Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
File: QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft (raw, json)
Hash identifier: aWTLnV/CMkn2RjtncXykXbqcwJeuJQ8BxwMpHcRDF4A=
Subject key identifier: 27:B8:AD:8C:5C:A3:9F:8A:A0:28:08:9E:38:14:E0:F0:A6:67:79:84
Authority key identifier: 43:1C:57:E1:92:1D:31:A3:4A:EB:D1:2E:50:7A:13:6F:E0:45:98:C6
Certificate issuer: /CN=431c57e1921d31a34aebd12e507a136fe04598c6
Certificate serial: 0194BD17E067E79A9A713F4E1CD26CB28FB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
Manifest number: 01E7
Signing time: Fri 31 Jan 2025 16:00:46 +0000
Manifest this update: Fri 31 Jan 2025 16:00:46 +0000
Manifest next update: Sat 01 Feb 2025 16:00:46 +0000
Files and hashes: 1: QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl (hash: 2jmJ0Ixlg8/mVWuMV6MsF+iK4VDjWcTIsrg5iWm6Zak=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e0:67:e7:9a:9a:71:3f:4e:1c:d2:6c:b2:8f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=431c57e1921d31a34aebd12e507a136fe04598c6
Validity
Not Before: Jan 31 16:00:46 2025 GMT
Not After : Feb 1 16:00:46 2025 GMT
Subject: CN=27b8ad8c5ca39f8aa028089e3814e0f0a6677984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:39:36:eb:11:71:1a:5c:de:02:12:32:5b:3f:
d8:c0:3b:73:b2:9d:47:29:f7:49:51:60:6a:67:6d:
59:19:f6:c9:86:e2:df:c0:22:02:1b:94:52:02:2c:
47:11:eb:2c:8d:62:5e:fb:dc:ff:a8:4d:25:8e:7d:
2f:cb:2b:fc:4e:4b:87:c6:31:b7:13:71:4c:d7:27:
23:76:1c:0b:34:df:19:57:1f:97:e4:cd:7b:b1:3b:
f9:12:f3:f6:3c:9a:1d:ac:46:b5:37:3b:82:b1:dd:
7c:60:60:ac:39:90:8f:2a:ad:b2:a4:d1:c3:8c:c0:
96:29:99:d2:e1:f0:c9:77:9b:f9:35:da:77:dd:73:
dc:07:d0:b5:3c:d7:c5:36:b7:ea:c7:cc:af:c8:ed:
b3:70:6c:d9:d0:91:a3:d3:0f:c5:1d:e7:82:f5:c5:
2c:d6:58:d3:18:54:f5:b8:5d:bd:48:53:de:30:51:
5c:86:56:ff:2d:20:35:29:1e:7f:a1:4b:8a:7c:ad:
72:f7:8e:5a:cd:a4:df:74:6c:dc:64:4a:bc:dd:64:
17:f1:62:8e:7e:24:76:14:94:11:2e:e4:33:22:e2:
6e:ae:cf:24:4d:38:86:0f:a3:7b:56:f1:e4:57:2a:
55:a8:65:84:1c:09:e6:04:37:3b:97:05:53:59:f6:
c3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B8:AD:8C:5C:A3:9F:8A:A0:28:08:9E:38:14:E0:F0:A6:67:79:84
X509v3 Authority Key Identifier:
keyid:43:1C:57:E1:92:1D:31:A3:4A:EB:D1:2E:50:7A:13:6F:E0:45:98:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:30:1a:22:7c:88:be:d5:47:05:60:47:95:20:62:67:10:c5:
7b:05:90:87:a4:ce:ac:19:ea:7d:6c:26:87:e4:29:e0:65:ec:
ea:38:5f:04:69:8c:25:04:f8:8f:9d:19:e6:18:fb:82:60:91:
c6:00:58:49:a5:66:86:f2:39:ec:8b:7c:ff:ab:f3:d9:7c:17:
e2:9c:24:00:bf:ca:da:d5:8e:3a:d6:00:af:f2:a1:c4:f4:a6:
b9:a9:8c:86:36:af:ed:73:2f:de:56:0e:f4:3d:60:da:49:cd:
89:dc:c4:4f:f3:19:0c:e9:6f:cd:3f:63:aa:6a:4e:62:7c:3d:
3a:a4:90:81:33:8c:1b:c4:c9:09:aa:e7:f4:4d:8a:e4:7c:53:
36:87:1f:bd:b5:72:b8:c2:0a:69:ab:ff:c5:f6:f0:6d:8b:e0:
27:dd:db:fd:7a:a6:09:54:d1:72:59:65:b3:1f:97:27:5d:99:
4e:e7:66:0d:ad:86:4d:a2:05:f2:93:8b:0c:47:cf:40:da:12:
07:fd:6b:66:bd:98:ac:63:4e:f8:2c:68:a8:c3:2d:be:3d:f5:
ab:04:11:e8:32:96:42:2d:e1:ba:df:78:e6:c2:26:59:4a:28:
8b:4c:7f:33:4d:a4:dd:5a:6b:95:c3:a2:e1:d6:25:80:04:8b:
e9:88:a7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:45:35 2025 by rpki-client