Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft
File: QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft (raw, json)
Hash identifier: vYmLsomaqhDUbiuC/4TGy9bTyb6W0VH8YdNW5xzLNsk=
Subject key identifier: 23:FB:40:66:FD:6B:8D:CD:EB:84:3E:07:B0:74:F6:4F:9A:1B:04:CF
Authority key identifier: 40:5F:FC:74:AE:92:38:6A:FB:7C:E7:70:F0:39:0E:90:D4:CD:E3:06
Certificate issuer: /CN=405ffc74ae92386afb7ce770f0390e90d4cde306
Certificate serial: 0194BD85967CA8995DDACFE5CBE76103D239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QF_8dK6SOGr7fOdw8DkOkNTN4wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft
Manifest number: 72
Signing time: Fri 31 Jan 2025 18:00:36 +0000
Manifest this update: Fri 31 Jan 2025 18:00:36 +0000
Manifest next update: Sat 01 Feb 2025 18:00:36 +0000
Files and hashes: 1: QF_8dK6SOGr7fOdw8DkOkNTN4wY.crl (hash: h2CWEtwIknXYxdSi9Xoja4Weeg/pUlsD/2a+qtBJ/5Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:96:7c:a8:99:5d:da:cf:e5:cb:e7:61:03:d2:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=405ffc74ae92386afb7ce770f0390e90d4cde306
Validity
Not Before: Jan 31 18:00:36 2025 GMT
Not After : Feb 1 18:00:36 2025 GMT
Subject: CN=23fb4066fd6b8dcdeb843e07b074f64f9a1b04cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:62:3e:d0:e7:51:47:9d:c5:78:5d:c8:b0:36:
e9:0b:1a:27:49:dd:f8:d6:86:9b:1f:b4:f0:d5:dc:
be:69:91:13:23:a9:a4:f1:dd:d7:e8:ae:6a:fe:bd:
bf:30:52:2c:14:37:95:d3:10:ae:c0:94:3b:23:21:
69:a4:44:88:90:8c:10:03:f3:fe:e1:dd:4c:2d:66:
28:ef:f3:da:24:7f:1a:91:95:99:43:f0:60:47:bb:
d6:a4:bb:8c:03:ce:4f:13:4c:ba:4f:96:04:1d:85:
7f:31:f3:01:a8:8d:cb:df:b2:2c:96:8a:f8:c2:3c:
ec:d4:3a:b1:43:cf:e4:f0:0c:61:39:4b:b5:30:cf:
cf:61:61:d9:e4:d9:fa:ae:a1:31:a3:3f:f6:9c:74:
22:c6:7b:d2:9a:ad:6c:76:b5:62:38:d4:95:6e:55:
fe:96:e7:95:7e:51:c2:cc:21:d3:82:b3:fb:23:7c:
62:5e:e8:08:16:99:75:53:77:fc:b0:c2:7a:9e:70:
e5:12:ad:50:a1:3f:6a:37:69:7b:03:2d:a0:73:ca:
43:01:f1:f9:a7:be:1f:74:c1:1a:92:c8:39:1d:25:
14:2c:2f:40:79:e6:8c:aa:95:60:25:d0:b4:eb:c5:
51:34:94:43:70:d2:b0:20:45:6e:18:35:f3:bc:7a:
52:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FB:40:66:FD:6B:8D:CD:EB:84:3E:07:B0:74:F6:4F:9A:1B:04:CF
X509v3 Authority Key Identifier:
keyid:40:5F:FC:74:AE:92:38:6A:FB:7C:E7:70:F0:39:0E:90:D4:CD:E3:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QF_8dK6SOGr7fOdw8DkOkNTN4wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:56:30:92:17:8a:ec:35:89:08:b2:dc:27:86:d9:77:ec:27:
f0:04:80:cb:d1:39:12:8e:34:71:29:11:72:3d:30:95:4e:fd:
1b:cb:eb:0a:20:22:b8:13:c3:3b:72:1c:9b:4c:f6:87:b0:1c:
d3:fa:6a:6b:16:1f:a2:07:82:51:67:7d:3d:0a:6e:3e:c9:b0:
43:d1:70:d4:40:14:4c:db:2e:91:4f:87:fc:4d:2f:d3:28:22:
3b:fa:47:c0:4a:c1:fb:27:70:72:a0:9d:b6:c3:c2:45:e6:85:
60:37:19:a2:cc:04:9c:96:c3:b6:0f:9d:00:b2:cd:d7:1c:3c:
ab:32:14:66:a3:b4:3e:96:57:bf:df:06:b5:8c:d6:23:6f:20:
d6:5f:d4:31:47:86:0c:cf:fc:49:01:11:09:d7:8f:2f:80:51:
c8:48:59:67:19:68:c6:8e:ce:3a:67:67:2f:1d:53:37:73:90:
b1:2c:36:3a:42:ad:01:e7:31:cf:5d:d3:fc:7b:fb:9e:df:58:
7d:dd:c5:8f:41:aa:2c:c7:0f:f3:05:b4:38:48:1e:b8:16:1e:
00:90:c4:9a:9e:9d:74:5c:a5:3a:c8:e1:ab:75:1d:a1:b6:84:
21:be:81:21:72:8f:20:19:d6:a1:f3:69:fa:f8:b5:b2:3f:ee:
8b:8d:fd:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:24 2025 by rpki-client