Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.mft
File: QucVYSpqaXFPXj8uTLxI_OhKb1I.mft (raw, json)
Hash identifier: C+trM1mYW+caV+8osBpTpsiwysPwVdsQ28nLGhCXjYY=
Subject key identifier: 44:31:74:0B:29:A2:C5:4D:7A:B1:DA:3E:25:2F:80:1B:2A:BE:FB:22
Authority key identifier: 42:E7:15:61:2A:6A:69:71:4F:5E:3F:2E:4C:BC:48:FC:E8:4A:6F:52
Certificate issuer: /CN=42e715612a6a69714f5e3f2e4cbc48fce84a6f52
Certificate serial: 0194BC3C1A271304024BF7232FD486E99F62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QucVYSpqaXFPXj8uTLxI_OhKb1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 12:00:42 +0000
Manifest this update: Fri 31 Jan 2025 12:00:42 +0000
Manifest next update: Sat 01 Feb 2025 12:00:42 +0000
Files and hashes: 1: QucVYSpqaXFPXj8uTLxI_OhKb1I.crl (hash: wIg6F1IG9lh7tRXc3hZ9UtXqudHYeHxheXmCFkzx5qM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:1a:27:13:04:02:4b:f7:23:2f:d4:86:e9:9f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e715612a6a69714f5e3f2e4cbc48fce84a6f52
Validity
Not Before: Jan 31 12:00:42 2025 GMT
Not After : Feb 1 12:00:42 2025 GMT
Subject: CN=4431740b29a2c54d7ab1da3e252f801b2abefb22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:34:1a:ff:1a:00:1b:c8:25:ab:a8:4e:4c:dc:
ba:f1:ce:9b:3f:1d:99:79:48:81:f7:e5:9f:bb:78:
06:82:a6:2a:af:3b:57:1b:fb:d6:13:13:be:b1:60:
7d:65:d2:fb:9f:85:6c:e1:48:9a:63:b9:6c:bd:f2:
ec:df:1a:c1:6e:38:9e:13:c2:e1:33:60:25:fb:04:
36:db:c4:59:83:dd:49:35:ef:f6:93:e0:72:1a:d3:
ea:f5:2e:cb:49:ad:c9:c5:11:26:1c:2f:8b:02:12:
e5:4b:db:c3:27:bb:24:f9:38:a0:44:cd:09:24:7c:
b2:f9:67:88:7d:bb:92:c3:1d:9e:8a:17:cf:b3:fe:
4f:78:ac:c9:f9:1e:39:ed:cd:59:95:cf:36:d2:63:
72:1f:0e:20:1b:c2:40:aa:49:58:bf:e9:bb:89:b6:
63:7b:3c:6d:da:d9:fd:6d:31:60:e6:73:3e:08:87:
ad:85:92:19:a3:15:75:8d:2b:54:05:2d:6b:af:d5:
3c:98:76:a1:10:6a:a7:86:02:3e:96:da:18:eb:05:
c7:c9:ab:36:70:14:42:7a:26:ab:36:ae:f8:49:56:
21:f2:a0:db:6e:46:f1:cd:9e:42:b1:1c:d2:c0:85:
43:9f:c6:6e:91:53:4f:ad:02:7c:d7:64:95:24:8b:
d0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:31:74:0B:29:A2:C5:4D:7A:B1:DA:3E:25:2F:80:1B:2A:BE:FB:22
X509v3 Authority Key Identifier:
keyid:42:E7:15:61:2A:6A:69:71:4F:5E:3F:2E:4C:BC:48:FC:E8:4A:6F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QucVYSpqaXFPXj8uTLxI_OhKb1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a8:f1:93:c9:61:c4:78:0d:e0:ce:44:ab:b5:f9:4b:7f:79:
8e:c4:d2:8e:6c:eb:a5:e7:93:20:f5:25:be:ee:a1:05:c9:b0:
3f:4f:d6:06:d9:bb:c1:f4:3f:f2:5b:59:e1:1d:92:2d:ac:a9:
8d:9a:24:54:36:20:ea:2a:75:e9:45:10:38:cc:04:c1:fb:89:
8c:24:8b:c2:d3:c3:d2:b1:f1:ac:1e:86:d7:fa:d0:18:69:21:
11:8d:dc:77:53:47:05:14:89:75:5f:6d:76:e3:c8:b3:d7:11:
ab:59:b6:a4:6a:b8:79:61:f6:ba:95:87:ba:1e:18:45:ca:f1:
68:c1:e6:6e:14:97:ef:5f:c2:93:c8:49:6b:25:65:b4:b4:42:
c2:16:fe:fc:45:d9:e1:bf:0b:b7:44:81:12:84:27:bb:39:9d:
d3:b8:d7:59:92:af:cb:cf:7a:46:46:fe:9c:c9:04:bb:6c:d0:
ec:f5:62:fe:92:52:31:d2:bc:7b:48:7a:2f:9a:8c:70:ce:66:
33:a2:68:dd:60:09:9e:6a:de:51:7b:ab:38:1e:74:db:84:19:
b2:d3:b2:f4:95:55:59:b3:2b:76:05:22:08:78:b2:8f:6f:81:
e5:e8:87:3e:d5:e1:99:4e:bb:25:a4:0d:f7:fe:50:5e:9b:9d:
74:00:8b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:12 2025 by rpki-client