Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4d9093-fb6d-47f6-8acd-c780ed612366/1/qnxkNahQ8MXpmpzgUfNL21MiLwQ.mft
File: qnxkNahQ8MXpmpzgUfNL21MiLwQ.mft (raw, json)
Hash identifier: TKK1dq87lmR1cVpEUFyG1HDVrcY4fhWdTT6MIKdTN3w=
Subject key identifier: 32:74:34:BA:85:A1:F6:B1:69:D8:BC:45:92:34:7F:C2:3C:D3:02:25
Authority key identifier: AA:7C:64:35:A8:50:F0:C5:E9:9A:9C:E0:51:F3:4B:DB:53:22:2F:04
Certificate issuer: /CN=aa7c6435a850f0c5e99a9ce051f34bdb53222f04
Certificate serial: 0194BBCEEE596A0700871AB5313E70E7B857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnxkNahQ8MXpmpzgUfNL21MiLwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4d9093-fb6d-47f6-8acd-c780ed612366/1/qnxkNahQ8MXpmpzgUfNL21MiLwQ.mft
Manifest number: 04C6
Signing time: Fri 31 Jan 2025 10:01:28 +0000
Manifest this update: Fri 31 Jan 2025 10:01:28 +0000
Manifest next update: Sat 01 Feb 2025 10:01:28 +0000
Files and hashes: 1: qnxkNahQ8MXpmpzgUfNL21MiLwQ.crl (hash: GkEdGCVF6yFm7Nr4Ekclte6SE/TOEFTd5sZ+UNPVRZk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ee:59:6a:07:00:87:1a:b5:31:3e:70:e7:b8:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7c6435a850f0c5e99a9ce051f34bdb53222f04
Validity
Not Before: Jan 31 10:01:28 2025 GMT
Not After : Feb 1 10:01:28 2025 GMT
Subject: CN=327434ba85a1f6b169d8bc4592347fc23cd30225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:47:fb:f5:7b:99:66:ef:fe:f2:c9:4c:56:57:
c3:82:31:3b:61:18:6c:51:f4:33:08:f8:d9:a3:67:
15:c1:5f:6d:4d:0d:d5:55:74:f7:02:51:4b:fe:3c:
e6:05:00:ff:67:07:49:70:49:0a:dd:e2:8e:cc:69:
7e:da:9c:20:cb:3f:3c:8d:58:33:37:f9:fd:54:cd:
f2:1b:ff:05:50:ea:48:0d:00:95:52:05:b5:0f:e6:
d1:67:56:f2:5c:e0:ec:29:cc:ef:5d:40:a4:4a:0a:
a3:8e:e2:d3:9e:2a:2c:1c:1a:7e:b5:75:bc:99:11:
dd:24:a9:5d:75:de:4f:52:10:69:5f:85:4d:47:d0:
28:64:fd:8a:3e:3e:b6:19:17:88:2d:eb:b9:86:79:
01:8a:40:26:cb:d2:0c:3b:11:38:32:eb:3a:6b:b2:
68:2c:74:a3:9f:69:2f:1d:a4:02:cd:1f:27:f3:3a:
d1:c6:14:a0:56:f3:6f:16:96:ab:7d:ba:90:9c:cf:
10:eb:34:ad:c1:4b:d3:cb:32:47:6a:b0:be:71:e9:
34:69:f4:63:fe:77:4b:7b:53:b5:83:76:bc:67:24:
77:64:ea:d5:8d:2c:31:25:9b:8a:c6:2b:4c:7f:52:
34:1b:7a:a1:a0:9f:e2:92:75:7f:f6:df:ec:9f:aa:
a3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:74:34:BA:85:A1:F6:B1:69:D8:BC:45:92:34:7F:C2:3C:D3:02:25
X509v3 Authority Key Identifier:
keyid:AA:7C:64:35:A8:50:F0:C5:E9:9A:9C:E0:51:F3:4B:DB:53:22:2F:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnxkNahQ8MXpmpzgUfNL21MiLwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d9093-fb6d-47f6-8acd-c780ed612366/1/qnxkNahQ8MXpmpzgUfNL21MiLwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d9093-fb6d-47f6-8acd-c780ed612366/1/qnxkNahQ8MXpmpzgUfNL21MiLwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:c6:e5:4d:55:a9:5b:ad:89:72:73:d0:f6:1e:b4:61:a5:89:
28:52:17:fc:72:ba:31:a9:68:e2:e3:e1:65:fa:bb:92:06:37:
53:14:fe:1a:61:56:09:81:94:c9:97:99:e5:c3:5d:ab:87:d7:
b7:55:b7:4b:a8:e5:e5:0c:70:7c:35:1d:e9:92:52:29:1f:c1:
5c:6d:73:91:bb:a3:5f:fa:ea:a2:39:fa:2e:a9:b9:07:33:d8:
d7:f4:d1:45:c3:31:58:23:51:9b:75:5a:27:b2:3f:f2:b4:d4:
be:cf:d5:2f:f8:0e:cc:4b:69:0d:88:49:e4:db:56:13:d4:dd:
44:98:fe:32:c4:8b:73:eb:82:56:dc:fe:02:09:4a:3d:66:26:
cc:b3:b2:7e:8b:5b:74:a6:6a:1a:22:b0:65:7d:9e:c3:89:d6:
0c:b6:46:cd:71:4f:c9:03:55:ac:26:c5:1c:e4:64:99:9c:22:
b9:28:a6:f0:39:b8:37:90:71:e7:cf:b4:a8:98:10:82:63:dd:
42:59:ba:8c:ec:17:99:58:33:c7:65:29:dd:7f:7c:94:0e:ea:
35:1f:c4:f2:5b:86:57:7e:a3:bb:f7:21:2c:fd:d2:64:2e:1b:
0d:12:56:48:5a:a7:48:31:a5:be:81:7c:b0:55:b4:fb:24:24:
8c:64:46:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:22 2025 by rpki-client