Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/fb7af4-f1fc-487a-bca2-2295eb7e8d9a/1/Q12Kb-q5GaEkBwEeFSfnXOPESJw.mft
File: Q12Kb-q5GaEkBwEeFSfnXOPESJw.mft (raw, json)
Hash identifier: LnURlOenDcliOamhGMBih97cdiZACKYujHnqmSf+kw0=
Subject key identifier: AD:9D:B1:BA:38:93:CB:55:BA:02:B0:9B:2D:ED:C9:48:4A:24:A7:8B
Authority key identifier: 43:5D:8A:6F:EA:B9:19:A1:24:07:01:1E:15:27:E7:5C:E3:C4:48:9C
Certificate issuer: /CN=435d8a6feab919a12407011e1527e75ce3c4489c
Certificate serial: 0194BCA9FBCDDECE835B9C64594A8FC2ED6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q12Kb-q5GaEkBwEeFSfnXOPESJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/fb7af4-f1fc-487a-bca2-2295eb7e8d9a/1/Q12Kb-q5GaEkBwEeFSfnXOPESJw.mft
Manifest number: 0B11
Signing time: Fri 31 Jan 2025 14:00:44 +0000
Manifest this update: Fri 31 Jan 2025 14:00:44 +0000
Manifest next update: Sat 01 Feb 2025 14:00:44 +0000
Files and hashes: 1: Q12Kb-q5GaEkBwEeFSfnXOPESJw.crl (hash: UXJ1bf/88rlC0NaDSqX8yv9hqQsOo39VebRDuZyNpJo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:fb:cd:de:ce:83:5b:9c:64:59:4a:8f:c2:ed:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435d8a6feab919a12407011e1527e75ce3c4489c
Validity
Not Before: Jan 31 14:00:44 2025 GMT
Not After : Feb 1 14:00:44 2025 GMT
Subject: CN=ad9db1ba3893cb55ba02b09b2dedc9484a24a78b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c6:0c:63:5f:fc:fe:b7:4e:f8:44:d4:50:5a:
66:dc:e8:75:9c:40:bd:4b:56:f9:4f:26:f4:b8:b3:
d4:6d:ba:48:f1:b8:88:e4:fe:c3:8f:6e:56:2f:d7:
17:eb:72:32:37:7b:2b:d0:9f:b6:c2:2b:d0:f3:50:
18:73:05:dc:89:4b:5b:d5:e4:67:a4:24:53:1c:db:
4c:43:2c:b9:3f:49:3e:51:7b:ab:02:0d:e7:41:c3:
40:44:cf:88:f0:01:65:6e:f9:0a:7e:68:76:cb:75:
20:86:b8:2b:a5:e1:d8:23:a2:f6:6e:b9:25:51:9b:
8a:a5:0e:90:6b:c2:22:ef:d0:c6:5b:ff:ff:87:2e:
9d:74:84:bf:5a:db:7f:0e:20:76:9a:f9:1c:4d:84:
80:5f:0d:75:d7:65:4c:0d:b1:1b:7e:0e:b0:46:80:
cb:68:0a:2a:90:bc:33:37:47:bc:48:82:ff:46:45:
2c:73:88:21:66:48:3f:2c:60:c3:a4:89:08:bf:ab:
56:f0:79:ad:ca:52:07:d4:09:cf:40:54:f3:18:09:
02:5a:6f:9c:08:9d:e9:f2:55:fe:a5:ee:49:49:47:
d3:8f:78:f2:bc:bf:85:4d:aa:2e:f1:01:4f:4c:1f:
07:c4:98:f5:f2:70:1d:4e:45:5a:18:5f:c7:64:b5:
27:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:9D:B1:BA:38:93:CB:55:BA:02:B0:9B:2D:ED:C9:48:4A:24:A7:8B
X509v3 Authority Key Identifier:
keyid:43:5D:8A:6F:EA:B9:19:A1:24:07:01:1E:15:27:E7:5C:E3:C4:48:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q12Kb-q5GaEkBwEeFSfnXOPESJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fb7af4-f1fc-487a-bca2-2295eb7e8d9a/1/Q12Kb-q5GaEkBwEeFSfnXOPESJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fb7af4-f1fc-487a-bca2-2295eb7e8d9a/1/Q12Kb-q5GaEkBwEeFSfnXOPESJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:02:04:6d:06:c6:d0:cb:bd:db:d3:aa:4c:4a:53:1c:e0:a4:
4d:ec:70:4b:60:3f:3a:1e:49:91:1e:59:6e:93:de:1a:86:3e:
9b:89:b3:00:c0:a2:5a:4e:c2:18:53:a5:c6:c7:78:77:a6:b0:
61:4f:2c:f5:fa:bb:c7:25:4c:e5:fc:fa:2a:36:2d:5b:d7:bb:
2c:27:34:be:38:ac:f7:3d:6e:4d:0d:b1:88:50:fb:4d:ca:d0:
c1:08:56:01:c8:f8:df:8f:b1:c0:d5:55:a6:40:41:9a:a5:01:
01:85:e5:6b:63:cf:2c:fd:61:5b:2a:b1:73:1d:ff:70:97:6a:
e5:e1:08:de:e1:5c:0a:bd:dd:4d:44:90:92:9c:92:37:2a:c2:
a4:99:c5:0c:24:a6:1d:32:f9:92:be:37:ff:0e:fb:81:69:f5:
e9:e0:41:61:08:e0:58:e1:dd:9a:d6:a1:d3:12:c9:e9:3d:99:
f8:d1:f3:e4:05:c6:c5:85:3f:9b:e4:5b:51:e7:0c:c1:1b:d3:
91:36:85:fc:25:9b:ae:ab:34:44:10:0b:6d:ab:64:de:68:cb:
24:49:ac:31:98:e8:25:90:b4:d5:ce:5f:d7:38:05:cb:0b:c7:
a5:8a:1a:0e:a8:16:9c:4c:0b:48:72:54:e5:79:05:5d:bc:36:
08:7c:d9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:10:30 2025 by rpki-client