Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.mft
File: qfCQLHsw_sPg3PXyO_7fUBgjQps.mft (raw, json)
Hash identifier: VL4bDuX5HTiMx2T8PFkW0o0rKh6vlfaQrxZUkxN9LEU=
Subject key identifier: 30:F6:21:95:07:9C:AA:B4:74:33:94:F5:28:E0:79:FC:2A:B3:1B:74
Authority key identifier: A9:F0:90:2C:7B:30:FE:C3:E0:DC:F5:F2:3B:FE:DF:50:18:23:42:9B
Certificate issuer: /CN=a9f0902c7b30fec3e0dcf5f23bfedf501823429b
Certificate serial: 0194BC73000C09702605C5ADC3A191985923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfCQLHsw_sPg3PXyO_7fUBgjQps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.mft
Manifest number: 02B9
Signing time: Fri 31 Jan 2025 13:00:40 +0000
Manifest this update: Fri 31 Jan 2025 13:00:40 +0000
Manifest next update: Sat 01 Feb 2025 13:00:40 +0000
Files and hashes: 1: qfCQLHsw_sPg3PXyO_7fUBgjQps.crl (hash: 2zynEg3je4zJkI8n+waqWVjsJH4XwwTpyB8QpmyGouI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:00:0c:09:70:26:05:c5:ad:c3:a1:91:98:59:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9f0902c7b30fec3e0dcf5f23bfedf501823429b
Validity
Not Before: Jan 31 13:00:40 2025 GMT
Not After : Feb 1 13:00:40 2025 GMT
Subject: CN=30f62195079caab4743394f528e079fc2ab31b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:35:d6:d6:f5:0d:1b:ae:d2:93:af:db:12:d0:
4b:f2:49:51:d0:fb:0e:4b:fb:e7:da:19:c4:84:c9:
d3:78:a1:50:1e:09:02:90:5e:77:b1:b8:7e:3d:78:
62:c8:74:f1:94:de:ac:f6:18:68:1b:48:d4:07:51:
41:29:d5:46:f1:90:22:ca:b9:53:f1:14:be:18:cf:
9f:fc:fb:03:c6:da:3a:6d:1d:fb:5e:a7:1c:ba:97:
8c:57:95:fb:03:cf:0d:a3:87:f5:da:92:71:4c:9f:
88:3c:c8:56:d4:0e:2d:f1:9e:22:27:d1:95:8f:d8:
ab:9d:7e:20:9b:94:12:ca:5f:b1:8c:a1:72:f4:c3:
bc:b7:f7:a0:a0:2d:07:a5:80:6e:01:8e:83:4e:ff:
c8:df:9e:35:d2:5f:d9:39:26:4c:36:33:3d:6d:f0:
52:94:50:50:35:f8:5d:83:92:5d:6e:d7:59:11:cd:
b1:63:13:a4:5b:bf:56:50:51:0c:ab:37:10:f7:50:
df:54:86:0c:54:66:bb:5d:8b:28:88:9e:47:4b:fb:
5f:67:65:5f:01:f6:23:8c:72:5d:6f:ec:b9:9f:fa:
e5:79:4b:bb:3a:30:ac:74:1c:6e:32:be:72:97:94:
28:6a:a7:eb:5e:c0:28:44:75:5f:23:fd:fc:96:3b:
ea:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F6:21:95:07:9C:AA:B4:74:33:94:F5:28:E0:79:FC:2A:B3:1B:74
X509v3 Authority Key Identifier:
keyid:A9:F0:90:2C:7B:30:FE:C3:E0:DC:F5:F2:3B:FE:DF:50:18:23:42:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfCQLHsw_sPg3PXyO_7fUBgjQps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d66ff3-b607-476e-8d5e-8968565df63a/1/qfCQLHsw_sPg3PXyO_7fUBgjQps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ee:83:7e:07:77:96:ca:f4:30:10:f2:21:4b:3e:3a:97:03:
e8:b5:84:54:30:8f:2f:b5:e4:b8:f1:f7:55:6f:36:bb:02:c7:
df:1e:bd:12:05:0a:50:61:d8:2e:fc:43:cc:a0:70:db:f9:b8:
3e:45:0a:87:a6:14:73:14:2c:c9:6a:36:86:63:7d:47:20:9f:
ef:d4:e6:01:1b:74:bc:c8:01:a0:6e:bd:10:8a:15:31:d4:cb:
f0:17:20:bf:7e:ce:60:df:82:ff:3e:1e:9f:88:b7:b2:51:1e:
ac:81:cf:01:1e:af:aa:b6:0b:c7:60:39:b9:ae:fe:21:71:12:
ea:35:1f:5c:98:66:a2:89:26:79:6c:81:fd:6a:62:25:4a:00:
61:1e:3f:48:42:1d:1a:66:ce:7f:55:dc:c9:31:06:f6:29:95:
24:ef:10:5b:db:f0:1f:1b:ce:a1:6e:86:ad:9e:70:87:8d:ac:
57:b1:df:87:2d:72:cd:1d:70:ca:75:4b:e3:32:ae:72:41:85:
dd:a9:4d:81:c1:bd:09:f2:86:8c:d2:16:bc:86:47:ee:ee:54:
d2:ab:43:10:98:d5:e7:db:d7:f0:92:c1:47:81:5d:57:28:b2:
d9:4f:5a:34:50:3f:19:16:84:4f:99:f2:7e:37:a8:fc:43:e7:
a5:ad:03:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:34:03 2025 by rpki-client