Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ebd008-fb7c-465f-ba4e-d70307d803be/1/Qv570shMUyGEUBYkVMrHfCjW6C8.mft
File: Qv570shMUyGEUBYkVMrHfCjW6C8.mft (raw, json)
Hash identifier: pv7OeE7wqC5/uoz9AVYdC/B5FBDBYb4Tk2BR1GZo7rc=
Subject key identifier: 8E:70:BF:2B:05:32:A4:B5:79:C4:7D:E3:A7:81:35:4B:26:5F:8E:E6
Authority key identifier: 42:FE:7B:D2:C8:4C:53:21:84:50:16:24:54:CA:C7:7C:28:D6:E8:2F
Certificate issuer: /CN=42fe7bd2c84c53218450162454cac77c28d6e82f
Certificate serial: 01941ADFC073B8BF884E8F08EB9FE9D2A92B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qv570shMUyGEUBYkVMrHfCjW6C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ebd008-fb7c-465f-ba4e-d70307d803be/1/Qv570shMUyGEUBYkVMrHfCjW6C8.mft
Manifest number: 074A
Signing time: Tue 31 Dec 2024 04:00:58 +0000
Manifest this update: Tue 31 Dec 2024 04:00:58 +0000
Manifest next update: Wed 01 Jan 2025 04:00:58 +0000
Files and hashes: 1: Qv570shMUyGEUBYkVMrHfCjW6C8.crl (hash: n2DwL6vJNWlxlB3dcQ4ecT6Z+NjfgFnKMUjDiwpsMKQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1a:df:c0:73:b8:bf:88:4e:8f:08:eb:9f:e9:d2:a9:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42fe7bd2c84c53218450162454cac77c28d6e82f
Validity
Not Before: Dec 31 04:00:58 2024 GMT
Not After : Jan 1 04:00:58 2025 GMT
Subject: CN=8e70bf2b0532a4b579c47de3a781354b265f8ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:08:9e:06:10:49:20:4e:ff:f3:b5:16:84:c1:
f6:94:4f:fd:15:38:59:8f:62:9b:a5:60:75:2a:95:
8a:9c:1b:cb:7a:9b:65:cb:2a:ce:42:0f:9d:30:2c:
0c:dd:5b:c8:9a:79:8a:7e:e8:85:33:32:1e:17:e0:
3e:17:27:0a:89:70:be:9f:44:78:63:17:70:eb:94:
53:7e:e7:cb:9c:57:b0:ce:b4:16:df:7f:9c:e2:37:
d3:14:f2:4f:94:4c:45:eb:23:45:d1:23:11:8d:51:
45:89:b3:f5:ba:4c:fe:1e:98:3c:fa:6a:d7:96:5f:
68:c8:8d:6f:eb:82:13:9d:fb:7e:1a:1c:7d:38:4c:
1e:40:40:a0:be:39:f5:47:5f:ff:37:c8:c5:a4:5f:
ec:cc:58:48:ee:e1:3f:39:fa:09:60:e8:aa:1b:19:
12:db:f7:37:7c:7a:0b:5d:8f:cc:d0:59:bf:98:c9:
d9:a1:06:25:b5:16:05:e3:04:07:f3:6d:57:87:f7:
d2:f2:2d:98:20:71:67:09:3e:c9:d9:fc:60:25:00:
54:38:17:f9:77:94:c2:76:4e:74:73:6f:13:f3:83:
19:8c:33:18:df:d2:0e:a2:7b:ae:f7:86:5c:5b:47:
70:8d:46:a6:c9:69:5e:40:6b:26:a9:b2:5e:55:25:
19:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:70:BF:2B:05:32:A4:B5:79:C4:7D:E3:A7:81:35:4B:26:5F:8E:E6
X509v3 Authority Key Identifier:
keyid:42:FE:7B:D2:C8:4C:53:21:84:50:16:24:54:CA:C7:7C:28:D6:E8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qv570shMUyGEUBYkVMrHfCjW6C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ebd008-fb7c-465f-ba4e-d70307d803be/1/Qv570shMUyGEUBYkVMrHfCjW6C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ebd008-fb7c-465f-ba4e-d70307d803be/1/Qv570shMUyGEUBYkVMrHfCjW6C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:48:01:13:df:25:bb:33:65:ff:f1:4c:4d:10:42:b1:94:f0:
52:5b:e4:40:3f:c7:47:1b:1c:cc:80:96:f2:b8:3d:8e:4d:56:
80:d2:69:8d:0e:f8:2c:81:db:ef:d6:00:af:3e:f8:1e:2a:e9:
59:53:a4:55:25:d1:c1:a8:20:d1:ef:4a:f8:a4:35:d6:3d:ab:
7a:91:82:66:97:b0:0a:9e:29:58:8a:00:65:04:17:a4:7a:71:
91:62:94:63:6c:1a:d0:d1:c8:86:b0:13:69:f5:9a:19:85:7b:
a2:af:ae:28:b8:f9:86:24:f1:24:87:1b:a2:d3:90:3d:9a:c8:
27:31:74:8b:d5:7d:1c:39:78:17:2f:34:c8:90:51:f0:32:be:
b3:8c:5b:28:8e:37:6f:4c:0c:62:fc:24:05:e8:e1:05:c4:59:
75:99:54:60:77:ce:53:21:fc:7d:5e:a3:18:f1:d8:52:3f:e7:
be:26:c5:57:4c:29:49:e1:76:f2:b1:4e:35:8c:9f:ac:cb:e5:
14:26:ed:25:30:ec:30:54:14:ec:bc:d2:c7:a8:86:0f:a9:9b:
6d:c6:94:66:2e:44:6d:59:b6:8c:d3:32:d4:b1:35:0d:44:c4:
2c:bc:20:59:30:09:12:ce:de:bd:c5:e1:c2:db:3b:c8:ba:ed:
8b:45:0a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 15:03:50 2025 by rpki-client