Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft
File: QFphtYwdUt5SLgQQCcv80fflK3w.mft (raw, json)
Hash identifier: Kcedql2yKmuUrfgUCpSTLuV3e9bH9S/Uz6hrsF+o5kk=
Subject key identifier: 4F:CA:EA:4A:2D:55:AD:F1:27:FD:E4:7B:10:3F:C2:E5:55:7A:FE:79
Authority key identifier: 40:5A:61:B5:8C:1D:52:DE:52:2E:04:10:09:CB:FC:D1:F7:E5:2B:7C
Certificate issuer: /CN=405a61b58c1d52de522e041009cbfcd1f7e52b7c
Certificate serial: 0194BBCE19D4A6ADC4C7FF4CBEA789D8F436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QFphtYwdUt5SLgQQCcv80fflK3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft
Manifest number: 0F24
Signing time: Fri 31 Jan 2025 10:00:33 +0000
Manifest this update: Fri 31 Jan 2025 10:00:33 +0000
Manifest next update: Sat 01 Feb 2025 10:00:33 +0000
Files and hashes: 1: QFphtYwdUt5SLgQQCcv80fflK3w.crl (hash: 1Av9XJIndHZOoEo05pTzWx8wUEU7x2efQrRHrriOmkQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:19:d4:a6:ad:c4:c7:ff:4c:be:a7:89:d8:f4:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=405a61b58c1d52de522e041009cbfcd1f7e52b7c
Validity
Not Before: Jan 31 10:00:33 2025 GMT
Not After : Feb 1 10:00:33 2025 GMT
Subject: CN=4fcaea4a2d55adf127fde47b103fc2e5557afe79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4d:2f:ef:0a:39:6d:e7:0d:7e:26:4f:e3:b4:
ae:08:0c:1d:a5:43:50:7e:6e:27:3c:2c:3f:35:4b:
c6:80:91:0b:6f:de:3b:69:bc:27:15:39:7d:a5:ad:
a6:32:3c:17:96:e1:fa:47:0b:73:33:93:c3:f3:85:
8d:5b:3b:25:a4:01:06:ce:cc:cc:6c:02:0f:cf:d5:
bc:c9:49:ab:9a:7c:fd:71:4b:83:96:23:e1:f6:32:
91:36:7e:2e:03:73:af:8b:43:2e:af:4d:a1:cb:10:
a2:67:57:90:81:50:c5:8f:86:9c:f0:4f:8d:5a:18:
40:6c:2b:91:22:a5:bf:9e:22:29:ab:1a:89:d4:20:
1a:d5:89:c9:c8:96:51:31:a2:0a:03:dd:ca:d9:8e:
34:2c:70:99:52:71:31:0a:d6:66:49:cd:db:9f:11:
4b:34:5c:54:3a:29:2d:dd:bb:84:f9:dd:3f:c9:2f:
24:97:b8:a6:6c:75:20:e5:df:d2:15:6e:63:d9:73:
8c:6d:12:4c:c3:96:6b:f2:19:d0:79:13:56:11:2a:
69:a6:0f:f3:22:87:7f:60:a0:58:1c:c0:fd:b2:54:
dd:cf:46:81:ad:1e:4e:00:bd:93:83:1f:0c:18:13:
cb:64:c1:d8:61:6f:e0:d9:93:83:05:36:80:11:cf:
e8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CA:EA:4A:2D:55:AD:F1:27:FD:E4:7B:10:3F:C2:E5:55:7A:FE:79
X509v3 Authority Key Identifier:
keyid:40:5A:61:B5:8C:1D:52:DE:52:2E:04:10:09:CB:FC:D1:F7:E5:2B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFphtYwdUt5SLgQQCcv80fflK3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:47:8b:e8:b6:be:eb:b4:d2:55:39:03:aa:0b:76:f0:a7:1a:
a8:da:ab:67:bc:1e:4c:a2:87:0f:7c:83:dd:7f:6f:74:7c:eb:
19:54:21:52:91:c9:8c:a5:4d:2a:a3:f7:d1:60:90:2b:65:87:
59:ec:8e:bd:3c:c2:38:b4:50:f7:95:0b:9a:b8:20:d1:43:ca:
87:b7:c9:0f:32:18:63:e8:b0:95:03:ba:08:cd:5b:41:5d:68:
87:c6:4e:b5:9d:1a:9c:da:5a:bc:1d:ef:40:45:8b:6d:8c:d8:
26:16:cf:64:62:57:23:2a:91:37:11:85:20:d9:bd:c8:42:8c:
de:10:1b:b8:21:11:b3:73:20:37:c6:9e:98:11:8c:d5:89:67:
e3:45:a6:6d:13:f2:e6:d3:e1:aa:fa:d8:52:f1:f9:5e:80:43:
0a:fb:62:97:64:5c:29:86:db:15:de:bc:8a:ea:df:9e:5f:51:
3f:fd:95:9a:d6:0f:28:6e:f5:7e:fe:19:de:80:d3:05:79:c3:
91:c1:0d:9e:07:3f:5d:2e:4c:d0:4e:c7:e6:06:79:90:b0:49:
a8:70:ab:1b:ec:1e:5c:a0:b9:49:f5:93:ba:60:d2:37:df:17:
00:2d:98:1a:b4:3a:87:5f:9b:60:4d:e9:2a:58:80:ba:54:26:
71:f8:3b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:18:52 2025 by rpki-client