Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft
File: qZPrBqu5jUolXPsrMjpl88T3G60.mft (raw, json)
Hash identifier: e+j4nQOBuSmbOtuTmFdBEC/z9yN9H8dBYt+O38y+q2w=
Subject key identifier: CD:8B:F1:6D:C6:52:E6:92:F0:02:18:B2:CD:A5:59:C3:3A:6F:68:C0
Authority key identifier: A9:93:EB:06:AB:B9:8D:4A:25:5C:FB:2B:32:3A:65:F3:C4:F7:1B:AD
Certificate issuer: /CN=a993eb06abb98d4a255cfb2b323a65f3c4f71bad
Certificate serial: 0194BD178E58EB0A36430627CE99DA06D36D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZPrBqu5jUolXPsrMjpl88T3G60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft
Manifest number: 0707
Signing time: Fri 31 Jan 2025 16:00:25 +0000
Manifest this update: Fri 31 Jan 2025 16:00:25 +0000
Manifest next update: Sat 01 Feb 2025 16:00:25 +0000
Files and hashes: 1: qZPrBqu5jUolXPsrMjpl88T3G60.crl (hash: rUMQltlUj207oxm8nUiLX8LHat/4n5XfNZ+q7K3UFqw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8e:58:eb:0a:36:43:06:27:ce:99:da:06:d3:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a993eb06abb98d4a255cfb2b323a65f3c4f71bad
Validity
Not Before: Jan 31 16:00:25 2025 GMT
Not After : Feb 1 16:00:25 2025 GMT
Subject: CN=cd8bf16dc652e692f00218b2cda559c33a6f68c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:04:6a:ba:16:5c:1f:19:13:68:6c:ce:9d:8b:
9e:b4:2c:19:85:fa:65:77:54:de:f4:bc:20:bb:f7:
9e:af:df:cd:29:64:59:97:4b:44:4b:b4:8e:f6:14:
93:57:c0:3c:5d:88:6a:fb:14:2b:8b:36:25:42:ae:
28:48:44:a3:e6:91:ea:d2:46:d2:81:97:fb:df:35:
37:c5:4b:fb:73:46:41:5f:ba:ff:f7:f2:f4:02:c0:
39:e9:27:af:19:8e:27:12:f6:67:90:85:dc:c0:d2:
c7:84:4f:98:0e:fa:d4:21:e8:92:cf:e8:13:f5:cf:
c1:dc:8c:d1:3b:c1:3a:59:f1:c6:7f:18:22:ef:ef:
af:05:56:e2:63:e6:7b:96:0b:08:44:0b:d6:08:e7:
72:d6:ba:66:3f:7b:8f:c9:b7:19:5b:3d:f1:b2:7b:
90:8f:87:dd:1d:6f:10:a7:0f:25:db:ca:06:74:4c:
c2:35:32:01:0b:44:52:3a:b1:4b:9a:2f:f3:30:d1:
a3:7c:98:99:af:4b:4e:ec:28:b1:44:bb:bf:fb:cc:
f9:df:f9:7f:7f:d1:5f:b4:7b:25:87:85:c5:f4:fe:
03:21:13:a4:bc:39:b6:1d:b0:46:28:1c:76:b2:61:
fd:e2:0c:33:ac:f5:af:a8:09:d8:3a:cc:68:de:fe:
a6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8B:F1:6D:C6:52:E6:92:F0:02:18:B2:CD:A5:59:C3:3A:6F:68:C0
X509v3 Authority Key Identifier:
keyid:A9:93:EB:06:AB:B9:8D:4A:25:5C:FB:2B:32:3A:65:F3:C4:F7:1B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZPrBqu5jUolXPsrMjpl88T3G60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4e0566-3c01-4c95-bea7-565e78dd017d/1/qZPrBqu5jUolXPsrMjpl88T3G60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:24:27:8f:c0:67:fc:8d:52:38:cb:f5:8c:87:95:50:f3:5f:
91:ca:3d:6c:06:33:7a:9a:39:8c:af:7e:57:eb:37:c9:21:55:
b1:07:db:9a:84:bf:8b:c6:b8:d2:f0:42:1f:86:c5:d2:60:6c:
18:df:1d:64:5d:70:84:43:62:b2:cb:c0:49:1a:c8:62:d6:4e:
7a:76:2f:3b:fc:fe:b5:a6:7f:b6:75:3f:7d:29:c5:db:0d:ff:
61:51:10:78:bf:d0:bc:a6:40:ed:92:d2:14:3e:0f:59:ca:ea:
85:7b:e9:93:26:de:fb:79:8b:09:d2:ca:51:54:c7:66:8b:76:
74:f5:7b:9c:0b:fe:00:09:d1:e2:7b:c4:b7:07:cd:7d:e0:f8:
7c:4f:1c:35:38:dc:aa:fc:b1:80:a6:f6:21:19:c0:7c:6a:83:
f2:a9:f9:78:38:6a:19:d8:b3:1a:b1:fa:ae:85:f0:9b:d7:06:
f0:d7:8e:6a:29:89:24:53:0f:73:ea:68:b2:fb:9d:01:13:78:
04:60:9a:39:d9:84:fb:fc:ac:2d:10:b5:57:d5:5f:8b:90:05:
d4:46:a7:38:5d:d1:17:80:d4:cc:7e:37:8b:ca:b1:c5:24:74:
2e:3b:5e:9c:36:ee:1d:68:3d:6d:0b:05:f6:c6:f4:7b:f7:1a:
82:e6:8d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:36 2025 by rpki-client