Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/a92992-da77-4c17-8c4d-7e62bf2629a3/1/qR70Z6wYY1XKUofRv6NigE9Psk4.mft
File: qR70Z6wYY1XKUofRv6NigE9Psk4.mft (raw, json)
Hash identifier: +d/GxE54Fsyi8y4E5Qe3u9VWEk7niH1amcJV6xVWtEU=
Subject key identifier: 39:BC:50:7E:2F:04:EC:1C:6D:FB:87:DF:95:01:DB:A3:9E:B3:45:B9
Authority key identifier: A9:1E:F4:67:AC:18:63:55:CA:52:87:D1:BF:A3:62:80:4F:4F:B2:4E
Certificate issuer: /CN=a91ef467ac186355ca5287d1bfa362804f4fb24e
Certificate serial: 019588F1958ADD863BFF2C1E05D5D1ED42F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qR70Z6wYY1XKUofRv6NigE9Psk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/a92992-da77-4c17-8c4d-7e62bf2629a3/1/qR70Z6wYY1XKUofRv6NigE9Psk4.mft
Manifest number: 0280
Signing time: Wed 12 Mar 2025 06:01:28 +0000
Manifest this update: Wed 12 Mar 2025 06:01:28 +0000
Manifest next update: Thu 13 Mar 2025 06:01:28 +0000
Files and hashes: 1: qR70Z6wYY1XKUofRv6NigE9Psk4.crl (hash: uOJKfZq1JhiOvUiDwHUZ/SfX+6wueIAA8Jhi0hoENek=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:88:f1:95:8a:dd:86:3b:ff:2c:1e:05:d5:d1:ed:42:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a91ef467ac186355ca5287d1bfa362804f4fb24e
Validity
Not Before: Mar 12 06:01:28 2025 GMT
Not After : Mar 13 06:01:28 2025 GMT
Subject: CN=39bc507e2f04ec1c6dfb87df9501dba39eb345b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9f:96:ce:5e:d2:f6:4a:e4:9f:65:23:58:1e:
81:cc:03:c5:03:ab:ed:f9:60:7d:29:a2:d8:68:f1:
27:88:6f:02:50:78:4d:64:c0:51:0f:4e:c5:83:bf:
17:8a:ae:55:35:cf:61:75:9c:0e:a0:78:14:ae:67:
04:91:75:f2:e0:ff:28:80:b8:09:27:92:3c:34:31:
25:fe:a3:87:cf:f2:4d:13:66:61:c0:fe:c4:09:87:
be:8e:cb:84:84:03:d4:5e:37:2e:91:ec:77:6c:7c:
74:73:48:b0:ae:a6:ae:dd:59:2a:ef:49:92:27:9b:
cf:f3:0a:4f:1b:65:bb:bc:92:e7:ea:9e:19:f9:cb:
82:2c:3f:8d:ad:40:90:75:e2:76:84:f0:a1:17:86:
7e:d9:ad:73:1b:62:2a:1b:cf:bd:dd:79:74:e4:5e:
8d:64:c1:40:d4:db:2b:e2:91:14:9e:c5:34:a1:90:
45:a3:f9:50:2c:25:41:2e:8a:f9:87:ab:54:6b:76:
9a:43:5a:6d:57:70:1a:88:31:8e:ba:05:ae:5d:8d:
7f:95:4b:7a:e2:09:1e:02:38:d0:55:05:ba:8d:97:
35:6e:a0:ce:50:ff:ed:e8:db:8f:23:44:bb:d3:09:
95:6c:fe:59:6f:75:27:ae:c6:a3:70:2c:e8:c6:ce:
9d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BC:50:7E:2F:04:EC:1C:6D:FB:87:DF:95:01:DB:A3:9E:B3:45:B9
X509v3 Authority Key Identifier:
keyid:A9:1E:F4:67:AC:18:63:55:CA:52:87:D1:BF:A3:62:80:4F:4F:B2:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qR70Z6wYY1XKUofRv6NigE9Psk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a92992-da77-4c17-8c4d-7e62bf2629a3/1/qR70Z6wYY1XKUofRv6NigE9Psk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a92992-da77-4c17-8c4d-7e62bf2629a3/1/qR70Z6wYY1XKUofRv6NigE9Psk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1f:3b:14:c7:01:17:a4:0b:b5:6f:5b:2b:d0:83:15:b0:2f:
d8:b9:46:6e:26:29:cc:60:8a:d3:dd:9f:0e:32:10:66:30:2e:
f8:9b:86:d5:64:3e:7d:24:2c:68:d4:fe:76:23:70:6b:43:e3:
53:31:32:89:06:3f:78:44:8b:95:07:3f:b9:01:11:f0:09:ab:
59:94:79:0c:c6:c8:4c:80:de:72:dd:fe:74:eb:94:a3:01:a7:
ff:43:1a:0e:0e:31:44:c0:21:4e:9c:e6:a1:23:8a:16:d8:d8:
39:8f:4c:8a:c5:89:cc:7c:4a:0d:c3:9c:fa:03:b0:44:cd:2f:
fa:17:da:45:d6:06:e2:86:f5:46:90:b5:8b:c2:a4:7a:2d:f3:
32:b9:e0:e1:2c:ee:13:dc:bc:f4:46:2a:df:ee:82:5d:57:7e:
28:d9:7c:1a:13:41:9d:a6:af:27:d3:fe:84:63:59:8c:11:46:
47:dc:8f:3a:3c:ab:12:71:17:a4:a7:f7:1c:d5:b9:b2:dc:ba:
20:53:d2:76:64:2b:3c:88:01:17:7a:60:94:4b:72:39:5d:48:
01:1a:1e:ac:66:e9:95:d4:b0:8e:6e:dc:9a:b4:cd:13:5e:e5:
ff:98:56:ff:68:76:1c:0a:d0:64:6c:7d:c2:a2:58:37:89:00:
b8:12:03:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:03:52 2025 by rpki-client