Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/8cf1f5-2095-48fa-8c3a-a3137bc83d0a/1/cLQT-ngqMEKDDaI6o_NZSn1eovQ.mft
File: cLQT-ngqMEKDDaI6o_NZSn1eovQ.mft (raw, json)
Hash identifier: 7OYPZo2zHVwltlv8UVU2ABi7s9nqe8hdhBerARSMBes=
Subject key identifier: C9:E7:B8:AC:54:C8:60:A0:D0:CB:1D:5B:95:A1:4C:D2:C0:1F:CA:FA
Authority key identifier: 70:B4:13:FA:78:2A:30:42:83:0D:A2:3A:A3:F3:59:4A:7D:5E:A2:F4
Certificate issuer: /CN=70b413fa782a3042830da23aa3f3594a7d5ea2f4
Certificate serial: 0194BC3C2942639F9F4E006BF513BA9AADEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLQT-ngqMEKDDaI6o_NZSn1eovQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/8cf1f5-2095-48fa-8c3a-a3137bc83d0a/1/cLQT-ngqMEKDDaI6o_NZSn1eovQ.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 12:00:46 +0000
Manifest this update: Fri 31 Jan 2025 12:00:46 +0000
Manifest next update: Sat 01 Feb 2025 12:00:46 +0000
Files and hashes: 1: cLQT-ngqMEKDDaI6o_NZSn1eovQ.crl (hash: LKHyHyDSO+C6yI1XrAFxHSLbpL8BjFRnkA8OIwKIfA8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:29:42:63:9f:9f:4e:00:6b:f5:13:ba:9a:ad:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b413fa782a3042830da23aa3f3594a7d5ea2f4
Validity
Not Before: Jan 31 12:00:46 2025 GMT
Not After : Feb 1 12:00:46 2025 GMT
Subject: CN=c9e7b8ac54c860a0d0cb1d5b95a14cd2c01fcafa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:94:b8:3b:14:75:bd:b6:d8:88:c8:4c:af:5d:
dc:e4:99:93:ba:8c:b2:50:85:b4:17:fe:ff:a5:57:
0b:92:73:d5:40:ef:82:d4:09:be:0c:25:d6:c9:21:
9d:2d:3c:40:7f:f1:57:56:93:73:d4:24:5a:1f:d1:
50:9a:fe:a9:e9:6b:83:57:70:61:07:50:9f:84:ec:
c9:bc:f1:4c:22:4f:62:7d:d2:ae:f1:d2:e6:73:b7:
ba:3d:8d:0f:85:ae:f6:7f:e6:4d:86:27:d3:e1:88:
f5:56:14:45:96:e4:96:72:68:62:5c:6f:89:70:81:
0c:3f:d5:db:f6:ba:bd:98:1a:73:a6:b9:b3:5a:86:
b9:1d:b6:49:4e:a2:ee:e1:97:64:2a:99:eb:49:75:
12:e1:e7:d8:f6:fa:81:4e:d1:d4:b0:5e:80:18:fb:
c8:cf:4a:f8:3e:d3:56:63:29:d2:a7:f1:ba:11:ef:
71:d5:3e:35:5b:84:84:78:b4:70:6f:4e:f6:46:d7:
39:26:ad:6b:23:f2:7b:6a:34:22:fd:cc:9f:5e:2e:
6c:b6:bd:05:83:83:14:5a:72:a9:09:a9:9e:d3:1d:
62:aa:f3:20:b3:55:0b:2d:56:2b:11:dc:14:62:0e:
e8:4b:77:d2:bc:50:b8:83:aa:19:04:7d:39:a4:69:
22:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E7:B8:AC:54:C8:60:A0:D0:CB:1D:5B:95:A1:4C:D2:C0:1F:CA:FA
X509v3 Authority Key Identifier:
keyid:70:B4:13:FA:78:2A:30:42:83:0D:A2:3A:A3:F3:59:4A:7D:5E:A2:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLQT-ngqMEKDDaI6o_NZSn1eovQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/8cf1f5-2095-48fa-8c3a-a3137bc83d0a/1/cLQT-ngqMEKDDaI6o_NZSn1eovQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/8cf1f5-2095-48fa-8c3a-a3137bc83d0a/1/cLQT-ngqMEKDDaI6o_NZSn1eovQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:cd:ff:20:c0:bc:36:86:2e:3e:34:79:b4:31:48:3b:e8:dc:
22:bc:9e:d1:95:dd:54:27:52:4d:b4:f5:7a:1a:8a:99:e8:60:
38:84:81:10:f1:f0:4f:bb:c8:99:e0:cf:a1:5a:b0:2a:2a:81:
86:46:bf:4e:58:55:9d:b8:5f:26:48:8b:00:1c:ed:00:8d:4b:
a0:a0:3f:9d:96:c5:68:38:bb:31:d4:07:85:36:d1:16:40:1f:
45:fe:2e:d0:d5:72:df:b9:95:86:a3:f5:31:f2:0b:6f:06:84:
e4:87:39:b4:7b:58:54:58:c0:6d:3d:24:85:1e:36:28:6b:9e:
c3:ce:ec:8c:06:bd:99:44:88:b4:c1:4a:45:9e:c1:de:0b:63:
93:3b:ee:40:fe:78:d4:5d:84:a9:21:a6:f9:4b:d3:52:0b:ef:
af:d3:e5:ad:5d:bd:a8:55:9d:ae:dd:83:e1:c3:64:76:5b:b3:
5b:b4:84:fe:96:97:92:ef:73:ff:ea:fb:18:39:18:c0:b8:fb:
29:a0:f5:4d:77:6d:ad:c4:88:f0:62:86:d2:ca:bd:42:58:9a:
bf:64:9b:53:0f:00:6d:9a:fa:28:67:70:3d:78:d0:99:98:a4:
eb:63:a0:cd:a1:66:a4:d6:f7:f9:fc:33:70:b4:0c:ab:88:14:
25:d5:1a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:09 2025 by rpki-client