Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
File: QX7UHwrf3xmnFhTjkEwPCEmXklA.mft (raw, json)
Hash identifier: wx39sY3bR1f9x+8VYPyX8p02KjhgjOZmF2mgMpPN1qU=
Subject key identifier: 66:E8:0B:4F:64:FC:29:EB:EF:47:83:40:00:C3:98:09:86:0E:41:31
Authority key identifier: 41:7E:D4:1F:0A:DF:DF:19:A7:16:14:E3:90:4C:0F:08:49:97:92:50
Certificate issuer: /CN=417ed41f0adfdf19a71614e3904c0f0849979250
Certificate serial: 0194BBCEB7EEF24A6AA95081EC41EFAEE83F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:01:14 +0000
Manifest this update: Fri 31 Jan 2025 10:01:14 +0000
Manifest next update: Sat 01 Feb 2025 10:01:14 +0000
Files and hashes: 1: QX7UHwrf3xmnFhTjkEwPCEmXklA.crl (hash: jY+/U+7IAxqbVeouyZBjEuIp40u5222XT0Gc90ywcQw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b7:ee:f2:4a:6a:a9:50:81:ec:41:ef:ae:e8:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417ed41f0adfdf19a71614e3904c0f0849979250
Validity
Not Before: Jan 31 10:01:14 2025 GMT
Not After : Feb 1 10:01:14 2025 GMT
Subject: CN=66e80b4f64fc29ebef47834000c39809860e4131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c4:8f:6a:1d:78:e5:35:a1:5f:54:39:22:8e:
e7:4f:56:86:2b:39:24:6d:ed:5e:d5:f5:6a:14:2e:
ef:4d:63:18:a9:31:45:fe:07:d5:0a:e9:cd:87:88:
f2:2d:a6:2c:fe:22:c5:42:f1:c3:be:5e:66:f1:3a:
a8:b0:f6:8d:f7:b1:09:e8:0c:85:29:23:33:ad:af:
ff:84:56:70:72:8a:55:37:9c:ca:09:5e:6f:5c:bc:
6d:63:1a:74:89:4d:59:02:41:09:ed:81:46:b2:c9:
1b:d9:77:0a:61:02:ef:8c:60:66:43:df:85:f8:88:
90:8b:d3:64:fc:b3:45:4c:3e:dc:c8:0b:6b:32:f4:
43:f9:fb:a8:3e:c1:b5:4f:82:4c:78:a2:21:0f:c8:
48:7d:b0:a6:e4:87:8d:76:5a:40:fb:41:78:c6:19:
3a:f9:00:d0:dd:ff:46:68:0c:0c:f9:8e:4c:d1:9f:
1e:01:de:af:a0:3e:23:2f:99:7e:86:13:69:d4:88:
0e:35:2b:84:6b:40:63:b7:8d:59:d6:1c:d6:ba:ee:
8b:95:fd:7f:b3:20:2b:79:af:83:bb:42:1c:cd:27:
c3:64:2d:40:8b:c7:62:21:a0:e0:76:8d:68:c6:de:
70:c7:bc:58:50:39:d1:f4:cf:0f:16:cb:6f:7d:2a:
64:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E8:0B:4F:64:FC:29:EB:EF:47:83:40:00:C3:98:09:86:0E:41:31
X509v3 Authority Key Identifier:
keyid:41:7E:D4:1F:0A:DF:DF:19:A7:16:14:E3:90:4C:0F:08:49:97:92:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ce:e5:55:8d:af:32:02:4a:54:72:7f:db:81:0f:e7:d9:15:
6c:de:c5:d6:dd:55:c8:d6:47:ce:76:0e:5e:0a:06:d9:08:6b:
64:36:45:9e:d0:1f:ef:2c:a9:9b:40:bf:a4:a9:fb:d1:e1:d9:
e3:3d:5b:b8:95:16:44:6b:4b:a2:d4:71:b1:f0:0c:8c:54:72:
75:0e:fb:d4:9e:01:a8:b8:e4:77:d4:67:92:89:4d:7a:fc:45:
e9:40:1a:52:1f:2a:e3:42:e6:9f:c4:b8:c8:18:eb:a0:8d:fe:
3d:77:e5:c0:92:32:08:55:12:98:dc:40:a0:70:22:8c:5d:37:
34:76:dd:b4:f9:11:bf:2d:ac:ad:20:4b:72:c6:cd:07:80:37:
4a:28:6c:80:05:c5:88:69:7a:4b:d9:da:8a:2b:6d:9b:ba:21:
f6:54:96:05:6e:de:fe:cf:61:c8:ba:93:aa:6a:b5:44:3e:37:
39:50:92:07:26:c7:2f:60:2f:3d:1e:c7:f9:b5:04:ca:1b:5b:
d3:17:70:cd:f2:f7:6b:af:b7:2c:88:43:6e:78:97:43:be:5f:
7f:d7:9f:ed:bc:9b:8f:e4:35:89:cc:7f:11:bf:a8:bb:34:09:
46:07:ac:d1:7f:1b:85:d4:ba:b1:24:6e:a6:e2:ad:57:ef:6c:
b8:5c:26:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:54:36 2025 by rpki-client