Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
File: QxHM0r0iVEq-WFp80_lJEeoMlCo.mft (raw, json)
Hash identifier: HuhAAbkgTrEiSV3/YkJkEARqeEpTeCTAc/Vj4lHx1QU=
Subject key identifier: F4:CA:4B:8B:82:D0:A1:59:1B:86:80:F9:8C:3C:B6:70:9D:4A:E0:94
Authority key identifier: 43:11:CC:D2:BD:22:54:4A:BE:58:5A:7C:D3:F9:49:11:EA:0C:94:2A
Certificate issuer: /CN=4311ccd2bd22544abe585a7cd3f94911ea0c942a
Certificate serial: 0194BCA9E47AED2F5F420FF6D572403115FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
Manifest number: 0EC1
Signing time: Fri 31 Jan 2025 14:00:38 +0000
Manifest this update: Fri 31 Jan 2025 14:00:38 +0000
Manifest next update: Sat 01 Feb 2025 14:00:38 +0000
Files and hashes: 1: QxHM0r0iVEq-WFp80_lJEeoMlCo.crl (hash: 0mCeqDq5cfRoJ0zcxro73gNsm1HAUKO4vuD9Dkrpak8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e4:7a:ed:2f:5f:42:0f:f6:d5:72:40:31:15:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4311ccd2bd22544abe585a7cd3f94911ea0c942a
Validity
Not Before: Jan 31 14:00:38 2025 GMT
Not After : Feb 1 14:00:38 2025 GMT
Subject: CN=f4ca4b8b82d0a1591b8680f98c3cb6709d4ae094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a1:77:5b:61:7d:70:8b:c4:3b:de:70:6a:19:
07:3a:93:b4:f4:73:8d:34:34:50:8d:ae:bb:43:25:
09:50:0f:1e:61:2d:14:5b:33:cc:a5:40:e4:0c:8d:
87:aa:77:ef:5d:36:bd:dd:ab:9e:6d:ba:45:ea:29:
77:c8:c2:f8:54:77:b3:fe:54:bb:5c:ef:ff:2b:53:
f2:03:17:f5:ab:32:83:25:57:5f:4d:a8:29:45:59:
5e:5e:e8:02:00:22:66:49:10:e4:85:cb:d7:6b:33:
70:72:c4:1e:17:e3:05:ef:76:25:f9:2e:7e:20:d6:
93:3d:12:ea:67:37:e6:58:ad:98:4f:6b:c1:cc:eb:
97:6b:71:05:89:7c:eb:d6:9a:bf:fe:6d:f8:4c:fa:
e7:77:f5:6a:bb:02:6c:51:f8:6a:99:44:7f:8f:bd:
50:97:87:a2:0f:31:b7:9d:71:70:f8:5f:5e:e9:57:
03:b4:9c:de:49:db:bf:75:c8:79:ab:72:1c:2e:78:
72:33:30:7c:c7:38:b7:74:18:ba:0f:60:d7:c9:2b:
c8:7b:14:84:38:e5:f2:99:22:37:81:75:aa:6f:80:
67:f7:a1:9d:ad:7f:67:d3:2e:22:dd:d7:88:70:17:
19:2f:b5:49:9f:8a:19:45:68:f7:4c:1b:ee:b5:6f:
81:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CA:4B:8B:82:D0:A1:59:1B:86:80:F9:8C:3C:B6:70:9D:4A:E0:94
X509v3 Authority Key Identifier:
keyid:43:11:CC:D2:BD:22:54:4A:BE:58:5A:7C:D3:F9:49:11:EA:0C:94:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:03:0a:44:40:2c:91:10:14:48:36:b0:18:0d:a7:82:0a:05:
ca:89:90:c2:0f:b0:65:e8:d3:c7:c1:97:70:68:ad:52:e2:32:
78:5c:80:a3:ec:8f:60:60:39:1a:c9:e5:7d:ca:5f:5f:5a:f3:
8e:0b:04:ee:73:ec:ae:cb:29:b0:50:7f:e5:2e:62:7b:d6:fc:
03:b1:54:54:7b:1a:24:12:dd:3d:8f:bf:77:6c:f7:b8:67:34:
c3:5e:f6:86:59:8f:cf:8e:4e:e1:81:9f:e2:62:bb:23:6c:84:
62:c1:09:08:c6:0b:b1:25:a2:f2:09:82:82:f7:49:b7:b4:ba:
d8:ce:98:13:df:ff:21:03:c9:a6:26:b1:5c:5b:dd:cf:4e:85:
e7:5c:22:19:19:8d:9e:b5:72:a0:e9:4b:e0:c5:7d:e1:3b:2a:
ee:7d:22:88:72:5f:d1:75:9d:a5:8d:b3:76:eb:50:8e:51:14:
f3:6a:f0:90:5c:e9:9f:2c:63:49:6c:8b:a1:53:a1:4d:1f:8b:
7f:0d:75:a4:5d:3c:ce:3c:d7:c8:cc:20:ef:82:61:5e:5b:6d:
5e:53:68:cb:6e:c4:70:53:f7:3f:7e:18:7b:c6:e8:61:8f:54:
0d:a7:c0:ce:79:57:36:79:1c:ca:6d:80:44:a0:72:a4:93:bd:
4e:eb:43:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:19:54 2025 by rpki-client