Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/1b24f5-9584-42f8-b740-0e8e1bc2d190/1/q7FleujHzIoUq5qohFzUurULpBw.mft
File: q7FleujHzIoUq5qohFzUurULpBw.mft (raw, json)
Hash identifier: JsCJUgCIv2+iMiX1PXTnUJJS7a5jj7muddmMPfBpoAM=
Subject key identifier: BC:79:E7:6D:C8:8D:75:CE:ED:F4:D6:3C:C5:5D:F6:FE:16:AE:E5:69
Authority key identifier: AB:B1:65:7A:E8:C7:CC:8A:14:AB:9A:A8:84:5C:D4:BA:B5:0B:A4:1C
Certificate issuer: /CN=abb1657ae8c7cc8a14ab9aa8845cd4bab50ba41c
Certificate serial: 019439C5C66645B6582C7BE77472FD174F3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7FleujHzIoUq5qohFzUurULpBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/1b24f5-9584-42f8-b740-0e8e1bc2d190/1/q7FleujHzIoUq5qohFzUurULpBw.mft
Manifest number: 0981
Signing time: Mon 06 Jan 2025 04:00:50 +0000
Manifest this update: Mon 06 Jan 2025 04:00:50 +0000
Manifest next update: Tue 07 Jan 2025 04:00:50 +0000
Files and hashes: 1: q7FleujHzIoUq5qohFzUurULpBw.crl (hash: jjwKEGBGrtnlTDFyps++/Orcn80iArUAQ8H3g8ACXSw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:39:c5:c6:66:45:b6:58:2c:7b:e7:74:72:fd:17:4f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abb1657ae8c7cc8a14ab9aa8845cd4bab50ba41c
Validity
Not Before: Jan 6 04:00:50 2025 GMT
Not After : Jan 7 04:00:50 2025 GMT
Subject: CN=bc79e76dc88d75ceedf4d63cc55df6fe16aee569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a4:8a:cc:57:d7:d2:42:09:03:5c:45:75:0d:
52:7e:22:7c:8d:37:90:ce:f5:34:a5:5e:62:7f:2f:
96:c6:5f:22:5b:65:13:cb:41:44:65:21:e3:8c:6f:
6d:83:a1:fe:88:df:72:99:4f:53:0e:84:61:5f:98:
6e:14:23:d5:17:3e:37:19:9b:ee:47:59:cd:aa:b0:
f5:2e:21:55:43:b6:6d:58:d7:3c:c2:8b:08:7c:df:
73:ec:c9:b6:8d:88:bf:28:62:38:69:32:71:dd:36:
d5:50:35:95:32:5e:0b:df:13:f9:c0:29:63:ae:12:
de:d0:10:60:d3:cc:8c:2d:c5:96:b8:10:da:a7:e3:
a9:e5:6e:5d:79:64:23:a7:32:8e:7c:d4:5c:66:3d:
e5:f3:1a:83:69:a2:e7:85:2c:d0:23:b2:d8:73:dd:
84:18:61:9b:64:cc:d7:c1:29:36:df:9f:ef:41:b9:
b2:25:75:ad:72:ab:b7:58:1e:8f:d3:1a:4d:ba:8b:
66:b9:5e:73:80:7b:01:71:ea:45:12:47:78:f0:ae:
77:be:70:b9:81:e5:45:37:80:81:cd:0d:7c:6f:a7:
6c:a9:04:8b:3a:9f:fd:80:50:aa:26:b1:bc:04:cf:
46:85:3f:71:71:4b:d1:09:42:0e:f4:2d:9b:7b:3f:
a0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:79:E7:6D:C8:8D:75:CE:ED:F4:D6:3C:C5:5D:F6:FE:16:AE:E5:69
X509v3 Authority Key Identifier:
keyid:AB:B1:65:7A:E8:C7:CC:8A:14:AB:9A:A8:84:5C:D4:BA:B5:0B:A4:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7FleujHzIoUq5qohFzUurULpBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/1b24f5-9584-42f8-b740-0e8e1bc2d190/1/q7FleujHzIoUq5qohFzUurULpBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/1b24f5-9584-42f8-b740-0e8e1bc2d190/1/q7FleujHzIoUq5qohFzUurULpBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d3:af:d0:f7:32:a8:e1:4d:6d:b5:b0:83:10:5b:05:c4:1c:
a5:07:0e:65:87:48:19:56:2a:aa:6d:81:56:62:f5:3c:6e:7d:
3c:3a:39:ea:1e:7c:17:51:42:6e:3f:fc:68:6d:d8:fd:b4:37:
9c:9b:61:f6:01:97:05:72:9a:72:08:6c:22:bd:9c:ec:80:03:
ab:5f:1c:0b:13:46:66:36:c6:22:f9:c3:c5:74:be:12:26:5a:
55:c9:d9:29:84:43:38:9b:a6:10:b7:d2:e9:80:15:f4:e7:92:
0d:6a:fd:d0:35:51:cc:30:5c:00:d9:27:fa:65:60:43:9a:65:
d6:1d:2d:b5:3c:31:92:f0:41:47:de:be:82:b3:d1:71:e4:d9:
27:f9:80:18:9d:df:20:04:ff:5f:b7:b5:bf:88:eb:c9:44:2d:
ab:39:45:c4:a4:91:3a:9a:d4:ec:8d:42:e6:7a:7c:68:d4:a0:
4e:6f:b8:79:c3:1b:08:fc:bd:ea:09:d7:1d:3a:af:69:19:0a:
4b:00:56:51:76:7c:dc:e2:81:e0:85:2a:39:2b:f9:0f:d9:20:
e6:96:a6:23:61:0a:0f:9a:05:8a:5a:d6:3f:36:1d:9c:7d:30:
6a:e1:9e:80:e2:68:d2:ca:51:76:cd:0f:0e:0d:8c:94:d7:5f:
fb:b7:df:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:00 2025 by rpki-client