Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft
File: Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft (raw, json)
Hash identifier: 9XmqpJP3SCC2rD+IK2ld50Ttezuv6MuPTbXUpRO5OJs=
Subject key identifier: E0:0C:A3:49:EF:FE:B0:4F:14:60:E7:8E:55:FA:49:CD:29:96:C2:68
Authority key identifier: 43:8F:8E:D1:21:BA:30:81:CF:B2:15:FA:AB:50:AE:14:5B:59:0D:D2
Certificate issuer: /CN=438f8ed121ba3081cfb215faab50ae145b590dd2
Certificate serial: 0194BBCE09AFE76C07084EB16543587FDE66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4-O0SG6MIHPshX6q1CuFFtZDdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft
Manifest number: 0D11
Signing time: Fri 31 Jan 2025 10:00:29 +0000
Manifest this update: Fri 31 Jan 2025 10:00:29 +0000
Manifest next update: Sat 01 Feb 2025 10:00:29 +0000
Files and hashes: 1: Q4-O0SG6MIHPshX6q1CuFFtZDdI.crl (hash: YClezuKSiXo5skmtJVv9WOtBhfTI/ihOxoO5ivvIAaY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:09:af:e7:6c:07:08:4e:b1:65:43:58:7f:de:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=438f8ed121ba3081cfb215faab50ae145b590dd2
Validity
Not Before: Jan 31 10:00:29 2025 GMT
Not After : Feb 1 10:00:29 2025 GMT
Subject: CN=e00ca349effeb04f1460e78e55fa49cd2996c268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5e:a6:a9:76:f1:19:79:45:58:08:42:5d:cc:
1e:20:3a:f2:1a:73:9b:7f:6c:e9:da:3c:6e:dd:03:
11:e4:4f:ff:96:33:9f:cf:31:5e:71:66:4f:36:6d:
70:d2:19:e1:83:92:55:73:40:26:76:95:43:48:f5:
4d:13:a4:08:a7:a4:da:0f:f1:66:0d:a4:24:08:ad:
41:cd:cb:64:43:66:01:c3:b3:db:6b:f6:55:7f:a3:
62:9b:fd:e1:d5:21:fd:fd:32:de:0b:b2:73:7b:39:
e3:5f:c0:89:9a:92:f2:ff:48:f8:18:75:c9:b5:ac:
8e:ee:75:b7:81:4c:56:f4:47:af:1a:c7:d3:57:97:
fb:5b:6c:9a:76:eb:b2:55:2c:24:0a:57:01:d0:90:
4c:97:81:bd:7d:4e:66:ac:13:f1:6a:91:af:21:31:
69:11:f3:70:85:39:8d:ba:56:42:92:c0:fc:3c:4b:
70:3a:e7:f5:c1:21:78:73:3e:af:c5:86:3f:74:8b:
e5:26:90:08:9c:a6:05:1c:04:9a:04:41:25:b9:d6:
b8:b7:ca:e4:2d:44:30:7c:9e:ee:58:b3:c7:cc:cb:
ba:94:10:a7:c0:13:97:c6:8c:6b:94:96:94:00:ae:
cb:1b:06:89:54:ea:4e:31:e6:5e:8a:82:c3:b0:e1:
63:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0C:A3:49:EF:FE:B0:4F:14:60:E7:8E:55:FA:49:CD:29:96:C2:68
X509v3 Authority Key Identifier:
keyid:43:8F:8E:D1:21:BA:30:81:CF:B2:15:FA:AB:50:AE:14:5B:59:0D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4-O0SG6MIHPshX6q1CuFFtZDdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:1c:d8:e8:ad:3b:eb:26:39:07:e6:ad:4c:03:91:87:8f:02:
5b:9b:b7:01:c2:7c:40:f9:c5:eb:38:0d:7a:eb:26:d1:a2:f1:
21:de:92:ca:de:12:22:5f:6f:87:c4:9d:f1:e2:41:a2:de:ac:
f1:5f:7b:56:a9:a8:e0:48:b7:51:85:6a:3c:83:56:29:e3:c3:
94:cd:11:c7:db:d8:54:29:e8:4a:09:1c:af:2c:a3:e9:0a:72:
c3:45:40:d0:90:1f:2e:c7:62:8d:f7:bd:66:2f:19:61:1d:74:
b8:18:e7:50:f0:67:ac:ac:44:f2:a8:66:51:9d:10:83:e6:0c:
5b:4a:de:58:8c:db:2d:29:dc:d2:1f:ae:40:d2:fd:8c:43:14:
5c:58:8f:a0:c8:e1:cd:88:a4:dc:a8:f0:ad:c5:46:0a:8d:3a:
4d:93:07:27:ac:89:cb:9d:e1:10:a4:f4:3b:45:b5:2d:b8:ff:
50:c8:30:d1:cd:de:93:55:ff:47:34:31:90:6e:69:9b:8f:b2:
9f:25:87:e5:dd:58:a1:3a:aa:3d:82:d6:39:e5:47:19:81:de:
89:96:dc:73:48:3d:67:35:89:c0:1c:89:e0:b7:ba:4b:ae:38:
48:1e:aa:80:68:42:29:4a:88:02:96:86:62:b2:c8:a0:f5:97:
60:e8:e5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:30:10 2025 by rpki-client