Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/fb7af4-f1fc-487a-bca2-2295eb7e8d9a/1/Q12Kb-q5GaEkBwEeFSfnXOPESJw.mft
File: Q12Kb-q5GaEkBwEeFSfnXOPESJw.mft (raw, json)
Hash identifier: rf4HrNWi8LN2HqAkZPebxtkS85lgySIK45VG9tZAQL8=
Subject key identifier: 71:D1:CE:34:B8:E0:21:42:17:16:11:B8:B0:79:CE:43:9D:65:1F:50
Authority key identifier: 43:5D:8A:6F:EA:B9:19:A1:24:07:01:1E:15:27:E7:5C:E3:C4:48:9C
Certificate issuer: /CN=435d8a6feab919a12407011e1527e75ce3c4489c
Certificate serial: 0194CA2EB356BFFC0FEA8101A41B6EA4C6E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q12Kb-q5GaEkBwEeFSfnXOPESJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/fb7af4-f1fc-487a-bca2-2295eb7e8d9a/1/Q12Kb-q5GaEkBwEeFSfnXOPESJw.mft
Manifest number: 0B18
Signing time: Mon 03 Feb 2025 05:00:45 +0000
Manifest this update: Mon 03 Feb 2025 05:00:45 +0000
Manifest next update: Tue 04 Feb 2025 05:00:45 +0000
Files and hashes: 1: Q12Kb-q5GaEkBwEeFSfnXOPESJw.crl (hash: 3qIMeKz9k09OxX22FfMG4MpYxwQ++Hs0P2GakLVDm6M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ca:2e:b3:56:bf:fc:0f:ea:81:01:a4:1b:6e:a4:c6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435d8a6feab919a12407011e1527e75ce3c4489c
Validity
Not Before: Feb 3 05:00:45 2025 GMT
Not After : Feb 4 05:00:45 2025 GMT
Subject: CN=71d1ce34b8e02142171611b8b079ce439d651f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:56:84:04:89:49:80:95:27:6d:71:8e:4d:84:
7c:65:9a:20:c7:2b:df:5d:86:dd:e0:3e:47:5b:13:
04:0b:0d:44:72:9a:5e:58:41:60:72:fa:b8:c0:d6:
d5:fb:a4:1f:d6:15:57:bc:77:6b:94:16:41:51:3f:
fd:a7:1b:dc:30:b6:1e:21:c1:fc:ae:03:ea:90:58:
92:77:0d:bf:74:80:0f:a4:36:32:bf:9e:de:c4:df:
dd:e6:79:44:b9:33:5b:84:5d:15:7b:f3:e4:39:18:
49:9d:7c:43:1b:4d:57:d9:80:bb:7b:9e:5f:d1:4c:
80:f1:50:15:37:a0:64:28:55:28:a2:db:85:25:16:
11:33:24:c1:12:62:71:06:0a:e5:73:70:f8:17:ff:
c0:77:ba:ec:e3:d0:83:10:8a:ad:39:5f:40:56:45:
1a:16:61:63:f6:4c:8c:b7:64:f8:5d:96:6e:79:c6:
95:f5:5e:5b:60:a5:a8:99:11:79:61:b9:22:24:a6:
1d:61:e5:24:2b:ea:23:e5:89:76:26:10:4c:8d:5a:
18:ee:11:cb:e8:e5:ff:0c:c8:b7:05:87:9c:4c:c6:
f2:c0:f9:5e:1d:40:1b:2f:4c:81:d9:e7:55:39:91:
67:0d:85:9b:4a:dd:ac:72:92:fa:85:43:5c:76:eb:
cb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D1:CE:34:B8:E0:21:42:17:16:11:B8:B0:79:CE:43:9D:65:1F:50
X509v3 Authority Key Identifier:
keyid:43:5D:8A:6F:EA:B9:19:A1:24:07:01:1E:15:27:E7:5C:E3:C4:48:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q12Kb-q5GaEkBwEeFSfnXOPESJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fb7af4-f1fc-487a-bca2-2295eb7e8d9a/1/Q12Kb-q5GaEkBwEeFSfnXOPESJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fb7af4-f1fc-487a-bca2-2295eb7e8d9a/1/Q12Kb-q5GaEkBwEeFSfnXOPESJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ba:88:a6:d5:ff:a7:6e:05:02:a5:dd:d2:d2:d3:c0:a2:74:
11:af:f0:cb:f1:c8:6b:96:39:ed:e6:30:8e:b4:d7:e0:9a:cb:
49:94:1e:de:8f:ba:a3:8e:cf:ff:e8:ff:9e:3b:28:31:d9:91:
fd:94:1f:4b:20:69:46:96:af:89:cc:d3:da:f9:4c:87:50:97:
c9:5b:f3:36:dc:d4:08:cc:b4:83:fb:50:37:31:f8:86:9a:7b:
79:56:55:a3:a1:c7:6d:09:34:fe:7a:d1:0c:21:8f:f8:11:d1:
9e:97:c7:04:b0:30:76:db:a2:5d:ec:10:2f:3b:76:f1:54:ce:
5d:28:39:a1:41:cf:df:ce:7b:bb:c5:1c:ea:3b:b8:e4:a8:26:
ab:0a:c1:52:5a:68:3a:67:7c:95:ea:c6:20:60:03:ca:4e:5a:
b2:ee:97:c8:0f:99:db:70:12:91:99:35:97:9b:9c:27:74:7d:
6f:49:13:64:87:32:46:4a:66:14:77:da:70:8d:87:33:ab:ee:
56:41:fc:6e:57:fd:d9:db:90:e2:3b:42:a3:4b:da:ea:e0:a0:
fd:38:9e:08:bb:10:52:b4:fa:00:68:d9:bb:51:e2:6f:63:89:
67:30:4f:de:ab:29:64:d1:41:de:2e:92:87:73:7d:cb:a2:44:
46:b5:ce:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:45 2025 by rpki-client