Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
File: kqH7oqss0QEUipWef4wI96Qbw8U.mft (raw, json)
Hash identifier: N8xVnOzL8zkpB6+PsXVU/XJFb+KjobrKMtfakFBajBA=
Subject key identifier: 9C:00:A1:A4:A4:CA:B2:1E:A4:4A:05:E7:53:9F:A2:9D:D1:F7:A8:6C
Authority key identifier: 92:A1:FB:A2:AB:2C:D1:01:14:8A:95:9E:7F:8C:08:F7:A4:1B:C3:C5
Certificate issuer: /CN=92a1fba2ab2cd101148a959e7f8c08f7a41bc3c5
Certificate serial: 0194BBCEF9E6B672DB158F06580990661E38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
Manifest number: 0FD5
Signing time: Fri 31 Jan 2025 10:01:31 +0000
Manifest this update: Fri 31 Jan 2025 10:01:31 +0000
Manifest next update: Sat 01 Feb 2025 10:01:31 +0000
Files and hashes: 1: kqH7oqss0QEUipWef4wI96Qbw8U.crl (hash: 5eCfgd4DR2SGqEKr7m+w5sbfysco1wJp03/VqloV9cA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f9:e6:b6:72:db:15:8f:06:58:09:90:66:1e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92a1fba2ab2cd101148a959e7f8c08f7a41bc3c5
Validity
Not Before: Jan 31 10:01:31 2025 GMT
Not After : Feb 1 10:01:31 2025 GMT
Subject: CN=9c00a1a4a4cab21ea44a05e7539fa29dd1f7a86c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6a:9a:1c:12:73:f2:5b:cc:aa:09:47:0e:a2:
1f:a2:c2:ea:90:83:95:9c:db:8a:6f:92:13:a1:f0:
75:50:2b:f0:14:72:89:0c:36:ab:d2:c8:5e:fa:63:
a3:25:db:9f:aa:75:fc:ae:78:9d:fa:ba:f3:6a:33:
70:4d:57:85:bf:2f:0c:3b:82:08:39:84:fc:5c:09:
3f:39:a0:21:8e:56:c3:5a:f4:26:19:c7:bb:9d:1f:
02:3d:33:61:6e:8e:e3:c9:71:f1:23:04:69:0c:aa:
16:6f:f8:2c:54:ae:ba:d8:20:2f:86:74:f9:44:f5:
96:2c:5a:5c:d0:96:e7:4e:a7:5d:16:e1:51:7c:d8:
d5:a3:9b:30:98:f3:6c:5e:dd:76:36:0b:7f:db:33:
19:ae:c8:9b:40:5c:a5:d8:f3:eb:7c:e2:a8:81:87:
8c:4e:10:41:61:d2:35:22:aa:30:40:9e:90:58:3d:
15:db:f5:ee:ed:96:46:ce:09:69:ab:03:da:32:ae:
5d:12:b5:a2:ab:8e:e6:71:80:98:31:f1:3d:c6:e4:
9d:f3:04:4f:de:d7:86:45:40:fd:ef:cb:a9:67:24:
35:5b:a4:05:87:1e:67:b5:82:b4:30:23:1d:f4:f2:
0f:b9:95:b0:d2:96:ba:fc:cc:ca:c7:2b:8e:d8:83:
6d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:00:A1:A4:A4:CA:B2:1E:A4:4A:05:E7:53:9F:A2:9D:D1:F7:A8:6C
X509v3 Authority Key Identifier:
keyid:92:A1:FB:A2:AB:2C:D1:01:14:8A:95:9E:7F:8C:08:F7:A4:1B:C3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f8:df:ca:d9:cc:74:73:ab:83:ad:11:c6:29:f4:d3:08:9a:c6:
82:11:a8:54:09:d0:ed:25:96:e2:0a:f4:c3:6d:84:da:f7:78:
2d:d2:84:20:60:58:a3:ab:26:7d:d4:13:42:73:ce:b9:5e:33:
94:1a:59:f6:71:29:dc:2b:13:cf:c8:23:e9:5e:fe:02:b7:41:
fd:ef:c1:57:a1:46:70:b3:3c:11:5d:fe:1f:b0:bb:38:fa:9b:
c7:bb:6f:00:1c:63:16:a3:f6:11:4a:2f:2d:0e:ba:08:29:eb:
04:09:3f:8b:2b:68:4c:20:8d:ef:0e:7b:ba:7b:33:c2:79:c3:
29:a6:11:bf:0b:be:ad:f4:53:df:85:16:e5:8d:c9:12:ec:46:
e0:d3:0a:4b:63:2b:19:25:ad:28:a5:62:6c:5e:63:1a:c7:d0:
23:38:43:88:b7:6d:bd:47:89:f8:a6:3c:79:1c:cd:c3:73:1a:
47:1e:bc:0b:cc:01:e4:a8:4a:5a:6f:4f:22:9a:d5:fb:af:cd:
ef:ce:19:48:16:5f:ad:5c:9b:87:20:91:66:bf:7f:53:02:45:
cb:b4:7b:f3:01:3c:4a:ad:e7:43:03:78:52:31:e5:eb:b6:d7:
0f:fb:5a:a7:d5:7f:6d:bc:23:ec:5a:bc:b3:f6:0e:f7:13:6b:
70:a5:a4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:59 2025 by rpki-client