Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
File: Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft (raw, json)
Hash identifier: ZDT2D5wTBS5fzOXklmR2EpjZ+0zpe+eMKomnDP58yM0=
Subject key identifier: 8D:4B:12:17:FB:EF:21:36:04:8C:0E:F1:A8:66:86:63:A4:97:C6:CA
Authority key identifier: 43:C1:6E:EC:A6:AF:EA:84:4C:A4:68:82:58:CE:33:00:D2:A3:93:FE
Certificate issuer: /CN=43c16eeca6afea844ca4688258ce3300d2a393fe
Certificate serial: 0194BCAA336FCA799313C8B8BC044E3B2738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
Manifest number: 0DA6
Signing time: Fri 31 Jan 2025 14:00:58 +0000
Manifest this update: Fri 31 Jan 2025 14:00:58 +0000
Manifest next update: Sat 01 Feb 2025 14:00:58 +0000
Files and hashes: 1: Q8Fu7Kav6oRMpGiCWM4zANKjk_4.crl (hash: YUHmRYrIkOt/GvEl28pCy67f/S9shl2Q9ofITVgC+qQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:33:6f:ca:79:93:13:c8:b8:bc:04:4e:3b:27:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c16eeca6afea844ca4688258ce3300d2a393fe
Validity
Not Before: Jan 31 14:00:58 2025 GMT
Not After : Feb 1 14:00:58 2025 GMT
Subject: CN=8d4b1217fbef2136048c0ef1a8668663a497c6ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fc:d5:b8:d8:7a:04:aa:fe:ab:66:f1:41:52:
fd:60:42:a5:72:31:95:f1:96:1f:79:22:1d:ae:a2:
8a:86:87:97:eb:db:48:53:b1:04:b1:d6:0d:f4:11:
c2:f2:6b:c3:90:87:5b:4e:dd:a6:79:d9:ed:c2:5d:
c4:10:15:a8:48:97:10:dd:92:47:fd:6d:e3:d3:eb:
4f:e8:2b:11:07:a9:54:a4:62:fc:8c:fb:67:2e:4d:
30:e7:f2:db:61:5b:75:35:ef:c8:68:c4:e1:a5:f0:
63:15:d9:d6:a1:6f:27:1a:9d:4c:7c:cb:be:c8:f8:
87:32:3b:2d:57:de:72:c5:d3:33:39:f4:4d:62:29:
b2:33:64:bd:26:25:22:18:fe:7f:60:a7:29:9b:75:
5d:20:ec:5c:0c:98:88:78:98:48:9c:02:58:28:c0:
b4:24:8f:07:63:90:99:79:02:fd:4c:d5:6b:57:f5:
cc:dd:c5:ca:4e:c1:70:24:70:46:6e:c0:12:46:af:
80:39:18:65:fa:ca:d7:ca:3b:ae:50:c9:42:42:dc:
f7:55:b5:a5:9f:ad:68:9d:d5:f7:ea:e0:54:ac:fa:
1e:f1:37:ec:17:d2:79:c5:a6:53:d1:41:5f:22:8f:
92:f4:77:c5:9b:fc:dc:16:72:eb:ad:3a:b3:61:88:
3f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4B:12:17:FB:EF:21:36:04:8C:0E:F1:A8:66:86:63:A4:97:C6:CA
X509v3 Authority Key Identifier:
keyid:43:C1:6E:EC:A6:AF:EA:84:4C:A4:68:82:58:CE:33:00:D2:A3:93:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:09:e8:63:ae:2b:ed:1d:50:68:34:c2:55:9f:b9:ae:da:44:
7a:ac:85:c7:77:98:94:c3:7d:1a:60:44:79:d5:0e:1d:b6:ff:
a5:ad:c6:77:a0:45:76:47:33:23:6e:d4:7f:72:dc:d1:b7:c6:
24:12:34:4e:8c:be:cb:1d:a0:53:da:b4:db:48:3d:fc:25:ab:
db:70:20:fb:23:c5:bf:02:72:48:61:88:1b:82:3d:87:14:96:
26:65:fd:9a:1d:ff:c7:50:31:7e:6a:ec:b9:a7:c0:4b:6e:46:
b3:e7:db:11:78:e9:0c:7a:dd:69:8f:f5:e3:99:59:13:b7:ba:
e0:7d:f6:60:7c:13:10:46:4b:c3:42:e1:18:24:2f:37:df:f6:
8e:87:65:f0:ba:f2:9b:2b:2a:ac:4f:0e:20:8e:4b:ac:a8:36:
8e:3d:28:75:6d:f5:1a:33:b6:76:8c:c4:69:7b:f0:da:07:51:
27:bc:ab:36:59:86:46:27:4f:3e:e4:72:53:20:b2:90:83:f1:
aa:6f:6c:47:73:bf:65:26:2e:45:dc:f9:40:d0:0f:39:55:9f:
7a:47:99:b5:20:19:c9:da:07:ff:04:15:3c:ee:41:d6:e5:7e:
25:5e:54:c5:a4:f6:fd:4d:e4:23:51:86:92:ab:0d:b7:cf:68:
83:07:2a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:52 2025 by rpki-client