Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.mft
File: QBMclDl36gqT787s000dXRyxgq8.mft (raw, json)
Hash identifier: 0qqI1YBxnPnI7k1DBFHsu/3ZQFZl/mWcj6pZ3O6gA8g=
Subject key identifier: 3C:60:DF:A0:59:4F:36:A9:BF:DF:7F:9D:28:E5:69:96:5B:78:2E:78
Authority key identifier: 40:13:1C:94:39:77:EA:0A:93:EF:CE:EC:D3:4D:1D:5D:1C:B1:82:AF
Certificate issuer: /CN=40131c943977ea0a93efceecd34d1d5d1cb182af
Certificate serial: 0194BC72DB626A4A87FE7D1F080690BB1152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QBMclDl36gqT787s000dXRyxgq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.mft
Manifest number: 0CD7
Signing time: Fri 31 Jan 2025 13:00:31 +0000
Manifest this update: Fri 31 Jan 2025 13:00:31 +0000
Manifest next update: Sat 01 Feb 2025 13:00:31 +0000
Files and hashes: 1: QBMclDl36gqT787s000dXRyxgq8.crl (hash: uN4Dkh5gjuK33F2ODYKvw4NMZ9e/V35HX1aQ6Vg4GOA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:db:62:6a:4a:87:fe:7d:1f:08:06:90:bb:11:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40131c943977ea0a93efceecd34d1d5d1cb182af
Validity
Not Before: Jan 31 13:00:31 2025 GMT
Not After : Feb 1 13:00:31 2025 GMT
Subject: CN=3c60dfa0594f36a9bfdf7f9d28e569965b782e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c6:3b:02:0f:7e:2e:71:02:54:5b:44:3f:09:
b3:04:23:91:f4:54:1c:cd:80:b7:f7:a0:a8:31:c5:
ac:fa:25:27:3f:9a:cb:22:c5:a2:4b:2c:f7:16:9c:
c6:fe:36:f2:0c:de:f8:16:76:12:c6:99:8e:5d:43:
1c:71:24:b8:f2:61:d9:d3:4f:aa:4a:e0:01:e9:24:
9d:c1:e5:7c:69:df:ce:fa:1b:92:5b:fc:f7:94:4f:
b9:fc:13:d5:e8:bf:93:74:b6:1e:c6:ec:a3:20:90:
15:fd:c4:8e:ab:d8:cd:fd:72:f9:7c:63:f8:86:0a:
76:60:87:ba:d1:3b:98:df:c1:b5:58:4f:8a:1d:d0:
7c:61:ca:5a:50:66:d3:ff:8f:a3:8f:dd:11:fc:6e:
dc:b2:cc:f2:dd:1f:44:53:f8:4f:69:72:35:46:f1:
9c:22:f8:24:f7:80:cb:3b:48:24:d5:87:af:bf:cf:
17:db:90:54:18:84:cf:52:76:02:06:55:91:d5:a0:
83:f5:1b:89:a1:c9:8f:3a:9d:88:dc:de:f0:8d:35:
3a:b5:22:51:c6:01:1d:38:67:8f:63:05:2d:f1:25:
36:f9:70:7a:c2:3f:31:df:87:af:65:44:56:4e:23:
1d:86:36:68:e6:bd:e8:a7:7f:40:b4:18:d5:b8:64:
43:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:60:DF:A0:59:4F:36:A9:BF:DF:7F:9D:28:E5:69:96:5B:78:2E:78
X509v3 Authority Key Identifier:
keyid:40:13:1C:94:39:77:EA:0A:93:EF:CE:EC:D3:4D:1D:5D:1C:B1:82:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBMclDl36gqT787s000dXRyxgq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ad:1a:85:79:dc:49:53:6f:76:31:d4:57:7f:af:b0:12:ec:
09:c5:7d:8e:25:4b:25:09:f8:c4:2a:ac:8b:f6:11:1c:98:39:
68:18:4a:75:0e:56:1d:38:2f:56:2a:7c:75:55:41:ad:d9:80:
b8:5d:0e:3b:c5:f0:ff:02:83:0d:ee:67:7b:8c:9e:af:36:b3:
33:22:a5:88:dd:73:95:2a:ff:60:6e:32:6a:b5:73:af:ae:ff:
ec:7b:13:f0:4b:47:b1:c8:a9:52:e1:26:e4:f2:3d:94:8e:a4:
15:b6:39:78:77:ea:45:9d:6f:a0:1c:33:da:cc:61:be:32:58:
5a:5c:25:b6:ad:c0:d6:8f:65:82:1e:9b:ee:93:92:c0:ce:0a:
39:2f:c3:64:7f:25:62:f2:a6:55:87:bf:78:3c:b1:cb:b6:a5:
08:7c:98:ab:fb:d2:2e:0e:10:65:17:11:86:7f:4e:28:99:bb:
16:32:80:84:58:68:cd:16:e1:d3:00:3c:41:5b:12:e9:ed:32:
83:d1:2e:c2:6d:25:14:fb:68:c7:90:ed:d1:97:2b:09:7a:ad:
e9:e9:f0:05:23:1a:0e:8c:53:43:8e:3a:32:97:43:50:67:5a:
8f:ca:dc:fd:20:a4:d9:70:af:ad:a8:5d:6c:d7:8f:04:ed:db:
0f:f2:9d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:52:37 2025 by rpki-client