Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.mft
File: Q94YPxSj8k-bhtBE-HcphoC1Ers.mft (raw, json)
Hash identifier: 8awFZAPzdRipPRPlCBDYgKK49+CMR/9C2XMPfJdVuTM=
Subject key identifier: CF:CA:A3:B8:59:DF:B2:B3:44:2D:51:E0:04:3B:9A:F4:97:42:6D:F6
Authority key identifier: 43:DE:18:3F:14:A3:F2:4F:9B:86:D0:44:F8:77:29:86:80:B5:12:BB
Certificate issuer: /CN=43de183f14a3f24f9b86d044f877298680b512bb
Certificate serial: 0194BC050890197D9A7141BD78E92F2ED10A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q94YPxSj8k-bhtBE-HcphoC1Ers.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.mft
Manifest number: 0293
Signing time: Fri 31 Jan 2025 11:00:33 +0000
Manifest this update: Fri 31 Jan 2025 11:00:33 +0000
Manifest next update: Sat 01 Feb 2025 11:00:33 +0000
Files and hashes: 1: Q94YPxSj8k-bhtBE-HcphoC1Ers.crl (hash: osTnc4zyM+iUUIgSbPtzue47alscBQYP1vhTc+jYNqk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:08:90:19:7d:9a:71:41:bd:78:e9:2f:2e:d1:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43de183f14a3f24f9b86d044f877298680b512bb
Validity
Not Before: Jan 31 11:00:33 2025 GMT
Not After : Feb 1 11:00:33 2025 GMT
Subject: CN=cfcaa3b859dfb2b3442d51e0043b9af497426df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:31:b5:93:f8:92:dd:87:4a:68:0b:6c:93:c8:
ca:2b:a4:c2:6f:b5:86:29:1b:6a:45:5b:bc:e2:0d:
49:2e:2d:7d:f3:53:46:9f:fc:f7:09:0b:e7:ef:91:
35:11:e3:83:b6:72:5e:82:d8:cd:4d:21:59:6f:6a:
77:ee:6f:12:bd:16:21:d3:b8:53:c0:f9:ed:0e:ef:
36:fa:3e:94:70:e2:08:ca:fc:a6:8c:8a:98:a9:da:
d9:a0:9e:eb:ba:37:8f:d9:9f:2f:b3:d3:cd:74:e3:
f4:ee:89:0a:f7:87:cb:50:a5:37:f3:bf:d6:e1:fd:
61:2d:cd:12:f0:f1:a8:e2:41:9b:df:07:5b:aa:5d:
3a:5d:41:03:c3:bd:12:4a:be:9f:ed:ff:d3:fe:f9:
f6:a0:e5:e3:ac:40:21:c4:3a:78:c2:ce:e0:81:09:
b3:d6:ef:66:0d:a2:05:d2:de:22:4c:9b:eb:88:af:
0f:50:b6:51:79:a5:05:f9:77:23:74:b1:51:97:cc:
84:31:b3:e7:17:e2:e2:9c:d4:e3:ab:3f:1c:d1:30:
a3:da:53:b6:67:d2:af:dc:9e:ac:a9:a8:29:3d:8a:
97:47:bf:bb:28:e3:34:78:b6:3b:31:0d:48:82:05:
fc:86:25:16:c9:6a:47:c6:3b:da:14:87:c1:f0:ec:
1e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CA:A3:B8:59:DF:B2:B3:44:2D:51:E0:04:3B:9A:F4:97:42:6D:F6
X509v3 Authority Key Identifier:
keyid:43:DE:18:3F:14:A3:F2:4F:9B:86:D0:44:F8:77:29:86:80:B5:12:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q94YPxSj8k-bhtBE-HcphoC1Ers.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:4b:8d:4c:ca:39:a2:05:74:a4:5f:07:fa:2c:b6:72:ea:c6:
ec:a2:d7:14:c5:6d:98:61:88:c3:96:88:f8:96:5f:dc:80:e8:
6b:f8:c4:8f:d4:e1:2d:ea:07:c1:55:5e:56:70:a5:5a:d1:9e:
44:b0:96:42:a5:fa:55:38:93:3d:da:dd:a8:a0:e6:3d:a1:e5:
13:7c:4d:cf:ad:94:d2:92:c1:3b:ca:26:05:ec:5c:c2:83:11:
08:de:3c:84:45:ce:06:76:65:53:bd:10:e7:3b:cd:ba:24:ff:
90:4b:d2:b2:e9:31:df:e9:e0:f1:90:25:85:8b:c4:e1:33:9d:
1d:dd:53:0e:16:d3:f9:00:9c:d5:e9:4d:10:c8:81:a0:51:45:
db:8c:7c:57:2e:3c:68:81:27:b6:3d:4d:05:a4:cc:c9:a9:63:
7e:be:b8:50:eb:ac:a7:17:df:8a:5a:e6:b6:ba:54:96:05:b6:
7f:d1:3c:71:f2:f3:a2:ac:ca:2b:e1:d5:29:94:3b:92:0c:68:
c6:76:66:f8:05:38:06:b1:11:19:b8:40:e5:8d:bb:a8:34:8e:
2f:98:b9:e9:31:c3:1a:b9:82:e7:76:b9:ee:da:2e:25:c3:da:
d4:9d:ae:db:04:b4:f1:7d:74:8b:51:18:6e:3f:22:1f:af:24:
c5:bd:07:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:03:29 2025 by rpki-client