Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2e2c8e-4c2b-48e9-afd5-235aba19d9f9/1/QKpxFX4g2YA2u9aTuOy7K5nw8Dw.mft
File: QKpxFX4g2YA2u9aTuOy7K5nw8Dw.mft (raw, json)
Hash identifier: cHxq5ucNBTuPuw0un55AlbR+hqqGlb+1i4D3AtxM85w=
Subject key identifier: 89:77:0A:A9:5E:71:4D:85:C0:1D:BF:FF:83:41:32:83:F9:E1:70:D7
Authority key identifier: 40:AA:71:15:7E:20:D9:80:36:BB:D6:93:B8:EC:BB:2B:99:F0:F0:3C
Certificate issuer: /CN=40aa71157e20d98036bbd693b8ecbb2b99f0f03c
Certificate serial: 0194BBCE6A0AE0057AAF1B86125903422D1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QKpxFX4g2YA2u9aTuOy7K5nw8Dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2e2c8e-4c2b-48e9-afd5-235aba19d9f9/1/QKpxFX4g2YA2u9aTuOy7K5nw8Dw.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:54 +0000
Manifest this update: Fri 31 Jan 2025 10:00:54 +0000
Manifest next update: Sat 01 Feb 2025 10:00:54 +0000
Files and hashes: 1: QKpxFX4g2YA2u9aTuOy7K5nw8Dw.crl (hash: AElQhCaelvebPVkzFkIjnOv2OAwbvn/dvsoN1Lt6Wj0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:6a:0a:e0:05:7a:af:1b:86:12:59:03:42:2d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40aa71157e20d98036bbd693b8ecbb2b99f0f03c
Validity
Not Before: Jan 31 10:00:54 2025 GMT
Not After : Feb 1 10:00:54 2025 GMT
Subject: CN=89770aa95e714d85c01dbfff83413283f9e170d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c8:af:54:ea:41:fa:8c:2d:95:36:61:a6:67:
78:d2:a9:c6:11:80:27:1e:05:46:47:eb:de:cd:33:
30:b6:13:41:1b:ab:49:5a:90:b5:c8:94:6d:33:90:
84:ae:a5:b9:66:18:d7:8c:28:c2:bd:54:38:4f:27:
e1:01:43:27:63:3a:fd:1d:d5:04:9d:31:76:47:a9:
eb:cb:77:0d:8e:17:60:60:71:e3:50:34:d2:b5:fc:
4a:8e:38:15:c2:1a:4d:2a:0d:02:c0:ca:37:dd:82:
b7:79:c2:c1:ef:16:66:d4:4a:d9:4d:90:a4:4f:52:
4c:6a:c1:9c:b7:a9:bc:f8:51:6b:79:87:61:9b:c9:
64:16:73:46:e8:26:7d:02:30:1c:52:31:37:db:5f:
09:93:78:d8:d7:45:d5:a1:90:37:da:fd:9c:d3:33:
a3:07:3e:9b:c4:80:5e:ab:45:3f:9b:85:17:c4:be:
39:c7:17:3f:96:44:5b:00:9a:93:a8:85:62:5d:77:
aa:96:3e:f3:d7:1b:ad:08:ba:d1:19:d6:13:3e:17:
79:b8:01:01:2f:24:1a:17:1f:27:74:13:73:66:42:
80:63:f7:01:e5:98:c5:98:bc:04:9f:12:b6:ba:eb:
44:9d:b4:99:af:17:f0:af:f0:a5:86:27:25:0c:38:
ef:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:77:0A:A9:5E:71:4D:85:C0:1D:BF:FF:83:41:32:83:F9:E1:70:D7
X509v3 Authority Key Identifier:
keyid:40:AA:71:15:7E:20:D9:80:36:BB:D6:93:B8:EC:BB:2B:99:F0:F0:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKpxFX4g2YA2u9aTuOy7K5nw8Dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2e2c8e-4c2b-48e9-afd5-235aba19d9f9/1/QKpxFX4g2YA2u9aTuOy7K5nw8Dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2e2c8e-4c2b-48e9-afd5-235aba19d9f9/1/QKpxFX4g2YA2u9aTuOy7K5nw8Dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:aa:78:67:cc:9d:fa:3c:43:06:95:5c:23:a3:67:9b:c0:81:
b0:48:40:8e:ee:1c:53:1a:e5:aa:46:8a:f7:fb:af:5d:bd:f6:
25:82:da:db:f9:1f:11:92:9c:e0:21:69:e2:1b:f9:e9:60:6e:
77:93:3b:41:f3:7d:1b:53:cc:9a:44:c8:f3:66:c3:fd:70:ca:
ba:67:39:62:7a:94:b5:c5:7a:e7:c6:65:85:a7:ee:ec:78:3a:
81:48:3f:13:50:33:e6:f9:03:ab:ab:29:2d:77:ff:49:43:41:
1d:07:bf:59:4d:2d:ff:b6:4e:da:b1:62:38:94:8e:f8:e8:c1:
6f:e7:46:fd:8a:f3:54:99:26:f3:52:66:07:be:a6:bc:d5:a2:
52:5f:db:b0:2b:31:55:b6:1f:e5:80:ab:50:4e:10:cf:36:3c:
1b:71:17:8e:96:33:70:88:66:eb:d5:f8:67:4b:b1:4d:60:8f:
6c:c5:b8:4f:23:41:b5:34:eb:cc:7f:c6:5a:77:8c:e7:81:ff:
e2:76:94:af:8d:57:ca:92:3b:d6:4a:81:fa:a3:24:35:fe:f4:
4c:93:34:c7:14:1e:50:d8:a1:24:3e:f2:62:69:ba:b9:95:b8:
6d:bb:73:cf:dc:f4:24:88:fd:b6:3e:0a:0f:f3:37:f1:dc:01:
0e:7b:6b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:19:20 2025 by rpki-client