Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.mft
File: 02QfqO0c_D2qI6qvjDp2_oftW6s.mft (raw, json)
Hash identifier: wi0x43PiXn6gKfECHRF0oRI3lIBBHYO12UD6Dei+RZw=
Subject key identifier: D2:DF:A9:DF:9E:72:18:78:04:FE:B7:59:5B:BF:75:90:C5:45:ED:AD
Authority key identifier: D3:64:1F:A8:ED:1C:FC:3D:AA:23:AA:AF:8C:3A:76:FE:87:ED:5B:AB
Certificate issuer: /CN=d3641fa8ed1cfc3daa23aaaf8c3a76fe87ed5bab
Certificate serial: 0194BCAA142579009FACB707C4586799269A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02QfqO0c_D2qI6qvjDp2_oftW6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.mft
Manifest number: 0AF9
Signing time: Fri 31 Jan 2025 14:00:50 +0000
Manifest this update: Fri 31 Jan 2025 14:00:50 +0000
Manifest next update: Sat 01 Feb 2025 14:00:50 +0000
Files and hashes: 1: 02QfqO0c_D2qI6qvjDp2_oftW6s.crl (hash: 8giB6EFgKvExw2cZUnvNrC/ChZmP9gM8jMM4daWvcMA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:14:25:79:00:9f:ac:b7:07:c4:58:67:99:26:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3641fa8ed1cfc3daa23aaaf8c3a76fe87ed5bab
Validity
Not Before: Jan 31 14:00:50 2025 GMT
Not After : Feb 1 14:00:50 2025 GMT
Subject: CN=d2dfa9df9e72187804feb7595bbf7590c545edad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8c:bf:a2:6e:e6:7e:5f:6d:73:8c:c5:a6:bb:
f1:c0:e2:c7:09:23:ac:8c:09:8c:3c:b3:f1:d8:c6:
ba:be:8b:64:f6:9f:5a:66:51:1c:55:ca:3a:54:d4:
12:18:89:65:f9:6d:88:91:62:c7:93:96:04:df:57:
ce:5d:4c:88:4f:e8:b8:3f:d7:36:20:92:99:88:9d:
e4:f8:a6:2c:3a:04:76:64:76:b0:2a:af:0b:5b:f8:
e4:45:79:fd:39:27:8b:18:6d:01:b0:38:b0:10:fc:
48:79:ad:5d:46:67:90:35:48:dc:c0:70:ec:32:5a:
32:6a:a0:a0:bb:df:53:b8:6a:3e:9e:36:2e:d8:ea:
93:c5:d1:6a:59:a6:37:d9:4e:79:7a:a6:1a:c9:d4:
1b:2f:a7:a2:e1:b6:c9:19:e5:44:66:98:09:dd:cb:
26:23:32:d8:66:d9:c4:0f:ae:14:fb:0d:2c:c8:c6:
50:06:60:a8:62:4e:4c:61:43:ba:79:eb:ee:2a:87:
d3:66:d8:40:7f:7b:a9:78:a4:d9:22:b5:93:d3:2e:
9d:82:ea:91:91:4c:75:28:7a:de:08:cd:d7:f2:66:
83:ee:6e:5d:bd:6e:73:c6:95:82:95:5e:0f:dc:89:
11:67:bc:e5:3a:42:03:0d:7b:fd:f4:04:cd:f5:75:
48:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DF:A9:DF:9E:72:18:78:04:FE:B7:59:5B:BF:75:90:C5:45:ED:AD
X509v3 Authority Key Identifier:
keyid:D3:64:1F:A8:ED:1C:FC:3D:AA:23:AA:AF:8C:3A:76:FE:87:ED:5B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02QfqO0c_D2qI6qvjDp2_oftW6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:83:af:d1:dc:6f:51:84:03:61:4c:e3:8f:4b:79:b4:48:58:
cd:36:5c:12:26:9e:f3:32:d8:a3:35:45:6c:12:88:78:5d:a0:
94:e5:ac:d0:79:e0:1e:f0:8c:8b:44:3b:2a:a1:3b:40:72:92:
93:72:ed:12:45:78:f8:9a:14:53:8e:72:42:3d:56:84:a0:aa:
6e:71:74:94:9d:91:4b:af:f2:03:c6:5a:5f:e0:4a:e2:ea:b5:
12:8d:99:2b:22:30:b2:71:fd:9b:61:6f:1a:aa:d8:b8:15:27:
30:24:80:0e:a5:46:75:54:9c:3f:42:53:73:23:82:69:55:55:
f9:f2:67:06:c9:d1:02:cf:0d:60:eb:67:1c:73:61:85:cc:b0:
05:f6:f0:49:94:eb:5d:8e:25:d0:e0:56:f1:b0:77:f4:78:83:
da:c2:ad:38:38:10:b5:75:be:66:ce:64:6f:9a:23:a4:64:3a:
8b:c9:7a:ff:be:0f:54:7f:e1:57:ec:02:d7:08:9e:34:73:82:
5a:2d:f6:87:78:54:46:94:92:6a:3c:9e:23:3b:1b:98:35:59:
4e:cc:08:4f:5b:bc:68:ee:bb:46:2a:36:8a:5b:2a:d3:d4:1a:
c8:b1:96:4e:51:5c:62:bd:ca:69:7d:e0:fe:3e:8c:8c:30:c3:
9a:c0:ed:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:51 2025 by rpki-client