Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/14dd4c-d72d-4666-9242-920dd39ac62b/1/Q3FIOk0xlpOmC4o7x5_YgtIScPo.mft
File: Q3FIOk0xlpOmC4o7x5_YgtIScPo.mft (raw, json)
Hash identifier: W0/J5a2RiCyHvh/HwqoO1UuoOQh4kdG/n13dcdftZ1Q=
Subject key identifier: 58:F7:00:C1:6E:1E:4D:D4:F4:F4:AC:DE:D3:B2:96:91:19:FE:C4:3E
Authority key identifier: 43:71:48:3A:4D:31:96:93:A6:0B:8A:3B:C7:9F:D8:82:D2:12:70:FA
Certificate issuer: /CN=4371483a4d319693a60b8a3bc79fd882d21270fa
Certificate serial: 0194BBCDD41E7C8293975AF5E9508A22BDCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3FIOk0xlpOmC4o7x5_YgtIScPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/14dd4c-d72d-4666-9242-920dd39ac62b/1/Q3FIOk0xlpOmC4o7x5_YgtIScPo.mft
Manifest number: 0688
Signing time: Fri 31 Jan 2025 10:00:16 +0000
Manifest this update: Fri 31 Jan 2025 10:00:16 +0000
Manifest next update: Sat 01 Feb 2025 10:00:16 +0000
Files and hashes: 1: Q3FIOk0xlpOmC4o7x5_YgtIScPo.crl (hash: VbkEapnxOIOxAVtSPic7Y5+9/ZpX68zKdbtW2KfYC/c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d4:1e:7c:82:93:97:5a:f5:e9:50:8a:22:bd:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4371483a4d319693a60b8a3bc79fd882d21270fa
Validity
Not Before: Jan 31 10:00:16 2025 GMT
Not After : Feb 1 10:00:16 2025 GMT
Subject: CN=58f700c16e1e4dd4f4f4acded3b2969119fec43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:26:56:22:58:f4:d8:c8:6c:07:e3:b4:79:ea:
1c:01:e8:be:f2:cf:a2:16:19:a8:c1:9f:42:17:a3:
eb:1d:9a:da:b4:b9:10:ea:e0:b4:68:36:cf:02:54:
f5:a3:bc:41:69:d6:66:17:30:a5:27:da:ef:bb:c5:
44:4f:e5:48:d7:24:0e:ff:db:c4:23:9b:0a:a8:22:
46:09:59:50:88:d7:82:ab:b3:0c:58:38:c7:d3:5a:
5a:77:a4:bf:8c:e0:ca:3f:47:13:8c:75:2d:e2:15:
b2:21:8a:6c:84:72:da:e2:c6:df:97:ae:b5:2f:3b:
8e:85:be:9e:5a:3e:0f:47:2e:38:22:83:46:8d:d2:
a4:73:f3:94:3d:32:a8:9b:b1:76:17:28:51:06:44:
7c:82:d2:d9:64:c6:8d:96:f5:b2:f1:15:94:5e:a1:
fa:8c:d7:40:75:a7:63:cd:f5:c8:b8:48:00:6c:4b:
18:41:91:42:36:ee:fb:b7:9e:c0:62:f2:1c:c6:24:
3c:ea:30:3d:df:d0:5c:3b:ad:fd:a8:95:4d:35:3c:
43:d9:00:5d:d3:aa:6a:8b:8b:a2:08:8b:61:54:70:
6d:38:2b:88:14:7f:04:21:55:b2:47:ad:cf:6f:43:
60:de:14:fc:bf:a8:92:57:e0:79:43:14:8b:46:6c:
0b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F7:00:C1:6E:1E:4D:D4:F4:F4:AC:DE:D3:B2:96:91:19:FE:C4:3E
X509v3 Authority Key Identifier:
keyid:43:71:48:3A:4D:31:96:93:A6:0B:8A:3B:C7:9F:D8:82:D2:12:70:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3FIOk0xlpOmC4o7x5_YgtIScPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/14dd4c-d72d-4666-9242-920dd39ac62b/1/Q3FIOk0xlpOmC4o7x5_YgtIScPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/14dd4c-d72d-4666-9242-920dd39ac62b/1/Q3FIOk0xlpOmC4o7x5_YgtIScPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:2c:3d:b0:48:6b:db:17:d8:6a:55:22:d7:8d:10:e1:34:65:
31:c4:b9:67:f3:25:f9:1d:06:0e:b1:07:53:56:21:33:f2:9f:
20:8d:62:8a:81:58:4d:4b:3f:80:af:52:eb:07:bd:98:e6:91:
da:f0:d9:bd:01:f9:cb:10:bc:6c:39:8d:5c:36:48:91:b1:0b:
86:e2:a5:cb:6f:5f:8e:28:18:78:14:ef:28:ce:4a:16:e3:99:
e7:f2:7b:79:6e:36:d7:8d:8e:05:0c:46:44:62:ef:0a:ce:2e:
9a:ea:68:eb:bb:91:c7:27:2e:b4:96:5f:8f:8c:26:45:04:6f:
ab:1e:ed:3b:67:09:c1:20:bb:fc:9f:d4:8b:f0:87:1d:9b:d6:
42:4d:ce:d2:59:83:ed:69:f0:e0:a5:3b:7b:8b:ca:09:7e:2b:
5c:0c:08:92:08:c2:30:da:a0:1a:ea:e3:50:b0:86:67:5c:ab:
a2:58:c1:95:44:39:8c:27:b3:e7:ed:c3:73:da:3a:a3:b7:78:
d7:d0:2c:29:81:da:13:71:d9:c9:4f:cb:a7:64:d6:95:0f:d0:
c0:29:7d:57:88:50:c4:a0:50:06:e7:bb:3a:78:bc:57:5b:40:
ea:d4:38:33:e2:21:55:c3:cd:d2:08:fa:5b:a4:f5:52:9f:10:
17:77:98:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:53 2025 by rpki-client