Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/990939-5f2f-4e60-bcd7-4ce216dbc3e7/1/my-QDJQ_WFat0KDsadnobwBdpvM.mft
File: my-QDJQ_WFat0KDsadnobwBdpvM.mft (raw, json)
Hash identifier: vnhXrjZojtA36bJajJD/46358nXqVqsb6eAPfXV6zQ8=
Subject key identifier: 4E:80:92:FC:10:92:8E:33:96:1D:C2:2C:10:8F:3B:15:03:1A:73:67
Authority key identifier: 9B:2F:90:0C:94:3F:58:56:AD:D0:A0:EC:69:D9:E8:6F:00:5D:A6:F3
Certificate issuer: /CN=9b2f900c943f5856add0a0ec69d9e86f005da6f3
Certificate serial: 0182C9A9F103976ACA3A3D19072BDF3747C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/my-QDJQ_WFat0KDsadnobwBdpvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/990939-5f2f-4e60-bcd7-4ce216dbc3e7/1/my-QDJQ_WFat0KDsadnobwBdpvM.mft
Manifest number: 011D
Signing time: Tue 23 Aug 2022 07:45:33 +0000
Manifest this update: Tue 23 Aug 2022 07:45:33 +0000
Manifest next update: Wed 24 Aug 2022 07:45:33 +0000
Files and hashes: 1: my-QDJQ_WFat0KDsadnobwBdpvM.crl (hash: ft+vIZtzm94jD50CkEZY/5MpEc13HjPyio++XX+daPY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c9:a9:f1:03:97:6a:ca:3a:3d:19:07:2b:df:37:47:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2f900c943f5856add0a0ec69d9e86f005da6f3
Validity
Not Before: Aug 23 07:45:33 2022 GMT
Not After : Aug 24 07:45:33 2022 GMT
Subject: CN=4e8092fc10928e33961dc22c108f3b15031a7367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:93:df:9f:3e:ee:51:37:83:8a:3d:93:a1:00:
43:bf:3c:9b:fc:bf:6b:85:2c:4f:ea:30:fc:27:a3:
47:14:a9:f7:a5:13:96:df:28:23:5d:e1:90:98:29:
c2:d5:e0:05:55:e7:e1:8a:60:ef:ba:ac:7b:c6:aa:
12:47:a9:62:e6:0a:8e:ce:6d:c5:8c:bc:06:00:cb:
0c:c6:80:80:23:ea:c9:0e:78:99:96:04:ae:05:99:
f2:49:d3:5b:18:9b:55:f3:7b:39:25:2d:b4:e2:84:
36:f1:61:88:de:99:72:50:3b:8f:a1:ba:7e:b3:6f:
92:90:05:1d:fc:c5:47:3f:76:7f:85:1a:df:40:4d:
2d:5d:48:b0:4f:c1:22:34:9b:83:2d:c4:19:8a:d8:
66:d0:d6:14:0f:05:e8:41:c9:fa:a8:ac:08:a2:f8:
5b:ea:f0:68:e1:3a:3a:33:ff:cb:11:a1:48:3e:49:
b6:8f:b3:1c:d6:76:10:85:ea:4e:b9:84:19:10:98:
7a:45:b5:4e:60:c6:32:40:05:8c:22:23:36:47:7d:
47:96:ad:6d:dc:65:22:6d:18:6a:14:f8:52:c2:26:
91:10:89:51:d9:a7:0b:c9:db:19:21:06:06:d5:9e:
23:2d:8d:11:0f:ff:1c:bd:f2:d2:c6:5c:a5:04:82:
a7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:80:92:FC:10:92:8E:33:96:1D:C2:2C:10:8F:3B:15:03:1A:73:67
X509v3 Authority Key Identifier:
keyid:9B:2F:90:0C:94:3F:58:56:AD:D0:A0:EC:69:D9:E8:6F:00:5D:A6:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my-QDJQ_WFat0KDsadnobwBdpvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/990939-5f2f-4e60-bcd7-4ce216dbc3e7/1/my-QDJQ_WFat0KDsadnobwBdpvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/990939-5f2f-4e60-bcd7-4ce216dbc3e7/1/my-QDJQ_WFat0KDsadnobwBdpvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:bb:24:5e:a5:72:e7:96:44:8a:85:8d:08:87:ce:72:fc:a7:
60:e0:d0:43:4d:a5:03:5d:c5:21:64:66:49:2b:ca:4b:19:a5:
30:4f:3d:db:1c:78:0c:56:41:21:30:75:b0:be:c4:e2:6d:ab:
61:06:ae:d3:56:04:84:c4:43:dc:83:0f:52:cb:2c:db:77:5b:
b1:4d:49:c8:25:03:aa:c8:72:17:20:0f:ca:0b:9d:37:53:7c:
90:ef:f3:22:4f:c6:77:47:93:ce:2b:43:a1:70:31:c6:d8:32:
53:94:5d:32:fe:7d:eb:a4:95:fe:21:e5:86:ee:30:2c:46:74:
10:d8:a4:67:d7:53:bb:0b:0c:ee:c1:d1:db:1b:eb:60:f0:96:
4f:3f:3d:a6:9f:35:be:5d:e4:0a:9e:8c:2e:68:f6:c9:df:aa:
47:32:c7:76:8d:a0:35:f1:df:ba:50:e1:d6:a9:14:b6:e8:9d:
26:57:fe:75:5f:c4:3c:5a:f5:54:2c:35:d2:47:ca:23:03:42:
2e:d8:5b:b1:20:71:f6:a3:6d:3e:fa:c5:29:53:f6:e4:1e:e7:
59:b0:63:a6:97:59:f6:8c:08:c4:73:06:b6:cf:6d:20:81:23:
8b:3d:63:17:a0:47:28:6f:c6:a0:e4:66:ff:98:ef:43:6c:31:
3e:43:4d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:07:59 2025 by rpki-client