Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.mft
File: qQcj6hJVTVL0ZzoaSHifPQWniaA.mft (raw, json)
Hash identifier: 5v54fpjllbfEt+ziH2htpvaOZvmg2gfQmuXiMzdxa/8=
Subject key identifier: A8:90:76:79:A4:2D:24:CB:37:A8:0A:BD:61:93:94:AB:80:3F:4A:F6
Authority key identifier: A9:07:23:EA:12:55:4D:52:F4:67:3A:1A:48:78:9F:3D:05:A7:89:A0
Certificate issuer: /CN=a90723ea12554d52f4673a1a48789f3d05a789a0
Certificate serial: 0194BCA9C7A12F0B1EBF4FE4A68B77CF1248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQcj6hJVTVL0ZzoaSHifPQWniaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.mft
Manifest number: 10BB
Signing time: Fri 31 Jan 2025 14:00:30 +0000
Manifest this update: Fri 31 Jan 2025 14:00:30 +0000
Manifest next update: Sat 01 Feb 2025 14:00:30 +0000
Files and hashes: 1: qQcj6hJVTVL0ZzoaSHifPQWniaA.crl (hash: LfKMjcJg98rrJc5edHRjO1wwdrp5ZloRC+RDzqULtRI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c7:a1:2f:0b:1e:bf:4f:e4:a6:8b:77:cf:12:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90723ea12554d52f4673a1a48789f3d05a789a0
Validity
Not Before: Jan 31 14:00:30 2025 GMT
Not After : Feb 1 14:00:30 2025 GMT
Subject: CN=a8907679a42d24cb37a80abd619394ab803f4af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3a:51:1c:ed:fd:b2:c2:b5:05:31:09:9b:95:
d4:84:b5:13:be:fc:97:6e:8d:20:fd:36:be:3f:17:
be:df:13:de:6b:07:6e:d0:44:c4:70:27:42:68:e2:
dd:f7:29:a5:08:1c:0a:c5:f5:86:f0:cb:66:01:54:
35:fa:af:c8:0d:aa:06:fb:bc:23:43:9b:5d:9f:3c:
3f:51:b0:a1:8f:3d:6f:5c:6e:6f:7d:e7:cd:85:6e:
29:56:af:fb:44:1e:f1:99:7a:93:97:2f:1e:c5:83:
b3:f6:8e:df:ea:86:b8:7e:c4:2d:9a:25:7b:16:95:
d0:31:90:52:df:56:4a:cc:4a:bc:2f:87:b3:d3:99:
63:ed:a4:15:a6:1f:26:5e:c7:8b:f0:83:0f:52:ad:
b7:19:08:f4:4c:ef:f8:2b:d7:de:b7:a7:ef:e6:db:
1c:fc:dc:94:5a:d2:06:5b:3c:50:39:9b:db:a2:ef:
de:70:08:74:dd:d8:02:67:14:6a:50:62:48:6e:f7:
1a:5d:94:64:b0:71:8e:87:2c:5d:59:de:c2:1d:04:
4d:0f:f1:98:19:98:88:d8:6a:bf:a6:77:5d:1f:41:
8f:aa:78:01:7a:90:13:f8:bf:1e:71:4c:43:38:56:
e0:71:b1:80:d5:70:43:c9:0a:7b:3e:3e:0e:87:55:
65:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:90:76:79:A4:2D:24:CB:37:A8:0A:BD:61:93:94:AB:80:3F:4A:F6
X509v3 Authority Key Identifier:
keyid:A9:07:23:EA:12:55:4D:52:F4:67:3A:1A:48:78:9F:3D:05:A7:89:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQcj6hJVTVL0ZzoaSHifPQWniaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d8:0e:0b:b9:55:12:b1:62:70:88:66:f8:cb:cf:37:06:bf:
68:4b:3c:c0:5d:44:96:3e:10:eb:da:51:10:83:18:9e:4e:78:
4c:0b:25:0f:fa:69:87:44:63:14:5b:77:46:77:22:b4:f0:5d:
19:4c:25:53:60:e2:e5:ab:42:db:c0:4d:6e:4e:d0:f2:0e:d9:
37:f6:c2:04:bf:24:68:1c:f4:2f:a4:7d:99:ae:0f:50:ae:73:
88:60:0e:11:82:ab:5c:38:5e:1f:4c:6f:b5:60:86:c1:40:04:
46:df:bd:36:d7:48:1d:a4:e7:6b:8e:a1:70:04:7f:18:69:2c:
0a:6b:9c:1d:a9:60:5f:5d:f0:de:f5:01:67:d6:4f:09:ea:6c:
bf:80:44:44:e9:be:1c:44:fd:ae:35:d4:a2:fb:03:01:1c:2b:
fa:fe:0c:17:82:9d:7a:57:3a:87:36:6f:e5:d7:65:9a:80:27:
61:46:fa:16:f9:83:09:5e:11:ac:fb:a7:42:57:6e:d4:19:37:
c7:17:ff:3e:1a:fb:04:5a:f1:31:1c:85:5a:5c:87:68:01:50:
88:5f:8c:cf:76:b4:69:d6:d5:bb:68:d4:e2:e5:dd:17:18:ed:
87:c3:22:1c:0f:01:a1:19:9a:17:51:ca:ac:73:b7:1c:4b:28:
69:35:e1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:50 2025 by rpki-client