Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
File: 1qo_vHjjEikVfHi20jpl6y41Pc4.mft (raw, json)
Hash identifier: LLOt90IWJohaECKjbDYWQ/Bc2R0YkjeAG6KZAeKDUZw=
Subject key identifier: 10:38:CE:71:F8:F9:E9:C0:F9:8C:AF:C7:72:05:E1:4F:E3:38:88:09
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial: 0194BD85824C64489DD36D8CBC9046957DB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
Manifest number: 0374
Signing time: Fri 31 Jan 2025 18:00:30 +0000
Manifest this update: Fri 31 Jan 2025 18:00:30 +0000
Manifest next update: Sat 01 Feb 2025 18:00:30 +0000
Files and hashes: 1: 1qo_vHjjEikVfHi20jpl6y41Pc4.crl (hash: pe3azw1ZK73KoyG0MBSGclzQFea4CG/r6MuLUeMRySA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:82:4c:64:48:9d:d3:6d:8c:bc:90:46:95:7d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Validity
Not Before: Jan 31 18:00:30 2025 GMT
Not After : Feb 1 18:00:30 2025 GMT
Subject: CN=1038ce71f8f9e9c0f98cafc77205e14fe3388809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7a:fa:87:17:22:9c:8b:59:15:8b:f9:d9:08:
5e:cb:bc:b2:7f:18:1b:c6:45:4a:38:6e:79:81:af:
f1:72:f9:57:d9:e5:ac:c5:1c:d9:cf:b8:89:6e:8c:
04:f8:c2:5b:d9:39:5f:41:c2:0c:9a:29:66:55:9f:
b5:fb:1b:16:11:d2:ad:98:f6:28:db:c9:10:57:30:
8f:df:f8:6a:1a:1b:35:8f:6e:87:0b:e5:f9:13:d8:
0d:1e:d6:f5:78:2f:a7:f5:d7:b1:94:d1:0a:9f:ef:
62:06:6f:89:70:76:7a:a7:60:0d:1a:03:2c:89:cb:
f5:b0:6d:17:18:ff:9d:4f:9f:cf:54:b8:ac:23:23:
87:ff:61:05:8a:5b:7f:de:ad:60:05:31:01:d7:58:
c2:e1:d3:90:de:4b:f6:f0:b4:f9:53:9f:a2:8c:6d:
95:67:21:03:12:c7:05:b2:5d:16:41:1e:a9:41:29:
13:f4:6a:a3:ed:91:4f:a4:a0:ff:65:6e:91:30:c5:
6f:9f:5c:50:40:ca:c7:38:dd:fa:85:08:39:64:e7:
fd:5f:95:ca:ad:3a:57:76:e3:0f:0e:58:e9:64:a1:
6b:2a:c8:6c:af:70:b5:0b:26:5c:67:6b:20:a6:53:
33:ce:b7:36:98:1d:9c:9d:89:bd:2a:de:18:26:1a:
08:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:38:CE:71:F8:F9:E9:C0:F9:8C:AF:C7:72:05:E1:4F:E3:38:88:09
X509v3 Authority Key Identifier:
keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:32:e6:9b:77:7f:02:81:e6:3b:c0:cc:2c:50:1c:51:d8:60:
19:f5:e7:61:ca:ac:e1:1f:0f:1f:96:74:bf:c2:89:30:09:ef:
aa:cb:47:e9:0e:15:fb:93:11:b9:32:f7:f9:cf:0c:91:35:f5:
71:d3:db:9f:d7:80:5d:dd:e1:2b:5d:3b:de:52:50:77:ac:4d:
cb:18:f4:80:41:b0:f4:5c:50:ed:22:1c:00:90:a5:1a:94:53:
89:91:50:6d:dc:25:7c:90:43:b3:0c:5d:3e:56:7d:0f:c4:36:
f4:1a:f1:dc:66:b9:11:d8:89:3a:ec:6c:01:04:f0:8b:07:a4:
19:46:8e:c2:69:2b:f2:0a:01:9d:e6:af:ec:25:50:45:91:cf:
57:70:1d:ca:c9:63:eb:d5:ec:f6:c6:00:d2:5c:64:b3:d8:51:
8c:e1:ed:84:b2:f6:43:a4:7b:d0:97:5d:da:a7:d6:6e:5c:06:
23:cb:f4:71:4d:94:ce:77:ce:91:c2:8a:09:b4:91:cc:ce:10:
37:4b:ee:54:b6:4f:04:33:35:4a:a7:3a:f6:2e:db:4b:59:00:
9d:d4:a9:9f:75:63:cd:6a:d5:7e:a9:10:53:79:bf:e4:ec:dd:
e3:34:91:bf:58:ba:61:73:ad:4d:03:c3:49:45:84:a2:d2:1f:
27:bb:08:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:14:23 2025 by rpki-client