Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
File: qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft (raw, json)
Hash identifier: jmz3XzsPzTuvbqp/TcbtFunxZko6z2GGYIpuTzG3+cQ=
Subject key identifier: D2:79:11:FE:13:87:CA:18:61:1B:A9:BE:39:61:46:59:F6:D2:21:ED
Authority key identifier: AA:D0:A5:F4:E8:F7:E1:3C:7C:B5:35:C6:4F:79:E2:0B:3F:01:D6:24
Certificate issuer: /CN=aad0a5f4e8f7e13c7cb535c64f79e20b3f01d624
Certificate serial: 0194BD4E8DE492302F5CFFDE7DA8885EE5A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
Manifest number: 107F
Signing time: Fri 31 Jan 2025 17:00:29 +0000
Manifest this update: Fri 31 Jan 2025 17:00:29 +0000
Manifest next update: Sat 01 Feb 2025 17:00:29 +0000
Files and hashes: 1: qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl (hash: OeOafAftNTyCyURN/m6vLjYDk9O0418cIBSaZytXVkY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:8d:e4:92:30:2f:5c:ff:de:7d:a8:88:5e:e5:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aad0a5f4e8f7e13c7cb535c64f79e20b3f01d624
Validity
Not Before: Jan 31 17:00:29 2025 GMT
Not After : Feb 1 17:00:29 2025 GMT
Subject: CN=d27911fe1387ca18611ba9be39614659f6d221ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c6:4e:a6:50:c2:a7:16:58:2f:b3:17:70:ae:
1a:d1:9e:7d:5f:f8:97:31:16:d0:86:41:9d:23:fc:
eb:60:54:c0:aa:b1:c5:f8:f6:9a:b9:e1:f6:9f:2b:
47:b1:b6:6e:25:5b:0b:d4:0d:f6:42:7c:49:59:86:
82:52:a5:67:65:0e:07:28:95:43:65:2b:da:25:cc:
6c:b7:40:9e:3a:fe:df:cc:89:2f:c6:d8:a9:bf:fc:
3a:b1:d4:ec:bd:ec:e5:45:0c:f2:6e:79:9e:1e:29:
74:ca:61:46:8e:4f:30:65:b9:ef:9f:07:cf:84:9a:
bc:6f:7f:ab:d3:56:52:28:cf:bc:ff:38:db:a5:ef:
fe:99:56:2c:a7:85:70:4e:51:bd:ed:ed:d4:bf:19:
8d:45:12:14:b8:39:78:2b:4c:df:d4:22:e8:48:d4:
05:3e:08:a5:a4:db:cc:4a:dd:02:22:cc:16:d8:6b:
4f:b3:7c:d1:19:e3:1b:1d:eb:d6:18:a1:e1:f4:d4:
7f:69:d6:9e:7a:c3:8b:7c:44:cb:94:e4:ba:fc:c4:
87:85:c0:72:11:8d:18:7e:fc:1f:ef:bf:16:c1:29:
bd:7c:e9:5d:25:31:7e:25:27:3c:00:f0:c2:cd:9c:
a9:d4:68:e0:56:90:39:b5:10:62:02:06:2c:fe:79:
cf:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:79:11:FE:13:87:CA:18:61:1B:A9:BE:39:61:46:59:F6:D2:21:ED
X509v3 Authority Key Identifier:
keyid:AA:D0:A5:F4:E8:F7:E1:3C:7C:B5:35:C6:4F:79:E2:0B:3F:01:D6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/101a15-ef3d-4155-bf13-b7ef042c857b/1/qtCl9Oj34Tx8tTXGT3niCz8B1iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:2e:44:bb:7a:ad:27:25:36:49:29:3e:cb:1e:4b:a5:d3:6a:
08:7e:09:50:92:4d:04:c5:1c:f3:df:cb:df:9d:fc:54:4b:6e:
60:be:9e:fe:53:28:84:8c:6b:77:bc:d5:da:7e:c9:59:a7:72:
e2:7a:17:cd:35:49:1b:15:1d:1c:7b:d8:9c:79:5e:81:4a:a2:
24:19:de:5c:ed:93:fa:66:ab:1a:b5:22:3c:77:72:e6:87:a6:
7c:76:7b:30:18:20:10:4c:b2:9b:75:2a:e2:0e:43:12:fd:2a:
a8:76:95:1a:8b:f6:d9:ac:0f:9e:4a:a7:e4:8f:4e:f2:31:49:
d9:3b:02:b5:b0:af:c9:9e:82:14:72:e3:92:ba:8a:2b:c3:2d:
95:85:49:80:3f:c1:d8:82:06:c8:29:7c:cb:a3:20:e5:a7:9f:
19:cb:2e:98:9e:5c:40:2f:85:4e:80:79:21:82:87:b3:2f:7b:
d1:a7:d5:b2:fd:40:d8:3c:16:e4:40:e4:cb:0d:b1:18:28:38:
b8:12:07:cc:d9:88:93:59:08:71:09:7d:cd:19:c2:9f:9e:4d:
dd:70:95:8b:1d:a4:26:08:41:81:c6:98:43:65:44:09:15:d6:
90:f4:ec:3d:1c:c3:10:6c:8c:51:67:da:56:a2:bc:74:13:71:
95:2c:3c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:42:27 2025 by rpki-client