Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft
File: QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft (raw, json)
Hash identifier: XegVqhGi91B8wt4o+ruAk3al9CV9WFw9auIu//mOxaQ=
Subject key identifier: A2:D3:92:4E:F3:E9:7C:AD:C9:1E:60:5C:DB:5F:D6:65:31:A4:F6:9C
Authority key identifier: 40:36:A6:4F:1A:06:6B:AB:B8:BE:B8:64:E6:95:FA:99:76:92:DD:48
Certificate issuer: /CN=4036a64f1a066babb8beb864e695fa997692dd48
Certificate serial: 0194BBCE1C5E7F4C5B075DBCE1DCCC66DB41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDamTxoGa6u4vrhk5pX6mXaS3Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft
Manifest number: 0E84
Signing time: Fri 31 Jan 2025 10:00:34 +0000
Manifest this update: Fri 31 Jan 2025 10:00:34 +0000
Manifest next update: Sat 01 Feb 2025 10:00:34 +0000
Files and hashes: 1: QDamTxoGa6u4vrhk5pX6mXaS3Ug.crl (hash: 4jxm+HhPFXNzCgTRxupYBMqXlzL4VCHpszZoHB5yN98=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:1c:5e:7f:4c:5b:07:5d:bc:e1:dc:cc:66:db:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4036a64f1a066babb8beb864e695fa997692dd48
Validity
Not Before: Jan 31 10:00:34 2025 GMT
Not After : Feb 1 10:00:34 2025 GMT
Subject: CN=a2d3924ef3e97cadc91e605cdb5fd66531a4f69c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bc:c6:51:e2:c3:ba:4a:cb:5b:6f:df:19:2a:
e3:5e:12:ff:9e:53:c5:0b:02:11:75:49:0a:b2:fd:
b1:97:b4:91:b1:fc:95:13:97:9b:b0:92:30:1e:f4:
30:b2:b0:62:17:a1:b4:89:5c:59:da:11:1e:9b:c8:
ee:03:3f:5a:a1:42:55:d8:5b:fb:48:5d:f0:39:34:
8a:a2:c3:5d:c1:88:e6:9a:95:67:68:4c:28:22:ec:
ce:ec:40:df:60:10:b6:16:08:5a:27:85:95:3e:23:
5c:da:ca:3c:59:10:43:70:8b:c9:06:40:6d:ab:ab:
15:eb:28:df:28:f8:d2:5f:84:e3:65:2d:67:1d:12:
e3:db:0e:47:07:a1:bd:30:0b:6c:fe:0f:55:0e:95:
0c:2d:b9:d2:5a:2d:cb:77:b4:b1:16:5d:e1:e0:b8:
6c:c5:f7:bb:d8:c5:51:9f:0b:de:37:5c:dd:56:ce:
4e:91:a6:80:a2:c3:8c:3e:5e:f9:4d:41:93:e9:19:
38:8b:68:7c:91:88:8a:20:59:ef:c7:28:dc:d5:be:
de:1e:ec:7f:2d:fe:b4:0b:6d:fe:11:e7:e5:18:a9:
21:61:6a:ec:25:45:9a:8b:73:e8:3d:46:6b:4b:cc:
11:d3:71:2d:8b:72:69:15:1d:03:96:cf:d1:f1:68:
71:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D3:92:4E:F3:E9:7C:AD:C9:1E:60:5C:DB:5F:D6:65:31:A4:F6:9C
X509v3 Authority Key Identifier:
keyid:40:36:A6:4F:1A:06:6B:AB:B8:BE:B8:64:E6:95:FA:99:76:92:DD:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDamTxoGa6u4vrhk5pX6mXaS3Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:eb:67:c5:e6:d8:c8:4d:8a:5f:c9:34:fe:c5:4f:97:e9:0c:
c7:08:fc:34:7b:c9:29:b6:f2:0c:df:39:c0:c4:d9:85:24:e8:
9c:48:38:44:1e:d0:7f:4e:67:fd:dd:1d:e7:54:78:7c:8a:0c:
f8:55:ff:b4:8a:cc:0d:fc:1f:1a:a5:d4:53:37:e3:ec:02:6b:
e1:69:85:99:ff:28:39:7c:c8:5a:d4:6d:48:f7:07:44:43:49:
95:50:fe:25:e1:1e:67:72:0d:a5:6b:fd:89:fa:9d:7f:07:d4:
d1:d5:f7:ef:35:13:07:09:bf:b0:4e:35:c9:21:0e:f6:4e:67:
d5:f8:d3:4e:cc:0f:4c:76:b1:de:6d:e8:fe:e1:c7:f4:f1:0d:
31:43:60:fd:3f:6a:e1:ca:4d:cd:13:e2:e1:d8:e1:6a:2c:47:
4a:82:89:65:64:65:8b:ed:bd:bf:bb:a5:94:5a:fe:b5:78:79:
e8:b1:00:a4:fb:ad:2d:de:6e:bc:0a:cb:88:a3:33:00:ef:8b:
b0:6f:4d:9a:e9:58:d3:bd:f5:0d:18:93:0a:3c:ae:04:ca:8e:
16:cd:bf:ba:6d:74:38:a6:f5:a7:c7:24:37:9d:ff:ad:16:4e:
8f:e5:a4:8d:5a:92:ca:47:e1:4e:89:b1:d9:cd:a5:a9:b9:58:
53:4a:d0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:39 2025 by rpki-client