Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.mft
File: QnqV1vkbZ2udcauK4RQZQY3jww4.mft (raw, json)
Hash identifier: wQg3uX3hzPFNOWbma8iyxxpvAam6KIUwrDmB3r/X4OM=
Subject key identifier: 9C:12:3B:6C:DE:D0:39:31:A5:CB:FC:66:83:13:9A:B3:68:27:D8:EB
Authority key identifier: 42:7A:95:D6:F9:1B:67:6B:9D:71:AB:8A:E1:14:19:41:8D:E3:C3:0E
Certificate issuer: /CN=427a95d6f91b676b9d71ab8ae11419418de3c30e
Certificate serial: 0194BC72D7E45EFF6C0436FB6E3073A594F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnqV1vkbZ2udcauK4RQZQY3jww4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.mft
Manifest number: 0F59
Signing time: Fri 31 Jan 2025 13:00:30 +0000
Manifest this update: Fri 31 Jan 2025 13:00:30 +0000
Manifest next update: Sat 01 Feb 2025 13:00:30 +0000
Files and hashes: 1: QnqV1vkbZ2udcauK4RQZQY3jww4.crl (hash: D3LmCw1soSSVRunzT4ShlvKM8EPwhkAEAVf2YQC3EjE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d7:e4:5e:ff:6c:04:36:fb:6e:30:73:a5:94:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427a95d6f91b676b9d71ab8ae11419418de3c30e
Validity
Not Before: Jan 31 13:00:30 2025 GMT
Not After : Feb 1 13:00:30 2025 GMT
Subject: CN=9c123b6cded03931a5cbfc6683139ab36827d8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ca:74:f3:fb:03:8f:bd:5e:0e:a3:22:5d:a4:
e1:f0:a4:66:da:2c:94:19:6f:f3:a2:0e:93:72:7d:
ba:58:ac:d0:c9:53:67:c2:d9:66:2d:ce:13:fe:33:
ac:da:6c:83:31:99:3d:6e:7e:42:fd:a5:59:40:b5:
3c:3f:69:98:35:95:9e:87:cd:fd:30:38:4e:b4:59:
6b:26:9a:0e:e0:36:44:c9:5e:08:d4:3e:a0:f1:4f:
80:04:3b:c8:56:e7:41:bb:33:49:66:d8:37:55:06:
8a:d4:05:4c:ba:c2:49:d4:44:5b:ea:b3:80:24:56:
08:4b:f9:7b:c9:f7:01:f1:f0:5e:cf:b9:1a:43:25:
7c:0a:bb:8c:e3:11:bd:aa:13:b3:61:18:30:14:63:
8c:a4:ef:30:f3:86:4b:12:79:b6:cf:cb:f6:7f:90:
d9:89:f7:fa:db:3e:7d:0f:18:d7:71:07:55:3d:00:
3e:a2:74:e2:17:25:a7:03:cb:48:51:c5:fa:7a:1b:
17:cf:6d:1c:a0:39:82:02:f1:99:4f:fb:68:d5:07:
25:31:df:f3:8c:3a:6f:92:42:a9:aa:6e:1d:e8:b5:
78:10:84:b7:87:b1:3c:78:a7:63:f8:ec:f2:a2:22:
c8:eb:63:ef:37:02:9b:d1:ec:a9:a1:b6:75:52:aa:
96:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:12:3B:6C:DE:D0:39:31:A5:CB:FC:66:83:13:9A:B3:68:27:D8:EB
X509v3 Authority Key Identifier:
keyid:42:7A:95:D6:F9:1B:67:6B:9D:71:AB:8A:E1:14:19:41:8D:E3:C3:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnqV1vkbZ2udcauK4RQZQY3jww4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:66:89:67:85:4a:8a:3d:51:1c:36:ec:81:19:e3:74:f9:3b:
f7:57:5d:ad:98:6a:0c:44:c6:f5:f6:1c:15:70:87:1a:9e:76:
33:e2:d6:15:fc:5f:ad:a9:4f:b5:9f:36:cb:37:c2:6f:dd:88:
e6:e0:f8:cd:d7:e5:fa:b4:b2:22:d9:f9:48:61:b9:b0:37:e2:
7e:c3:2b:9f:82:12:7f:80:85:0b:f9:24:70:b2:7e:de:14:54:
d0:ca:98:81:7f:05:54:28:67:ad:5f:34:b9:16:db:c0:9e:6e:
86:4d:a5:97:90:6b:62:dd:04:56:68:37:74:8c:95:1d:b1:ca:
fb:4c:cb:18:75:7c:80:f3:ac:1d:5a:08:68:c8:fb:70:d6:bd:
0f:89:b5:88:8a:82:81:29:3b:f1:9e:97:1d:07:12:8d:d8:c1:
95:9e:c1:9d:28:fa:2a:2b:4c:7e:12:4c:84:79:ba:dd:f0:9a:
8a:af:6f:1d:f7:ce:2a:c8:ea:9f:4a:67:ed:aa:33:e2:58:88:
1d:0a:d7:4e:65:9a:c0:a9:de:ca:07:6d:6c:4d:a8:74:aa:cc:
53:70:a4:14:b7:e0:64:43:19:b7:e9:77:08:7b:94:c6:56:ad:
3f:17:4a:b5:3a:f5:84:ca:de:c6:46:10:b3:7c:ad:e3:49:1d:
cf:e3:6a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:19 2025 by rpki-client