Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
File: QurpaJeCnA3hU3K6GMRA9oeasZM.mft (raw, json)
Hash identifier: VcWxAysOkUlGyHprXl+F6/tLBto0f3uLrYc7ydFYB7Y=
Subject key identifier: D3:2F:D9:DC:10:04:2C:C4:96:D4:2B:DA:F9:F3:F1:B0:7E:BB:C0:B9
Authority key identifier: 42:EA:E9:68:97:82:9C:0D:E1:53:72:BA:18:C4:40:F6:87:9A:B1:93
Certificate issuer: /CN=42eae96897829c0de15372ba18c440f6879ab193
Certificate serial: 0194BC72D1665E48BBF310303625F7396B5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
Manifest number: 049B
Signing time: Fri 31 Jan 2025 13:00:28 +0000
Manifest this update: Fri 31 Jan 2025 13:00:28 +0000
Manifest next update: Sat 01 Feb 2025 13:00:28 +0000
Files and hashes: 1: QurpaJeCnA3hU3K6GMRA9oeasZM.crl (hash: uoDPfe6aKEmID1G1PKOi96yXinZSpuulwcJ4I5sUxjw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d1:66:5e:48:bb:f3:10:30:36:25:f7:39:6b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42eae96897829c0de15372ba18c440f6879ab193
Validity
Not Before: Jan 31 13:00:28 2025 GMT
Not After : Feb 1 13:00:28 2025 GMT
Subject: CN=d32fd9dc10042cc496d42bdaf9f3f1b07ebbc0b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f4:3b:5e:77:cd:ab:eb:61:4f:64:b1:52:60:
16:c8:e8:90:0b:51:68:65:b6:fc:d2:dc:56:1b:d4:
b8:d8:9e:53:ce:90:a2:8b:02:3d:1d:76:e9:a3:2f:
26:b4:fe:81:a8:36:dd:e1:08:f3:a7:d9:20:ec:1b:
bc:f5:ab:df:36:c7:da:1c:a6:eb:a7:b4:8b:8d:99:
76:fe:50:43:3f:ce:aa:60:8c:56:6d:89:ae:ed:d0:
69:f2:5a:91:a0:60:0b:9e:f0:fa:19:bf:35:ba:95:
d2:e7:f9:38:0d:6f:c3:34:6c:c3:5c:2a:ab:96:b1:
1a:64:86:68:be:96:51:bf:66:7b:dc:39:b4:25:e5:
7c:66:42:de:ec:61:e1:ce:ad:92:2e:2d:eb:8b:3c:
e6:10:67:79:4c:c3:de:6a:8f:0d:74:19:4b:ab:b0:
80:ea:12:e8:d6:6b:d9:cd:03:fd:65:2c:70:a9:1b:
c3:5b:b0:75:44:7b:ee:a1:ad:74:03:ca:69:65:9a:
43:01:03:1d:86:4d:83:85:d5:41:15:89:f6:1e:ea:
e2:24:2c:02:fc:5e:a8:39:42:93:05:e5:bd:c5:2d:
56:5b:bf:16:6f:91:55:db:c9:9c:a5:fa:01:12:27:
62:14:89:93:1f:56:23:4c:8b:e2:25:e4:d4:5a:b5:
6c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2F:D9:DC:10:04:2C:C4:96:D4:2B:DA:F9:F3:F1:B0:7E:BB:C0:B9
X509v3 Authority Key Identifier:
keyid:42:EA:E9:68:97:82:9C:0D:E1:53:72:BA:18:C4:40:F6:87:9A:B1:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b0:b1:d5:9d:c9:02:ae:3c:a8:ab:4c:2d:1c:4e:2d:35:1e:
a2:1c:ba:b5:8e:8c:27:1f:72:c8:a8:3f:3c:ec:4b:6f:cb:15:
c0:26:13:b8:51:35:48:a6:20:43:4c:e9:ef:4a:d2:47:3b:dc:
e6:c7:62:b4:42:e3:b7:d8:d5:e4:29:8c:f1:f9:a3:cf:b0:ec:
1b:b3:de:95:2d:93:6b:49:01:e8:20:01:a1:be:91:fb:22:3c:
17:5d:62:80:5f:71:5e:b7:7b:45:df:b0:07:23:d4:25:48:e1:
37:48:25:aa:4d:81:77:df:9d:8d:c1:ce:bc:16:70:11:7f:cd:
dc:2a:f4:93:ab:2c:18:b0:cf:17:d3:c7:1a:c5:62:9b:1b:50:
c3:66:bb:e8:da:d1:05:4d:52:71:dd:9c:c9:9b:40:71:41:0a:
30:b0:cd:a7:81:60:fa:bc:c5:58:a7:64:57:58:74:ae:43:ba:
2b:b1:0b:92:05:88:bd:b5:a7:3e:11:a0:18:0d:13:65:64:82:
44:54:22:e3:ab:aa:5b:9e:05:01:62:18:4d:ee:c1:b1:f4:b6:
84:b8:5f:68:66:8b:39:3a:ae:76:55:ec:2e:f1:47:75:b4:55:
17:05:76:ce:38:3b:bf:84:19:5c:9d:5c:90:e8:73:8f:47:68:
aa:70:19:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:31:48 2025 by rpki-client