Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft
File: qK9MCjctAUVV99TXyJz5lvBRQvU.mft (raw, json)
Hash identifier: E7bfo+yWSj2/+CXr7glMfMnqw+TGBr+HLZ+fbC8wdow=
Subject key identifier: 4B:71:88:A3:71:4D:F1:3D:27:81:66:2B:51:00:C1:26:89:42:E8:C2
Authority key identifier: A8:AF:4C:0A:37:2D:01:45:55:F7:D4:D7:C8:9C:F9:96:F0:51:42:F5
Certificate issuer: /CN=a8af4c0a372d014555f7d4d7c89cf996f05142f5
Certificate serial: 0194BBCE5CC325950BB3C4C8615518595608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qK9MCjctAUVV99TXyJz5lvBRQvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft
Manifest number: 01BD
Signing time: Fri 31 Jan 2025 10:00:51 +0000
Manifest this update: Fri 31 Jan 2025 10:00:51 +0000
Manifest next update: Sat 01 Feb 2025 10:00:51 +0000
Files and hashes: 1: qK9MCjctAUVV99TXyJz5lvBRQvU.crl (hash: ZGR0+ppepTtQGbOXLdI6peXP03lSpAD8kteG4a9aJ8s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:5c:c3:25:95:0b:b3:c4:c8:61:55:18:59:56:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8af4c0a372d014555f7d4d7c89cf996f05142f5
Validity
Not Before: Jan 31 10:00:51 2025 GMT
Not After : Feb 1 10:00:51 2025 GMT
Subject: CN=4b7188a3714df13d2781662b5100c1268942e8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fb:85:27:d7:b4:56:1e:60:91:0f:e7:6f:44:
48:bd:fa:e6:f1:0c:5b:0f:e4:18:ad:cb:9c:2a:2e:
32:6a:ba:7c:71:bd:20:59:a3:16:7e:5f:f2:dc:59:
63:10:3e:f5:f4:b9:f8:29:78:56:c6:5e:24:b8:4c:
3a:41:13:ad:60:63:79:c7:e0:a1:23:14:c2:8e:b0:
6d:71:ec:7f:d5:bb:96:3f:99:8e:15:a3:41:4e:26:
0e:af:34:dd:54:9c:7e:ea:da:a0:af:2f:34:8f:aa:
97:8d:b3:ee:dd:b0:b3:4f:01:f8:ab:d0:24:57:93:
0d:fa:8a:07:a0:5c:04:33:8f:f2:b9:cf:9d:f7:33:
92:16:d0:f1:4a:70:c6:6c:58:d0:ef:89:ba:a5:11:
06:c7:1b:94:d2:2c:96:c9:fd:33:61:83:3c:7e:dd:
1b:47:3b:93:a0:c3:98:ec:2e:28:b9:cf:72:7c:49:
bd:be:4f:b7:22:bc:47:f5:16:79:16:7a:5f:c7:48:
3b:dc:f5:f0:9a:d5:17:b4:8b:c7:6b:c7:14:dc:66:
96:0a:48:85:3c:9b:44:29:a6:3a:0c:b3:4d:59:1d:
eb:20:78:4e:e4:6f:b4:8f:72:41:7f:77:33:2b:bb:
7c:29:a9:de:07:42:0d:91:af:62:7b:1b:8b:ca:c0:
4c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:71:88:A3:71:4D:F1:3D:27:81:66:2B:51:00:C1:26:89:42:E8:C2
X509v3 Authority Key Identifier:
keyid:A8:AF:4C:0A:37:2D:01:45:55:F7:D4:D7:C8:9C:F9:96:F0:51:42:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qK9MCjctAUVV99TXyJz5lvBRQvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ad:11:33:87:a1:09:6f:80:8e:4e:25:d0:d6:eb:ff:44:5a:
0c:a2:dc:11:93:bb:98:03:24:28:1f:7c:94:7a:91:3d:6d:2c:
eb:76:d3:d1:27:f6:c4:ae:54:17:15:e8:5e:d5:c1:1f:0a:a1:
70:8b:d5:ca:10:19:6a:e1:e2:c5:51:59:9f:4c:f4:6f:1e:7c:
34:5d:49:a9:68:84:91:34:ba:ca:c7:e4:6a:b2:94:ad:ed:f3:
75:d7:e1:01:81:c9:72:15:80:76:d7:a3:fa:9a:da:be:43:18:
24:f4:d3:9a:42:00:fb:00:61:39:65:c9:5b:f9:ec:10:5e:0c:
74:6e:d3:2d:34:ec:41:67:85:82:69:7f:37:b1:eb:ec:f9:d3:
95:7f:04:2f:22:83:b0:7f:34:3c:00:d6:5d:35:21:58:4d:4d:
33:25:6b:84:21:bd:29:39:5f:3f:b0:4e:82:ed:f5:f5:71:3b:
94:c6:8b:69:4b:a1:a2:c2:d4:75:5b:72:3a:ab:14:da:01:c4:
46:9b:63:84:b9:69:6f:fa:31:2d:56:68:c1:31:eb:1a:86:ef:
6a:67:d6:b6:49:8b:9d:cd:4a:fc:10:6f:6b:de:03:3b:ad:b6:
97:02:74:3d:2d:bd:38:d6:65:22:9b:82:6d:5f:e3:33:42:31:
f1:c8:94:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:16:00 2025 by rpki-client