Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/14dd4c-d72d-4666-9242-920dd39ac62b/1/Q3FIOk0xlpOmC4o7x5_YgtIScPo.mft
File: Q3FIOk0xlpOmC4o7x5_YgtIScPo.mft (raw, json)
Hash identifier: Ka2UbuaMztGJWU7nt0HScCKX83Nww9oyEuiJ39BfZ+o=
Subject key identifier: B7:BA:0C:62:64:FE:03:E6:2F:DE:30:AA:DA:BD:F7:89:37:CF:91:DA
Authority key identifier: 43:71:48:3A:4D:31:96:93:A6:0B:8A:3B:C7:9F:D8:82:D2:12:70:FA
Certificate issuer: /CN=4371483a4d319693a60b8a3bc79fd882d21270fa
Certificate serial: 0195EB01E15721F48DBCE063A5BDC9B052A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3FIOk0xlpOmC4o7x5_YgtIScPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/14dd4c-d72d-4666-9242-920dd39ac62b/1/Q3FIOk0xlpOmC4o7x5_YgtIScPo.mft
Manifest number: 0725
Signing time: Mon 31 Mar 2025 07:02:03 +0000
Manifest this update: Mon 31 Mar 2025 07:02:03 +0000
Manifest next update: Tue 01 Apr 2025 07:02:03 +0000
Files and hashes: 1: Q3FIOk0xlpOmC4o7x5_YgtIScPo.crl (hash: x4EWWvqYcmdV94f69rpkDdpADD8sWZzgDezUqoc4N4Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:eb:01:e1:57:21:f4:8d:bc:e0:63:a5:bd:c9:b0:52:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4371483a4d319693a60b8a3bc79fd882d21270fa
Validity
Not Before: Mar 31 07:02:03 2025 GMT
Not After : Apr 1 07:02:03 2025 GMT
Subject: CN=b7ba0c6264fe03e62fde30aadabdf78937cf91da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ee:ef:0e:42:e5:38:e1:ca:b5:20:9e:72:fc:
9c:ff:8f:9a:23:17:84:21:de:66:48:c7:a1:f5:53:
c4:1b:08:fd:79:1e:1e:31:b3:14:ba:f7:30:ae:70:
49:0a:1c:7b:b4:2a:0d:0b:98:26:ed:ee:26:9c:2a:
9b:62:51:b9:62:15:0b:6e:7b:f5:83:22:ef:7d:79:
3f:04:2d:bf:11:5d:2a:71:98:55:4b:51:fb:b8:40:
21:fa:da:7e:a9:c9:62:e0:db:46:a6:95:1e:70:b8:
76:7b:58:40:9a:54:96:fa:c5:c2:65:a6:f4:8e:9f:
e3:12:0f:d2:26:02:e3:59:fc:b0:df:bb:20:32:32:
de:7b:bb:8f:d7:bc:97:67:13:a0:3d:58:15:55:34:
c7:9d:01:83:bb:08:5b:41:6d:a9:bf:35:84:91:b9:
3d:fe:74:0b:cc:7d:c6:8c:a7:36:86:ec:ae:fd:ce:
9a:65:6e:aa:2b:fe:2e:83:6e:30:22:17:e4:d8:ae:
40:d5:97:dd:58:d1:76:7a:bf:84:78:06:18:9b:86:
2f:a6:b3:e8:d5:1c:67:45:75:e6:13:39:44:ab:8b:
b1:65:f1:3d:ef:a0:65:2d:fb:35:3b:63:91:ef:d0:
0f:71:8d:12:cb:bf:e9:f0:92:31:00:76:62:94:6f:
73:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BA:0C:62:64:FE:03:E6:2F:DE:30:AA:DA:BD:F7:89:37:CF:91:DA
X509v3 Authority Key Identifier:
keyid:43:71:48:3A:4D:31:96:93:A6:0B:8A:3B:C7:9F:D8:82:D2:12:70:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3FIOk0xlpOmC4o7x5_YgtIScPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/14dd4c-d72d-4666-9242-920dd39ac62b/1/Q3FIOk0xlpOmC4o7x5_YgtIScPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/14dd4c-d72d-4666-9242-920dd39ac62b/1/Q3FIOk0xlpOmC4o7x5_YgtIScPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e5:4c:ac:6e:f4:8e:56:26:bb:19:1a:00:6e:34:e2:a6:d7:
41:a2:52:27:24:01:4d:c1:d1:8e:bc:2c:99:9e:38:2b:cc:40:
53:c9:89:f2:89:27:7f:af:bf:0c:14:fa:c8:f3:54:cd:13:9e:
7a:4f:1a:0a:e7:63:53:30:9a:07:e1:a1:dd:71:e5:9e:e1:4d:
cc:8f:2a:d1:fb:15:57:2c:05:d3:ba:05:b6:29:1b:22:cc:11:
43:5c:e4:ae:11:9c:dc:10:25:c4:d3:0b:f6:47:6d:a8:fe:ee:
4f:40:64:09:d3:b1:4d:79:64:58:92:8e:d4:9b:f6:16:f8:ec:
fd:02:e0:28:dd:b7:3b:92:83:f4:d5:09:38:df:51:fd:19:64:
82:57:f6:a8:5b:5a:32:1b:92:83:2a:73:9e:cc:3a:2e:7b:05:
79:23:37:e7:9c:b6:09:c4:1b:43:0f:65:02:b8:5a:e8:48:ea:
61:a1:cf:a2:4c:7b:89:0b:b8:43:66:f9:38:b7:f3:a8:19:92:
bb:4f:be:23:25:3c:ea:89:b6:35:17:db:22:b5:d6:d2:1f:f6:
b3:fe:e4:db:9b:df:5c:94:41:ed:99:f5:3e:a7:d8:cb:d3:39:
e8:31:48:19:c3:8a:60:22:b0:12:ed:a8:77:9a:fd:61:a6:17:
82:c2:7f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:13:41 2025 by rpki-client