Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
File: Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft (raw, json)
Hash identifier: bmVKrRSiwGZqS4ShkHcNy46rHJ214xy3ec9/JqjpdHA=
Subject key identifier: 2C:86:10:01:BB:B0:E9:97:DE:ED:24:17:93:B8:2B:02:B2:B3:35:EA
Authority key identifier: 43:98:F6:24:D5:7F:46:13:C0:BF:65:11:61:C7:56:C3:16:65:9A:B9
Certificate issuer: /CN=4398f624d57f4613c0bf651161c756c316659ab9
Certificate serial: 0194BBCDE2FB101886A9FAEADEF6DB446E7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:19 +0000
Manifest this update: Fri 31 Jan 2025 10:00:19 +0000
Manifest next update: Sat 01 Feb 2025 10:00:19 +0000
Files and hashes: 1: Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl (hash: 98usf0YYBb5u+fa6AMI+ba9T5coiNUJCrJaI34GlSq4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e2:fb:10:18:86:a9:fa:ea:de:f6:db:44:6e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4398f624d57f4613c0bf651161c756c316659ab9
Validity
Not Before: Jan 31 10:00:19 2025 GMT
Not After : Feb 1 10:00:19 2025 GMT
Subject: CN=2c861001bbb0e997deed241793b82b02b2b335ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b2:17:0b:7d:bb:87:20:2c:6b:f2:17:8d:8a:
4c:13:17:71:4c:24:db:98:a1:98:ac:ef:9a:3d:e9:
3e:e1:85:23:78:86:3c:2e:29:54:61:3c:a4:3a:4c:
d8:c9:6d:9f:f3:3d:bb:3b:ad:f6:71:07:14:50:95:
81:f5:b9:d5:4e:fd:f1:47:c2:a6:a5:c8:6c:3c:51:
a4:4f:56:c7:46:72:8c:8f:ae:d4:5e:ee:f7:56:14:
91:e2:38:52:73:6b:b0:95:d7:fb:c2:25:94:02:1d:
8f:e7:40:1b:4c:da:9b:c0:44:7d:ba:44:07:d2:da:
0c:3b:4e:d7:7a:4d:6c:19:1a:20:a3:6b:f3:b8:b3:
70:0f:b5:d4:f9:58:02:09:2c:e8:a1:46:b7:47:0a:
d7:21:77:17:6d:43:8f:12:fe:1f:34:e5:69:0e:c2:
a9:51:4a:7b:15:91:eb:47:92:7c:ce:fe:60:0d:0f:
7a:18:2d:11:9b:7d:7c:5f:4a:fe:50:ae:38:9b:d5:
b3:51:5d:24:9e:63:88:ff:e5:77:b1:d7:be:56:76:
a4:a2:20:f2:d6:32:74:03:52:33:1d:3a:7e:b0:ca:
ee:97:29:72:86:c4:7d:16:fd:a2:86:aa:69:df:b1:
1a:64:82:67:6b:5c:87:5a:6e:89:41:71:48:be:51:
24:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:86:10:01:BB:B0:E9:97:DE:ED:24:17:93:B8:2B:02:B2:B3:35:EA
X509v3 Authority Key Identifier:
keyid:43:98:F6:24:D5:7F:46:13:C0:BF:65:11:61:C7:56:C3:16:65:9A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d5:65:e9:df:1b:c5:88:88:c6:b9:bc:95:5b:63:c9:3b:56:
bf:c4:aa:1f:4d:e0:ac:29:9c:7c:b2:f9:9f:5a:7e:92:ee:e3:
fd:63:b4:b9:d4:78:bc:41:fc:f0:e1:4d:c1:eb:f1:30:19:21:
c6:aa:30:0b:d2:81:bf:94:24:9a:db:77:db:5d:3f:a8:d1:bb:
01:af:f5:a3:9c:49:7d:e9:ba:f6:4a:be:4f:ea:a2:b5:7f:50:
57:ca:b0:e1:ad:8e:b8:fe:25:e8:12:e2:e3:69:66:76:c1:f7:
4e:5c:e3:50:b5:f4:e7:b3:54:5e:b9:b9:6c:19:7d:70:82:70:
aa:eb:a0:53:29:b9:18:f6:0c:a8:1f:0b:1b:54:46:88:82:a0:
87:0d:e4:24:bd:c4:2a:79:ee:01:28:19:fa:aa:10:e6:50:19:
b9:d5:e4:f6:90:63:b3:f6:0c:92:b8:27:8c:a8:3f:c7:ed:fb:
b3:a9:dc:81:bd:d0:6d:1c:1a:af:6b:65:47:79:7d:5c:a4:89:
b3:d1:e0:bf:ed:89:1d:2b:f0:58:32:ec:a3:d8:d4:4a:d5:45:
66:95:67:0b:07:3f:e2:10:d4:b2:83:68:a9:a1:d2:44:ad:7c:
79:d3:83:3d:ab:c2:a2:0a:ea:1f:0e:0b:17:a7:85:3b:15:b8:
b0:67:29:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:36 2025 by rpki-client