Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/ba73a2-f0e6-476f-8133-e99277037a43/1/qQ_wEQVOz-aKitx94mit5sCCdxE.mft
File: qQ_wEQVOz-aKitx94mit5sCCdxE.mft (raw, json)
Hash identifier: 6By3dM45YYeWOIBfTfqVhFeEqCirjUiochw8VoS7APw=
Subject key identifier: DE:72:D9:F6:7D:55:B1:B6:13:1F:C2:B0:30:40:8C:AE:D3:1B:A0:D6
Authority key identifier: A9:0F:F0:11:05:4E:CF:E6:8A:8A:DC:7D:E2:68:AD:E6:C0:82:77:11
Certificate issuer: /CN=a90ff011054ecfe68a8adc7de268ade6c0827711
Certificate serial: 0194BBCDF79BE3CA63094F9915006390F3C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ_wEQVOz-aKitx94mit5sCCdxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/ba73a2-f0e6-476f-8133-e99277037a43/1/qQ_wEQVOz-aKitx94mit5sCCdxE.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:00:25 +0000
Manifest this update: Fri 31 Jan 2025 10:00:25 +0000
Manifest next update: Sat 01 Feb 2025 10:00:25 +0000
Files and hashes: 1: qQ_wEQVOz-aKitx94mit5sCCdxE.crl (hash: mB4JlSFtkfhF65HnQYi8zAVH+8tR/JAz7Huwfv9ClvA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f7:9b:e3:ca:63:09:4f:99:15:00:63:90:f3:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90ff011054ecfe68a8adc7de268ade6c0827711
Validity
Not Before: Jan 31 10:00:25 2025 GMT
Not After : Feb 1 10:00:25 2025 GMT
Subject: CN=de72d9f67d55b1b6131fc2b030408caed31ba0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2d:b8:8f:73:3c:90:19:ce:3c:cc:48:4f:f5:
a1:43:a2:58:29:4a:3d:d0:54:6e:02:56:21:1b:af:
1c:0f:de:f6:3f:c0:56:88:cc:96:14:1b:15:50:01:
16:01:82:44:35:44:c0:cc:3a:e3:b4:fb:61:7c:1a:
67:fd:fe:e3:54:8e:81:3c:c4:16:94:bb:5e:6f:35:
e3:8a:31:be:f3:d5:f5:e5:c7:cd:00:fc:07:cb:4f:
7c:38:e0:5e:0d:5f:7c:3f:1c:f0:68:19:67:40:2e:
71:55:12:24:6d:6d:40:2f:16:57:57:76:15:dc:36:
6a:88:80:0d:93:1b:95:f1:30:31:b8:eb:66:66:59:
18:c4:f8:c0:fd:d6:0d:9f:e6:3e:8c:32:89:ee:62:
8d:49:e7:e0:de:1c:6f:7a:f2:6e:3e:ef:b4:82:cc:
6a:95:94:e6:2b:46:68:22:28:36:2d:25:ef:56:cb:
05:7d:c4:c3:09:ba:0f:8d:9e:9d:a8:a0:3b:5a:e6:
0e:67:2a:ab:eb:33:c6:0e:89:41:66:e2:94:f5:07:
a8:5d:d5:71:4d:d1:35:e9:21:31:a0:00:0a:7e:96:
e4:c4:c6:28:18:0f:43:88:5a:af:06:ee:75:db:af:
a6:8b:eb:25:90:b8:03:cd:c5:73:3b:4f:39:8b:86:
c8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:72:D9:F6:7D:55:B1:B6:13:1F:C2:B0:30:40:8C:AE:D3:1B:A0:D6
X509v3 Authority Key Identifier:
keyid:A9:0F:F0:11:05:4E:CF:E6:8A:8A:DC:7D:E2:68:AD:E6:C0:82:77:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ_wEQVOz-aKitx94mit5sCCdxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ba73a2-f0e6-476f-8133-e99277037a43/1/qQ_wEQVOz-aKitx94mit5sCCdxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ba73a2-f0e6-476f-8133-e99277037a43/1/qQ_wEQVOz-aKitx94mit5sCCdxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:87:03:bc:19:87:ff:2b:ce:c4:c0:48:65:e3:4d:c6:a1:6b:
13:78:d0:65:b9:b3:2c:f5:da:3f:6c:4d:e2:31:06:51:82:5e:
97:20:27:8d:71:aa:2d:95:4a:13:69:ff:ed:73:37:87:49:7c:
26:39:eb:87:e6:e3:2b:7f:2d:b8:29:f6:ca:2b:59:10:fc:f7:
42:d3:98:1f:af:7e:2d:9f:b4:cd:a9:90:45:ce:ae:a9:02:b4:
c4:df:5e:ac:bc:ae:56:77:01:3f:5e:75:5c:a1:28:25:c6:8c:
1a:f7:ab:b0:8e:5a:2d:ce:14:2c:41:54:0a:95:b5:1b:7a:b7:
1b:5a:0b:18:f8:47:40:e8:f9:16:e3:5c:16:b7:04:cf:bd:e6:
36:e7:a1:3f:41:71:8a:65:0e:a7:1e:68:03:54:78:39:4f:45:
ff:54:81:6b:79:71:57:d9:f8:20:09:55:fc:c3:8b:5b:df:89:
95:2f:76:5f:04:30:2b:13:42:c8:b4:5c:e4:31:99:70:ec:66:
06:31:29:52:c8:8b:50:78:bc:75:1f:b0:1e:12:08:bd:c4:c0:
11:c0:91:4c:e6:26:7e:33:ed:32:27:1d:30:c6:d2:20:3b:88:
c9:40:dc:fd:67:73:27:58:40:e1:3e:91:5f:0c:3c:c2:0d:f3:
35:8e:84:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:38 2025 by rpki-client