Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.mft
File: qhC-mR89uJUJcQwgZ233qKS_4bQ.mft (raw, json)
Hash identifier: a+URyJU5kC1eICeJVKe1Mcr5fW+Vgpkg17leCUI+VRA=
Subject key identifier: 11:9D:C6:65:7B:BE:F3:25:44:3A:FD:EF:03:DF:9F:80:7F:C8:AF:4D
Authority key identifier: AA:10:BE:99:1F:3D:B8:95:09:71:0C:20:67:6D:F7:A8:A4:BF:E1:B4
Certificate issuer: /CN=aa10be991f3db89509710c20676df7a8a4bfe1b4
Certificate serial: 0194BCA97A0BF9447AEF3B62029F8C3AF53A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qhC-mR89uJUJcQwgZ233qKS_4bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.mft
Manifest number: 0837
Signing time: Fri 31 Jan 2025 14:00:10 +0000
Manifest this update: Fri 31 Jan 2025 14:00:10 +0000
Manifest next update: Sat 01 Feb 2025 14:00:10 +0000
Files and hashes: 1: qhC-mR89uJUJcQwgZ233qKS_4bQ.crl (hash: k8BIBym/Lh5aG2rzflLiG/oHNodsKY25biyZ8CH1vM4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:7a:0b:f9:44:7a:ef:3b:62:02:9f:8c:3a:f5:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa10be991f3db89509710c20676df7a8a4bfe1b4
Validity
Not Before: Jan 31 14:00:10 2025 GMT
Not After : Feb 1 14:00:10 2025 GMT
Subject: CN=119dc6657bbef325443afdef03df9f807fc8af4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:84:c4:c1:41:bc:9b:89:a2:fc:5d:2d:a6:13:
3f:17:49:5e:fb:09:26:8a:dd:36:ce:e0:46:44:8a:
b1:ba:18:84:b5:34:dc:b1:87:ad:c9:32:3f:e4:23:
81:6d:f1:0d:c8:2a:e4:90:b5:15:7c:04:e4:25:4f:
5e:80:27:8f:14:a8:94:7f:3f:23:79:f5:5d:76:41:
33:72:ac:12:13:10:49:b5:b2:95:d9:c6:bf:b6:50:
b7:b1:45:ed:d7:c2:d7:9f:f1:d6:88:79:d8:20:90:
ff:ae:bd:7d:95:c1:cd:f2:e8:2f:19:98:76:dc:db:
07:9f:0b:ef:db:4e:92:42:0f:38:47:44:6a:d5:3f:
1a:fe:07:93:6a:af:32:a8:c8:e3:e7:3b:27:6d:47:
23:08:9b:dd:d8:9b:9b:20:8a:55:10:28:57:5f:a2:
ae:1d:95:58:2e:09:0b:b5:25:9a:e1:fd:f3:f2:f2:
a5:0d:2c:19:78:b9:11:1c:8b:29:77:66:9d:86:74:
fa:2d:16:5e:94:bc:d4:50:8d:73:c5:5c:2a:ff:b9:
b5:7d:c0:49:c3:ef:d6:41:15:1d:e2:4b:ce:1e:26:
09:37:f2:af:e8:be:56:95:11:3e:0a:8e:7b:e0:27:
70:f2:a2:9e:b4:20:12:dd:3b:95:14:0f:69:f3:d2:
bf:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9D:C6:65:7B:BE:F3:25:44:3A:FD:EF:03:DF:9F:80:7F:C8:AF:4D
X509v3 Authority Key Identifier:
keyid:AA:10:BE:99:1F:3D:B8:95:09:71:0C:20:67:6D:F7:A8:A4:BF:E1:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qhC-mR89uJUJcQwgZ233qKS_4bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a0:fe:3d:d5:0b:a9:21:dc:5a:23:44:5d:83:cf:1c:42:99:
65:a5:15:f7:f6:9d:f0:6a:42:4e:21:3b:de:21:b7:e3:11:c3:
5b:44:d7:41:5e:76:34:ff:47:ec:50:2f:25:1a:15:74:b6:84:
82:17:e5:68:a2:39:4f:20:f7:dc:28:15:5e:0a:92:f8:48:c3:
bb:68:b0:92:1a:58:9a:7c:a9:b7:83:ea:9f:36:70:4f:aa:7c:
d7:79:34:6e:9e:37:0c:36:8e:ca:79:77:e2:2e:a0:e1:a8:52:
72:63:f8:81:d9:0f:52:29:ab:67:27:59:d1:0e:39:bf:a6:b3:
ab:c3:0d:a9:77:95:63:4b:da:16:6f:a5:84:a7:fa:3e:3d:09:
b4:6e:9f:8f:ea:e5:39:a9:23:37:53:ad:c8:dc:71:55:cf:af:
b1:d9:28:b8:23:f7:b4:55:a6:9d:c1:06:6b:16:fd:18:7f:d7:
a8:f1:b8:c3:ac:47:ca:b3:c9:16:61:97:1c:a2:9f:4e:6e:87:
24:d3:bf:b7:d6:cc:27:3c:58:c1:5c:9a:32:08:1a:1d:b6:ac:
6c:84:bd:b4:4c:5e:25:cd:3f:fa:0f:40:06:9f:69:a1:2c:40:
9d:42:93:2e:a2:9a:45:56:76:d9:67:51:f1:3d:80:76:de:5e:
9f:6d:45:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:16:39 2025 by rpki-client