Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
File: pCqe9isMK_HTQWU5sqBKJlmMLEM.mft (raw, json)
Hash identifier: 9YdfNfvrySAiK26ieKmvF4nmekR0lmge1Gw28ata4I0=
Subject key identifier: 90:A8:31:0C:1B:F1:0C:EE:80:CF:A2:84:86:54:34:9C:46:EA:7B:6F
Authority key identifier: A4:2A:9E:F6:2B:0C:2B:F1:D3:41:65:39:B2:A0:4A:26:59:8C:2C:43
Certificate issuer: /CN=a42a9ef62b0c2bf1d3416539b2a04a26598c2c43
Certificate serial: 0194BBCEF081AD577C2F2442F4435D173B29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCqe9isMK_HTQWU5sqBKJlmMLEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:01:28 +0000
Manifest this update: Fri 31 Jan 2025 10:01:28 +0000
Manifest next update: Sat 01 Feb 2025 10:01:28 +0000
Files and hashes: 1: pCqe9isMK_HTQWU5sqBKJlmMLEM.crl (hash: p+8EXKfsESUCYxfW0PQXNmKiAhhBEjooYVYPxZD303Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f0:81:ad:57:7c:2f:24:42:f4:43:5d:17:3b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42a9ef62b0c2bf1d3416539b2a04a26598c2c43
Validity
Not Before: Jan 31 10:01:28 2025 GMT
Not After : Feb 1 10:01:28 2025 GMT
Subject: CN=90a8310c1bf10cee80cfa2848654349c46ea7b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:54:f9:c2:67:87:cf:96:27:70:94:7b:75:7b:
df:f9:e4:e3:b2:3d:eb:5c:b4:d1:ed:45:3b:17:94:
d5:37:cd:cc:28:f8:45:26:ee:62:d3:ab:24:c6:52:
0b:3a:33:5c:56:75:6a:c4:08:cb:4d:23:a8:30:a4:
ae:59:2e:14:0b:14:51:2c:79:e2:c9:d1:da:8b:fa:
17:9f:a4:29:5c:2e:f3:2a:0c:72:fb:aa:25:bf:a9:
da:e4:98:17:90:82:d1:46:b3:f0:a8:4b:f2:46:c2:
16:47:6e:b8:55:d7:67:e1:0c:4e:91:4a:ee:43:6e:
44:c5:f0:e8:e3:4c:c2:55:9f:0f:30:39:20:15:4b:
39:47:d8:16:f2:43:1c:1f:f9:4d:cd:5e:b6:3f:6e:
52:41:17:32:bb:60:3e:91:52:fb:5b:d0:ad:8c:3f:
1b:77:20:e8:ae:db:52:75:b6:e0:1c:e5:46:86:56:
5b:ab:44:76:92:5a:ed:d4:6d:1b:9c:fe:e8:fe:49:
e1:89:84:60:e7:3f:69:46:a6:e3:93:af:7d:86:fd:
3b:0c:dc:14:e1:1f:06:0b:08:fc:a6:9e:03:d8:72:
42:96:7b:40:67:98:ce:6b:8b:fc:d7:4a:85:25:ad:
59:41:35:0b:a5:cd:cd:9e:2c:f1:33:39:18:d7:3a:
e7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A8:31:0C:1B:F1:0C:EE:80:CF:A2:84:86:54:34:9C:46:EA:7B:6F
X509v3 Authority Key Identifier:
keyid:A4:2A:9E:F6:2B:0C:2B:F1:D3:41:65:39:B2:A0:4A:26:59:8C:2C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCqe9isMK_HTQWU5sqBKJlmMLEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:c5:94:f1:13:c5:df:86:21:a0:e3:29:7d:22:18:0b:d5:5a:
53:53:fe:a0:d9:af:fd:07:76:09:9c:e5:b7:33:f6:ea:68:c0:
9e:23:16:9f:f0:2c:6c:0b:d9:90:f0:d0:8a:56:89:84:43:e9:
80:4c:0d:23:64:c3:e2:05:54:ad:67:74:34:08:43:bd:0c:07:
7b:1a:05:d5:be:2c:7f:7f:f9:ce:12:c5:ef:0d:16:45:b5:ce:
11:60:27:88:a0:44:1f:a1:1c:fa:57:52:f4:8e:f0:0d:4a:e4:
2b:66:7e:4a:30:cd:25:53:ef:a6:06:17:85:2e:52:04:ca:55:
d5:da:ea:13:ef:2d:c4:b1:20:c8:ea:2a:ab:36:11:c3:64:2d:
60:49:78:e3:70:13:d1:62:25:e0:ab:51:f6:e7:1f:5d:6a:cd:
59:f1:9f:70:97:65:89:6f:cf:f9:a1:9f:ac:09:5f:ed:3a:98:
ec:8d:aa:14:7d:dc:4e:c1:b8:48:c8:01:f2:47:1a:0a:5d:ba:
b1:9f:7e:06:71:c9:fc:9f:f4:e9:76:25:e3:0b:0f:48:f5:36:
29:15:2f:e3:78:19:54:4b:65:5c:96:52:79:ef:2a:c6:89:75:
22:ec:dc:65:39:22:9c:b7:3f:d9:a8:85:04:2c:28:34:b4:45:
3d:f2:cc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:57:53 2025 by rpki-client