Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ba7a80-5d54-4e24-99f9-e2994534495a/1/MN-QKoFpKFoeCclwPGOg89St7kg.mft
File: MN-QKoFpKFoeCclwPGOg89St7kg.mft (raw, json)
Hash identifier: 8RYS+0dm5xbxE7eNpep0C21sNPUp94/YpDWlaZGb604=
Subject key identifier: 2C:A1:10:47:AD:BB:BB:AC:B0:C4:41:72:A5:35:BF:97:CF:0E:32:94
Authority key identifier: 30:DF:90:2A:81:69:28:5A:1E:09:C9:70:3C:63:A0:F3:D4:AD:EE:48
Certificate issuer: /CN=30df902a8169285a1e09c9703c63a0f3d4adee48
Certificate serial: 0194BC3BC9034DC920ECA916C22E92AF858D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MN-QKoFpKFoeCclwPGOg89St7kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/ba7a80-5d54-4e24-99f9-e2994534495a/1/MN-QKoFpKFoeCclwPGOg89St7kg.mft
Manifest number: 0476
Signing time: Fri 31 Jan 2025 12:00:22 +0000
Manifest this update: Fri 31 Jan 2025 12:00:22 +0000
Manifest next update: Sat 01 Feb 2025 12:00:22 +0000
Files and hashes: 1: MN-QKoFpKFoeCclwPGOg89St7kg.crl (hash: F2E+A5ZZXvzews0FFLQYFoi62sOAK2NaYyoMrFxo6w0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c9:03:4d:c9:20:ec:a9:16:c2:2e:92:af:85:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30df902a8169285a1e09c9703c63a0f3d4adee48
Validity
Not Before: Jan 31 12:00:22 2025 GMT
Not After : Feb 1 12:00:22 2025 GMT
Subject: CN=2ca11047adbbbbacb0c44172a535bf97cf0e3294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7e:89:ca:3c:8b:85:40:9c:71:b9:db:7b:e3:
14:2b:40:f4:48:99:69:37:26:7f:ce:56:e8:9c:aa:
fe:33:9d:27:c4:5f:19:73:da:51:ef:e0:9c:e6:42:
df:91:c3:a2:2a:53:d7:2f:5b:f7:85:c5:fb:37:8b:
9b:ed:6e:b0:a9:7a:da:24:0b:18:33:9f:8b:ed:bb:
fb:31:22:00:62:34:dc:66:a0:13:77:86:53:5a:4a:
6f:5f:b0:f2:73:5a:de:b7:8e:80:8a:07:45:86:48:
3e:d8:0b:d6:97:c7:72:b1:37:0e:dd:3a:48:c0:a6:
13:57:ef:63:02:f2:66:d4:2e:7c:94:01:c5:23:0f:
04:e7:31:2e:e8:26:5f:b2:53:d8:e2:85:fe:3e:55:
45:6e:d3:43:c2:d1:2d:72:a0:af:6a:cc:a1:ef:d1:
77:ec:2a:b7:d0:14:e5:4a:34:32:c2:54:88:99:11:
62:15:84:4c:df:56:8b:84:65:b0:01:18:a1:27:c7:
93:d1:7c:11:ff:b7:8d:e9:d3:1b:39:cf:c7:66:42:
97:51:a1:f1:54:ae:7c:68:19:c6:d3:f7:7b:fb:e8:
f7:7b:3d:9b:d1:6f:ca:a0:e1:40:dc:61:2e:3b:3d:
9a:1e:23:cc:f4:4c:62:64:c9:cd:8b:fc:d8:4f:8d:
5f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A1:10:47:AD:BB:BB:AC:B0:C4:41:72:A5:35:BF:97:CF:0E:32:94
X509v3 Authority Key Identifier:
keyid:30:DF:90:2A:81:69:28:5A:1E:09:C9:70:3C:63:A0:F3:D4:AD:EE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MN-QKoFpKFoeCclwPGOg89St7kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ba7a80-5d54-4e24-99f9-e2994534495a/1/MN-QKoFpKFoeCclwPGOg89St7kg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ba7a80-5d54-4e24-99f9-e2994534495a/1/MN-QKoFpKFoeCclwPGOg89St7kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:09:77:9d:c7:48:a9:4e:d3:12:36:4d:da:ef:a1:3d:e7:12:
b5:b1:5e:ca:84:6c:98:7e:a2:2e:42:ef:1b:24:06:e5:01:f0:
d8:47:2c:b8:91:84:95:37:0c:1b:40:8c:68:9b:c1:e8:01:74:
7a:40:5d:62:e2:67:c9:b5:73:93:e2:0c:dd:f3:fb:51:93:11:
5e:77:88:6d:3c:f4:e5:64:cf:96:48:10:9e:29:5f:38:3e:6a:
52:9b:c1:df:b0:af:d0:67:f3:c3:74:ba:1f:6b:f3:08:67:d7:
6b:b3:9a:b5:79:7e:2b:1a:fe:92:f6:0c:a1:1b:75:98:2e:fb:
3f:44:df:8d:73:b5:78:0a:72:07:d9:d8:d7:60:73:4a:7e:76:
9f:4a:f9:21:aa:d8:6a:b2:8d:97:43:1e:98:dc:de:c2:d0:1c:
0e:bb:7c:aa:5f:70:b6:ec:d4:ca:79:45:50:b0:6c:cd:1a:8e:
67:8e:43:9c:80:6d:b1:2e:e9:8f:27:dd:ca:21:85:50:d6:08:
31:88:22:36:af:aa:f8:a3:bd:ee:8f:b7:a5:50:c3:54:e7:f4:
74:ce:0b:f7:90:98:d6:31:0e:f0:6f:69:37:03:de:39:02:7a:
60:5b:ab:4d:1b:eb:12:1c:11:31:fa:35:d0:2c:76:08:85:ba:
e3:08:ac:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:51:04 2025 by rpki-client