Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
File: QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft (raw, json)
Hash identifier: El+9xn41oJ1jRyvagjdcdfrYYgvW+RfIFzYNLHbTFnE=
Subject key identifier: CE:CD:B5:47:4F:97:05:0C:33:6D:1E:E9:16:AE:ED:4D:15:09:93:0F
Authority key identifier: 40:4A:AB:BF:AB:9D:E7:12:6B:7D:11:9D:B5:24:DA:41:11:F0:4A:FE
Certificate issuer: /CN=404aabbfab9de7126b7d119db524da4111f04afe
Certificate serial: 0194BBCF003DE22A03A641A58EF34307ABC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 10:01:32 +0000
Manifest this update: Fri 31 Jan 2025 10:01:32 +0000
Manifest next update: Sat 01 Feb 2025 10:01:32 +0000
Files and hashes: 1: QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl (hash: lunAm7q+o5UOSZXS0HTir9vttIOUj6YTPIEFOzWtqw4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:00:3d:e2:2a:03:a6:41:a5:8e:f3:43:07:ab:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=404aabbfab9de7126b7d119db524da4111f04afe
Validity
Not Before: Jan 31 10:01:32 2025 GMT
Not After : Feb 1 10:01:32 2025 GMT
Subject: CN=cecdb5474f97050c336d1ee916aeed4d1509930f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:58:19:ad:c2:11:9c:3f:cc:61:64:08:ce:0f:
72:f2:0a:2f:0a:93:c7:d8:f3:52:bf:27:72:fb:f9:
3f:26:f6:92:f9:c5:ed:e8:ec:3d:be:75:52:fb:0b:
8a:54:bb:0b:62:84:dc:2a:03:78:8c:a0:00:1b:00:
61:a0:3c:cc:95:ed:d6:01:72:43:da:4b:80:b8:34:
fb:9b:68:ce:9a:5d:45:e7:1a:d9:53:36:e8:f8:5b:
68:e9:e6:f0:f8:89:b3:ce:0f:2c:31:42:b5:43:5f:
78:c8:f2:e5:36:7e:ce:ae:b4:f9:bb:63:85:e4:5b:
1a:33:ae:e4:5e:a9:69:6e:75:9a:29:c8:a4:49:51:
c5:56:34:07:01:e6:da:ab:68:5e:b9:4b:24:d2:8c:
bb:dd:9f:9b:72:71:40:fa:bc:ef:f7:5f:52:aa:eb:
90:fa:08:45:b2:0a:04:79:96:f8:1a:8b:b1:85:f2:
c3:7e:7d:6d:35:31:97:13:9d:d7:4c:7e:e9:26:99:
e9:45:d3:9c:5d:fe:89:f6:2c:bd:eb:53:ce:6f:90:
36:14:15:72:3c:75:5b:98:c2:9b:27:3d:9f:a7:48:
7d:39:11:16:78:f1:12:54:98:50:48:8e:24:93:25:
e2:f8:62:a6:61:8a:a3:a7:2b:a9:ff:f8:96:50:fd:
9b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CD:B5:47:4F:97:05:0C:33:6D:1E:E9:16:AE:ED:4D:15:09:93:0F
X509v3 Authority Key Identifier:
keyid:40:4A:AB:BF:AB:9D:E7:12:6B:7D:11:9D:B5:24:DA:41:11:F0:4A:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:5c:6e:e0:fa:98:03:cd:1b:45:b5:f1:67:0d:38:68:9d:12:
93:50:19:ba:27:3f:0c:7e:64:91:3e:0e:e1:c1:73:0b:30:19:
86:9e:89:70:a9:a6:1a:47:36:eb:23:9c:39:17:b9:e8:52:2f:
b5:5b:10:4e:32:2d:1a:71:26:14:5d:7a:62:db:fc:c1:6b:62:
23:44:e7:ac:e6:b2:a7:8b:84:06:44:3b:61:51:4b:30:01:33:
d0:42:d0:28:54:6e:48:77:71:c4:d3:9d:5f:2d:44:42:8b:dc:
30:94:61:c5:4b:07:7a:b6:28:9d:9a:37:76:a2:28:36:f3:66:
df:e4:8c:56:7e:dd:ba:1f:b6:83:db:b0:10:e5:22:2b:49:b2:
c6:72:9b:2c:f2:97:50:b9:60:da:f4:4f:4f:ce:af:f0:98:c8:
3e:0a:71:b8:a5:04:22:69:19:9f:fd:96:7f:91:f3:9c:8a:5e:
f6:c4:a2:aa:ef:27:27:7e:95:fb:da:60:d4:84:8e:f6:6e:b8:
8e:cf:40:83:9f:00:3f:23:75:05:39:7b:23:bc:f8:90:33:ea:
fc:11:76:4b:47:76:69:35:f6:a4:72:9c:94:f8:b0:90:3d:fa:
8e:02:fd:c5:07:ce:ba:61:8d:c5:de:49:74:0b:14:5e:e7:5f:
8a:33:e0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:58:28 2025 by rpki-client