c:e3:e1:32:8d:09:c7:63:c4:42:3f:64:45:fc:
b6:81:61:46:14:fe:5a:2f:e3:06:25:1d:ae:04:73:36:9c:48:
74:dc:d9:2a:16:e8:5b:5b:74:c8:95:cd:84:ef:d4:49:b8:2b:
7d:c5:9b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:10 2025 by rpki-client