Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
File: qKI6ziwGf44hL_NZ2pbCBYtks-o.mft (raw, json)
Hash identifier: THMAYn33ZplqntFPn6gM4jO7VuLRg1xUN8vh22JNnRc=
Subject key identifier: 74:02:93:4B:0B:54:D0:C7:7B:DF:6A:50:DF:14:69:96:6F:39:98:04
Authority key identifier: A8:A2:3A:CE:2C:06:7F:8E:21:2F:F3:59:DA:96:C2:05:8B:64:B3:EA
Certificate issuer: /CN=a8a23ace2c067f8e212ff359da96c2058b64b3ea
Certificate serial: 0194BC72F29FF2E1175D5009717F509456A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKI6ziwGf44hL_NZ2pbCBYtks-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
Manifest number: 045D
Signing time: Fri 31 Jan 2025 13:00:37 +0000
Manifest this update: Fri 31 Jan 2025 13:00:37 +0000
Manifest next update: Sat 01 Feb 2025 13:00:37 +0000
Files and hashes: 1: qKI6ziwGf44hL_NZ2pbCBYtks-o.crl (hash: Oq+Nh+9gqsGFRCFGNwbEOqe1Gqagy6HOr4rSsPxLqqk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f2:9f:f2:e1:17:5d:50:09:71:7f:50:94:56:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8a23ace2c067f8e212ff359da96c2058b64b3ea
Validity
Not Before: Jan 31 13:00:37 2025 GMT
Not After : Feb 1 13:00:37 2025 GMT
Subject: CN=7402934b0b54d0c77bdf6a50df1469966f399804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2e:d7:f9:38:2b:cc:d8:f8:ae:56:bd:9c:13:
cc:3e:63:1b:f7:0a:9d:12:bc:cf:14:48:96:7c:ee:
a0:96:1d:23:d5:6b:c0:c6:1f:64:42:1c:7b:49:50:
ed:95:4c:5c:fa:58:de:db:c3:30:6a:51:d5:9e:72:
f0:6f:f8:e4:6c:bb:8b:8c:d0:89:b4:c2:ad:5e:15:
dc:02:68:60:49:8a:71:47:6a:48:40:0e:d6:cf:5a:
f3:f9:51:3c:e1:e6:d9:4c:bf:31:79:40:84:5d:3c:
3f:85:5a:81:aa:22:a4:1e:e0:af:7f:64:2d:52:49:
7e:17:0e:2c:be:03:3f:88:d0:2d:2c:63:ff:07:61:
ef:6a:2d:a3:48:95:a7:9e:80:26:50:4e:ce:9c:9e:
b7:44:6c:7f:09:1c:4d:3b:33:c0:02:d4:0e:7f:08:
7a:39:f8:bf:fd:15:4e:80:f2:59:d5:cf:92:e0:26:
fb:8c:24:64:01:f0:25:6c:80:e5:46:61:14:d7:c4:
76:13:79:dc:1c:73:24:a8:69:62:a8:a2:79:b7:8c:
0a:a1:e5:9f:09:b9:5d:cc:6f:ea:03:4d:9f:5d:a6:
f2:cc:c7:7c:ea:83:9d:0d:d1:a6:90:de:60:ee:36:
7b:26:15:10:0f:f2:f5:e7:82:6f:52:59:73:b1:84:
d8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:02:93:4B:0B:54:D0:C7:7B:DF:6A:50:DF:14:69:96:6F:39:98:04
X509v3 Authority Key Identifier:
keyid:A8:A2:3A:CE:2C:06:7F:8E:21:2F:F3:59:DA:96:C2:05:8B:64:B3:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKI6ziwGf44hL_NZ2pbCBYtks-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:99:b3:bc:d1:a7:39:fb:39:e5:90:d5:3b:2e:00:f8:66:92:
c6:84:c5:a5:87:80:2f:32:f0:0c:91:a7:e0:ed:55:3d:fa:2e:
d1:28:12:e6:70:a7:00:03:8b:33:d4:80:50:e5:2b:74:4a:58:
b3:eb:2e:9d:fc:50:9f:34:fe:00:67:f3:48:e9:51:fc:d7:66:
9a:be:1b:fe:03:ec:f4:ce:cd:20:f1:c3:44:d1:dc:8a:e7:d7:
b7:6d:85:84:b0:fb:8d:ba:8f:c9:70:83:56:0c:f4:2f:2c:48:
42:1e:a1:e3:61:8e:c5:9c:9f:a8:fa:cf:a5:ff:89:6f:ef:d7:
f4:a7:c6:92:6b:bb:94:db:3f:48:fb:02:a5:02:4c:3b:d4:c0:
b0:44:ea:f8:de:17:fa:d9:84:2b:d8:bf:b7:9d:8d:01:46:38:
b0:5c:d2:81:2c:41:c8:2e:91:b2:14:64:1b:54:56:1a:0b:75:
2f:46:94:19:77:84:49:d9:f0:e0:cc:80:61:e8:72:6f:40:2e:
18:b6:28:2f:4b:f0:90:39:cf:2b:4e:4b:cf:09:af:7b:4f:98:
27:73:58:04:e2:ee:7a:17:29:df:d6:7d:c0:05:5c:e6:e5:82:
1a:c7:08:3e:7f:b1:04:09:de:b0:ba:d6:36:25:13:11:d9:0b:
58:40:1e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:22 2025 by rpki-client