
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
File: qjJY2XybwoTUhXvO498JCDa80hI.mft (raw, json)
Hash identifier: 4/OYHs69iyC7o5VZtj4UKtRHo9B2xhl/OWUQecFDEqU=
Subject key identifier: 71:4A:4D:AF:CE:7A:82:AC:AD:F6:BE:82:15:D3:A8:8A:51:D4:B1:DD
Authority key identifier: AA:32:58:D9:7C:9B:C2:84:D4:85:7B:CE:E3:DF:09:08:36:BC:D2:12
Certificate issuer: /CN=aa3258d97c9bc284d4857bcee3df090836bcd212
Certificate serial: 0194BBCE6455AED792A3B7872A42541A7DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
Manifest number: 1363
Signing time: Fri 31 Jan 2025 10:00:52 +0000
Manifest this update: Fri 31 Jan 2025 10:00:52 +0000
Manifest next update: Sat 01 Feb 2025 10:00:52 +0000
Files and hashes: 1: qjJY2XybwoTUhXvO498JCDa80hI.crl (hash: OjIj8/5hPDLGVelXzL5/DHbnh/SuDPRdGkyFs2P981c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:64:55:ae:d7:92:a3:b7:87:2a:42:54:1a:7d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa3258d97c9bc284d4857bcee3df090836bcd212
Validity
Not Before: Jan 31 10:00:52 2025 GMT
Not After : Feb 1 10:00:52 2025 GMT
Subject: CN=714a4dafce7a82acadf6be8215d3a88a51d4b1dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9e:78:22:9a:1b:12:a8:9f:73:29:45:0d:09:
87:4f:cc:d4:30:c2:ed:5c:05:a9:a8:8c:30:e4:e7:
a1:dd:3c:1b:e3:8c:a5:28:ca:9a:73:19:58:51:52:
9e:69:5d:c9:45:4e:9b:e7:5f:c1:be:d9:d8:ef:93:
7e:e8:ec:fd:b5:55:54:f2:ec:46:c3:21:e7:c9:14:
b8:35:26:20:4c:86:ed:54:b7:a4:88:94:98:13:04:
d6:c2:3d:e5:e6:7d:af:53:06:94:45:1d:9f:0e:d5:
da:bd:fa:9e:3e:b6:96:59:f4:52:c1:9e:5e:34:cb:
c1:d1:94:36:ae:05:db:e1:c7:71:c6:10:4d:38:69:
65:36:98:ea:c5:2f:06:6d:ac:e5:38:14:14:2f:ca:
41:d3:f1:e3:25:9b:59:ac:28:ad:1e:4e:2b:d5:4b:
b1:02:a9:d8:d3:ee:8e:1e:06:49:8c:de:c8:a7:ec:
13:d7:46:d2:94:25:f2:53:cc:02:05:ec:ab:f0:1c:
50:43:71:c7:8e:d3:29:54:fa:36:49:1c:2f:23:72:
82:65:09:9a:6e:18:2e:d9:fd:f1:36:4e:9c:10:a8:
a6:4a:df:f3:ed:9e:6f:1f:e2:33:ff:c6:88:29:4a:
3e:f4:0c:e9:21:41:2e:88:57:b9:19:7d:ce:1e:82:
19:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4A:4D:AF:CE:7A:82:AC:AD:F6:BE:82:15:D3:A8:8A:51:D4:B1:DD
X509v3 Authority Key Identifier:
keyid:AA:32:58:D9:7C:9B:C2:84:D4:85:7B:CE:E3:DF:09:08:36:BC:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:af:f9:a2:60:4e:68:90:f3:e2:70:09:32:36:ac:fe:da:13:
b7:2a:6a:88:93:0c:05:1b:3f:b6:b1:ac:48:74:a9:1d:4e:70:
ca:35:a1:dd:76:ff:ff:25:41:af:35:44:66:9a:d2:f1:29:e1:
6a:1b:43:70:a1:96:dd:44:f0:50:15:9a:d4:dd:91:a9:a0:b4:
63:8a:9d:bb:fd:dd:c1:ed:d6:7f:5f:7d:41:59:06:8c:01:1c:
ce:4b:f0:13:d5:8d:de:c7:8a:d9:69:87:8e:37:f0:b4:42:99:
d8:30:35:d3:bd:dd:07:0b:df:aa:07:a3:72:48:ac:06:42:d0:
b1:51:8b:23:cd:e1:6d:79:f2:cd:cd:a2:ca:08:54:af:af:ef:
c3:8f:1b:62:cf:78:7d:11:a4:e1:a8:25:84:ff:6b:82:77:5f:
64:f5:c3:06:0a:2c:ce:e3:9b:eb:b6:7c:11:6d:2d:7d:d5:bf:
2d:2f:34:10:6e:aa:70:5a:24:52:0c:db:ec:1d:0c:6a:fe:ec:
93:4b:7f:c3:65:cb:fb:34:49:e8:f9:f0:fb:08:fa:9b:29:8d:
af:98:2d:54:d1:7f:c0:ba:01:71:51:16:4b:91:01:be:f1:c1:
e8:66:33:fd:70:c5:25:0b:76:57:84:24:75:00:d5:02:09:0e:
8a:8d:85:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:12:27 2025 by rpki-client