Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft
File: QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft (raw, json)
Hash identifier: YrkrvjU7OqELy0h1cbjG85BtgBOLiA4MZ0a8sUbF6uA=
Subject key identifier: B4:26:E6:49:72:3F:B6:6E:83:CE:A1:66:36:AE:16:08:48:68:CE:61
Authority key identifier: 41:16:52:04:CF:E4:70:73:CC:86:D6:DE:43:C4:1D:88:17:E2:E4:2E
Certificate issuer: /CN=41165204cfe47073cc86d6de43c41d8817e2e42e
Certificate serial: 0194BBCEC20393F6826084342DD64C2D8C45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft
Manifest number: 0A39
Signing time: Fri 31 Jan 2025 10:01:16 +0000
Manifest this update: Fri 31 Jan 2025 10:01:16 +0000
Manifest next update: Sat 01 Feb 2025 10:01:16 +0000
Files and hashes: 1: QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl (hash: vnf4P2h3bDw+mkoilxWVU44UxMEjxcBE89+WcPAqSfg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c2:03:93:f6:82:60:84:34:2d:d6:4c:2d:8c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41165204cfe47073cc86d6de43c41d8817e2e42e
Validity
Not Before: Jan 31 10:01:16 2025 GMT
Not After : Feb 1 10:01:16 2025 GMT
Subject: CN=b426e649723fb66e83cea16636ae16084868ce61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f7:e7:c6:6f:25:7d:a2:29:31:cf:a8:60:fe:
17:f1:d9:b3:ba:6f:f4:81:8a:4d:e5:b8:23:f4:62:
f1:3b:9f:c2:49:17:24:1b:35:eb:48:cb:8a:d4:76:
72:4e:8e:42:2f:6d:5d:ef:6d:be:89:9d:42:0a:9d:
d3:07:b3:cc:b4:eb:c7:0c:f0:69:4f:9a:4e:a5:68:
f2:a5:11:b4:85:04:0a:25:ec:ee:ff:d6:14:d5:03:
9f:a2:0e:31:6a:11:0d:8b:37:7f:ed:fa:7f:42:64:
82:cb:54:6f:ae:1f:aa:aa:9c:85:da:78:52:e5:94:
de:ec:7c:95:9c:18:81:6e:90:a6:a1:a0:f9:c9:68:
4f:ab:e9:8c:66:e2:f6:46:31:c3:c5:68:81:69:d6:
0a:2f:ca:79:31:c9:87:f7:2a:48:62:70:39:a9:78:
4d:1f:f1:e7:82:63:49:fd:90:ce:9e:34:b5:43:4c:
1c:a0:70:5f:62:de:ef:83:21:d6:a4:e6:f6:65:b0:
37:fa:bb:6f:2e:60:84:1d:ef:c1:a2:b9:ea:70:08:
84:5e:13:cb:2c:1c:ae:0a:09:d6:cd:66:8b:8a:dc:
ac:c4:23:f3:70:41:c1:52:75:9f:3c:28:63:d0:c8:
6c:b6:04:c8:47:f1:50:6b:a3:89:06:9e:96:3f:ce:
c9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:26:E6:49:72:3F:B6:6E:83:CE:A1:66:36:AE:16:08:48:68:CE:61
X509v3 Authority Key Identifier:
keyid:41:16:52:04:CF:E4:70:73:CC:86:D6:DE:43:C4:1D:88:17:E2:E4:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/fd3568-dde9-409c-bbd0-34d28b43c324/1/QRZSBM_kcHPMhtbeQ8QdiBfi5C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:51:96:77:34:77:4f:1e:d6:95:c4:29:94:47:77:ef:61:e7:
ef:2a:a7:92:75:71:2b:b4:71:32:1e:97:4b:d6:4d:59:75:9e:
d8:17:c7:89:f2:d3:26:c9:91:cb:e4:31:36:df:06:92:a1:69:
a4:88:2c:de:13:20:ee:c1:73:01:7a:33:58:94:b2:81:a5:12:
55:d2:fb:9a:77:1b:05:7a:33:ee:6c:bb:f0:a6:77:68:5a:f8:
3d:02:5b:05:c5:ad:10:5c:07:a0:9f:31:81:02:1a:ac:48:9a:
0b:9a:05:40:bb:ac:fa:cc:11:4d:f8:96:ca:cb:59:9a:e7:cb:
4e:86:ad:46:06:e9:f3:d7:33:4a:12:3e:da:c0:63:43:35:27:
ab:4e:a1:d6:df:d6:0b:12:2d:8d:a7:15:e2:51:0a:29:bd:81:
cb:de:83:f8:1a:04:fb:25:a5:b2:ec:6a:f2:2f:79:45:ef:ce:
e9:a1:b5:08:96:b0:88:00:ba:b7:5d:a6:76:f6:e2:f4:1c:25:
53:21:d5:82:8b:cb:ba:f9:cc:05:0c:8d:7d:c6:56:f7:95:a8:
35:a0:ec:ad:5b:bb:ac:6c:97:30:e1:98:d1:1c:78:fd:02:96:
c0:a3:b6:f2:8f:ab:1b:0d:05:15:4e:b3:a9:f8:5a:4f:01:ae:
7f:db:59:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:47:03 2025 by rpki-client