Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft
File: fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft (raw, json)
Hash identifier: 63g6ARsYZlUeP9Rk6te6Gp9KoCoxoIK+WhQj5xfhLiU=
Subject key identifier: 4A:1C:5D:1C:FE:31:8F:87:AC:08:EB:66:41:FC:DC:C7:01:43:E3:9E
Authority key identifier: 7D:09:3F:6C:89:07:8D:CE:EF:67:BC:9C:08:16:E9:47:EC:15:B7:AC
Certificate issuer: /CN=7d093f6c89078dceef67bc9c0816e947ec15b7ac
Certificate serial: 0194BD17463693717BC5BABA9BE35AC8D95A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft
Manifest number: 0620
Signing time: Fri 31 Jan 2025 16:00:06 +0000
Manifest this update: Fri 31 Jan 2025 16:00:06 +0000
Manifest next update: Sat 01 Feb 2025 16:00:06 +0000
Files and hashes: 1: fQk_bIkHjc7vZ7ycCBbpR-wVt6w.crl (hash: WqXdX0jDEOH7boqkNkReOsljTsXHkHUhHR2dB1Hba1s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:46:36:93:71:7b:c5:ba:ba:9b:e3:5a:c8:d9:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d093f6c89078dceef67bc9c0816e947ec15b7ac
Validity
Not Before: Jan 31 16:00:06 2025 GMT
Not After : Feb 1 16:00:06 2025 GMT
Subject: CN=4a1c5d1cfe318f87ac08eb6641fcdcc70143e39e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e5:eb:21:11:d7:2a:44:c9:2e:ff:d3:b8:4a:
4f:f6:1c:cd:ec:30:be:cf:e1:61:18:fd:b3:1e:6c:
9c:29:2d:1d:0d:cb:0d:08:2a:bf:cd:6a:a2:e3:96:
0a:06:2b:26:09:50:16:95:8a:13:39:f6:de:3a:02:
8b:8f:3e:2c:c6:7d:76:bc:29:07:c8:36:3f:af:16:
fb:47:af:8d:50:78:fa:66:06:68:f9:ac:c5:d1:cc:
66:06:4e:80:0a:14:a4:42:5d:71:ee:5d:cd:d0:a2:
dc:bf:dd:d0:30:08:36:5b:bb:38:38:4f:14:52:53:
ef:f5:35:c7:1b:99:15:bc:c4:c8:cf:01:9e:09:84:
28:17:29:08:ff:96:1e:3c:c2:91:ee:f8:90:ef:74:
23:c3:b8:f0:07:b9:d5:f2:d2:a6:0f:dd:15:65:92:
b6:7a:3e:6f:0d:5c:ab:7e:3d:85:60:e7:e0:27:06:
47:2e:35:21:d8:b1:bb:28:c6:0d:9c:46:1e:41:d4:
a5:69:e3:20:f2:d9:f1:74:f9:65:c3:ff:b9:ea:62:
75:39:2f:ea:8d:bb:9f:d2:df:71:48:d4:31:be:7e:
b9:6a:1b:69:86:26:e9:5f:e8:49:4d:50:60:c5:67:
33:48:7c:3d:91:2c:4f:2e:57:ad:74:44:28:7b:ec:
69:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1C:5D:1C:FE:31:8F:87:AC:08:EB:66:41:FC:DC:C7:01:43:E3:9E
X509v3 Authority Key Identifier:
keyid:7D:09:3F:6C:89:07:8D:CE:EF:67:BC:9C:08:16:E9:47:EC:15:B7:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2ab375-4598-49a1-a4a4-c1b562c57703/1/fQk_bIkHjc7vZ7ycCBbpR-wVt6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:50:a6:ea:6b:97:45:ed:b4:6f:7e:01:ec:d1:b0:fa:d2:41:
d6:89:76:9d:21:f3:d2:6e:0f:da:67:24:cf:ce:51:e5:21:1c:
18:47:e5:b6:17:b6:77:d9:10:bb:be:51:f1:cd:eb:0c:80:5c:
1e:e4:83:13:56:0d:6d:fd:e6:2c:51:be:f1:06:76:20:38:73:
8e:0e:12:9f:99:1a:8a:f4:30:9a:61:b5:cc:c9:de:70:7f:cc:
f4:f8:5f:10:ba:e3:f9:d6:fb:ba:ef:d2:b9:f7:88:ba:8d:9a:
81:58:05:11:c1:81:fa:71:37:eb:b0:25:14:f5:4e:a9:56:0d:
95:fa:f6:e7:01:c6:b4:c5:e2:38:b2:00:08:8a:6d:60:9d:4e:
9b:11:89:e7:fb:fe:b7:dc:2b:41:78:58:7e:c4:1b:2c:0a:d3:
45:1a:87:48:62:46:b8:d2:a8:19:02:5c:25:61:aa:aa:ca:6a:
c7:e8:11:e6:13:dc:12:e0:e2:69:e1:e0:a9:ec:53:ca:da:56:
86:c8:40:47:0c:0d:cb:35:52:e1:05:99:4e:f9:36:cc:26:39:
43:d5:d5:ef:5c:30:0c:b5:d5:29:92:70:f1:33:db:56:51:94:
f5:7b:6b:6c:12:db:32:1c:63:f4:2e:bd:5d:d8:6b:1b:e9:d5:
1f:63:da:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:37 2025 by rpki-client