Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft
File: QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft (raw, json)
Hash identifier: n7cH8WA2btT3YyKuLp+smHsvupFljqnnY41UXeiXH5U=
Subject key identifier: 0E:8B:42:BF:CC:97:38:03:38:BF:95:DF:EA:2C:C2:5C:6D:55:C1:36
Authority key identifier: 43:32:4F:25:1B:68:FF:54:63:F6:B5:35:07:F6:6A:4B:03:4D:C0:E5
Certificate issuer: /CN=43324f251b68ff5463f6b53507f66a4b034dc0e5
Certificate serial: 0194BC72C7BD8DBEE76C4FC08468AC84C59A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 13:00:26 +0000
Manifest this update: Fri 31 Jan 2025 13:00:26 +0000
Manifest next update: Sat 01 Feb 2025 13:00:26 +0000
Files and hashes: 1: QzJPJRto_1Rj9rU1B_ZqSwNNwOU.crl (hash: 1BsVYtNJmKxWU3oP1e4RzqYsvjV0m8ONK4kc/3Fa+MQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c7:bd:8d:be:e7:6c:4f:c0:84:68:ac:84:c5:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43324f251b68ff5463f6b53507f66a4b034dc0e5
Validity
Not Before: Jan 31 13:00:26 2025 GMT
Not After : Feb 1 13:00:26 2025 GMT
Subject: CN=0e8b42bfcc97380338bf95dfea2cc25c6d55c136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f0:90:40:8d:4e:f4:21:2f:b5:a6:aa:b6:81:
43:77:e9:72:94:7b:fb:88:01:07:c2:e7:be:d4:3d:
34:f0:85:ec:74:e9:a8:62:a1:9a:3f:da:a1:27:79:
8f:c3:d0:1f:74:e8:3a:31:d7:57:4c:d5:b5:3c:41:
4f:b4:75:76:8f:bb:c7:6b:d0:4a:30:4a:a4:76:24:
d0:01:3e:6d:8c:c9:c2:1e:db:c6:f0:11:c5:de:2b:
64:92:4a:ce:71:49:1f:2c:83:44:66:06:46:3e:74:
cb:18:d6:92:60:1f:28:a4:75:fc:cd:20:17:9b:00:
f5:e1:fb:06:c5:8c:df:fe:a5:3d:8b:d3:06:1b:e9:
5a:36:50:c1:96:d7:ec:87:c3:03:5d:ab:33:f3:88:
07:da:f6:68:3f:d0:f3:87:ee:fc:13:c2:9b:55:6a:
b6:cf:cb:04:79:79:c8:8d:a7:0a:2b:e4:90:d5:26:
c0:eb:3a:25:9c:c3:63:8e:1f:a3:2b:c2:27:d6:a8:
a3:fe:1d:bb:ed:11:af:ee:c9:7a:16:f0:85:17:4c:
aa:77:92:24:35:44:20:72:2c:a6:a1:e3:ad:8e:36:
ee:be:29:31:0a:f6:ac:ac:ba:2a:40:56:3e:98:13:
3d:03:92:b5:7a:3a:b7:7e:b3:99:cc:28:63:4c:e2:
a9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:8B:42:BF:CC:97:38:03:38:BF:95:DF:EA:2C:C2:5C:6D:55:C1:36
X509v3 Authority Key Identifier:
keyid:43:32:4F:25:1B:68:FF:54:63:F6:B5:35:07:F6:6A:4B:03:4D:C0:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:90:3b:c9:bc:3c:22:3a:e1:42:11:56:79:ac:3c:0d:e8:fb:
7a:ea:0b:7c:af:07:7a:99:53:ea:0e:2f:6d:85:69:8b:b1:f5:
f3:4f:35:22:5f:43:e7:c5:ce:43:0b:27:2d:4f:04:3f:d8:2b:
b2:c2:9b:0e:0c:cc:89:96:0f:7d:3c:96:9c:11:ab:19:c2:77:
da:45:c5:e9:a2:ee:98:95:87:8a:ba:97:55:3f:6c:b9:47:a6:
9a:55:5e:03:00:41:65:35:6a:72:21:9b:2b:11:13:6d:c0:9f:
b2:05:8d:1b:c9:9e:21:45:cf:20:e2:e2:22:04:69:d4:67:1a:
51:57:74:6f:e2:a9:d6:c3:36:47:11:44:b2:55:6a:fe:16:5a:
51:f0:86:4d:09:b9:4f:f9:09:f3:c5:55:65:09:3b:76:2b:78:
93:ee:55:1c:f1:02:ee:82:92:26:af:6e:a2:0b:24:d7:1f:00:
4a:75:3e:ad:f4:4b:d6:7d:59:b3:57:da:eb:bf:83:71:56:f2:
66:56:2c:e7:9b:88:e3:86:99:0c:05:72:4b:9a:dd:f3:16:dd:
49:88:f5:ff:27:58:73:e3:0c:c2:31:06:e4:a3:c4:0f:bf:cc:
9b:62:57:6d:09:d1:a9:d6:c7:06:9e:cd:bb:e7:39:28:18:f6:
a3:63:73:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:21 2025 by rpki-client