Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/04f9f3-31f6-4366-93a1-1142dfacfccf/1/QEcbNMIaUAj28Jbkj-jjVRnWuEc.mft
File: QEcbNMIaUAj28Jbkj-jjVRnWuEc.mft (raw, json)
Hash identifier: kuax6nWHfR25fXO2FBLwSWT77dFHh3Pi+5Hi5LooY5Y=
Subject key identifier: 24:86:0F:F0:7D:D1:CB:2F:53:0C:C0:68:3D:2F:B7:11:11:4E:16:85
Authority key identifier: 40:47:1B:34:C2:1A:50:08:F6:F0:96:E4:8F:E8:E3:55:19:D6:B8:47
Certificate issuer: /CN=40471b34c21a5008f6f096e48fe8e35519d6b847
Certificate serial: 0194BBCE93364CA0968356331FD82F2AF010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEcbNMIaUAj28Jbkj-jjVRnWuEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/04f9f3-31f6-4366-93a1-1142dfacfccf/1/QEcbNMIaUAj28Jbkj-jjVRnWuEc.mft
Manifest number: 0BCB
Signing time: Fri 31 Jan 2025 10:01:04 +0000
Manifest this update: Fri 31 Jan 2025 10:01:04 +0000
Manifest next update: Sat 01 Feb 2025 10:01:04 +0000
Files and hashes: 1: QEcbNMIaUAj28Jbkj-jjVRnWuEc.crl (hash: SJifQrWbDVis7Vwq8mCuI9rXrirbv5X1/LtAgr14AUk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:93:36:4c:a0:96:83:56:33:1f:d8:2f:2a:f0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40471b34c21a5008f6f096e48fe8e35519d6b847
Validity
Not Before: Jan 31 10:01:04 2025 GMT
Not After : Feb 1 10:01:04 2025 GMT
Subject: CN=24860ff07dd1cb2f530cc0683d2fb711114e1685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6c:91:72:cd:c8:8e:bf:e0:b6:6f:b1:3f:d7:
1f:06:c2:93:eb:9c:24:a7:85:3e:8a:bf:2f:42:45:
63:00:aa:04:cd:4c:9b:03:4e:70:a8:0e:3e:14:f7:
1d:28:77:a1:b1:db:ed:10:6e:95:8c:d9:33:51:06:
41:e4:7d:ea:e2:25:44:f1:05:ce:9e:61:25:1d:a0:
30:da:a7:df:61:f9:7d:94:54:d7:fb:0c:ac:83:98:
5d:f8:b5:c9:ac:5b:1b:da:bd:f5:d9:c4:95:e4:2e:
fb:8a:59:40:17:3d:9e:73:d5:5f:ce:07:47:14:af:
d9:e5:d7:83:e2:06:76:b8:4b:a7:e5:c8:d7:c4:4d:
4e:48:af:dc:5e:52:85:76:7b:94:cd:65:ff:75:67:
ae:41:49:7e:d1:84:53:c4:db:5c:21:4f:25:6e:cc:
49:9c:cc:71:59:6c:21:ec:20:1a:a3:1f:6c:77:2c:
20:11:90:a9:bf:32:e9:11:0e:ae:a7:e2:22:f5:79:
f2:97:09:38:15:a9:78:56:66:64:f6:22:42:bb:8c:
46:02:3c:08:2e:7b:81:20:09:52:f1:d8:50:a5:a2:
b7:77:0f:95:4f:d7:c1:9c:f9:87:7b:93:78:74:09:
dd:3d:a0:11:1f:60:3e:08:7b:04:99:b1:74:48:77:
56:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:86:0F:F0:7D:D1:CB:2F:53:0C:C0:68:3D:2F:B7:11:11:4E:16:85
X509v3 Authority Key Identifier:
keyid:40:47:1B:34:C2:1A:50:08:F6:F0:96:E4:8F:E8:E3:55:19:D6:B8:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEcbNMIaUAj28Jbkj-jjVRnWuEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/04f9f3-31f6-4366-93a1-1142dfacfccf/1/QEcbNMIaUAj28Jbkj-jjVRnWuEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/04f9f3-31f6-4366-93a1-1142dfacfccf/1/QEcbNMIaUAj28Jbkj-jjVRnWuEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:6d:05:5b:b7:d6:4f:98:5c:68:b9:ea:d3:99:cc:55:2f:39:
3b:85:ce:b7:2a:e5:a6:bc:84:86:9a:5b:1f:c6:1a:56:31:5a:
10:42:ef:f6:cc:61:00:dd:1f:c4:79:f2:97:42:49:8b:1c:37:
0d:83:0d:6f:15:24:3d:c2:81:99:f3:50:d9:73:f8:cd:c4:e2:
3e:ef:4e:fd:b5:ad:dc:e9:78:72:c4:94:63:6c:a7:33:11:23:
30:f0:18:99:a8:74:24:e4:81:b2:f9:ba:d6:c4:a4:91:b0:b0:
76:fd:86:e5:a9:c2:d3:41:76:13:f2:ee:dd:42:30:aa:e7:fe:
81:86:b2:0f:73:0a:2c:50:fc:70:18:11:62:94:79:b7:c4:49:
67:83:67:44:66:56:00:f8:fc:d0:0f:42:af:c5:4e:73:ef:57:
3e:3f:9a:7c:39:98:06:df:73:68:27:b6:7b:b8:b8:da:c9:ae:
90:84:2e:70:5e:0f:95:89:0f:56:ac:44:73:a6:2b:d5:1e:6f:
51:a8:36:3f:6f:27:e3:31:c7:cc:28:e4:93:ce:a5:50:8e:08:
fb:d7:31:83:8e:7f:0f:f2:17:d0:c0:36:ef:44:30:5e:07:69:
03:57:11:28:bb:f5:5b:cf:71:45:6c:94:67:a0:cd:f1:0e:d2:
3d:d4:f6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:53 2025 by rpki-client