Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
File: wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft (raw, json)
Hash identifier: HDlBdKOVUCdx62xp+W6GlywVHYSWlTTEDfF7cdACBqM=
Subject key identifier: D9:F9:1C:99:E9:C8:D3:A6:E2:7D:06:5A:3F:0D:99:B1:FF:63:AD:12
Authority key identifier: C2:A3:2A:6B:EE:7A:D1:8D:1A:8A:E3:42:3E:91:DC:55:9F:27:6C:47
Certificate issuer: /CN=c2a32a6bee7ad18d1a8ae3423e91dc559f276c47
Certificate serial: 0194BBCDE5E99D4F72DE565153938DFB3079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqMqa-560Y0aiuNCPpHcVZ8nbEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:00:20 +0000
Manifest this update: Fri 31 Jan 2025 10:00:20 +0000
Manifest next update: Sat 01 Feb 2025 10:00:20 +0000
Files and hashes: 1: wqMqa-560Y0aiuNCPpHcVZ8nbEc.crl (hash: 5E8DxzIVNoZF9eNvMN/jK5qC2iWDhkXx3b/W5o11y/E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e5:e9:9d:4f:72:de:56:51:53:93:8d:fb:30:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2a32a6bee7ad18d1a8ae3423e91dc559f276c47
Validity
Not Before: Jan 31 10:00:20 2025 GMT
Not After : Feb 1 10:00:20 2025 GMT
Subject: CN=d9f91c99e9c8d3a6e27d065a3f0d99b1ff63ad12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d4:49:d3:09:6c:26:f6:b6:d2:f6:f2:59:37:
0b:84:89:fa:18:f7:5e:b6:14:a7:7d:48:1d:f7:0d:
91:80:1a:d6:54:82:93:9f:2f:30:e1:6c:57:0a:0f:
ec:cb:5b:55:ad:7a:c3:9b:4b:e6:6b:70:86:e7:fd:
50:7c:de:40:1a:17:91:db:39:ec:65:0b:64:99:a0:
eb:ec:74:cd:49:c0:e1:10:13:8c:cb:d3:ee:cc:3d:
a6:3b:3b:e2:52:29:c2:4e:2c:5d:e2:cd:f4:c3:9f:
d8:39:57:ef:a6:9c:58:9d:05:1d:87:5f:95:34:c2:
29:ea:01:53:2a:fe:4d:54:1a:5f:bc:60:64:97:54:
5e:0a:95:ff:81:76:c7:e2:c2:a6:5a:2c:fc:75:dc:
48:05:c3:29:69:0a:f6:7b:d5:36:ef:58:83:68:4d:
a0:d3:dc:05:e5:2c:78:3a:be:d7:b1:e4:bf:36:4e:
12:4f:a5:04:e1:4e:c6:05:11:d4:61:47:68:6b:bc:
35:e7:bb:47:ad:6a:0d:b7:81:6f:c3:36:41:90:5c:
95:36:5b:55:be:e6:2d:a5:08:aa:c0:a8:e2:2f:d3:
3d:a1:51:3a:ba:7d:6f:10:d6:08:1d:92:2d:33:29:
f5:7c:f3:44:1b:74:aa:51:49:4d:c4:63:5a:7f:72:
e0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F9:1C:99:E9:C8:D3:A6:E2:7D:06:5A:3F:0D:99:B1:FF:63:AD:12
X509v3 Authority Key Identifier:
keyid:C2:A3:2A:6B:EE:7A:D1:8D:1A:8A:E3:42:3E:91:DC:55:9F:27:6C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqMqa-560Y0aiuNCPpHcVZ8nbEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:06:42:74:81:71:42:0e:0c:d4:46:80:ec:87:d8:59:17:7f:
42:0f:f9:96:d9:71:3b:aa:d3:ea:6f:bd:51:5c:d8:ec:25:53:
e0:2d:72:95:19:db:e8:f1:ad:45:a1:f5:52:ea:4d:7b:be:fe:
c3:14:91:62:db:60:ec:f2:e2:5e:16:ae:f3:a7:f2:f0:df:59:
2d:ac:ef:44:01:1e:b1:3d:54:10:b2:42:8d:21:85:b8:89:be:
2a:a1:a8:f9:3e:88:20:c8:cc:e6:dd:78:09:88:04:3d:bd:db:
59:07:2b:77:54:8f:65:d1:99:48:a2:fb:0b:1d:16:97:d4:7b:
36:8f:cf:eb:f5:4e:ba:30:e9:f5:cb:74:86:e6:65:18:55:95:
8c:cd:87:27:25:06:cc:99:bc:39:b7:2b:de:d5:6e:66:66:6b:
d7:56:f9:86:9d:6b:8d:c8:9a:c8:89:1c:0e:6e:53:78:b9:70:
56:e4:ac:9d:49:aa:7c:f1:d8:06:b8:ae:55:b4:5f:1e:f1:1e:
09:52:f6:b1:3d:be:fd:8c:af:95:b0:d8:b0:05:ef:41:96:44:
c7:9f:c8:cb:35:9e:82:0d:37:51:7d:f2:19:89:bb:93:0b:d9:
01:06:b3:ac:1e:73:2f:fc:5a:13:1c:61:2d:45:d4:37:08:1e:
dc:c6:6b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:03:02 2025 by rpki-client