Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ba94f4-8a20-4d10-927f-a882da6c0cfc/1/QS2tggaZ8VOjGmbtZ4Oh3k4PjPU.mft
File: QS2tggaZ8VOjGmbtZ4Oh3k4PjPU.mft (raw, json)
Hash identifier: mM96xVMsQ8gPPGeCjD0YAayBZSBBdlE5YXifXaoXRf0=
Subject key identifier: 61:32:47:95:41:7B:49:A0:0D:5A:20:C3:76:5D:E9:EA:24:4B:92:76
Authority key identifier: 41:2D:AD:82:06:99:F1:53:A3:1A:66:ED:67:83:A1:DE:4E:0F:8C:F5
Certificate issuer: /CN=412dad820699f153a31a66ed6783a1de4e0f8cf5
Certificate serial: 0194BBCECB774FE9BFBDCBB3BA0DBD794D44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QS2tggaZ8VOjGmbtZ4Oh3k4PjPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ba94f4-8a20-4d10-927f-a882da6c0cfc/1/QS2tggaZ8VOjGmbtZ4Oh3k4PjPU.mft
Manifest number: 0A16
Signing time: Fri 31 Jan 2025 10:01:19 +0000
Manifest this update: Fri 31 Jan 2025 10:01:19 +0000
Manifest next update: Sat 01 Feb 2025 10:01:19 +0000
Files and hashes: 1: QS2tggaZ8VOjGmbtZ4Oh3k4PjPU.crl (hash: k2yFj/qERIARcjrX5l4Ygnp+28e7hdpvIOpwZg9GYQE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:cb:77:4f:e9:bf:bd:cb:b3:ba:0d:bd:79:4d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412dad820699f153a31a66ed6783a1de4e0f8cf5
Validity
Not Before: Jan 31 10:01:19 2025 GMT
Not After : Feb 1 10:01:19 2025 GMT
Subject: CN=61324795417b49a00d5a20c3765de9ea244b9276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:87:d1:61:58:c5:95:88:77:b1:fa:90:ce:3d:
00:ae:ad:21:d9:b9:7c:63:54:b3:69:ff:dc:78:a9:
b3:ed:a4:99:08:d0:ec:87:3b:9c:68:07:63:16:ff:
42:c8:cc:53:ce:26:43:fc:c0:76:6e:64:94:8f:2f:
08:aa:8e:1e:2f:44:40:ee:8c:2d:95:7a:d6:56:09:
7d:b0:39:d5:06:62:51:54:cf:39:41:01:6f:55:14:
b2:c9:d9:38:6f:bf:1b:a9:2f:a9:4d:cb:33:5d:e0:
0f:20:6b:e1:31:34:3d:de:97:b9:86:22:44:b9:5b:
18:4c:73:40:8e:f5:77:c5:6e:98:b7:75:bf:ef:cf:
1b:54:07:0e:14:40:dc:c4:a6:8f:7a:88:fb:27:8a:
23:ef:0d:a2:bb:54:5f:62:0b:00:34:bd:28:8f:c6:
92:5c:4f:7f:17:60:60:1f:93:e7:97:a0:db:8a:9c:
c7:12:e7:37:79:4c:64:75:79:7d:84:aa:5b:a8:83:
82:7b:c7:9d:f5:23:46:38:c1:89:6e:c3:35:97:85:
6e:08:2f:c3:3f:2a:6c:ca:1e:1b:84:a9:77:93:9e:
2c:ef:d1:0e:2c:0e:e6:66:45:f5:6f:f8:d6:1d:c1:
44:7b:de:6a:64:6e:a3:b4:fa:1d:50:66:54:65:ee:
9c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:32:47:95:41:7B:49:A0:0D:5A:20:C3:76:5D:E9:EA:24:4B:92:76
X509v3 Authority Key Identifier:
keyid:41:2D:AD:82:06:99:F1:53:A3:1A:66:ED:67:83:A1:DE:4E:0F:8C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QS2tggaZ8VOjGmbtZ4Oh3k4PjPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ba94f4-8a20-4d10-927f-a882da6c0cfc/1/QS2tggaZ8VOjGmbtZ4Oh3k4PjPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ba94f4-8a20-4d10-927f-a882da6c0cfc/1/QS2tggaZ8VOjGmbtZ4Oh3k4PjPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:42:79:60:02:61:ed:1a:17:ff:19:48:00:63:0f:0a:4d:b9:
64:e9:d2:e7:13:39:9f:9b:dc:c4:45:d3:d8:d7:7e:50:06:a8:
8f:fd:de:3f:89:0c:84:46:48:b4:de:98:8c:09:43:a3:b5:db:
9a:dd:51:39:cc:dc:8e:d8:59:d6:62:67:c6:75:d1:78:39:af:
78:19:6c:9b:c2:f4:47:ad:a4:d5:20:e1:c7:d0:31:84:13:09:
a7:fe:24:d1:58:36:34:c6:aa:7d:ba:f4:c1:98:d3:41:7d:52:
66:be:83:5d:e4:5e:52:b3:11:88:70:44:9e:5c:32:23:ce:81:
2c:57:03:bb:34:25:b2:d9:e9:de:23:a2:71:cd:e1:ce:23:fe:
3b:ff:fe:05:d7:41:17:f7:9d:78:56:86:c6:c3:ad:bd:55:fb:
80:44:44:3d:99:c3:24:18:6f:09:7b:89:09:37:bd:22:76:45:
59:98:26:b6:1d:ab:b7:c0:cf:e6:3e:93:9f:9b:4f:b1:9e:1f:
de:6c:ec:f0:42:4d:5f:a6:a5:79:cb:96:4a:1b:98:de:53:10:
82:68:72:ac:80:4f:97:43:72:28:d3:ee:89:d0:ba:ad:c1:c9:
6b:a5:84:db:63:40:14:2d:7f:c6:3a:38:28:e0:46:26:11:51:
38:63:bc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:56:09 2025 by rpki-client