Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft
File: a-SeWhSwy_QQTANLVyoPnxVKmXU.mft (raw, json)
Hash identifier: 48lXUdW9sYt+tHG02D8M6h4eL/zrD16qqH2xyEk06Jg=
Subject key identifier: 9E:EC:98:05:4D:55:44:94:F9:7D:5D:AC:BA:80:01:21:55:2B:74:05
Authority key identifier: 6B:E4:9E:5A:14:B0:CB:F4:10:4C:03:4B:57:2A:0F:9F:15:4A:99:75
Certificate issuer: /CN=6be49e5a14b0cbf4104c034b572a0f9f154a9975
Certificate serial: 0194BC728EC6AC213EC4CCB7932D21C5E965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-SeWhSwy_QQTANLVyoPnxVKmXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft
Manifest number: 02CF
Signing time: Fri 31 Jan 2025 13:00:11 +0000
Manifest this update: Fri 31 Jan 2025 13:00:11 +0000
Manifest next update: Sat 01 Feb 2025 13:00:11 +0000
Files and hashes: 1: a-SeWhSwy_QQTANLVyoPnxVKmXU.crl (hash: 3a+iZ4M7XyPWdgffEPzLw7Eu4byP0vK64wY+VgxunKU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:8e:c6:ac:21:3e:c4:cc:b7:93:2d:21:c5:e9:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6be49e5a14b0cbf4104c034b572a0f9f154a9975
Validity
Not Before: Jan 31 13:00:11 2025 GMT
Not After : Feb 1 13:00:11 2025 GMT
Subject: CN=9eec98054d554494f97d5dacba800121552b7405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8c:05:9c:48:b1:dc:4e:e5:02:97:25:e9:c3:
d9:26:8f:8c:21:e6:5a:29:00:b5:1b:d7:a2:fa:c3:
49:92:2c:2b:79:a6:12:40:84:87:51:7c:0f:e5:f1:
93:b8:f1:e0:bc:61:10:92:e5:0d:cd:bd:fc:be:42:
a7:3f:a7:20:d3:fb:dc:cc:c3:14:a4:75:24:44:08:
e4:a8:c3:6b:c2:9a:6b:84:ae:9d:15:ab:52:4d:2e:
64:c5:81:28:fc:16:e4:4c:3c:0c:39:c9:e9:d5:f0:
11:06:68:17:f3:11:a1:c1:f3:aa:c0:53:a8:7d:61:
1d:20:f3:84:db:fd:c8:5c:14:fa:f7:4a:c4:b2:58:
9b:c5:44:4a:60:b4:d0:ff:2e:71:90:da:8e:19:9f:
dd:bb:f9:59:63:89:5b:2e:fe:15:80:a9:52:e5:28:
2d:9c:10:9f:28:0a:6d:f9:39:92:75:49:c6:f8:c4:
9f:ba:69:fa:55:b1:0f:7b:a6:97:93:44:35:b6:ff:
29:dd:d6:c0:52:38:1e:01:05:f3:eb:b8:d3:45:3d:
06:91:af:5f:e0:d1:a9:f1:6f:81:fc:68:cd:e9:c3:
2d:66:e5:a6:b1:3e:1f:00:e5:c7:96:67:61:98:e3:
2e:a5:fb:e1:44:18:c2:22:60:aa:16:41:9d:d3:8a:
c6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:EC:98:05:4D:55:44:94:F9:7D:5D:AC:BA:80:01:21:55:2B:74:05
X509v3 Authority Key Identifier:
keyid:6B:E4:9E:5A:14:B0:CB:F4:10:4C:03:4B:57:2A:0F:9F:15:4A:99:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-SeWhSwy_QQTANLVyoPnxVKmXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:65:27:fe:87:f9:ef:3f:c5:6e:e2:ea:c3:57:24:41:79:ad:
d8:ec:1d:57:61:f3:ca:e5:d2:14:6b:b2:20:76:93:61:86:48:
d0:51:3a:e0:9a:21:a1:8d:29:a3:50:ec:36:28:b9:83:0e:15:
dd:2d:28:a7:d7:d3:7b:e7:9f:66:71:75:8c:b6:7e:d5:bc:bb:
4e:f1:f5:82:6d:3e:1c:9c:1d:a0:7b:05:3e:77:b6:6b:ee:83:
f2:ee:bc:0d:0f:3f:de:87:b3:2a:42:5d:a0:c9:ed:76:66:5f:
9c:1c:01:8d:9e:5b:40:f7:eb:ec:a2:0a:9b:cb:b2:4c:7c:3e:
b9:b5:26:61:36:52:30:ed:f4:27:cd:13:e0:94:b2:f0:6b:f5:
7b:f8:76:c9:87:14:1d:9e:61:da:96:39:5d:56:3c:a1:94:7d:
ed:c8:0f:21:7e:2b:96:c7:ff:84:8f:3d:1f:55:3a:56:f2:05:
7c:f4:90:25:3b:d7:48:86:9b:1b:8c:da:8c:e0:4b:b6:3b:ba:
7d:78:08:6c:42:77:23:a5:60:6f:1a:6c:1e:be:f7:73:e8:49:
67:a1:03:22:1c:e7:8b:2c:5d:da:ba:39:9f:23:0e:33:54:61:
0c:fb:30:df:88:30:b1:ee:78:0d:df:63:9f:aa:85:a6:87:54:
c5:52:ae:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:31 2025 by rpki-client