Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/a1f9df-c48e-497f-ad33-82faf8f3b180/1/qot5jOetrq6ecJFbosvPg_5l2d0.mft
File: qot5jOetrq6ecJFbosvPg_5l2d0.mft (raw, json)
Hash identifier: avEwoX0r/zql67/zD33R5X+LPyJtcnOqPlxFF4eIRJg=
Subject key identifier: 16:81:75:22:6E:9B:61:3C:A8:EB:08:53:95:7F:65:6C:A7:D5:58:4E
Authority key identifier: AA:8B:79:8C:E7:AD:AE:AE:9E:70:91:5B:A2:CB:CF:83:FE:65:D9:DD
Certificate issuer: /CN=aa8b798ce7adaeae9e70915ba2cbcf83fe65d9dd
Certificate serial: 01928E56999B11515A9833F9138119F6220C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qot5jOetrq6ecJFbosvPg_5l2d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/a1f9df-c48e-497f-ad33-82faf8f3b180/1/qot5jOetrq6ecJFbosvPg_5l2d0.mft
Manifest number: 1004
Signing time: Tue 15 Oct 2024 04:01:32 +0000
Manifest this update: Tue 15 Oct 2024 04:01:32 +0000
Manifest next update: Wed 16 Oct 2024 04:01:32 +0000
Files and hashes: 1: qot5jOetrq6ecJFbosvPg_5l2d0.crl (hash: n8ytuxLa7HDyys0KCdPUunenVBApCib0sAdHd7R9zKI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8e:56:99:9b:11:51:5a:98:33:f9:13:81:19:f6:22:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8b798ce7adaeae9e70915ba2cbcf83fe65d9dd
Validity
Not Before: Oct 15 04:01:32 2024 GMT
Not After : Oct 16 04:01:32 2024 GMT
Subject: CN=168175226e9b613ca8eb0853957f656ca7d5584e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:60:37:63:4a:93:6f:22:bf:6e:56:ee:31:fc:
3d:aa:cf:f3:85:ce:fa:64:bc:fe:d1:51:7b:43:85:
74:22:48:db:ca:7b:8c:de:7c:49:72:ee:4e:c1:37:
ab:08:7c:10:43:d8:86:af:0a:8b:b4:0a:0b:88:bf:
6a:44:86:51:0c:97:3d:cf:88:4b:d6:02:75:6a:ac:
42:f6:56:16:54:bd:2d:8a:f0:64:f3:2b:ca:36:29:
c7:e7:33:f0:d0:4e:ef:14:77:1e:43:70:63:59:c7:
58:5d:20:c3:6f:18:f8:00:63:8d:fb:db:a4:e3:12:
7d:76:c0:f9:4d:61:f0:38:bd:76:2f:b9:54:b3:4d:
89:95:77:f8:5e:b8:12:3a:ae:dd:89:3e:65:5c:14:
1a:cc:73:2d:4d:a4:c0:02:2e:63:d5:0e:d2:be:41:
b5:22:32:ca:c6:60:77:17:98:09:50:d5:ba:6e:a0:
32:f8:1d:db:d9:eb:06:8b:8e:9d:78:ce:89:3d:85:
dd:1b:88:f8:4b:cc:34:bb:c8:37:7d:92:5f:34:83:
6f:28:2b:9b:d2:ec:5e:9f:fa:a9:0c:d7:47:0c:14:
12:23:23:a6:ac:ae:48:d1:54:0e:b6:79:aa:7e:79:
86:af:58:e4:aa:13:ae:40:99:06:54:f2:bb:2e:0a:
78:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:81:75:22:6E:9B:61:3C:A8:EB:08:53:95:7F:65:6C:A7:D5:58:4E
X509v3 Authority Key Identifier:
keyid:AA:8B:79:8C:E7:AD:AE:AE:9E:70:91:5B:A2:CB:CF:83:FE:65:D9:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qot5jOetrq6ecJFbosvPg_5l2d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a1f9df-c48e-497f-ad33-82faf8f3b180/1/qot5jOetrq6ecJFbosvPg_5l2d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a1f9df-c48e-497f-ad33-82faf8f3b180/1/qot5jOetrq6ecJFbosvPg_5l2d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:78:90:b6:a9:db:53:fb:cb:2b:63:bb:24:42:13:54:c5:d9:
48:09:1b:4e:93:42:8d:1c:84:95:c7:4d:1f:27:34:29:61:77:
ce:62:2c:30:ae:74:da:e9:43:ca:e6:18:4e:52:a2:ae:bf:3e:
80:c8:85:72:85:58:e0:7e:93:c6:9a:fd:ac:ec:bc:ae:bb:8a:
64:fc:10:e2:50:22:a1:57:80:99:20:ad:09:78:16:62:ac:ef:
3a:48:2a:19:81:27:fa:16:4f:ab:e2:27:3b:f6:e9:d6:57:b0:
9c:3a:d0:ac:0a:18:00:07:aa:7e:60:08:21:90:b3:50:5e:bc:
b8:a2:31:1d:d3:ec:6f:6b:a0:e3:c3:fb:af:f0:8d:0c:95:ad:
3e:bb:f1:07:6d:54:9e:11:b3:2e:82:e0:f8:83:52:aa:a1:42:
0d:c8:fd:30:26:e8:3b:11:38:df:5e:7f:08:5f:74:84:47:24:
f6:b3:15:bd:f3:60:17:eb:28:89:99:c3:1e:c7:e8:8b:42:46:
95:b0:b8:c7:23:60:17:71:dd:5c:1e:a9:1e:c6:7a:61:e3:99:
0f:fb:ce:09:a7:8e:bc:bc:62:85:8e:26:e3:bf:80:f0:aa:24:
75:1b:fb:9a:1f:a8:23:21:d7:18:54:82:21:16:53:ee:09:cb:
34:e3:f2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:15:34 2025 by rpki-client