Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c57467-49a5-4cc6-9e0c-77e61eea6a64/1/QpoEfERhf8-ynNVy962HR9C5Mms.mft
File: QpoEfERhf8-ynNVy962HR9C5Mms.mft (raw, json)
Hash identifier: WKD0M9QymW0vyyfh5WHxtSdhdYcLjHBMtvKT35dq0xY=
Subject key identifier: F9:E7:9B:22:ED:FB:55:E1:24:1F:28:52:37:96:71:C3:91:1A:78:F1
Authority key identifier: 42:9A:04:7C:44:61:7F:CF:B2:9C:D5:72:F7:AD:87:47:D0:B9:32:6B
Certificate issuer: /CN=429a047c44617fcfb29cd572f7ad8747d0b9326b
Certificate serial: 0194BBCDFE5ABCB9A34A449489E0789CA04F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpoEfERhf8-ynNVy962HR9C5Mms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/c57467-49a5-4cc6-9e0c-77e61eea6a64/1/QpoEfERhf8-ynNVy962HR9C5Mms.mft
Manifest number: 089F
Signing time: Fri 31 Jan 2025 10:00:26 +0000
Manifest this update: Fri 31 Jan 2025 10:00:26 +0000
Manifest next update: Sat 01 Feb 2025 10:00:26 +0000
Files and hashes: 1: QpoEfERhf8-ynNVy962HR9C5Mms.crl (hash: cwsdzrHcdAX/Z9bWGm8aPU2Nyu2vlz1E+fI/mx4uUBo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fe:5a:bc:b9:a3:4a:44:94:89:e0:78:9c:a0:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429a047c44617fcfb29cd572f7ad8747d0b9326b
Validity
Not Before: Jan 31 10:00:26 2025 GMT
Not After : Feb 1 10:00:26 2025 GMT
Subject: CN=f9e79b22edfb55e1241f2852379671c3911a78f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ce:93:3e:76:06:05:95:55:e9:0a:c5:16:a4:
cc:57:89:b2:10:63:b0:bd:12:d7:dc:98:8e:b2:ef:
79:85:28:a1:30:43:b7:cf:e4:b0:0a:9c:4c:f6:4f:
95:63:9b:a9:23:dc:85:03:f0:13:12:a1:f2:42:18:
6d:f1:b1:69:c2:81:16:1f:f1:32:be:d1:c1:08:dd:
1e:73:fb:5d:71:1f:93:54:6a:d8:89:8e:06:bd:32:
b0:4a:e0:6d:f4:04:a9:90:81:14:5b:83:8e:85:7e:
a3:95:31:27:53:7b:a7:aa:85:a6:cb:55:99:c8:a1:
97:e7:e1:3f:52:a5:43:2d:ac:75:a0:45:a7:60:72:
95:d6:13:3b:af:97:3e:00:d6:8c:48:6e:9f:2c:7c:
ba:d6:96:91:3c:d4:27:2c:2c:1e:f7:51:ef:2c:72:
f7:b0:3a:80:df:52:bb:02:14:5e:99:b8:06:47:ef:
cc:a7:90:32:3a:a4:a0:f9:b3:17:52:49:75:5e:26:
3d:23:ef:49:48:6b:1c:9e:35:d4:80:77:bf:bd:1a:
b3:53:8c:5c:e9:61:7f:2d:8a:14:c9:b7:93:14:22:
4d:f6:7d:15:4a:9a:05:c0:2d:24:60:ad:84:79:4e:
8d:cb:06:61:39:4c:18:c3:95:69:b7:cc:4d:fa:97:
9e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E7:9B:22:ED:FB:55:E1:24:1F:28:52:37:96:71:C3:91:1A:78:F1
X509v3 Authority Key Identifier:
keyid:42:9A:04:7C:44:61:7F:CF:B2:9C:D5:72:F7:AD:87:47:D0:B9:32:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpoEfERhf8-ynNVy962HR9C5Mms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c57467-49a5-4cc6-9e0c-77e61eea6a64/1/QpoEfERhf8-ynNVy962HR9C5Mms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c57467-49a5-4cc6-9e0c-77e61eea6a64/1/QpoEfERhf8-ynNVy962HR9C5Mms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:2b:51:62:57:6d:b5:4e:72:d9:63:3c:b2:8e:32:b7:33:5f:
a7:08:8c:e3:8c:79:9c:7a:7f:ec:7a:e7:6f:fa:3b:5b:4c:11:
61:59:d4:c3:aa:3f:0c:f2:80:9c:ad:70:3d:e2:e7:bf:dd:af:
72:62:39:7c:42:c9:ed:4f:cd:f8:7f:c5:f5:1f:c8:b3:bf:b0:
1f:41:57:67:12:a2:05:c5:f7:3c:b5:35:cf:da:6e:ff:58:a1:
9b:f9:89:75:dd:e2:9b:44:95:a4:9e:19:a1:a3:09:ad:b6:bc:
97:4c:fc:be:51:71:17:cc:43:06:c7:5c:33:23:14:65:f6:97:
0c:37:4f:f3:91:26:0d:05:8f:cf:c7:c5:c1:10:34:55:89:b9:
46:04:53:a2:39:50:df:d6:4f:e7:7a:3a:65:c3:8b:81:7c:d5:
34:70:fe:88:b5:51:03:4f:c4:b4:b6:be:a4:10:20:39:18:fa:
18:8a:47:be:e4:12:82:97:3e:cc:db:70:37:9e:d5:54:dd:26:
ac:9e:2d:97:71:f9:5f:5a:0c:7d:00:49:28:e8:7f:ee:9e:50:
23:32:bd:a4:df:c8:7f:94:d9:17:f6:73:a5:9b:c8:2d:a6:0a:
ec:98:8d:47:79:4a:59:01:49:a2:93:ac:45:7a:53:36:72:39:
fa:78:9d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:43:30 2025 by rpki-client