Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.mft
File: QpBWwzjRbJLN_aHlXQk2givFDNI.mft (raw, json)
Hash identifier: mrvOdObSnKFI8QdZ0b7PboNs/pjcq8dIBZKws9is3wc=
Subject key identifier: EB:CE:97:96:CA:DE:62:0B:99:00:DE:78:C4:60:CB:AB:52:C6:3D:8C
Authority key identifier: 42:90:56:C3:38:D1:6C:92:CD:FD:A1:E5:5D:09:36:82:2B:C5:0C:D2
Certificate issuer: /CN=429056c338d16c92cdfda1e55d0936822bc50cd2
Certificate serial: 0194BC72C12DFD5A23903D60504C641295D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpBWwzjRbJLN_aHlXQk2givFDNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.mft
Manifest number: 02BF
Signing time: Fri 31 Jan 2025 13:00:24 +0000
Manifest this update: Fri 31 Jan 2025 13:00:24 +0000
Manifest next update: Sat 01 Feb 2025 13:00:24 +0000
Files and hashes: 1: QpBWwzjRbJLN_aHlXQk2givFDNI.crl (hash: CdfkuA9AyPR14xKtWt85kk9HimmcBNz2eDKHwr39IuQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c1:2d:fd:5a:23:90:3d:60:50:4c:64:12:95:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429056c338d16c92cdfda1e55d0936822bc50cd2
Validity
Not Before: Jan 31 13:00:24 2025 GMT
Not After : Feb 1 13:00:24 2025 GMT
Subject: CN=ebce9796cade620b9900de78c460cbab52c63d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:59:f1:ec:20:c2:66:2b:02:98:e4:a3:b6:88:
ea:02:8e:5f:98:0a:41:3d:02:f6:e7:62:a6:b5:af:
d1:1d:43:4a:b2:09:d7:73:92:f0:75:bf:1b:23:c3:
38:04:51:5b:0d:ce:03:3c:8c:a6:57:5b:16:e0:90:
fb:70:d2:3b:81:5d:50:a6:3f:e7:47:07:84:10:91:
02:33:6a:f8:6b:89:9e:43:77:8e:20:75:db:ce:5c:
39:0f:d9:f4:76:cd:4d:08:8c:10:eb:86:d1:45:c2:
0b:c8:9e:37:6c:b5:30:48:9e:d0:5b:91:05:35:6e:
b1:07:9c:5c:3d:a5:15:7e:29:e8:9b:73:14:c2:d1:
7e:68:ff:dc:6e:18:f2:e9:ae:b0:08:7d:c8:a2:83:
7e:83:3f:b6:08:37:c7:2f:a6:ab:38:e5:07:e7:64:
1d:86:48:fc:d3:b1:bf:f1:c3:60:ac:21:c8:28:ac:
b8:dc:09:07:37:d6:a2:ad:2e:39:eb:10:49:29:cd:
45:07:fc:cf:a1:05:f8:0a:c0:16:7d:ef:40:a0:1f:
3f:0b:5e:04:25:d5:6c:77:71:7a:c7:03:b2:ab:c6:
a2:06:7f:00:38:f2:d6:14:b3:b5:5f:bb:29:4c:b8:
8c:16:33:66:7b:16:10:73:08:77:a7:fb:9e:1d:a9:
99:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CE:97:96:CA:DE:62:0B:99:00:DE:78:C4:60:CB:AB:52:C6:3D:8C
X509v3 Authority Key Identifier:
keyid:42:90:56:C3:38:D1:6C:92:CD:FD:A1:E5:5D:09:36:82:2B:C5:0C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpBWwzjRbJLN_aHlXQk2givFDNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:39:21:c6:3d:6c:4e:9e:91:c6:f0:e6:49:0b:b8:23:c6:9a:
c7:e6:6c:36:8f:b6:ba:eb:8e:b1:df:c3:a5:5e:f4:c9:db:3d:
8f:f3:b7:ac:5e:9a:b2:81:56:09:a9:56:86:c6:74:61:14:50:
2e:ab:e6:2c:33:c5:83:64:f2:0e:7b:8c:c2:73:d6:05:72:1f:
1f:d8:0e:30:64:03:65:1e:5b:89:d6:48:98:b4:f3:db:87:0d:
3f:24:22:b2:ac:1a:15:fb:33:5d:bc:91:8e:8e:c4:25:c0:16:
66:09:7a:e6:19:00:97:6b:d8:42:25:34:7b:f8:ff:6e:98:a3:
45:e2:a5:b4:db:40:9f:81:13:53:5b:17:4a:4c:6c:f5:da:a8:
d4:0b:db:e3:7b:10:c8:51:0f:4a:a9:29:b6:5d:55:72:25:2c:
1d:6f:d8:bc:6b:27:01:70:0c:90:67:9d:4e:db:6c:56:36:2e:
ea:af:83:42:d5:ee:b3:25:28:b7:c7:56:18:3f:70:15:7a:95:
04:db:e0:6f:f1:a4:95:19:d2:80:c9:5d:6d:81:e0:ef:88:53:
07:01:b7:f2:a1:ad:a5:69:b2:68:af:e8:ea:5e:c9:5d:0e:6e:
d9:b7:ae:92:81:68:f7:cb:bc:82:ba:4c:df:f4:f1:44:0f:64:
7f:ba:98:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:40 2025 by rpki-client