Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
File: E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft (raw, json)
Hash identifier: FfDWfL29wBVC5/ah+yrTounMA3Ix1u4RCwRavZ/tMEQ=
Subject key identifier: 34:08:93:CB:74:8B:06:B1:E0:FC:FC:58:2F:07:BF:E4:14:B8:DD:AD
Authority key identifier: 13:74:3D:30:7A:8B:72:AC:53:2F:4C:D8:83:F0:C9:42:BA:D0:F4:BE
Certificate issuer: /CN=13743d307a8b72ac532f4cd883f0c942bad0f4be
Certificate serial: 0194BCE0D241AA1DAED394EC666ACB44563E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
Manifest number: 03AC
Signing time: Fri 31 Jan 2025 15:00:37 +0000
Manifest this update: Fri 31 Jan 2025 15:00:37 +0000
Manifest next update: Sat 01 Feb 2025 15:00:37 +0000
Files and hashes: 1: E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl (hash: hka5cu67oet2FsM2Hl3p2DiPd78E2vnSS0uGM+C/FVs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d2:41:aa:1d:ae:d3:94:ec:66:6a:cb:44:56:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13743d307a8b72ac532f4cd883f0c942bad0f4be
Validity
Not Before: Jan 31 15:00:37 2025 GMT
Not After : Feb 1 15:00:37 2025 GMT
Subject: CN=340893cb748b06b1e0fcfc582f07bfe414b8ddad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:08:0d:18:c2:93:01:77:1e:0b:6b:d7:c5:05:
55:34:bd:69:4d:a2:c7:8f:52:a7:03:eb:eb:ab:5b:
2d:1e:c1:ff:04:a8:00:09:bf:eb:9a:34:24:3d:90:
ea:49:8e:b9:31:f8:af:81:6e:a8:78:a1:45:e5:6a:
e6:ee:11:9c:e2:a2:6b:df:41:db:03:8f:f2:5f:29:
d5:16:ef:74:db:b5:5a:f2:fd:d2:f2:4e:d7:d4:04:
e7:83:63:29:82:72:1d:cd:78:81:56:39:0e:43:19:
56:d5:ec:fd:dc:23:94:80:6c:54:87:43:e8:a1:9a:
a1:71:9b:d3:b4:25:61:d0:fe:8d:f4:15:55:d2:56:
60:a2:db:2d:92:89:1d:71:2d:f4:fd:02:7e:51:99:
11:52:00:c5:dc:e9:79:c0:c9:50:30:0e:5b:3c:15:
eb:e3:33:86:5b:80:dd:60:d4:d8:da:f3:de:d0:ac:
d0:c3:4f:cc:e7:d2:0d:4b:2f:5f:47:ea:be:b4:87:
74:c9:72:1d:c4:00:71:da:e0:84:96:b0:84:31:df:
12:c2:4e:3a:a5:1d:85:cb:91:de:22:be:82:36:f7:
d8:1e:05:b6:34:15:ab:0a:d7:43:2d:b4:a4:84:52:
6f:ea:dd:ab:bc:48:b5:1b:dc:a6:c5:b0:07:99:c6:
20:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:08:93:CB:74:8B:06:B1:E0:FC:FC:58:2F:07:BF:E4:14:B8:DD:AD
X509v3 Authority Key Identifier:
keyid:13:74:3D:30:7A:8B:72:AC:53:2F:4C:D8:83:F0:C9:42:BA:D0:F4:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ff:06:ad:7f:12:af:e0:9b:c9:77:b9:f4:b4:ab:0c:83:59:
6b:a0:f3:53:0c:41:ae:fd:c8:d2:4d:fb:88:68:ed:d7:db:5d:
79:1e:5f:7a:d1:23:fc:73:60:ae:5f:0c:78:c4:a4:bd:82:70:
15:5e:b0:66:44:28:71:ec:37:a4:73:59:dd:6a:94:01:44:a0:
da:43:a7:5c:3c:10:00:c5:d5:0d:79:87:88:49:8d:65:c4:6d:
86:41:1d:67:aa:d1:11:a6:7a:69:ae:b8:bb:88:53:e0:31:69:
9b:12:68:ad:a5:6d:3b:a0:bb:4f:43:c8:d4:d5:94:5b:4f:7f:
cb:e2:31:93:b1:d3:d9:e3:64:12:55:2a:d8:c5:c8:5c:c5:d3:
f4:81:91:7d:0b:21:b3:dc:67:14:06:46:05:54:ca:04:19:e4:
df:cd:6f:f7:d6:c3:0d:2a:a0:16:48:3b:ed:13:7b:95:c4:de:
6a:62:36:da:e9:0d:50:67:cb:74:ce:5a:2b:1b:d6:50:a0:1e:
8f:7e:74:5c:9a:f5:0b:cf:a8:44:da:e4:f4:6a:c3:e3:24:18:
72:34:40:5e:57:31:44:2d:96:97:80:29:a4:5b:19:40:6b:c8:
e6:ed:74:91:f3:b2:f1:e1:59:da:86:73:da:6c:05:52:a5:07:
fd:8a:46:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:27:37 2025 by rpki-client