Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/72ac58-a9f1-4516-861f-7dbf50d7428c/1/0qJGL3IIsJcBO18hbWNDf6QB-3I.mft
File: 0qJGL3IIsJcBO18hbWNDf6QB-3I.mft (raw, json)
Hash identifier: jQZKsY0JfAHyOFSQmAlSckLApU0YbWnfo0NvmNOGrcg=
Subject key identifier: C2:9A:3B:01:61:01:F2:90:2E:93:83:87:C8:F4:4D:50:FB:23:A9:CE
Authority key identifier: D2:A2:46:2F:72:08:B0:97:01:3B:5F:21:6D:63:43:7F:A4:01:FB:72
Certificate issuer: /CN=d2a2462f7208b097013b5f216d63437fa401fb72
Certificate serial: 0194BC3C0B7FC9D217249C78C5CBF650DE08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qJGL3IIsJcBO18hbWNDf6QB-3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/72ac58-a9f1-4516-861f-7dbf50d7428c/1/0qJGL3IIsJcBO18hbWNDf6QB-3I.mft
Manifest number: 079D
Signing time: Fri 31 Jan 2025 12:00:39 +0000
Manifest this update: Fri 31 Jan 2025 12:00:39 +0000
Manifest next update: Sat 01 Feb 2025 12:00:39 +0000
Files and hashes: 1: 0qJGL3IIsJcBO18hbWNDf6QB-3I.crl (hash: fUYaxRmM8UqxSH2cUkSh4y2b7R/DoADjFj8510QXrNc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:0b:7f:c9:d2:17:24:9c:78:c5:cb:f6:50:de:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2a2462f7208b097013b5f216d63437fa401fb72
Validity
Not Before: Jan 31 12:00:39 2025 GMT
Not After : Feb 1 12:00:39 2025 GMT
Subject: CN=c29a3b016101f2902e938387c8f44d50fb23a9ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:06:fd:8f:f5:6e:1b:87:61:93:57:2f:fa:df:
e5:84:b8:2d:6a:d4:9f:8e:8d:83:4c:a4:83:d3:04:
df:73:2b:57:5f:6c:f3:db:49:72:ab:78:29:90:37:
b9:40:2a:d4:15:11:5c:5d:9e:f9:48:6e:49:db:a1:
75:f2:1c:50:ee:92:f2:cb:a6:0f:9b:ff:96:e9:fc:
79:d5:48:d0:2a:5c:25:4b:99:40:fb:ea:1f:15:91:
68:83:ef:56:57:f7:8a:37:54:b2:8d:92:61:b0:fd:
aa:c3:60:f6:3c:2b:27:ba:59:4c:84:ca:7e:d1:3a:
84:30:93:b9:8d:e6:bb:b9:a9:1a:9f:50:71:ec:7a:
ca:0b:8d:1e:d1:51:63:c4:9b:2b:1b:1d:37:ed:c0:
83:f8:79:41:ee:4c:88:42:35:bf:3b:b4:af:1c:19:
1f:4c:e5:aa:20:eb:5e:9b:2f:94:96:d4:47:0a:22:
59:b3:b9:71:65:0e:a7:9d:ca:fd:5f:f4:ba:78:0d:
28:8e:77:2c:f9:38:9e:1e:2d:c4:d4:0d:95:9e:6e:
e6:5c:f1:ef:86:75:f8:56:11:48:6b:52:00:c9:39:
aa:e2:2b:c3:5c:ec:ff:cd:65:e1:14:22:ae:67:18:
07:4a:f9:35:c3:d4:58:59:d6:16:49:26:26:b6:78:
51:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9A:3B:01:61:01:F2:90:2E:93:83:87:C8:F4:4D:50:FB:23:A9:CE
X509v3 Authority Key Identifier:
keyid:D2:A2:46:2F:72:08:B0:97:01:3B:5F:21:6D:63:43:7F:A4:01:FB:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qJGL3IIsJcBO18hbWNDf6QB-3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/72ac58-a9f1-4516-861f-7dbf50d7428c/1/0qJGL3IIsJcBO18hbWNDf6QB-3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/72ac58-a9f1-4516-861f-7dbf50d7428c/1/0qJGL3IIsJcBO18hbWNDf6QB-3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:0e:ca:84:c0:39:1e:d0:e8:53:ac:de:23:ab:34:4c:c8:69:
c3:0d:da:a3:bd:be:6f:70:e0:f5:1a:f6:c8:a5:d0:6a:bb:99:
b8:0d:58:1e:a8:63:43:8c:ce:6a:1f:59:98:a7:c8:bc:ae:7f:
75:67:fd:64:74:03:de:66:23:ff:6c:7d:4b:f3:b0:fb:42:03:
a9:8e:af:e2:b6:49:1d:6c:ec:c8:f6:35:d2:e1:76:58:7f:2b:
27:c3:5e:33:84:8b:24:94:fd:61:30:a7:5e:d3:bd:be:ea:98:
3a:3f:4b:2f:32:1d:ad:94:59:33:36:4f:73:5c:03:af:6c:51:
09:25:02:07:1a:80:69:d7:ff:d5:80:6b:ae:71:cf:df:bd:75:
25:18:90:48:6c:a3:e1:f1:0b:b3:5f:df:02:61:e5:54:22:69:
36:02:13:a1:95:c5:23:c6:b2:9d:5a:b3:21:ab:d7:f2:54:c6:
72:83:2d:08:91:35:b7:39:10:a3:14:0a:35:1c:13:f0:f7:e2:
78:1e:14:86:54:41:63:d0:59:8a:49:23:68:1f:00:26:88:2d:
b9:e3:f5:10:72:1c:70:96:c4:6b:87:38:33:36:f2:c7:6f:e8:
3b:5f:e6:43:04:7a:6a:ae:76:a5:68:7e:fb:9f:48:ae:07:50:
10:aa:7f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:19 2025 by rpki-client