Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/QO6XZYZL0R1KNJQm43LhGpQ0jeI.mft
File: QO6XZYZL0R1KNJQm43LhGpQ0jeI.mft (raw, json)
Hash identifier: /3ui2ogLUBg8xiYl9mBd2gZHyqO5ei0C9C8Gl6JLVfQ=
Subject key identifier: E2:42:F9:92:C8:41:8A:17:D8:F8:B6:50:69:C0:34:52:3F:E7:EC:10
Authority key identifier: 40:EE:97:65:86:4B:D1:1D:4A:34:94:26:E3:72:E1:1A:94:34:8D:E2
Certificate issuer: /CN=40ee9765864bd11d4a349426e372e11a94348de2
Certificate serial: 0194BBCE4ECD1780BF1D2972A2AE8BAB9C36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO6XZYZL0R1KNJQm43LhGpQ0jeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/QO6XZYZL0R1KNJQm43LhGpQ0jeI.mft
Manifest number: 0539
Signing time: Fri 31 Jan 2025 10:00:47 +0000
Manifest this update: Fri 31 Jan 2025 10:00:47 +0000
Manifest next update: Sat 01 Feb 2025 10:00:47 +0000
Files and hashes: 1: QO6XZYZL0R1KNJQm43LhGpQ0jeI.crl (hash: gprBW0P8VrUq4hs5dz20MwcrCWr4wF8oXEeHW/X8iS8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:4e:cd:17:80:bf:1d:29:72:a2:ae:8b:ab:9c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ee9765864bd11d4a349426e372e11a94348de2
Validity
Not Before: Jan 31 10:00:47 2025 GMT
Not After : Feb 1 10:00:47 2025 GMT
Subject: CN=e242f992c8418a17d8f8b65069c034523fe7ec10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c4:a7:99:2d:b4:91:ba:3f:60:66:f7:0b:6d:
0b:c8:28:15:42:ad:1d:ee:f5:38:c6:18:b5:87:f2:
c9:d8:03:64:40:78:32:22:6b:d3:c3:25:db:c8:78:
a3:75:c9:bd:d6:da:23:b4:17:e6:52:e1:65:c1:ba:
bd:d5:ed:2f:d2:93:2a:de:f8:11:47:f3:66:71:96:
19:41:c4:7c:22:7d:ef:b6:79:c9:01:a5:00:ce:c3:
23:5b:a9:05:88:d0:a8:aa:ba:5c:cd:ef:7e:7d:e3:
b7:ea:32:de:87:d3:63:60:c5:37:f0:fa:22:0f:5c:
09:89:57:b3:fd:42:4c:b6:4b:fc:8d:78:a0:1d:e7:
65:47:70:52:03:f9:a9:4f:2b:44:d9:14:3b:17:1c:
dc:26:e8:5d:c2:93:ee:1e:6c:c7:39:a9:90:3a:9b:
c5:e6:cc:cc:7c:84:28:22:2e:91:8c:40:f6:f0:f2:
3d:10:b2:dd:3c:d4:b9:24:f8:9c:c4:d2:9e:77:d9:
8f:2c:9f:87:ea:87:7b:1a:3c:7a:96:a4:7c:85:18:
5b:81:45:59:ba:96:59:94:ca:31:5c:20:5a:b9:f6:
bb:16:1e:77:b8:6d:af:dd:9e:bf:5d:b1:8d:b0:28:
a9:7c:6d:5a:65:31:09:af:97:b0:c0:52:87:c6:b5:
75:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:42:F9:92:C8:41:8A:17:D8:F8:B6:50:69:C0:34:52:3F:E7:EC:10
X509v3 Authority Key Identifier:
keyid:40:EE:97:65:86:4B:D1:1D:4A:34:94:26:E3:72:E1:1A:94:34:8D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO6XZYZL0R1KNJQm43LhGpQ0jeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/QO6XZYZL0R1KNJQm43LhGpQ0jeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/QO6XZYZL0R1KNJQm43LhGpQ0jeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:eb:ad:67:7e:81:fa:ee:03:75:76:cf:a3:ee:09:d8:44:26:
8d:4d:1a:16:cd:f1:0d:ed:3d:36:e8:21:e9:14:96:db:c0:6a:
78:10:8f:65:53:b3:e9:01:19:ce:75:b7:4e:1c:c0:4c:9b:ab:
6e:cc:50:37:bc:0f:55:e9:4f:d9:92:7a:8b:6d:a4:c0:19:92:
ee:e4:89:1b:50:9e:5e:8a:ab:47:89:8e:96:46:1b:76:bc:2b:
d1:2e:6d:27:6a:4f:e5:8c:4c:e8:45:27:ed:0a:e5:d7:6a:b4:
e0:11:2b:48:81:67:94:b7:a8:97:be:cb:f5:0c:ec:16:18:09:
52:0e:73:a1:f7:60:5a:50:b0:f2:65:26:8b:70:a9:66:03:6f:
02:be:8a:15:66:37:a2:72:98:20:fc:8c:c9:6b:4b:49:2b:d7:
79:4b:bd:69:b4:f7:0b:f5:c4:81:0a:0e:92:a5:b8:a3:60:22:
49:1c:c6:67:55:9b:e7:af:34:af:6a:93:d0:8a:f3:02:ff:35:
9b:b7:ba:ba:76:02:ab:67:ae:a6:92:d1:f1:f8:b4:3f:40:f5:
d1:84:59:dc:23:48:cc:fc:07:c1:87:b2:76:fc:92:82:37:68:
85:5a:fc:d0:41:ad:35:4e:6e:59:60:9d:71:0f:96:da:4f:92:
95:8e:7d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:40:09 2025 by rpki-client