Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft
File: qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft (raw, json)
Hash identifier: LNQvGiexK751vszhWgOVGJ2aJB/OMe2qjLhbzu60+CE=
Subject key identifier: 21:E1:B4:6A:02:E0:09:3F:4C:3D:1A:E4:13:7D:3D:9C:FB:0A:DD:75
Authority key identifier: AA:2A:70:79:38:BA:62:FE:19:E6:47:4D:AC:78:7D:F3:F8:CF:DE:E4
Certificate issuer: /CN=aa2a707938ba62fe19e6474dac787df3f8cfdee4
Certificate serial: 0194BC3C9CDFBF350EF76C8A758EB4EF0098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qipweTi6Yv4Z5kdNrHh98_jP3uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft
Manifest number: 0CAC
Signing time: Fri 31 Jan 2025 12:01:16 +0000
Manifest this update: Fri 31 Jan 2025 12:01:16 +0000
Manifest next update: Sat 01 Feb 2025 12:01:16 +0000
Files and hashes: 1: qipweTi6Yv4Z5kdNrHh98_jP3uQ.crl (hash: E2JDgpJ9wR0n8aq4iD7tVcwJsHFSkcSOwQutqxsuJBg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:9c:df:bf:35:0e:f7:6c:8a:75:8e:b4:ef:00:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa2a707938ba62fe19e6474dac787df3f8cfdee4
Validity
Not Before: Jan 31 12:01:16 2025 GMT
Not After : Feb 1 12:01:16 2025 GMT
Subject: CN=21e1b46a02e0093f4c3d1ae4137d3d9cfb0add75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:55:a3:8d:ad:89:de:6e:ef:52:d6:43:e4:f0:
f0:0f:4d:6f:9b:b5:f9:cc:54:8c:03:7e:94:53:68:
47:bd:6b:87:75:72:06:f9:f1:a9:58:ba:f7:e7:ac:
5d:9a:83:f1:f1:b5:7a:70:69:ca:a8:a3:07:1e:d2:
24:10:a4:78:13:ce:bc:3d:17:58:c9:95:b2:c3:91:
10:a1:0b:86:fa:a7:cc:fe:67:5b:8b:2b:b1:48:1d:
3e:d9:5e:36:d1:af:75:15:7e:03:51:48:81:64:ff:
2f:19:dc:7f:1e:b6:8b:ef:b1:4e:62:18:95:67:a6:
85:00:ad:fb:a0:4f:1c:38:3f:ab:f0:60:92:ba:4f:
09:2c:e5:ce:a4:b5:f9:13:c9:62:19:a9:fb:08:5d:
c4:a0:7c:bb:a7:3f:cb:49:48:fd:d5:aa:2b:d7:b7:
5b:bd:2c:f0:b5:cc:23:6b:8a:a8:8f:9c:ee:c1:1c:
37:3a:cb:e2:f8:e7:04:a6:0e:8d:29:a2:13:20:e0:
e6:8a:c1:92:79:95:f7:3e:1f:a6:9e:ec:83:e4:e0:
e6:9d:0f:e3:f7:95:93:1e:4c:a5:04:55:2c:7e:28:
2c:21:8a:8a:27:26:87:12:04:5a:f5:ea:3e:9d:3a:
d7:a9:22:44:a0:5f:7b:1d:dd:0a:3d:ee:ac:d8:02:
a9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E1:B4:6A:02:E0:09:3F:4C:3D:1A:E4:13:7D:3D:9C:FB:0A:DD:75
X509v3 Authority Key Identifier:
keyid:AA:2A:70:79:38:BA:62:FE:19:E6:47:4D:AC:78:7D:F3:F8:CF:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qipweTi6Yv4Z5kdNrHh98_jP3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ec:5b:18:6d:f4:51:3c:b5:b8:9b:d3:3a:14:26:42:a5:b2:
c0:08:77:2e:f1:52:0a:c8:ea:52:03:a8:7c:be:2e:7a:48:f2:
a2:fd:03:08:67:2b:88:69:9f:bd:cb:0a:ab:3d:20:3e:a4:a0:
87:00:07:8f:32:12:37:31:54:83:77:7a:3e:2a:10:6b:0a:43:
5e:3f:98:97:97:33:87:db:ce:b7:11:a8:06:04:93:c6:0e:c8:
85:47:19:08:73:3f:b5:70:55:ce:3d:4d:c0:61:4a:13:ce:ec:
c3:30:e5:02:a4:61:20:e4:b8:b8:bd:6f:45:31:cf:d5:c8:e7:
fd:ce:8e:d1:fc:d7:6e:53:4b:b0:41:cb:3f:cc:c2:65:d6:c4:
26:60:39:9d:a3:41:43:66:3a:6e:7f:0b:80:eb:48:f9:2a:7b:
b7:53:0d:1a:e8:5a:6d:19:39:80:4f:3a:5e:4b:e7:a7:c3:eb:
6e:23:bf:d1:a8:08:bd:dc:c3:5a:e0:e1:1b:a1:1e:31:86:eb:
c5:a5:d4:86:28:bf:52:d9:3d:80:c3:5d:c5:04:63:cc:11:13:
ef:ff:4f:64:ef:bb:69:3c:76:67:cc:c7:c2:60:86:c3:79:4c:
54:5f:3c:c5:55:c5:f1:d0:6a:19:bf:ae:0a:1c:8c:36:c0:17:
75:64:bc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:25 2025 by rpki-client