Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
File: qX7j7USz26i4PY6heZrA5YPWQUw.mft (raw, json)
Hash identifier: 8xSIJnOviZq5pQEFwyZ8VeMHUTpPRKwiW8DF2/ZRsoo=
Subject key identifier: E2:4F:56:B9:DF:6F:0E:E0:F1:2D:2A:D7:44:9E:FD:9A:68:00:68:44
Authority key identifier: A9:7E:E3:ED:44:B3:DB:A8:B8:3D:8E:A1:79:9A:C0:E5:83:D6:41:4C
Certificate issuer: /CN=a97ee3ed44b3dba8b83d8ea1799ac0e583d6414c
Certificate serial: 0194BC3C631939123E707813918AA626EA99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
Manifest number: 0379
Signing time: Fri 31 Jan 2025 12:01:01 +0000
Manifest this update: Fri 31 Jan 2025 12:01:01 +0000
Manifest next update: Sat 01 Feb 2025 12:01:01 +0000
Files and hashes: 1: qX7j7USz26i4PY6heZrA5YPWQUw.crl (hash: q1dwg2nJWoggguuXrhDoDVBofTK1CArL5lV9wyzowt8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:63:19:39:12:3e:70:78:13:91:8a:a6:26:ea:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a97ee3ed44b3dba8b83d8ea1799ac0e583d6414c
Validity
Not Before: Jan 31 12:01:01 2025 GMT
Not After : Feb 1 12:01:01 2025 GMT
Subject: CN=e24f56b9df6f0ee0f12d2ad7449efd9a68006844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4d:6b:54:fd:84:c5:0e:8a:33:d4:88:ff:14:
99:2c:1c:93:0a:fa:55:78:d6:37:e8:79:f6:54:80:
ff:0f:32:85:df:98:7d:af:ae:65:ca:b0:76:9b:94:
7f:eb:c9:58:2e:e4:1f:14:ad:ed:2b:71:20:d7:e3:
6e:86:f0:b4:b2:18:53:a3:48:ab:05:f3:79:21:c4:
50:44:f3:f3:8d:e5:25:43:90:4f:87:a0:db:b7:fe:
bf:f6:02:12:dc:50:3c:21:71:03:16:85:d0:9e:ad:
97:37:6e:83:57:37:17:34:56:8f:59:e5:51:6e:f6:
4a:01:41:3e:7e:6b:ca:81:e4:fb:31:9c:1c:ac:14:
ee:2a:66:5b:61:15:6c:63:df:5b:dc:48:34:b3:39:
7d:e0:79:48:b2:12:0d:a5:8d:15:1d:06:f8:bb:b7:
ed:8a:c8:88:2a:b1:3b:1b:c4:ee:6a:8f:4c:86:ff:
13:24:bc:c4:83:ea:77:10:35:cc:51:17:5a:2d:a7:
4b:e4:75:c0:b8:31:76:fd:67:0b:e2:e4:84:11:e6:
06:72:37:7c:46:24:a4:53:c4:6b:ee:b3:fc:1a:cc:
f2:90:bf:70:c0:6f:6b:c1:b2:0c:27:81:a6:a2:7b:
fe:32:81:43:00:d5:dd:b7:3e:49:33:c2:a9:0c:20:
e7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4F:56:B9:DF:6F:0E:E0:F1:2D:2A:D7:44:9E:FD:9A:68:00:68:44
X509v3 Authority Key Identifier:
keyid:A9:7E:E3:ED:44:B3:DB:A8:B8:3D:8E:A1:79:9A:C0:E5:83:D6:41:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:0a:6a:7e:b1:85:2b:b6:65:7a:7f:77:79:d8:70:a7:f5:70:
ae:ff:f5:ba:5e:98:4b:c1:46:c8:8d:29:82:a7:8a:5a:7e:fc:
1b:70:28:9b:29:60:dd:f2:c0:24:c5:0a:96:ba:bb:75:d6:ff:
d7:e7:f7:e6:ff:8f:f9:78:b5:29:c0:ab:7c:dc:b2:e0:34:b3:
1d:a5:75:f2:77:29:d2:37:61:00:cf:1f:1d:88:63:3c:a2:40:
e5:17:16:80:5a:b5:fe:63:5c:ba:c1:b7:f4:53:cf:0d:c8:a1:
79:0b:74:7d:12:9e:38:60:67:e0:cb:27:f3:10:b9:f2:df:fe:
7a:48:58:7d:09:e4:fe:f4:78:5c:bb:28:17:a2:5e:f4:82:87:
61:5f:99:0f:53:db:ad:66:48:b0:63:ec:3b:b6:30:e9:be:98:
41:4f:bd:55:89:ab:03:88:20:a3:c5:69:ef:ca:3a:31:69:75:
8d:a7:b8:c6:bd:34:f9:2f:77:a8:fd:8b:06:77:43:dd:28:84:
97:15:73:8e:27:00:c1:bf:d1:30:3a:96:4b:52:a5:c5:fa:1f:
aa:59:56:ad:f8:4f:f7:00:d0:b3:39:b4:93:3f:ab:9f:ce:cd:
71:32:51:a4:92:59:d2:1b:21:ca:69:5a:20:55:29:5d:5f:b8:
a3:8a:13:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:03 2025 by rpki-client