Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/f5d730-f8eb-4f80-9a9c-9abe4e6c2be1/1/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.mft
File: sqhTcekvOaK-QkdgsE5HrZ2j7Ts.mft (raw, json)
Hash identifier: GPjl0qcO5sbMzrcw+EyLOjfsV3K493jiQwRltw2XPiA=
Subject key identifier: 7E:9B:F6:08:1B:49:A6:09:3B:13:11:24:A9:FE:37:00:0C:6A:6A:BC
Authority key identifier: B2:A8:53:71:E9:2F:39:A2:BE:42:47:60:B0:4E:47:AD:9D:A3:ED:3B
Certificate issuer: /CN=b2a85371e92f39a2be424760b04e47ad9da3ed3b
Certificate serial: 0194BC051C8A40121D93FA92410776967C2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/f5d730-f8eb-4f80-9a9c-9abe4e6c2be1/1/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.mft
Manifest number: C8
Signing time: Fri 31 Jan 2025 11:00:39 +0000
Manifest this update: Fri 31 Jan 2025 11:00:39 +0000
Manifest next update: Sat 01 Feb 2025 11:00:39 +0000
Files and hashes: 1: sqhTcekvOaK-QkdgsE5HrZ2j7Ts.crl (hash: g+pLUr5OSKYyMf0Qi/6PTHt2Ojgpc+TccG6GCXXtAA4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:1c:8a:40:12:1d:93:fa:92:41:07:76:96:7c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2a85371e92f39a2be424760b04e47ad9da3ed3b
Validity
Not Before: Jan 31 11:00:39 2025 GMT
Not After : Feb 1 11:00:39 2025 GMT
Subject: CN=7e9bf6081b49a6093b131124a9fe37000c6a6abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:20:72:d5:27:87:0f:b7:0c:a2:df:39:61:12:
72:fc:65:23:82:ca:d5:01:2a:33:88:10:6e:33:d5:
b8:75:1f:27:60:c5:3e:0c:5f:46:48:52:de:e7:9e:
e3:46:ca:7b:c6:78:f9:68:b5:a1:58:5b:cd:01:97:
5c:5e:f4:50:5e:77:fe:a7:cf:61:2e:8b:c8:83:01:
a4:9e:96:1d:41:ac:b5:97:ac:7f:0f:f8:4c:55:0e:
70:cd:f2:48:34:6f:b8:92:07:7e:28:0d:0f:35:d6:
b6:07:5e:c0:f8:48:9a:f4:b9:35:a6:23:8f:af:b2:
aa:c6:57:5d:df:f7:80:06:b5:b2:18:f7:45:08:84:
f0:fb:f5:47:1e:24:39:e6:43:65:67:55:2f:00:e9:
6c:5d:b3:58:4b:7f:76:80:3e:d5:29:c7:6b:a3:19:
39:5f:de:05:4a:2b:03:22:c0:bb:d3:30:0f:31:25:
28:d4:b0:0f:38:f6:e7:f1:f7:91:78:27:2c:32:8c:
e5:f5:f4:19:fd:fa:74:a1:96:34:9f:71:70:07:b8:
b3:1f:8f:d9:a0:d6:03:ab:49:72:cb:38:b1:03:2d:
14:06:c4:92:63:13:7d:56:b7:57:70:d0:b2:b8:96:
2b:9b:b6:1b:6b:00:e8:e6:7c:6b:c9:9c:c2:4a:6f:
b3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9B:F6:08:1B:49:A6:09:3B:13:11:24:A9:FE:37:00:0C:6A:6A:BC
X509v3 Authority Key Identifier:
keyid:B2:A8:53:71:E9:2F:39:A2:BE:42:47:60:B0:4E:47:AD:9D:A3:ED:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/f5d730-f8eb-4f80-9a9c-9abe4e6c2be1/1/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/f5d730-f8eb-4f80-9a9c-9abe4e6c2be1/1/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:2d:99:f3:1b:f9:f4:35:52:2c:ef:8b:e6:ee:65:34:46:9c:
b8:45:64:70:45:18:0d:37:e2:10:b8:74:2e:ca:0f:58:de:a9:
f3:63:69:7b:a0:1d:22:93:ac:fd:13:41:09:3c:0a:50:0f:6a:
d8:2f:ac:56:e9:b4:92:b1:cd:12:38:84:e5:14:09:7d:98:11:
59:a4:d0:b9:c0:58:5b:36:83:5f:13:86:06:ed:4d:01:30:1d:
82:d2:0d:ef:d1:ce:8f:a9:d5:19:ba:13:84:e7:4e:6a:55:e4:
09:12:e8:a6:fe:87:cc:8f:49:df:28:64:06:d8:fa:00:a6:33:
d8:5d:68:df:46:52:8a:67:a5:3c:46:f9:41:39:a8:59:a3:6a:
fa:6b:f9:dc:e9:03:35:07:ae:3f:ef:15:a2:c5:a6:e8:a8:0f:
70:17:1e:29:50:51:1f:3b:c7:07:94:b9:40:ef:c8:f5:aa:fa:
0c:d6:63:76:03:97:b7:ae:38:09:6b:e8:72:58:cc:aa:2b:5f:
12:b6:30:20:85:2d:68:93:1e:a1:d0:ad:54:88:7c:9d:98:e5:
f6:a5:04:b4:dd:0f:46:a6:a9:7a:27:08:66:bb:ef:17:3e:7d:
30:67:2d:50:bd:9c:fd:28:d5:e3:1f:e3:8c:f4:87:40:a3:be:
fd:ac:63:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:42 2025 by rpki-client