Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft
File: QIS7AapYrpSxMg_UvkIT-TFOkFY.mft (raw, json)
Hash identifier: LwhxavMs7baFg+EtdYUJCz9GUjyXA0KD5io2c8a0Wgs=
Subject key identifier: 45:15:FD:C0:1E:02:D4:12:FA:2F:F0:9D:E7:0C:6E:A3:B1:4F:EA:45
Authority key identifier: 40:84:BB:01:AA:58:AE:94:B1:32:0F:D4:BE:42:13:F9:31:4E:90:56
Certificate issuer: /CN=4084bb01aa58ae94b1320fd4be4213f9314e9056
Certificate serial: 0194BD17E782037600F9E7F894BD377E2C96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIS7AapYrpSxMg_UvkIT-TFOkFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft
Manifest number: 0419
Signing time: Fri 31 Jan 2025 16:00:47 +0000
Manifest this update: Fri 31 Jan 2025 16:00:47 +0000
Manifest next update: Sat 01 Feb 2025 16:00:47 +0000
Files and hashes: 1: QIS7AapYrpSxMg_UvkIT-TFOkFY.crl (hash: 92VopvHHhITBsNhJWgeeh/FTiBdGERRnSutRwjqKAk0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e7:82:03:76:00:f9:e7:f8:94:bd:37:7e:2c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4084bb01aa58ae94b1320fd4be4213f9314e9056
Validity
Not Before: Jan 31 16:00:47 2025 GMT
Not After : Feb 1 16:00:47 2025 GMT
Subject: CN=4515fdc01e02d412fa2ff09de70c6ea3b14fea45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f5:00:06:49:14:20:9e:79:81:e0:57:42:83:
3d:49:fe:f5:17:e4:30:84:d5:0a:09:01:24:57:7b:
46:30:f0:3f:97:3a:e6:06:30:19:1e:47:42:d3:73:
2c:40:50:b7:a1:07:8c:23:08:b3:d6:3a:44:b4:7d:
d4:3f:67:6a:79:0d:15:50:dd:5a:dc:01:fe:8c:d7:
a1:c4:30:8f:05:2a:a1:88:32:77:f7:1c:fb:ed:c7:
1f:ba:b6:e5:ee:8c:bf:27:15:73:71:b6:e0:9c:af:
07:e9:b8:25:4e:37:c6:6b:53:85:98:36:55:9f:8b:
9a:b5:7a:b4:53:d3:68:c2:be:e4:48:e5:9b:11:c5:
30:96:59:9f:bf:8d:52:ac:95:15:9a:18:ed:20:9b:
3d:aa:70:c0:01:e6:5f:8f:10:44:6d:5f:e2:59:57:
86:68:ba:30:69:47:48:de:be:07:79:84:7d:ea:25:
af:49:dc:1a:9b:17:d5:3b:93:9c:bd:1c:44:6c:36:
48:90:b9:14:bf:11:85:c0:dd:e4:09:07:d5:b9:46:
06:7c:02:e1:37:1a:80:e1:ff:d6:de:c6:c0:ad:f8:
bb:d9:ea:91:5c:77:1b:51:0e:11:e0:17:35:9d:a4:
a8:43:0c:d9:ff:c5:c3:f7:8a:60:78:07:f5:a1:44:
a7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:15:FD:C0:1E:02:D4:12:FA:2F:F0:9D:E7:0C:6E:A3:B1:4F:EA:45
X509v3 Authority Key Identifier:
keyid:40:84:BB:01:AA:58:AE:94:B1:32:0F:D4:BE:42:13:F9:31:4E:90:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIS7AapYrpSxMg_UvkIT-TFOkFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:2e:b0:25:6c:79:f4:65:8b:2c:43:f2:10:09:7c:6a:58:3b:
7b:a4:9b:d6:65:e3:a8:38:43:ef:57:ab:d1:87:94:06:93:83:
d3:3b:bf:27:52:09:40:b1:d4:1f:f8:eb:4b:5f:d1:c3:23:ae:
9a:ee:d9:1d:26:e2:2a:0c:44:52:27:4a:4a:ee:ec:99:3c:43:
9c:f4:d0:32:b3:be:ff:3e:90:97:5f:11:89:96:ab:c6:e4:11:
02:33:05:af:7f:dd:20:84:eb:c3:77:1e:aa:f4:1c:36:62:88:
18:c3:3b:83:f4:53:3e:3f:1e:e0:fa:81:94:7e:65:a1:d2:42:
31:91:5a:f7:e2:74:19:1b:27:3c:93:30:48:5a:e1:bc:dd:0d:
d6:ea:8e:2b:3a:26:46:fc:56:11:d2:74:ec:bf:eb:c3:10:ac:
fb:9c:ea:e9:04:c8:8a:06:2b:f5:bc:6f:6d:5c:c7:9a:e3:0f:
3c:bd:52:45:09:7a:4d:1c:d8:92:4f:11:87:fb:81:25:e6:69:
31:1c:11:8a:24:0c:24:d9:90:cd:9e:68:f2:b8:f5:e7:b5:0c:
de:6a:5b:c5:6c:cd:4b:af:0d:0d:3c:d1:16:b6:2e:27:c1:f7:
a1:68:e2:ed:5e:40:57:ca:9a:c8:58:03:b8:60:75:a6:10:fd:
3a:67:81:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:17:46 2025 by rpki-client