Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
File: qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft (raw, json)
Hash identifier: PdYzadv/fynzpDxdVnfsftcvfl9mtRcCEBTYbH+z5DE=
Subject key identifier: A3:DB:73:17:E2:73:A2:80:17:40:D1:0B:53:D9:A6:55:91:F2:A5:7F
Authority key identifier: A8:1C:F3:46:47:D7:E0:FB:D9:08:51:0A:82:23:C9:23:C7:92:8F:E9
Certificate issuer: /CN=a81cf34647d7e0fbd908510a8223c923c7928fe9
Certificate serial: 0194BCAA36D5E6A2E057F1FE9536B7642A88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBzzRkfX4PvZCFEKgiPJI8eSj-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
Manifest number: 1140
Signing time: Fri 31 Jan 2025 14:00:59 +0000
Manifest this update: Fri 31 Jan 2025 14:00:59 +0000
Manifest next update: Sat 01 Feb 2025 14:00:59 +0000
Files and hashes: 1: qBzzRkfX4PvZCFEKgiPJI8eSj-k.crl (hash: vLEECtcgHEu+8i4Htl/204glD43LiCNSTrO16Jn7Zxo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:36:d5:e6:a2:e0:57:f1:fe:95:36:b7:64:2a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81cf34647d7e0fbd908510a8223c923c7928fe9
Validity
Not Before: Jan 31 14:00:59 2025 GMT
Not After : Feb 1 14:00:59 2025 GMT
Subject: CN=a3db7317e273a2801740d10b53d9a65591f2a57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:00:ec:b9:bc:fd:74:89:4c:e1:7a:4e:ab:0e:
28:9b:71:df:da:d0:61:cf:15:8a:bc:ab:19:a4:f2:
c2:98:ad:73:c2:d4:14:9a:45:a1:1a:ba:59:51:4a:
72:6b:c2:87:46:73:9b:d4:49:b6:dd:9f:f9:6f:b5:
4d:46:c1:60:36:80:04:f6:9e:fa:bf:18:0f:fe:cc:
ab:8a:5f:a5:d1:1e:bd:77:72:f1:32:3c:a8:10:4b:
58:0b:c3:b9:92:d3:d0:0e:67:e8:b1:c4:88:6c:b1:
2b:09:ab:9b:d3:24:52:1b:cb:f1:a7:7c:75:d2:5d:
b4:fe:bc:0e:99:23:05:7c:10:35:6e:d1:77:5d:33:
cc:7a:39:a5:58:2e:d1:a1:1f:a8:55:1f:c9:03:46:
ba:7c:d4:82:53:c5:78:75:50:17:1b:7c:96:10:95:
08:e0:f9:e8:a2:96:99:29:87:fe:87:ad:f5:85:b6:
07:ba:28:b8:7b:92:3c:f7:35:7a:bd:14:e1:12:2c:
44:c2:73:1c:2e:54:b0:62:d7:97:08:5f:42:06:92:
6d:aa:c5:58:53:81:b2:f2:c9:aa:cd:93:16:5f:1f:
b4:d7:6b:0a:ab:8f:16:38:0f:15:e2:bd:43:29:8e:
a1:79:64:4b:dd:56:21:e2:4b:8e:f1:75:f5:19:31:
8a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DB:73:17:E2:73:A2:80:17:40:D1:0B:53:D9:A6:55:91:F2:A5:7F
X509v3 Authority Key Identifier:
keyid:A8:1C:F3:46:47:D7:E0:FB:D9:08:51:0A:82:23:C9:23:C7:92:8F:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBzzRkfX4PvZCFEKgiPJI8eSj-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:8f:18:a7:6b:85:22:12:c8:92:7c:42:78:41:b1:98:29:4c:
b0:6e:b0:f7:39:18:c1:c3:e1:fe:41:71:94:32:08:fe:13:cd:
b3:a4:62:7d:66:cd:6d:1d:25:e0:a4:f7:c2:f7:b9:39:15:ef:
62:50:b1:b6:3b:81:9a:6e:ef:ce:60:7f:70:bb:de:3b:66:b4:
3d:9d:32:d3:d0:27:27:78:44:67:c4:99:dc:f8:63:21:ea:98:
e5:2e:e7:46:f6:39:7a:1f:20:e0:b3:d9:90:c8:b8:af:0c:fc:
e5:c1:66:7e:10:a0:1f:da:f9:1b:b1:1e:81:61:08:ed:d4:91:
3e:32:a8:84:75:36:e7:c1:a2:f3:28:0d:db:2e:04:61:b2:b9:
b2:1e:30:a4:e0:ed:4d:9d:3f:c3:8b:f6:3f:85:b7:1a:0c:48:
69:ce:1a:82:e9:a4:ff:96:7c:13:cb:4f:f7:a8:e1:21:f9:7c:
61:04:f4:3f:de:93:ae:c9:61:bc:af:78:0f:3d:93:a1:4a:a9:
42:36:a6:4b:7e:41:a4:7f:00:63:ff:51:1d:cb:d8:ed:ad:20:
1c:5d:e4:eb:92:8b:5b:7f:d6:38:5a:c8:ab:f2:8c:1b:c3:10:
28:af:7b:93:33:57:99:3a:05:7b:6b:44:d6:5c:f1:2b:67:af:
88:4e:8d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:44:17 2025 by rpki-client