Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/a4a577-1925-4df3-920d-fa2088cc5014/1/Q2aEdOe7Pb2yatwBg4znBi1wxJg.mft
File: Q2aEdOe7Pb2yatwBg4znBi1wxJg.mft (raw, json)
Hash identifier: vngilu+h9hVN6ut1XtIsIz//XOTHkRiwS72vFMZgj4I=
Subject key identifier: 00:8C:87:71:16:EA:47:FC:41:9A:AB:C3:F7:16:FF:DE:C5:2B:D8:C3
Authority key identifier: 43:66:84:74:E7:BB:3D:BD:B2:6A:DC:01:83:8C:E7:06:2D:70:C4:98
Certificate issuer: /CN=43668474e7bb3dbdb26adc01838ce7062d70c498
Certificate serial: 0194BC04B61CCD01F5B7EE8D27FFE775E4F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2aEdOe7Pb2yatwBg4znBi1wxJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/a4a577-1925-4df3-920d-fa2088cc5014/1/Q2aEdOe7Pb2yatwBg4znBi1wxJg.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:12 +0000
Manifest this update: Fri 31 Jan 2025 11:00:12 +0000
Manifest next update: Sat 01 Feb 2025 11:00:12 +0000
Files and hashes: 1: Q2aEdOe7Pb2yatwBg4znBi1wxJg.crl (hash: +DbjtY6dqc0wWH2scNPXpEWPkg6mn6Fu2e+d5X7C9sg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b6:1c:cd:01:f5:b7:ee:8d:27:ff:e7:75:e4:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43668474e7bb3dbdb26adc01838ce7062d70c498
Validity
Not Before: Jan 31 11:00:12 2025 GMT
Not After : Feb 1 11:00:12 2025 GMT
Subject: CN=008c877116ea47fc419aabc3f716ffdec52bd8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:94:74:e2:9a:0f:f0:68:78:0b:53:6c:c0:89:
a7:6b:3f:31:5c:f4:93:37:40:d1:96:d9:f5:79:52:
c0:bf:b2:ba:06:c4:7e:90:ef:08:3e:6a:9b:3e:7f:
de:83:97:8b:a6:d1:53:73:36:75:47:20:10:2c:44:
b9:48:09:79:98:4d:d1:ee:e3:04:cd:66:18:6c:36:
f4:b5:54:1a:84:91:6a:34:4c:70:9f:4b:67:99:2e:
79:70:34:97:b3:19:b8:ab:07:c6:2b:ad:12:dc:32:
ca:9c:3c:28:c6:d3:d1:bb:82:15:36:cd:75:da:fd:
18:ed:9d:bd:f3:92:e8:25:0d:3c:cd:81:db:1c:d6:
79:0c:c1:a0:6d:3d:c7:cd:2b:35:5a:9c:c5:a9:42:
f8:69:e7:3a:ae:41:b6:cb:e1:d1:e8:ff:c0:d1:ed:
1f:f2:0f:79:2c:77:2c:13:db:4f:2c:37:53:34:81:
d1:f8:90:9b:e3:62:64:c3:59:36:57:f4:de:03:d4:
67:5e:20:aa:57:05:48:3c:c2:f0:58:83:04:5c:1b:
22:2c:36:f3:ae:52:fe:d2:6f:ab:8b:d8:29:ae:f6:
0d:4e:38:35:b6:00:1a:a9:e9:b7:8b:f7:31:0d:43:
bd:77:81:78:e5:c4:a7:68:09:da:69:e8:c5:38:7e:
76:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8C:87:71:16:EA:47:FC:41:9A:AB:C3:F7:16:FF:DE:C5:2B:D8:C3
X509v3 Authority Key Identifier:
keyid:43:66:84:74:E7:BB:3D:BD:B2:6A:DC:01:83:8C:E7:06:2D:70:C4:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2aEdOe7Pb2yatwBg4znBi1wxJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a4a577-1925-4df3-920d-fa2088cc5014/1/Q2aEdOe7Pb2yatwBg4znBi1wxJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a4a577-1925-4df3-920d-fa2088cc5014/1/Q2aEdOe7Pb2yatwBg4znBi1wxJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:49:3a:0b:76:aa:5a:99:ec:a0:c4:12:d4:73:c6:f2:c5:ab:
25:3b:d3:d0:83:01:d6:73:58:a3:17:f7:55:b6:76:2c:ab:19:
1b:6e:9e:29:b2:b8:6b:41:37:ac:aa:d5:cc:1e:c8:83:f1:ed:
0d:06:f4:e6:ce:bc:30:c0:6e:05:3e:b7:50:29:1c:44:82:e0:
c1:c0:8e:78:a4:be:ca:7a:cc:9b:78:3d:1d:c8:e6:bc:8e:d0:
6b:38:af:9b:11:61:61:44:73:3d:c6:af:fb:b4:b8:7a:8d:93:
9a:ef:cf:39:ec:19:4a:0e:51:fb:36:3d:29:3a:44:72:d0:da:
5b:6b:d0:6d:25:93:58:d0:c1:cc:b1:4e:48:9c:21:3f:08:6c:
6e:b2:ac:ee:d3:8c:64:ab:80:20:e0:91:9c:5a:d2:eb:49:7d:
4a:3d:30:31:af:8a:a4:7a:a4:5f:7d:bc:07:40:4a:d4:8b:08:
55:27:74:aa:1d:33:b4:7d:20:f4:e7:82:48:0f:c3:53:d0:f2:
e2:98:0b:d5:f7:0a:c3:db:de:ac:5d:e6:9d:fe:36:e9:6a:d0:
91:a2:55:4e:9e:4e:65:08:aa:a7:c6:15:ab:a1:62:9d:cb:5b:
a4:98:a3:e5:cb:42:96:71:e0:6b:10:1c:f9:5b:69:df:15:fa:
86:12:bb:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:57:52 2025 by rpki-client