Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f05d0d-c1d8-47a6-9d1e-864daca6cfdf/1/QCzcwN4_54S70vviah2BZWpGfSI.mft
File: QCzcwN4_54S70vviah2BZWpGfSI.mft (raw, json)
Hash identifier: bCnXXMQUkkFrzdeg/8TzTKpEPejjXtMF+D1E/oiAUzQ=
Subject key identifier: 71:49:33:74:45:A4:03:2D:C7:FC:57:74:3A:19:D5:2B:79:77:F3:63
Authority key identifier: 40:2C:DC:C0:DE:3F:E7:84:BB:D2:FB:E2:6A:1D:81:65:6A:46:7D:22
Certificate issuer: /CN=402cdcc0de3fe784bbd2fbe26a1d81656a467d22
Certificate serial: 0194BBCDCC657B30EECDEF25DABFA0A9688A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCzcwN4_54S70vviah2BZWpGfSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f05d0d-c1d8-47a6-9d1e-864daca6cfdf/1/QCzcwN4_54S70vviah2BZWpGfSI.mft
Manifest number: 069C
Signing time: Fri 31 Jan 2025 10:00:14 +0000
Manifest this update: Fri 31 Jan 2025 10:00:14 +0000
Manifest next update: Sat 01 Feb 2025 10:00:14 +0000
Files and hashes: 1: QCzcwN4_54S70vviah2BZWpGfSI.crl (hash: M2n8Z2aPJ82+jp8yoMX6gFujR/YoPdiW4FUeg0DNNFU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:cc:65:7b:30:ee:cd:ef:25:da:bf:a0:a9:68:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=402cdcc0de3fe784bbd2fbe26a1d81656a467d22
Validity
Not Before: Jan 31 10:00:14 2025 GMT
Not After : Feb 1 10:00:14 2025 GMT
Subject: CN=7149337445a4032dc7fc57743a19d52b7977f363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cd:51:bf:d2:78:be:d5:4c:a4:21:35:e6:c5:
93:7c:29:dc:f1:af:40:5f:60:e2:0e:33:11:50:59:
b8:0f:f5:86:7d:93:b4:ca:67:67:d6:52:c4:d6:ad:
50:62:99:fa:95:79:de:2f:3d:6a:17:35:72:45:52:
49:80:ce:4e:63:a7:3e:7d:9d:19:b2:91:07:d7:da:
63:77:3f:a8:36:fb:35:d2:98:70:e7:ba:bf:7d:59:
6f:ed:b4:bd:0b:55:72:69:19:71:64:0c:a9:b1:0a:
08:57:7a:2e:28:d6:59:96:2d:ec:68:58:f6:0d:93:
e4:e9:d0:81:83:1d:4a:c2:26:35:81:4e:70:47:2f:
c4:36:60:f3:57:2f:58:cb:82:78:b4:cd:7e:40:e7:
f0:f9:83:0b:de:14:b5:41:97:2a:dc:72:25:63:b1:
12:d3:7a:87:10:82:a0:2a:a2:90:48:b3:44:c8:26:
3e:49:09:27:36:4e:55:31:5f:e4:ad:8c:5a:dc:a8:
89:e7:48:e9:70:a6:cb:7b:2b:10:af:f9:5c:76:3e:
15:81:9b:28:44:26:ab:b9:44:ba:29:6d:1f:e0:95:
0a:d2:8b:8d:bd:b3:77:a2:95:fa:bd:da:3c:52:f8:
a1:e6:69:93:20:65:0b:74:c7:43:50:b1:2a:63:ce:
5c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:49:33:74:45:A4:03:2D:C7:FC:57:74:3A:19:D5:2B:79:77:F3:63
X509v3 Authority Key Identifier:
keyid:40:2C:DC:C0:DE:3F:E7:84:BB:D2:FB:E2:6A:1D:81:65:6A:46:7D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCzcwN4_54S70vviah2BZWpGfSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f05d0d-c1d8-47a6-9d1e-864daca6cfdf/1/QCzcwN4_54S70vviah2BZWpGfSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f05d0d-c1d8-47a6-9d1e-864daca6cfdf/1/QCzcwN4_54S70vviah2BZWpGfSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:64:3b:ff:3a:6e:4c:7a:1e:7f:8c:cb:c2:f1:8b:5f:85:e7:
f7:bc:aa:34:57:a4:00:8b:ef:a1:9f:66:eb:ba:13:8e:7e:a7:
f8:2e:17:85:1c:57:60:8f:83:fd:ae:35:a3:63:c7:69:f8:22:
a4:ae:71:9e:90:5d:e9:42:73:ea:d0:0c:27:ff:36:4e:ad:9e:
03:b2:8b:e5:ba:b8:65:da:16:96:c2:e2:32:6f:61:cd:d1:47:
2a:01:0a:9c:9a:27:ce:64:5e:f8:d6:59:4e:bd:26:8a:12:19:
8d:7a:4b:c3:30:2a:f0:83:ee:74:ce:10:94:11:a9:f4:d1:9e:
59:66:69:27:ed:b5:db:9a:17:93:99:36:22:2d:07:10:85:e8:
30:58:73:a3:bb:0a:33:96:d6:dc:9c:d7:b6:51:0d:61:cd:ca:
26:d4:c4:b9:a4:7f:a5:4b:a0:6c:3a:91:24:3b:9c:12:b5:40:
9d:13:3e:5a:ce:79:94:bd:ce:17:e9:64:b0:39:47:a7:45:96:
cf:58:ee:f8:24:75:1f:b5:a8:c9:d2:7e:ba:7d:30:7c:26:05:
c4:93:c4:b6:32:34:fa:98:52:b9:96:9c:8c:7f:90:2c:84:4c:
c9:52:03:77:44:3a:4b:60:65:b8:cc:92:c5:26:1e:4b:8a:34:
cf:c7:be:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:40:45 2025 by rpki-client