Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6aecc5-b85c-418b-afc8-c2e668c19727/1/QHsur7H0zNuzzWzU10srM5eKC3A.mft
File: QHsur7H0zNuzzWzU10srM5eKC3A.mft (raw, json)
Hash identifier: kmw7dYS3RlIO2gAieduXCC+XC05hTT5w7wsyBsYha1k=
Subject key identifier: E9:CE:B9:70:1B:17:45:0C:F9:AD:03:A0:9D:13:16:D3:87:AE:F5:85
Authority key identifier: 40:7B:2E:AF:B1:F4:CC:DB:B3:CD:6C:D4:D7:4B:2B:33:97:8A:0B:70
Certificate issuer: /CN=407b2eafb1f4ccdbb3cd6cd4d74b2b33978a0b70
Certificate serial: 0194BBCE2EB68F226275F0BA2754BBB2ED7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHsur7H0zNuzzWzU10srM5eKC3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6aecc5-b85c-418b-afc8-c2e668c19727/1/QHsur7H0zNuzzWzU10srM5eKC3A.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:00:39 +0000
Manifest this update: Fri 31 Jan 2025 10:00:39 +0000
Manifest next update: Sat 01 Feb 2025 10:00:39 +0000
Files and hashes: 1: QHsur7H0zNuzzWzU10srM5eKC3A.crl (hash: t5SyjlZscptJf+5SX6xAizdDbhNMlAAqWG2Xzpvz0lQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:2e:b6:8f:22:62:75:f0:ba:27:54:bb:b2:ed:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407b2eafb1f4ccdbb3cd6cd4d74b2b33978a0b70
Validity
Not Before: Jan 31 10:00:39 2025 GMT
Not After : Feb 1 10:00:39 2025 GMT
Subject: CN=e9ceb9701b17450cf9ad03a09d1316d387aef585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8f:8b:a4:99:cc:21:1d:0e:9d:b2:55:09:3f:
3a:4a:8e:a9:e5:65:91:94:59:8b:7a:5c:6b:52:72:
94:47:88:64:87:c1:59:c8:57:49:20:4d:35:88:7a:
11:79:33:4c:ab:af:a8:29:74:1f:e5:80:a0:bb:ad:
b6:8b:d8:e2:f0:80:a1:e8:ef:8c:8c:24:20:56:a3:
1d:f5:c0:de:f0:eb:9a:9a:21:78:58:db:5b:d4:c1:
25:a5:bb:61:9a:10:62:fe:4b:aa:41:16:a3:00:8a:
e4:a1:98:19:be:0a:02:00:a8:bf:d5:6e:5e:df:0c:
61:e8:37:61:e7:e0:fa:3e:89:fe:97:a3:d0:0b:aa:
e4:46:27:68:e6:96:7e:5b:2d:0b:30:02:c4:31:e2:
20:ad:7b:65:46:3f:38:b5:4c:99:ae:d4:5e:e2:01:
2b:9e:23:97:87:6b:01:2f:c1:a3:c1:25:30:4e:dd:
b1:a0:3e:a7:af:fa:86:da:4a:41:50:9a:29:f3:dc:
ad:f2:e0:3e:36:5e:69:ea:0c:ee:cd:a2:6b:b9:25:
ef:5b:a2:07:98:b0:47:97:85:07:dc:2d:89:c6:91:
c0:18:fa:60:f4:0f:5c:ed:a8:42:9d:3d:b9:f7:9c:
94:e4:f4:cd:0a:3e:ab:b4:e9:cf:4c:a1:7a:84:9b:
3e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:CE:B9:70:1B:17:45:0C:F9:AD:03:A0:9D:13:16:D3:87:AE:F5:85
X509v3 Authority Key Identifier:
keyid:40:7B:2E:AF:B1:F4:CC:DB:B3:CD:6C:D4:D7:4B:2B:33:97:8A:0B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHsur7H0zNuzzWzU10srM5eKC3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6aecc5-b85c-418b-afc8-c2e668c19727/1/QHsur7H0zNuzzWzU10srM5eKC3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6aecc5-b85c-418b-afc8-c2e668c19727/1/QHsur7H0zNuzzWzU10srM5eKC3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c0:ce:cb:75:b1:8e:aa:5f:10:8d:bd:c9:43:54:7f:51:f9:
d4:87:ac:4f:f6:d7:b6:42:28:25:d7:fe:35:d0:e0:be:ec:8c:
ee:28:fd:88:3e:a5:06:cb:14:4d:2a:ee:ca:2d:57:da:c5:19:
f8:ad:ff:9e:a2:01:55:33:9e:8d:1a:da:e3:63:83:33:8d:96:
a3:7f:7f:94:8c:1e:3f:e2:ff:f4:ba:71:13:9d:61:8c:e6:bb:
9c:d9:df:e6:d5:45:00:11:89:41:9e:ad:2e:d4:e7:d3:08:a7:
3a:51:b4:cd:65:bd:66:46:68:29:0e:50:84:5d:da:5d:8b:d2:
57:24:de:b8:0e:91:f0:7d:a1:56:5a:1b:76:94:2e:e2:14:11:
b8:1e:5d:23:25:3a:ad:79:0e:6d:ce:3c:15:c6:58:70:55:66:
2a:c0:fd:4b:94:3e:11:53:ce:47:d9:fd:f1:b6:76:23:33:21:
14:67:38:97:43:25:cb:1f:df:16:4e:1b:37:4f:65:d1:de:a4:
5c:f8:7b:55:2c:d1:5c:a4:bc:cf:3c:fa:a9:19:79:92:a3:e8:
a2:52:9c:ce:a7:9d:ed:03:ef:fa:8c:d2:11:a3:df:bd:3d:51:
f5:02:e4:bc:5b:f2:da:9c:b9:99:cb:11:41:56:50:a6:2a:5d:
03:a6:31:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:47 2025 by rpki-client