Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft
File: QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft (raw, json)
Hash identifier: Bb3RxgzNgaBjETfxVrwIppFgz3+ODsGnmmGQeFXpmhM=
Subject key identifier: B8:7E:C7:59:4F:1D:5E:B3:F3:F2:CA:24:26:F5:B3:9C:6E:B9:BC:92
Authority key identifier: 40:36:A6:4F:1A:06:6B:AB:B8:BE:B8:64:E6:95:FA:99:76:92:DD:48
Certificate issuer: /CN=4036a64f1a066babb8beb864e695fa997692dd48
Certificate serial: 0195E1593649EB2E8A444C104B7F8B59FDEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDamTxoGa6u4vrhk5pX6mXaS3Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft
Manifest number: 0F1C
Signing time: Sat 29 Mar 2025 10:01:14 +0000
Manifest this update: Sat 29 Mar 2025 10:01:14 +0000
Manifest next update: Sun 30 Mar 2025 10:01:14 +0000
Files and hashes: 1: QDamTxoGa6u4vrhk5pX6mXaS3Ug.crl (hash: 2E5FzIp3gbxRmZcESPEErwc6G/08wRwr3f18J4rhQu4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:36:49:eb:2e:8a:44:4c:10:4b:7f:8b:59:fd:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4036a64f1a066babb8beb864e695fa997692dd48
Validity
Not Before: Mar 29 10:01:14 2025 GMT
Not After : Mar 30 10:01:14 2025 GMT
Subject: CN=b87ec7594f1d5eb3f3f2ca2426f5b39c6eb9bc92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:20:e8:c8:2e:e8:e2:7d:bd:27:63:a2:ef:9c:
65:48:4f:ca:23:52:47:7b:6a:14:5a:91:3a:d0:8a:
12:ab:48:89:2c:77:f2:f1:8c:40:b6:64:1e:ff:61:
d2:7e:ec:6c:a4:42:b6:47:7f:3e:9d:6d:42:81:30:
f9:ec:51:48:e7:74:b6:e3:c0:61:80:b8:13:60:ff:
3b:a7:3c:0e:04:a4:73:0f:cb:e3:64:a5:2a:4e:a0:
cb:0f:eb:2b:2c:1c:d4:ed:b9:91:1b:fc:0c:b0:57:
4d:ae:4b:c4:cb:02:7f:5d:b3:7f:ad:20:53:6b:3c:
d9:54:7f:29:27:ac:a3:c1:db:10:8f:44:b9:63:40:
6c:61:a3:5c:a4:14:5f:e5:60:06:5f:8e:65:0a:c4:
86:dd:cc:68:b9:b4:6e:0d:2d:9d:04:d8:87:fc:23:
09:55:c0:f5:dc:5d:61:b2:41:c6:7a:17:5e:b1:8c:
32:d1:f1:37:8e:4b:26:0e:90:5f:f9:75:b8:aa:a5:
d4:cc:fb:e4:16:e4:f7:bb:82:4c:3c:da:d1:d8:e2:
81:f2:1e:61:e5:6e:d0:08:30:94:10:59:77:e9:fa:
d8:ec:73:22:da:64:50:f9:76:99:1b:f4:8e:7a:74:
a4:6a:7b:c5:1c:ac:3e:c1:18:4f:c6:0b:97:c8:fc:
95:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:7E:C7:59:4F:1D:5E:B3:F3:F2:CA:24:26:F5:B3:9C:6E:B9:BC:92
X509v3 Authority Key Identifier:
keyid:40:36:A6:4F:1A:06:6B:AB:B8:BE:B8:64:E6:95:FA:99:76:92:DD:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDamTxoGa6u4vrhk5pX6mXaS3Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/56d50d-17cf-4bdb-92f6-204721bd5f93/1/QDamTxoGa6u4vrhk5pX6mXaS3Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:94:8c:9d:eb:a4:7a:80:29:2c:f3:2a:ca:91:df:ac:92:b3:
72:a1:b4:9c:6c:66:70:e8:50:1f:d7:fe:4a:1b:cf:92:27:91:
a7:5f:d1:91:b8:66:3d:c9:0a:a4:a1:b8:a4:67:24:b5:e3:a2:
c0:4e:b5:0b:56:76:7e:22:6b:bd:a5:67:47:99:75:43:61:53:
dd:f9:78:b4:25:0a:71:47:17:e3:49:0e:89:ce:3d:3d:ad:3c:
c0:5d:6d:13:89:b7:fc:ea:7d:1c:be:26:c1:3a:13:cc:ae:a9:
7a:df:7e:84:51:31:b3:f0:c1:56:f7:6b:6a:57:a0:bb:49:78:
ee:45:20:01:d3:55:4f:15:c6:87:59:66:85:c2:4d:51:bc:d2:
b9:a7:8b:53:cc:3b:20:26:d9:e5:e3:bf:49:6d:97:ca:49:4e:
31:57:92:f0:31:55:7b:e6:85:b1:96:81:e9:43:ad:de:d6:03:
d6:cf:0a:3d:19:2e:44:a6:7f:95:32:72:f3:af:40:97:6e:5d:
6d:1f:21:cf:70:ac:2c:00:45:32:fa:6b:ec:c1:54:c5:00:5f:
f7:18:5d:a0:6d:82:a5:10:ae:08:cc:fc:fa:9c:02:66:dd:a5:
db:a3:ea:fd:54:db:1a:6c:26:83:76:14:fc:ca:52:5b:99:11:
33:45:f2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:05:38 2025 by rpki-client