Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/9f4505-08f1-4da1-8f6d-1fb246d30101/1/qucxIVFwhtk6xw5y48P1oLXnO4k.mft
File: qucxIVFwhtk6xw5y48P1oLXnO4k.mft (raw, json)
Hash identifier: Ek2K5g4VZfUgBc2UudJQo5+5afmjJWeefd4rQnSputs=
Subject key identifier: 5B:B0:24:9F:86:5B:66:04:D5:0F:21:34:22:7E:F4:6C:FB:F5:4D:04
Authority key identifier: AA:E7:31:21:51:70:86:D9:3A:C7:0E:72:E3:C3:F5:A0:B5:E7:3B:89
Certificate issuer: /CN=aae73121517086d93ac70e72e3c3f5a0b5e73b89
Certificate serial: 018B032544AAD1E8EAFAF36F6168DFB830E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qucxIVFwhtk6xw5y48P1oLXnO4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/9f4505-08f1-4da1-8f6d-1fb246d30101/1/qucxIVFwhtk6xw5y48P1oLXnO4k.mft
Manifest number: 0F20
Signing time: Fri 06 Oct 2023 04:00:55 +0000
Manifest this update: Fri 06 Oct 2023 04:00:55 +0000
Manifest next update: Sat 07 Oct 2023 04:00:55 +0000
Files and hashes: 1: qucxIVFwhtk6xw5y48P1oLXnO4k.crl (hash: QJiVwuyONvBBKTwbAVJ9r3knGln/fC5pSGxaDs8ML70=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:03:25:44:aa:d1:e8:ea:fa:f3:6f:61:68:df:b8:30:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae73121517086d93ac70e72e3c3f5a0b5e73b89
Validity
Not Before: Oct 6 04:00:55 2023 GMT
Not After : Oct 7 04:00:55 2023 GMT
Subject: CN=5bb0249f865b6604d50f2134227ef46cfbf54d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:36:f1:39:6e:22:87:a3:5b:f6:45:5c:94:cc:
b9:fe:6d:52:7c:f8:7c:47:62:aa:ea:58:29:ad:91:
6f:9b:c5:ba:30:35:87:cb:19:2a:25:64:d6:42:02:
30:39:ed:69:8a:48:19:88:9d:ac:d7:73:7c:25:89:
e9:b1:04:82:76:39:93:d1:68:05:e3:4e:c7:23:c7:
76:e5:bf:7e:2e:fa:f3:14:ba:0d:56:90:c1:d0:26:
a3:2d:90:c3:99:d2:f4:cb:4f:fe:98:d3:f7:ad:c0:
8c:5f:d0:45:63:1c:6d:0f:ed:16:10:2d:80:e6:56:
7f:f8:4c:22:6a:30:78:c9:46:74:40:e4:71:fa:0b:
26:6f:11:ef:15:38:40:ad:1a:eb:17:82:32:5f:a4:
0e:7e:6e:30:03:70:9a:57:cf:0d:59:4f:47:34:65:
ec:5d:a7:70:28:41:99:59:f4:cb:ac:5d:91:87:6b:
bf:de:eb:1e:4f:2f:0c:8f:7d:30:34:35:78:a8:92:
b2:3f:df:74:25:29:ef:42:4b:e8:d4:6c:08:51:39:
a2:36:66:1d:93:6a:19:0c:f2:11:b5:39:b0:5b:5d:
73:14:ba:95:fc:cc:52:9c:fb:fe:0b:58:d7:4d:d0:
75:6a:75:39:df:d8:a7:ac:26:ac:a2:e9:88:fa:de:
b3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B0:24:9F:86:5B:66:04:D5:0F:21:34:22:7E:F4:6C:FB:F5:4D:04
X509v3 Authority Key Identifier:
keyid:AA:E7:31:21:51:70:86:D9:3A:C7:0E:72:E3:C3:F5:A0:B5:E7:3B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qucxIVFwhtk6xw5y48P1oLXnO4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9f4505-08f1-4da1-8f6d-1fb246d30101/1/qucxIVFwhtk6xw5y48P1oLXnO4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9f4505-08f1-4da1-8f6d-1fb246d30101/1/qucxIVFwhtk6xw5y48P1oLXnO4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:84:06:b3:da:49:ce:7d:fe:94:ff:72:f9:86:b4:5b:9e:a4:
1a:30:0a:39:3b:a6:be:d4:59:c6:80:65:c9:56:87:47:26:01:
69:c1:a1:ea:56:08:55:53:f2:b6:e3:f0:20:be:ce:4d:fa:e7:
f6:4b:00:2b:0b:bf:49:53:eb:ed:1d:56:e5:e9:75:12:51:6f:
01:1a:93:81:a3:39:5d:83:8f:00:44:0b:5c:33:54:ee:0f:ce:
3e:b4:0c:08:d3:5c:40:11:c3:f1:29:4b:aa:ad:16:b7:27:87:
da:7c:ad:0c:72:8c:e5:79:c5:05:1b:6f:c2:17:61:d9:13:c4:
f6:22:f3:55:ca:44:bd:95:61:d0:18:b7:62:a3:1c:69:52:8a:
96:5b:db:5d:e9:f9:bd:af:74:d0:be:b3:15:7f:dc:2a:d2:f1:
1b:c1:4a:78:24:f5:7c:e4:70:6c:68:ba:96:c7:fd:02:a7:81:
86:ef:35:ce:ec:57:7e:d0:db:57:d6:c4:fe:68:ad:32:e8:cb:
c6:1b:be:64:73:c2:43:0b:fc:ad:ed:48:fc:ae:59:a4:5f:bc:
e4:c4:03:e4:f8:65:34:52:36:9b:c5:7d:ac:95:c2:62:78:6f:
e4:bf:57:fd:e4:99:27:80:1e:9c:5d:d8:63:41:3b:44:ed:ad:
4f:ad:98:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:02 2025 by rpki-client