Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft
File: qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft (raw, json)
Hash identifier: UPlU7Ccwtp6+9ZM+CRxriSNX7ta7wNk7dwI9mQOrt0E=
Subject key identifier: FE:B9:C6:E4:5E:95:AE:1F:2A:22:06:4E:F4:5B:51:84:16:CF:F7:65
Authority key identifier: A9:24:0F:02:7A:94:09:22:9C:59:FF:63:0A:A2:A8:0F:93:78:A9:3F
Certificate issuer: /CN=a9240f027a9409229c59ff630aa2a80f9378a93f
Certificate serial: 0194BD17CBA10AD64F6908F9549A8F635656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qSQPAnqUCSKcWf9jCqKoD5N4qT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft
Manifest number: 0F7D
Signing time: Fri 31 Jan 2025 16:00:40 +0000
Manifest this update: Fri 31 Jan 2025 16:00:40 +0000
Manifest next update: Sat 01 Feb 2025 16:00:40 +0000
Files and hashes: 1: qSQPAnqUCSKcWf9jCqKoD5N4qT8.crl (hash: b4nqRhRf+CXErw4gUVD6MsuhMpRjvbgdkReCew56Hhw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:cb:a1:0a:d6:4f:69:08:f9:54:9a:8f:63:56:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9240f027a9409229c59ff630aa2a80f9378a93f
Validity
Not Before: Jan 31 16:00:40 2025 GMT
Not After : Feb 1 16:00:40 2025 GMT
Subject: CN=feb9c6e45e95ae1f2a22064ef45b518416cff765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9c:0d:da:9f:0e:5b:97:c8:ff:73:e1:46:4b:
4d:3d:97:10:ae:54:fe:20:f3:4b:36:c3:2b:c1:aa:
55:bb:5f:8e:6b:fb:88:58:41:90:f8:3d:4a:98:d0:
ef:29:6c:a4:11:4d:f7:55:62:11:2c:89:86:ec:79:
19:ad:20:b9:b1:cb:98:18:db:0c:6e:99:7d:db:16:
e5:18:1d:6b:3a:a1:ce:10:14:d2:88:1b:bf:6c:7c:
91:8c:38:7d:f3:9a:5e:ee:e2:bd:be:fe:58:42:eb:
4a:3d:b1:8f:b2:b3:1d:ee:e8:07:16:a5:42:47:0c:
92:3b:0e:ac:14:1f:88:e5:a9:81:e8:b1:cd:72:7f:
38:2f:85:4b:35:a7:24:1c:fb:61:1c:01:7b:b2:ee:
0c:6f:66:ed:17:f6:97:98:5d:22:a9:30:14:47:91:
8b:1d:76:24:2f:65:15:73:ed:8b:e8:66:1c:3f:5b:
16:00:f5:1c:5d:cd:39:31:82:77:52:79:a0:4c:61:
64:c4:66:8b:71:2c:f7:5b:46:bc:4c:59:2e:e0:4f:
29:f0:33:02:ae:16:1b:5d:95:b5:26:30:75:53:92:
7f:6f:de:de:7a:b4:03:28:30:53:a1:ff:78:5b:f9:
a8:22:bd:a0:8e:80:0f:ac:cf:73:0a:21:5a:b0:82:
06:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B9:C6:E4:5E:95:AE:1F:2A:22:06:4E:F4:5B:51:84:16:CF:F7:65
X509v3 Authority Key Identifier:
keyid:A9:24:0F:02:7A:94:09:22:9C:59:FF:63:0A:A2:A8:0F:93:78:A9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSQPAnqUCSKcWf9jCqKoD5N4qT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:27:3e:dd:6b:92:37:23:61:6d:4c:67:30:93:30:50:26:a4:
b1:c7:9f:83:64:b5:a2:0e:8e:1d:f9:a0:9e:51:4c:27:02:26:
e2:d0:5f:d6:23:7b:be:2b:81:3c:57:6f:51:0d:58:e7:bf:f6:
59:9e:c5:18:0d:23:23:ff:0c:d7:cb:d9:20:e2:28:d0:c0:8a:
a7:ce:76:7a:08:de:fd:58:e8:a1:8d:ef:8b:94:a8:1d:24:dc:
97:0d:03:80:58:23:da:91:83:16:f3:71:de:46:e1:77:e9:95:
0a:53:08:30:a8:bf:4f:54:16:65:62:e9:04:61:28:b6:d3:22:
8a:b8:6e:36:a9:93:70:7f:27:da:8c:39:af:77:35:3c:55:81:
85:6d:25:46:a0:5b:7b:d0:a7:21:bc:0b:76:4b:07:fa:a1:57:
c4:86:d3:15:8b:82:51:12:e2:e7:74:4b:4a:eb:4b:11:76:46:
67:e3:00:33:96:35:f2:94:2f:ef:cf:f4:3f:26:a8:84:c3:fa:
0c:4d:02:13:d8:0d:58:47:02:a9:33:90:bd:1c:0c:d3:12:33:
84:bb:3c:c5:94:67:99:6d:c6:8d:30:13:93:9f:2c:75:8d:67:
3d:cc:a4:06:1a:1d:27:c6:a6:8c:2e:61:7c:55:8a:9e:97:fa:
df:4b:d9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:24 2025 by rpki-client