Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
File: KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft (raw, json)
Hash identifier: 4LCtJ2h8dctDc4nRY5GAqlD1/z3cFHo1GwqYBevAaQY=
Subject key identifier: 90:73:17:CA:AB:E0:7D:CC:3A:1A:14:9A:A0:40:4C:61:8E:6D:31:26
Authority key identifier: 29:08:1D:68:BD:DE:A8:BE:BF:26:E6:18:21:97:85:94:F2:23:BC:BE
Certificate issuer: /CN=29081d68bddea8bebf26e61821978594f223bcbe
Certificate serial: 0194BC3C2ADA2FE1D68613565D0BDAAD1264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
Manifest number: 062A
Signing time: Fri 31 Jan 2025 12:00:47 +0000
Manifest this update: Fri 31 Jan 2025 12:00:47 +0000
Manifest next update: Sat 01 Feb 2025 12:00:47 +0000
Files and hashes: 1: KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl (hash: 0yIgRq+VQQ5IJverVy7VCQ0kkIZtW3D5v//sRHJkmB8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:2a:da:2f:e1:d6:86:13:56:5d:0b:da:ad:12:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29081d68bddea8bebf26e61821978594f223bcbe
Validity
Not Before: Jan 31 12:00:47 2025 GMT
Not After : Feb 1 12:00:47 2025 GMT
Subject: CN=907317caabe07dcc3a1a149aa0404c618e6d3126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5b:2a:3e:dc:42:f7:4f:17:03:2d:4e:0d:17:
b4:f6:ef:23:f0:0a:4f:13:dd:4d:db:95:78:c9:c1:
c1:aa:df:2e:ec:a4:ea:f6:f8:98:f7:7e:2a:db:71:
cf:e1:22:89:a4:02:2d:a4:6c:fb:92:90:6a:3f:c2:
78:5b:8a:f4:46:cb:ed:9d:91:40:85:03:3d:37:b9:
03:2a:be:90:6a:b3:5e:ed:56:fb:6e:c6:ed:02:37:
26:e1:52:f6:c9:d6:b6:40:79:0a:ab:85:2a:3b:04:
f4:00:d3:96:19:a0:14:44:85:d1:9e:60:8b:0f:71:
c4:d0:29:a7:ad:e1:18:46:16:6e:cc:13:90:3f:49:
e3:36:66:3f:90:c6:c6:13:61:08:c5:96:0d:cf:02:
8c:53:45:8e:7e:d1:13:e5:cd:46:61:bb:02:cc:0d:
bb:68:3f:be:48:79:cc:b7:06:45:95:ed:55:00:6f:
f7:a7:a6:6a:23:e2:ee:06:0a:e3:d8:62:b4:50:e5:
c5:1b:7a:9a:6c:27:3f:cd:80:e1:bc:bc:17:36:49:
a6:1e:0e:73:5d:86:63:e5:5c:46:29:e6:02:61:b3:
bb:ad:97:da:60:32:b5:92:38:b2:77:ba:f3:96:0e:
e9:c6:38:ab:73:fc:7c:31:ca:96:da:b9:25:bc:34:
f4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:73:17:CA:AB:E0:7D:CC:3A:1A:14:9A:A0:40:4C:61:8E:6D:31:26
X509v3 Authority Key Identifier:
keyid:29:08:1D:68:BD:DE:A8:BE:BF:26:E6:18:21:97:85:94:F2:23:BC:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:a3:51:0f:8f:20:3d:cb:75:b7:f0:1d:a5:53:74:c2:9c:25:
90:4e:f6:8e:c3:34:79:9e:84:c5:9c:69:bd:8d:9f:bd:58:71:
d9:c5:d8:68:7f:72:44:88:fa:ae:55:a7:86:0a:ea:cc:4d:ca:
9d:78:27:6e:b7:7f:2e:57:8f:25:9c:25:96:83:3c:82:ff:5d:
84:5a:5f:76:a4:a1:61:3b:87:0e:6f:d7:c4:c5:b7:4b:56:c3:
38:01:c9:a1:05:77:29:ee:26:32:16:cb:1f:cd:a8:e1:84:51:
0e:61:13:ef:03:0e:e9:49:b7:88:7d:15:f8:5f:9d:75:5d:fa:
b0:39:cf:92:32:d7:91:59:e0:8c:9c:11:de:10:c4:06:e0:fd:
1c:75:87:48:6c:fe:c2:dc:3e:8f:92:80:ae:aa:a4:c8:4c:d7:
9f:f0:b7:64:f2:09:d8:62:5d:ad:32:72:03:a8:c8:5e:aa:e8:
39:7e:8d:2e:dd:85:fe:29:1d:03:dd:6b:07:cb:c4:63:71:53:
4f:2d:39:67:25:07:45:95:31:e4:cd:bc:c6:d8:a7:41:bd:ab:
08:2b:93:e3:6d:ae:94:6c:1f:95:ec:90:f1:5b:c8:79:17:3a:
aa:c5:c6:3e:39:6c:19:49:9e:d3:00:2e:4f:d3:0d:f7:7e:1d:
8e:c9:a4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:24:52 2025 by rpki-client