Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/000485-721f-4d97-a0f2-5bdb2c60102d/1/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.mft
File: QhO1RxlmwlYQ2VpaL6XMBvyT_1c.mft (raw, json)
Hash identifier: uuf7T/4VnoY0DMQ/17bPmPsu2fYB37R5rViMGAKvyBI=
Subject key identifier: 9B:4C:4A:3B:00:B8:F6:87:CB:3F:E5:41:BA:85:D0:16:29:D1:1A:29
Authority key identifier: 42:13:B5:47:19:66:C2:56:10:D9:5A:5A:2F:A5:CC:06:FC:93:FF:57
Certificate issuer: /CN=4213b5471966c25610d95a5a2fa5cc06fc93ff57
Certificate serial: 0194BC732265556BE245F02350E3B6867F86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/000485-721f-4d97-a0f2-5bdb2c60102d/1/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.mft
Manifest number: 034E
Signing time: Fri 31 Jan 2025 13:00:49 +0000
Manifest this update: Fri 31 Jan 2025 13:00:49 +0000
Manifest next update: Sat 01 Feb 2025 13:00:49 +0000
Files and hashes: 1: QhO1RxlmwlYQ2VpaL6XMBvyT_1c.crl (hash: 6j29I6GE4EThy2f+IY7eVE9yJ5i/CwSVJ9vBhHMe86s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:22:65:55:6b:e2:45:f0:23:50:e3:b6:86:7f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4213b5471966c25610d95a5a2fa5cc06fc93ff57
Validity
Not Before: Jan 31 13:00:49 2025 GMT
Not After : Feb 1 13:00:49 2025 GMT
Subject: CN=9b4c4a3b00b8f687cb3fe541ba85d01629d11a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c7:66:99:65:07:91:70:e9:4c:4f:a5:ae:07:
67:1a:22:8e:d5:b3:c9:5b:92:f5:44:ea:5d:78:ea:
d4:22:b6:b3:54:12:c1:90:f0:0c:e4:e4:e7:d2:41:
e9:83:34:f7:5f:9f:35:6f:58:81:aa:0e:d2:f2:d0:
0d:a1:53:8d:86:97:29:ef:b2:7c:50:ad:5a:bf:db:
40:bc:e3:79:e4:59:43:90:13:3f:7d:9c:8e:1c:33:
fa:18:51:b2:98:aa:44:1d:8c:e0:3d:01:c3:3d:43:
e8:6b:2a:3d:a3:57:1c:c9:10:43:29:25:c2:3a:53:
8d:7f:c4:92:67:0e:f6:22:7c:86:7f:12:51:33:02:
4c:3d:a6:6c:c3:e0:35:4e:f5:bf:b9:ee:e5:7b:b5:
b4:32:f3:78:4d:1e:e7:ab:44:65:df:b1:96:18:88:
84:40:25:f3:0b:c9:d3:fc:40:49:da:75:8a:fa:04:
5e:fc:65:9d:45:7a:fc:6f:dd:78:7f:8a:14:06:a2:
e5:93:16:8e:29:3b:b5:3d:c2:dd:b4:6a:39:f1:b2:
64:d3:8c:0d:28:b5:06:ac:01:50:1d:73:e4:20:f7:
36:6a:4a:b8:46:fb:06:59:1a:f5:9f:b5:89:8c:2e:
21:d4:a2:8c:40:40:47:86:96:51:81:fd:56:af:8e:
4b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4C:4A:3B:00:B8:F6:87:CB:3F:E5:41:BA:85:D0:16:29:D1:1A:29
X509v3 Authority Key Identifier:
keyid:42:13:B5:47:19:66:C2:56:10:D9:5A:5A:2F:A5:CC:06:FC:93:FF:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/000485-721f-4d97-a0f2-5bdb2c60102d/1/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/000485-721f-4d97-a0f2-5bdb2c60102d/1/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:92:e1:6c:0f:45:e9:c7:8c:9b:3b:fd:4f:67:15:c6:2b:e7:
dc:08:ea:29:62:b3:3a:d1:c9:db:4c:ce:af:37:81:e2:e8:35:
30:1a:06:79:f8:4c:a1:a9:24:3f:23:6b:62:54:4c:ea:f2:16:
25:3b:bc:01:bb:7c:97:a5:53:8b:7d:91:17:c8:59:d9:6a:5e:
7f:1a:dd:65:22:24:94:59:c8:a7:c8:0a:1c:ad:07:97:52:96:
b0:69:e6:bf:5a:a9:e7:b4:4a:9c:33:32:20:74:6f:c6:d5:48:
99:43:f5:2a:ef:3b:6d:21:33:4a:28:1f:6b:60:d3:1f:5c:ef:
8a:cb:8d:52:37:73:aa:d2:8a:64:7f:ef:64:18:a6:7a:37:a8:
57:b8:cc:0a:a7:9d:18:ab:44:bf:2b:3d:cc:a8:63:26:af:82:
f2:65:3b:7d:69:64:3d:69:e3:43:a7:c0:7a:60:46:c2:30:5c:
94:96:58:2e:63:0f:33:d9:35:67:39:91:bb:a7:ec:96:c9:c6:
ab:56:9d:89:9f:57:63:b0:18:98:a2:98:15:9c:d8:17:ea:5b:
94:9a:fc:78:e0:dd:05:23:24:04:f1:ce:d2:39:e8:c9:f4:e8:
34:e5:5e:2d:e0:4a:de:20:52:d0:79:1b:2a:67:55:c2:91:34:
67:97:25:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:05 2025 by rpki-client