Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
File: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft (raw, json)
Hash identifier: 7hdvsBNER32BEJWKz+xiKgof2miyws+AXu8OSvMrpXo=
Subject key identifier: 01:D4:02:46:1D:F1:DB:7C:74:00:3D:5B:35:DA:47:59:D6:38:AA:58
Authority key identifier: 43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
Certificate issuer: /CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Certificate serial: 0194BD4EBC4FA250906B49048D003505E1C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
Manifest number: 090C
Signing time: Fri 31 Jan 2025 17:00:41 +0000
Manifest this update: Fri 31 Jan 2025 17:00:41 +0000
Manifest next update: Sat 01 Feb 2025 17:00:41 +0000
Files and hashes: 1: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl (hash: 6HUw37A/BFy/Qd/ScuiQGwL97dhkb9nzSi7ek3BRriU=)
2: qM0zHnDHmCB87MJblo3SPkQV0l8.roa (hash: ghiuWVRz4dZZF/5w9C3wckrnenvE19FZlWa9Xg0iyUQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:bc:4f:a2:50:90:6b:49:04:8d:00:35:05:e1:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Validity
Not Before: Jan 31 17:00:41 2025 GMT
Not After : Feb 1 17:00:41 2025 GMT
Subject: CN=01d402461df1db7c74003d5b35da4759d638aa58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:75:c5:95:12:49:99:9e:69:72:b6:7a:d5:f2:
12:22:19:09:2e:1c:5a:b8:08:4e:ab:14:3b:66:f8:
2c:d1:44:4a:68:61:49:4a:cd:16:9c:f2:40:0a:43:
05:20:17:78:18:7d:9e:17:4d:96:39:19:2d:e8:7c:
64:c9:95:06:f7:bc:ee:2a:cb:f6:d6:76:c5:df:3b:
52:86:3d:02:cb:52:0a:a5:3d:64:21:67:fd:29:d8:
16:59:bb:b4:5f:1d:66:74:69:97:48:63:88:50:5f:
82:f7:32:b2:99:c2:05:80:6b:1b:c6:c3:93:d1:76:
46:68:ba:f7:f8:fc:38:92:f4:8d:24:d1:1f:70:04:
4b:2a:64:f0:20:c8:55:72:5b:c2:a8:15:8e:5a:f8:
50:e6:3d:5a:27:7e:c7:02:ca:94:c3:15:59:f7:9b:
d7:58:da:3d:75:fb:de:fe:0a:ba:90:96:d5:c4:18:
2d:f1:f9:4d:a5:d5:05:b9:6b:c3:df:c5:ca:d8:2f:
83:50:4a:53:87:9c:12:fe:53:1f:b8:d2:1d:2d:f9:
17:15:ae:67:60:a9:5f:f0:3b:d5:70:99:f7:c3:ab:
72:f3:de:8d:2e:5b:1c:7f:2f:c2:7c:40:de:49:6e:
56:9f:4e:91:42:f1:36:88:0b:c0:99:3f:03:29:81:
57:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D4:02:46:1D:F1:DB:7C:74:00:3D:5B:35:DA:47:59:D6:38:AA:58
X509v3 Authority Key Identifier:
keyid:43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:d0:59:0b:31:66:cb:75:89:11:5a:fc:78:2e:ca:c7:b2:59:
9b:3e:72:e2:30:a6:24:5a:d3:77:e9:d5:92:a8:e1:e8:92:a6:
e6:19:ba:60:ee:c2:b6:a5:ea:87:55:68:e9:0c:4b:ba:06:4a:
55:01:45:db:0d:de:97:46:28:41:4e:03:78:79:b2:57:f6:13:
38:42:a4:5d:ac:15:4a:a1:8c:9c:f2:d2:a5:75:f9:21:1e:e9:
17:8e:65:e7:70:99:b9:c3:d9:53:03:21:84:fa:8d:c5:d7:fb:
81:c9:3d:3d:ac:21:5e:03:43:98:82:cf:52:68:db:0e:63:42:
cb:c8:d9:ce:de:a8:ad:2a:6c:ed:ff:d6:a7:9b:ab:c2:9f:06:
c2:f7:18:c0:91:78:de:31:9d:47:b2:c3:12:58:b6:47:00:d0:
8b:68:fe:7d:52:a4:cc:da:a4:95:59:e7:0e:00:a0:0a:45:d3:
68:66:0b:9d:4a:09:eb:e0:77:48:0b:05:00:1c:7c:e3:6f:6a:
d7:3e:4b:75:d0:4b:54:cc:c5:8a:0d:8c:e9:af:a3:f7:57:e2:
b9:a1:39:6b:b9:6d:a2:57:b8:56:3e:41:f1:18:bd:05:40:3f:
a4:a9:5d:75:0d:82:68:e1:f7:d6:86:fa:ed:76:54:d4:9f:7b:
fa:4f:e5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:02:42 2025 by rpki-client