Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/d60eb6-3bb2-45c0-9daf-9f55b4ae90cc/1/QAnHa7ftKz0UTNhVpewajrfU3pk.mft
File: QAnHa7ftKz0UTNhVpewajrfU3pk.mft (raw, json)
Hash identifier: 2TFq0tp8yD6koBlVn+xKUS2D7Y4vR4Zaoyv64M+y+78=
Subject key identifier: D3:A8:CB:65:E2:6F:76:50:9D:E1:77:65:2B:33:6F:AD:3F:9B:AB:85
Authority key identifier: 40:09:C7:6B:B7:ED:2B:3D:14:4C:D8:55:A5:EC:1A:8E:B7:D4:DE:99
Certificate issuer: /CN=4009c76bb7ed2b3d144cd855a5ec1a8eb7d4de99
Certificate serial: 0194BD17FFF1FD226EA6027ABAA0805840F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAnHa7ftKz0UTNhVpewajrfU3pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/d60eb6-3bb2-45c0-9daf-9f55b4ae90cc/1/QAnHa7ftKz0UTNhVpewajrfU3pk.mft
Manifest number: 12CF
Signing time: Fri 31 Jan 2025 16:00:53 +0000
Manifest this update: Fri 31 Jan 2025 16:00:53 +0000
Manifest next update: Sat 01 Feb 2025 16:00:53 +0000
Files and hashes: 1: QAnHa7ftKz0UTNhVpewajrfU3pk.crl (hash: G3S0rqcJtN0CN/GPrVOeUZpjE/RVN7epOoG0ALepT74=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ff:f1:fd:22:6e:a6:02:7a:ba:a0:80:58:40:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4009c76bb7ed2b3d144cd855a5ec1a8eb7d4de99
Validity
Not Before: Jan 31 16:00:53 2025 GMT
Not After : Feb 1 16:00:53 2025 GMT
Subject: CN=d3a8cb65e26f76509de177652b336fad3f9bab85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2b:db:a6:9d:f6:c0:22:a0:38:13:fb:09:f7:
ef:36:b2:d9:be:59:c9:d0:4d:20:6f:96:57:a9:cc:
6b:12:8f:f7:d4:98:35:8f:b1:3c:7b:2b:37:e6:11:
8d:15:29:fb:90:97:00:ff:04:26:86:b8:e7:d4:7d:
5c:b4:b6:21:ea:24:f5:44:e8:b7:1a:c7:d9:b5:ae:
83:8a:06:49:00:cc:b1:dc:41:45:43:16:28:1c:77:
8e:f1:5e:cc:73:e2:5d:68:24:6f:b0:d7:04:41:bd:
43:8d:ff:57:92:8c:11:50:ae:57:67:a5:a7:4f:d4:
ad:0a:12:86:ca:35:b3:f3:fe:c9:7b:a8:a6:f6:49:
2c:b3:cc:4d:5b:89:f7:85:c2:1c:25:c6:35:d6:d7:
da:38:cc:3c:7b:26:e9:f7:10:f0:2c:7c:23:69:97:
9a:43:e1:44:84:80:4f:1c:49:e0:43:83:8b:1c:79:
f2:c9:b3:19:19:75:5f:3d:14:44:34:2f:7a:b8:ad:
95:f8:46:7e:ef:a1:70:6a:2a:93:7e:90:ce:7f:74:
d0:d2:73:2b:a5:94:4a:e1:d6:64:f7:42:a4:57:68:
17:55:f9:d6:82:4c:94:03:b0:4f:92:e8:85:39:db:
5c:0f:77:82:3e:8a:fe:02:a3:82:90:c3:e5:60:c7:
80:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A8:CB:65:E2:6F:76:50:9D:E1:77:65:2B:33:6F:AD:3F:9B:AB:85
X509v3 Authority Key Identifier:
keyid:40:09:C7:6B:B7:ED:2B:3D:14:4C:D8:55:A5:EC:1A:8E:B7:D4:DE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAnHa7ftKz0UTNhVpewajrfU3pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d60eb6-3bb2-45c0-9daf-9f55b4ae90cc/1/QAnHa7ftKz0UTNhVpewajrfU3pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d60eb6-3bb2-45c0-9daf-9f55b4ae90cc/1/QAnHa7ftKz0UTNhVpewajrfU3pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:93:76:c9:63:84:4b:d3:2e:60:9a:92:c7:a8:ae:e4:74:a3:
45:3a:79:ce:56:da:a3:32:80:9a:f6:61:18:14:06:3f:6f:df:
ee:48:73:a7:9e:08:6e:92:27:f5:cf:c8:94:0b:3a:2e:0d:00:
85:44:e9:e4:29:69:2e:c4:69:25:35:24:b1:55:75:d7:e7:bd:
98:c9:6d:d2:b1:51:b0:2d:59:29:c1:5f:98:f1:07:79:fd:00:
f1:ff:1a:63:13:3d:f9:da:0f:7c:47:0c:ce:82:2a:17:e9:1f:
ee:93:f1:7c:22:74:2f:7e:81:12:b7:34:c8:9a:c4:a4:e8:db:
2c:5b:ce:f6:84:a5:04:f3:a5:4c:d8:af:18:19:bd:22:49:e1:
0d:a6:bc:70:34:3d:a0:21:5d:3c:66:fd:2d:78:61:2d:e4:02:
2b:0a:15:2c:37:28:93:0a:1e:f4:04:31:3f:70:56:8a:e2:99:
19:3c:f6:23:19:f0:b9:39:60:16:37:fa:32:5c:82:0f:43:7a:
6e:27:2c:ec:82:2a:5a:cf:8e:99:fd:f4:08:a7:5d:40:c3:cb:
52:7a:df:3e:d2:04:30:89:f7:5d:90:8d:40:a6:54:73:3a:08:
e9:5f:9d:27:3e:fe:63:a8:46:ed:63:b8:0c:d6:e8:c8:57:7e:
8c:46:da:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:53:08 2025 by rpki-client