Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
File: qYI63d9sNfBbfByuB5BL_58vass.mft (raw, json)
Hash identifier: kmSIun+FGHZAXvh9mwJMhtzyRVOJiDbYJ/1SnP1Oh1c=
Subject key identifier: D2:7A:B4:94:FC:35:54:09:68:97:55:85:66:D8:8B:54:02:71:07:40
Authority key identifier: A9:82:3A:DD:DF:6C:35:F0:5B:7C:1C:AE:07:90:4B:FF:9F:2F:6A:CB
Certificate issuer: /CN=a9823adddf6c35f05b7c1cae07904bff9f2f6acb
Certificate serial: 0194BC3C8045943B5C8863E62ACC83298FF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYI63d9sNfBbfByuB5BL_58vass.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
Manifest number: 08A0
Signing time: Fri 31 Jan 2025 12:01:09 +0000
Manifest this update: Fri 31 Jan 2025 12:01:09 +0000
Manifest next update: Sat 01 Feb 2025 12:01:09 +0000
Files and hashes: 1: qYI63d9sNfBbfByuB5BL_58vass.crl (hash: 9J9ooIABVh1d5oTwGD316Nvkl+E+LlQfNLRKrEuPfTo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:80:45:94:3b:5c:88:63:e6:2a:cc:83:29:8f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9823adddf6c35f05b7c1cae07904bff9f2f6acb
Validity
Not Before: Jan 31 12:01:09 2025 GMT
Not After : Feb 1 12:01:09 2025 GMT
Subject: CN=d27ab494fc3554096897558566d88b5402710740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:09:6e:a7:94:cf:85:8b:a3:69:de:35:55:dc:
8c:d0:0d:fc:dc:36:86:8b:52:3a:c8:63:a4:37:bb:
7b:8a:c1:f0:9a:1b:f4:d3:b9:96:4d:c0:91:68:1c:
17:34:c9:eb:e9:1b:a1:2d:d0:0e:59:91:73:c2:10:
32:0b:85:16:51:9e:92:41:ab:a4:7b:ca:df:0e:ec:
d2:d2:61:02:9f:9c:62:a5:98:dc:93:14:93:5b:6f:
8b:3b:59:46:2d:00:56:85:f9:c7:4d:7d:fd:81:0c:
de:40:e5:85:2d:de:ab:1c:4c:a1:cb:66:de:52:83:
8c:45:d1:1a:0c:73:b3:20:9a:a3:b0:82:93:dc:3b:
68:0b:b9:3b:4d:46:bf:bc:82:a3:e7:66:92:7b:4a:
b4:8c:93:6d:b3:cc:c7:07:55:94:71:b0:f7:c4:30:
a5:4a:dc:36:97:d6:e2:a0:f8:04:0c:64:cb:c6:c0:
91:54:fc:0e:4a:66:55:54:8c:38:10:42:e9:0f:77:
22:83:8b:a8:fb:13:2b:5a:d8:f7:48:06:0f:c9:8b:
c0:83:2f:44:b1:e4:6a:35:78:88:86:5b:43:b2:bc:
a0:6d:87:49:4b:c3:36:22:af:47:5b:17:98:ed:57:
d8:3e:ad:ef:be:0a:80:ae:51:6e:8d:b6:e2:ce:b1:
b6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7A:B4:94:FC:35:54:09:68:97:55:85:66:D8:8B:54:02:71:07:40
X509v3 Authority Key Identifier:
keyid:A9:82:3A:DD:DF:6C:35:F0:5B:7C:1C:AE:07:90:4B:FF:9F:2F:6A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYI63d9sNfBbfByuB5BL_58vass.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:be:29:fa:15:a0:79:35:be:36:30:65:ce:5b:7f:d7:f6:dc:
4d:13:d3:82:9d:a7:1a:92:71:6c:e0:e0:17:04:48:b7:8f:ad:
27:f0:63:dd:6d:e9:e8:38:f4:ef:83:97:00:aa:ce:f9:9f:2b:
7c:a4:82:20:95:ef:c0:e3:a2:e8:b1:7a:73:77:55:e7:16:2a:
ea:72:57:2b:24:7b:d2:e1:3b:75:48:29:16:40:ed:64:c6:54:
3f:d0:f7:c3:be:34:63:0b:04:9a:f6:4e:d3:f7:8b:08:47:0f:
87:cd:23:55:75:40:17:35:b4:e1:22:74:5a:82:6b:50:74:06:
31:8b:22:3a:fb:c5:5e:ef:99:54:1b:1e:23:bb:a9:00:64:18:
40:bf:49:87:62:ac:e0:59:93:e0:3f:79:03:9f:9a:6b:32:55:
34:4f:33:7b:37:e0:77:a5:35:14:24:e3:75:11:a6:d7:aa:97:
53:80:22:19:13:e8:2e:5d:3d:5b:40:81:ef:4a:49:e0:84:81:
4f:6a:88:4f:4b:3c:e0:aa:47:54:b1:d4:bf:41:1a:78:4b:f5:
2a:df:9d:da:45:5d:44:10:88:fa:14:1a:2c:76:42:66:70:7e:
7d:88:3f:94:38:66:4b:22:48:07:96:9c:f8:96:52:d7:0b:39:
8e:1a:d2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:04 2025 by rpki-client