Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/70c498-6b1d-4d92-a4e8-ec3bf4816d36/1/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.mft
File: QkwWW2pJNJVBxlr5shWAFjgZ8oQ.mft (raw, json)
Hash identifier: wBEbZXOF858TDcuwLTSs6W5clyQhw4kkODsopjhE+f4=
Subject key identifier: 98:1C:AF:81:B5:B7:48:B4:BB:4D:B7:2B:03:A1:3F:7A:6A:BF:16:02
Authority key identifier: 42:4C:16:5B:6A:49:34:95:41:C6:5A:F9:B2:15:80:16:38:19:F2:84
Certificate issuer: /CN=424c165b6a49349541c65af9b21580163819f284
Certificate serial: 0194BBCF047A872067E4BD7E301A70602113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/70c498-6b1d-4d92-a4e8-ec3bf4816d36/1/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.mft
Manifest number: 07C8
Signing time: Fri 31 Jan 2025 10:01:33 +0000
Manifest this update: Fri 31 Jan 2025 10:01:33 +0000
Manifest next update: Sat 01 Feb 2025 10:01:33 +0000
Files and hashes: 1: QkwWW2pJNJVBxlr5shWAFjgZ8oQ.crl (hash: XGti7zw+zH8NRsJenNJ9JYqGJIb91R5Fog6ces1qsjA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:04:7a:87:20:67:e4:bd:7e:30:1a:70:60:21:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424c165b6a49349541c65af9b21580163819f284
Validity
Not Before: Jan 31 10:01:33 2025 GMT
Not After : Feb 1 10:01:33 2025 GMT
Subject: CN=981caf81b5b748b4bb4db72b03a13f7a6abf1602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:44:ab:b5:d0:6d:41:94:15:2a:a1:11:46:e4:
5b:57:29:41:3b:93:c4:55:f2:ab:78:bf:38:b8:dd:
b4:50:cc:ec:5b:61:fb:7a:06:df:67:5a:61:4a:6b:
69:fe:7f:89:58:aa:75:08:5e:78:06:ab:d5:1b:ed:
04:84:8a:7e:8d:6b:34:02:34:2e:13:dd:09:de:68:
0a:e0:a1:b4:ff:b5:88:8b:c0:df:f8:56:22:de:72:
6b:24:49:d8:82:51:79:5b:63:b9:77:12:89:bc:9d:
e4:4f:d1:d0:bc:dd:c6:fa:4a:3f:f5:34:0f:22:46:
69:56:72:29:db:9b:f0:c9:09:ef:2e:e8:f5:e8:94:
15:e4:e3:9a:7d:72:54:4a:7a:0a:b0:9b:2d:2f:db:
4c:20:f3:e7:80:07:6a:a1:1a:3a:07:75:b8:6d:8d:
5e:0d:ef:40:ef:3d:da:21:0d:f7:4f:df:f5:25:f4:
bf:03:e5:66:13:9a:40:68:95:54:a1:a1:95:c9:e0:
b5:fa:b1:ad:bf:2d:e4:75:16:0c:8f:30:ea:52:13:
84:0a:4d:32:e2:3d:32:25:84:53:56:fd:54:ca:c9:
a4:65:78:79:0b:4a:45:74:a5:38:11:bd:1f:de:40:
9e:c4:f9:c0:39:47:17:4d:05:c6:7e:60:28:42:3e:
5a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:1C:AF:81:B5:B7:48:B4:BB:4D:B7:2B:03:A1:3F:7A:6A:BF:16:02
X509v3 Authority Key Identifier:
keyid:42:4C:16:5B:6A:49:34:95:41:C6:5A:F9:B2:15:80:16:38:19:F2:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/70c498-6b1d-4d92-a4e8-ec3bf4816d36/1/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/70c498-6b1d-4d92-a4e8-ec3bf4816d36/1/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:de:fe:30:00:e5:cd:25:b4:89:3b:6e:dc:6a:7a:e0:6c:26:
f9:a3:da:5f:9a:08:e3:43:f9:23:3b:9f:16:23:83:cd:b7:b3:
6c:9a:a6:e5:2d:ce:58:4a:05:c7:04:50:07:6b:89:1f:5e:89:
ec:39:cb:9f:b7:89:47:74:01:e2:f5:9c:86:d4:08:14:c8:6e:
28:59:87:ad:d4:f0:7d:74:84:54:ee:2f:33:45:1a:ed:b0:b0:
6e:df:62:19:a0:29:29:5d:c7:52:00:f2:5a:f1:a1:88:f2:7f:
c5:74:5e:e8:49:06:71:3c:92:22:77:3c:dc:5c:7f:0b:0d:bc:
7b:83:2c:73:33:33:bf:0c:ab:01:89:4d:1b:d4:0d:b1:64:a7:
bb:2a:0e:65:3d:1c:65:11:fc:e2:49:c2:11:5f:44:b6:ad:86:
02:83:68:c9:1e:2e:fe:84:fc:79:3d:ef:74:b0:ed:00:f3:f1:
eb:a6:ca:f0:bb:0e:cb:6e:a5:56:21:9c:44:1a:3b:91:06:f8:
19:78:3e:29:5e:59:db:30:91:58:bc:34:85:37:95:eb:35:04:
c9:18:d0:8d:d3:85:c8:cb:7e:31:c7:57:f8:a6:f4:23:f9:c3:
8f:28:f5:37:37:71:00:4d:bd:cd:92:36:72:6e:36:6a:a8:67:
a7:3b:4b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:47 2025 by rpki-client