Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/926b57-cc12-48fc-b996-92a4be85c11d/1/SQtgyL0tnQHwq1ocTApT4dczn2U.mft
File: SQtgyL0tnQHwq1ocTApT4dczn2U.mft (raw, json)
Hash identifier: UPHNP0YEE6Bcav7qByPmWS4iCuvLIlCmo++aNgEJfVM=
Subject key identifier: E4:59:85:D6:F6:18:32:BE:06:10:DD:B0:1B:F2:56:67:23:2B:26:81
Authority key identifier: 49:0B:60:C8:BD:2D:9D:01:F0:AB:5A:1C:4C:0A:53:E1:D7:33:9F:65
Certificate issuer: /CN=490b60c8bd2d9d01f0ab5a1c4c0a53e1d7339f65
Certificate serial: 0194BBCE9B7F1449723172CA4525E32C4132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQtgyL0tnQHwq1ocTApT4dczn2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/926b57-cc12-48fc-b996-92a4be85c11d/1/SQtgyL0tnQHwq1ocTApT4dczn2U.mft
Manifest number: 1011
Signing time: Fri 31 Jan 2025 10:01:06 +0000
Manifest this update: Fri 31 Jan 2025 10:01:06 +0000
Manifest next update: Sat 01 Feb 2025 10:01:06 +0000
Files and hashes: 1: SQtgyL0tnQHwq1ocTApT4dczn2U.crl (hash: BGKEURBDTe++z6dL7A83R6Go/m6ReMwQSVYYbOOU4jY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:9b:7f:14:49:72:31:72:ca:45:25:e3:2c:41:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490b60c8bd2d9d01f0ab5a1c4c0a53e1d7339f65
Validity
Not Before: Jan 31 10:01:06 2025 GMT
Not After : Feb 1 10:01:06 2025 GMT
Subject: CN=e45985d6f61832be0610ddb01bf25667232b2681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2d:fd:a5:eb:c7:87:0f:39:f8:f0:2f:0a:6e:
a3:5c:f7:fc:93:cd:4b:7d:99:0d:50:92:84:20:8a:
d1:25:af:8c:7d:76:03:15:3f:42:18:c0:0b:64:6b:
1e:4a:7e:48:e8:6b:36:33:0a:44:de:07:60:4c:c2:
05:a2:27:b4:4d:b5:88:e0:4a:f2:1b:16:b9:07:08:
6a:c3:c7:ac:a5:a3:e5:e9:5d:42:10:26:ba:a4:dd:
d5:0c:0b:a3:a4:01:9c:b0:4e:d5:4f:c6:e5:6c:e7:
58:8e:07:6d:6d:5f:3f:47:46:63:2c:ff:4b:71:f0:
39:26:00:10:e9:04:04:7a:b3:5b:f3:dc:e1:d2:ee:
3d:93:fc:eb:51:cb:52:f4:46:88:64:c8:1f:18:06:
54:11:ba:a1:17:84:ed:ae:0a:8a:ad:61:d5:e4:79:
05:3a:6f:6f:bf:02:e1:05:ed:7f:a5:bf:61:9a:0b:
79:60:88:63:63:0f:a8:fa:1b:ab:58:4a:bb:38:88:
40:a9:4c:d4:c2:41:f6:63:fc:95:ce:0d:d0:5f:3d:
0e:08:9b:7e:59:23:e7:b3:38:2e:69:e4:d5:f8:a1:
cc:65:f0:4c:8e:5b:0b:4b:4e:37:d7:68:05:89:e5:
de:44:56:25:b4:67:87:2c:57:e5:65:ef:6c:79:b9:
4f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:59:85:D6:F6:18:32:BE:06:10:DD:B0:1B:F2:56:67:23:2B:26:81
X509v3 Authority Key Identifier:
keyid:49:0B:60:C8:BD:2D:9D:01:F0:AB:5A:1C:4C:0A:53:E1:D7:33:9F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQtgyL0tnQHwq1ocTApT4dczn2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/926b57-cc12-48fc-b996-92a4be85c11d/1/SQtgyL0tnQHwq1ocTApT4dczn2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/926b57-cc12-48fc-b996-92a4be85c11d/1/SQtgyL0tnQHwq1ocTApT4dczn2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:86:c5:8c:2f:04:10:6b:ed:ae:0f:91:ff:6a:1e:b4:87:54:
73:70:7b:82:81:95:9c:64:99:f6:7b:9a:79:1b:0e:38:d0:08:
ef:17:c6:cf:13:ca:45:57:a6:cd:31:57:e4:e8:42:3a:3b:c7:
4e:d5:d2:c9:73:4e:da:47:2e:70:43:f1:7e:dd:6d:60:65:7e:
15:0f:f6:ee:6d:47:82:82:de:49:4a:7f:76:ed:71:f5:1e:92:
00:59:45:3a:c9:91:e1:83:8f:23:1f:37:ec:cd:16:df:cd:4e:
f3:ac:90:53:34:dd:20:87:ad:bc:06:5e:0a:0c:7e:2f:e1:c1:
c7:04:7f:26:64:e5:6f:1c:c5:bd:d2:96:32:f6:03:bd:74:79:
a3:1b:3a:6e:dc:eb:eb:90:41:4a:8f:76:52:51:ee:e7:dd:af:
db:96:a1:e9:3f:11:68:e9:66:85:8c:05:d2:f9:d1:48:65:bf:
34:f6:ac:ae:b3:5b:28:3d:79:2b:40:e9:79:b6:8c:70:d4:ae:
28:77:dd:be:94:16:a2:2a:58:05:da:96:c4:30:1a:b1:9a:b5:
5c:f2:d3:ba:f4:09:37:4b:dc:2e:3f:3c:9e:46:9f:b1:b0:76:
06:0b:66:c4:13:13:31:c8:1e:4d:0e:17:10:d6:90:59:61:df:
86:97:15:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:08 2025 by rpki-client