Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.mft
File: QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.mft (raw, json)
Hash identifier: 5UU65ktSt8pdeVhPn+j/IeUXo9Pprufi8ijlfffO4v8=
Subject key identifier: 04:CA:99:06:7D:8B:64:83:AA:56:60:C5:E1:BC:7F:AD:8E:F2:03:A8
Authority key identifier: 41:46:7C:76:9B:F6:6A:DA:7D:57:80:A6:9D:CE:13:71:BE:98:49:DE
Certificate issuer: /CN=41467c769bf66ada7d5780a69dce1371be9849de
Certificate serial: 01852EC321842FE31775894D718215A4D6F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.mft
Manifest number: 0BE7
Signing time: Tue 20 Dec 2022 09:00:17 +0000
Manifest this update: Tue 20 Dec 2022 09:00:17 +0000
Manifest next update: Wed 21 Dec 2022 09:00:17 +0000
Files and hashes: 1: QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.crl (hash: 9JxlLcVfB2wjIzgG0GV5bHxWnvOIhgahHLLRVa4rj7w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2e:c3:21:84:2f:e3:17:75:89:4d:71:82:15:a4:d6:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41467c769bf66ada7d5780a69dce1371be9849de
Validity
Not Before: Dec 20 09:00:17 2022 GMT
Not After : Dec 21 09:00:17 2022 GMT
Subject: CN=04ca99067d8b6483aa5660c5e1bc7fad8ef203a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:47:5b:5c:aa:61:a3:1b:4d:3a:15:82:3a:93:
f0:a4:08:50:eb:64:01:ba:04:4c:1c:8a:b6:fd:c5:
e9:04:2e:c1:a3:22:46:27:6c:ec:53:87:93:de:4f:
8b:56:fa:9e:12:53:b2:a5:88:8e:a4:28:71:18:a1:
61:8f:13:6a:0c:37:92:94:1f:bf:0e:10:0c:9c:68:
95:a7:5e:79:e2:4e:09:60:77:9a:53:d8:6a:29:ab:
0a:8a:22:4f:df:29:33:8d:a2:ed:fd:4e:c1:2b:c7:
86:f9:71:06:0a:ce:8c:87:65:6c:f9:e9:2f:ef:e2:
6f:cd:83:96:15:b2:ec:b3:96:e4:23:78:94:7e:23:
5a:3a:e4:0b:72:51:d6:c8:2e:0a:9e:27:c3:66:db:
5b:28:e9:5c:ab:6a:bf:b3:93:c1:fc:b5:21:f6:36:
f1:0d:42:7a:80:bd:3a:d5:23:e4:74:3e:a4:43:9e:
b8:a4:ab:ae:34:b2:cd:13:5b:bf:44:9e:11:bf:b1:
97:de:73:a5:21:1b:ea:be:ae:96:37:02:c9:af:e9:
0d:87:89:1d:e5:19:cc:3f:ed:6e:30:1c:c0:52:65:
28:40:90:20:e2:14:3d:05:e1:24:3c:e7:1e:0c:31:
61:16:ce:ca:26:8f:fa:f1:d1:99:79:78:16:1d:35:
5b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CA:99:06:7D:8B:64:83:AA:56:60:C5:E1:BC:7F:AD:8E:F2:03:A8
X509v3 Authority Key Identifier:
keyid:41:46:7C:76:9B:F6:6A:DA:7D:57:80:A6:9D:CE:13:71:BE:98:49:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:f6:a1:f3:cc:27:45:46:47:02:b9:31:e8:14:a0:79:a5:1a:
6d:06:fa:1d:23:bb:32:9f:48:0f:c7:ef:ba:21:e8:04:e1:b2:
84:c2:28:54:ae:7c:50:70:35:21:80:46:50:f9:50:bd:dd:44:
85:11:6e:18:6c:79:2f:d0:63:0b:dc:8e:30:73:1d:80:51:fe:
2a:77:17:a6:c4:35:e5:74:be:fb:ea:ab:24:52:e5:15:48:50:
75:4c:1b:75:d6:62:d8:7b:93:85:0e:1a:6f:0c:fc:30:2b:19:
fe:e3:e4:b2:f9:4a:b2:b7:97:61:3b:4c:3f:af:5c:19:b7:6e:
6e:79:64:54:7a:af:e1:93:7c:76:1b:cc:b1:63:bc:3b:81:94:
b2:19:55:cc:d2:8a:28:61:6e:5e:1e:1c:e2:93:2f:4d:97:a9:
4f:db:d5:71:e4:d8:1c:9b:b0:29:6d:d6:f8:78:4c:d5:47:38:
2a:e8:42:d9:f3:07:7b:a9:1f:f4:49:fb:27:8f:1b:a0:34:25:
f0:2e:c3:50:61:9e:5e:50:f9:2a:52:3e:1a:57:bf:cc:05:2c:
ee:e4:5b:aa:ed:02:33:48:5b:a5:3d:fa:b0:ca:8c:ca:21:ac:
d4:bf:ea:61:7f:55:a2:22:b5:45:4a:0e:9e:de:af:b2:d5:5d:
c2:08:8a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:38 2025 by rpki-client