Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/63a990-04bf-4f77-84a1-fac64e1fb342/1/QfIoYMpivSg4-DKPF4OdHoYI0m0.mft
File: QfIoYMpivSg4-DKPF4OdHoYI0m0.mft (raw, json)
Hash identifier: RbDoj7Om8GG8E487Wib3PeeQlodFmJtR1vuOPl8x52k=
Subject key identifier: 09:ED:74:02:9F:22:3A:95:F4:7A:2D:57:B4:D5:2A:52:CB:64:08:91
Authority key identifier: 41:F2:28:60:CA:62:BD:28:38:F8:32:8F:17:83:9D:1E:86:08:D2:6D
Certificate issuer: /CN=41f22860ca62bd2838f8328f17839d1e8608d26d
Certificate serial: 0194BD4E62622A2A15EECEE5F3D412EE4926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfIoYMpivSg4-DKPF4OdHoYI0m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/63a990-04bf-4f77-84a1-fac64e1fb342/1/QfIoYMpivSg4-DKPF4OdHoYI0m0.mft
Manifest number: 04
Signing time: Fri 31 Jan 2025 17:00:18 +0000
Manifest this update: Fri 31 Jan 2025 17:00:18 +0000
Manifest next update: Sat 01 Feb 2025 17:00:18 +0000
Files and hashes: 1: QfIoYMpivSg4-DKPF4OdHoYI0m0.crl (hash: m/pVTLeoLNHl34ccTGHSKsYaOHOecq72SzAhUEID9/8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:62:62:2a:2a:15:ee:ce:e5:f3:d4:12:ee:49:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f22860ca62bd2838f8328f17839d1e8608d26d
Validity
Not Before: Jan 31 17:00:18 2025 GMT
Not After : Feb 1 17:00:18 2025 GMT
Subject: CN=09ed74029f223a95f47a2d57b4d52a52cb640891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1e:9d:e9:eb:49:22:f8:7b:7d:1e:bb:03:78:
e2:74:76:9d:2c:74:d6:bd:09:07:f4:f7:88:87:06:
ce:20:51:96:e5:46:cc:a8:81:11:9b:a9:19:74:c4:
b8:d1:48:ec:47:1a:85:92:b8:3d:42:8c:a2:6d:e1:
2c:5f:e8:2b:e0:d7:dc:7b:cf:43:a9:89:ac:68:e8:
aa:47:39:51:ad:60:5c:4a:05:75:01:13:59:02:ec:
7c:fa:c9:f2:41:1a:45:39:1f:3a:e1:50:6a:c4:ec:
b4:ad:69:f5:e9:fb:b6:ed:d7:bf:5a:17:5e:b9:2c:
c9:be:e4:f6:83:3a:c8:fc:78:c3:12:af:83:8f:86:
67:d4:e8:23:a6:b3:ff:1c:fb:2f:a1:9b:8d:b5:14:
19:07:20:eb:8a:7e:75:06:fa:88:c8:a4:56:b7:7d:
55:60:c3:8e:4f:3a:40:b6:ae:d6:3e:ca:54:4c:b4:
9f:c8:ec:86:ec:a6:99:51:9f:fc:bf:74:ff:bb:16:
36:95:50:b9:36:13:1b:c1:06:9c:75:60:2a:bc:30:
cf:ea:d3:4f:b7:19:cf:5e:bb:fe:01:46:45:aa:08:
e2:f9:0c:1a:63:f3:9e:7a:c0:ba:71:03:19:91:a1:
77:43:8f:a8:17:dd:ee:95:58:84:39:e8:b7:7c:14:
c8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:ED:74:02:9F:22:3A:95:F4:7A:2D:57:B4:D5:2A:52:CB:64:08:91
X509v3 Authority Key Identifier:
keyid:41:F2:28:60:CA:62:BD:28:38:F8:32:8F:17:83:9D:1E:86:08:D2:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfIoYMpivSg4-DKPF4OdHoYI0m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/63a990-04bf-4f77-84a1-fac64e1fb342/1/QfIoYMpivSg4-DKPF4OdHoYI0m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/63a990-04bf-4f77-84a1-fac64e1fb342/1/QfIoYMpivSg4-DKPF4OdHoYI0m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:5a:38:47:64:c4:cd:a5:2a:df:3c:e2:36:6f:05:38:a7:6e:
70:fa:c2:8a:24:ba:8a:95:d1:a0:34:89:29:23:69:aa:8a:d7:
49:d7:29:80:c2:ec:29:ed:73:64:ca:06:9d:c6:43:67:54:bd:
6f:99:fe:85:ec:69:25:88:fe:92:df:db:60:85:70:d6:18:e1:
6c:43:37:6f:7c:fb:44:84:94:da:cf:af:ef:86:26:f7:0f:99:
6f:d0:37:13:da:c8:9d:96:77:33:2c:4d:25:5b:dc:f4:c1:7d:
6e:f3:8d:06:a2:18:11:ed:70:8b:e3:5d:d8:44:cd:fb:0b:6a:
24:09:61:cb:c6:95:af:81:16:41:0c:29:77:f8:e4:c6:c4:5d:
c6:e3:0a:12:24:78:30:53:4a:50:3f:61:38:fd:80:2b:06:49:
6d:df:0e:8e:7b:35:aa:2b:dd:e7:a5:4f:1c:48:33:6f:3b:a8:
cb:5d:8c:95:d2:c7:fb:a5:42:91:1f:16:7b:dc:b5:27:75:04:
10:af:4d:1b:eb:2d:4b:0c:4c:4c:24:02:e0:3f:38:97:66:0f:
87:76:70:67:2d:b3:09:dd:da:bd:85:54:59:78:59:68:32:1d:
bf:bc:3e:99:08:9b:b0:74:7d:18:35:7d:57:a7:c1:7e:c3:e5:
c6:f6:42:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:07:48 2025 by rpki-client