Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft
File: Qbib03Ns5PAIRzll_a5AdFZ82gM.mft (raw, json)
Hash identifier: uwXgrKZNI6TEZ+N5VtgFFq4mTeNbwfgB0yH/7d6Wg58=
Subject key identifier: DB:0E:F6:51:EF:DA:08:40:32:49:66:D5:EE:50:BE:68:C6:C2:45:4A
Authority key identifier: 41:B8:9B:D3:73:6C:E4:F0:08:47:39:65:FD:AE:40:74:56:7C:DA:03
Certificate issuer: /CN=41b89bd3736ce4f008473965fdae4074567cda03
Certificate serial: 0194BBCE0AEDB6C20A58337CFEA38BDFF9B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qbib03Ns5PAIRzll_a5AdFZ82gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft
Manifest number: 09A1
Signing time: Fri 31 Jan 2025 10:00:30 +0000
Manifest this update: Fri 31 Jan 2025 10:00:30 +0000
Manifest next update: Sat 01 Feb 2025 10:00:30 +0000
Files and hashes: 1: Qbib03Ns5PAIRzll_a5AdFZ82gM.crl (hash: JekQyKMunSe0jZc/dxwuAuRCo0rwH5BrlU2zoeOvLQs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0a:ed:b6:c2:0a:58:33:7c:fe:a3:8b:df:f9:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b89bd3736ce4f008473965fdae4074567cda03
Validity
Not Before: Jan 31 10:00:30 2025 GMT
Not After : Feb 1 10:00:30 2025 GMT
Subject: CN=db0ef651efda0840324966d5ee50be68c6c2454a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ea:b3:79:11:09:1d:ad:38:d5:78:de:2f:c6:
15:76:d8:b0:1f:e3:7a:73:a1:0c:03:99:6e:2b:ec:
24:1a:2a:5c:17:d3:8f:71:61:1f:b4:e7:b0:9e:a8:
f3:4a:a3:35:6e:cf:77:23:a6:cb:7e:18:bd:2d:b4:
2e:16:26:16:31:cc:e1:55:54:2a:b0:ae:17:82:d3:
b6:88:3a:d9:f5:e8:f6:9e:43:08:b8:e1:30:87:5c:
5e:e8:8c:b2:e8:76:fb:bf:bd:06:5e:e9:e1:d0:90:
98:01:43:f3:5b:81:3f:7d:47:5a:64:e9:02:a4:51:
6e:d5:83:4b:8f:74:e5:3a:d2:51:dc:93:c7:4b:d1:
b5:4e:74:35:7e:01:9b:b1:d4:23:3b:ab:01:83:47:
c2:cd:48:35:1a:33:a3:03:61:d5:e2:c7:fa:84:82:
a7:4c:ec:e1:7e:57:62:e8:7a:64:4c:69:53:4e:59:
dd:f6:94:cb:f5:e9:bc:82:e9:ca:48:5f:7c:4b:a6:
be:55:f6:9d:19:85:30:47:42:a3:1c:81:2d:3f:af:
81:9a:7d:96:bb:5c:03:fd:d5:09:f0:44:f8:9b:bd:
74:7c:0f:e6:f9:9d:f3:44:9e:c4:96:0a:d5:28:24:
67:a7:b3:03:e9:bd:54:25:43:0b:7c:08:1a:52:84:
18:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0E:F6:51:EF:DA:08:40:32:49:66:D5:EE:50:BE:68:C6:C2:45:4A
X509v3 Authority Key Identifier:
keyid:41:B8:9B:D3:73:6C:E4:F0:08:47:39:65:FD:AE:40:74:56:7C:DA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qbib03Ns5PAIRzll_a5AdFZ82gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/88e1ee-b7c2-4520-a849-30e9ffd82759/1/Qbib03Ns5PAIRzll_a5AdFZ82gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:db:98:01:3b:af:1f:c0:96:f4:c6:98:fc:0c:49:bf:e1:36:
3b:4e:bb:f2:54:7e:ff:c2:84:38:b1:cf:8a:28:92:e6:af:75:
ff:6d:38:44:37:4d:b7:b9:01:bd:7b:7d:95:ce:6f:fe:cb:2b:
d4:a1:45:f2:01:23:05:78:df:e9:7c:8e:84:08:85:13:9d:ea:
a8:35:b2:a4:3c:d2:64:3d:0a:3d:d2:f8:43:ae:ac:41:fd:8b:
15:06:85:13:b7:34:4f:47:73:06:0b:59:3e:da:c8:b6:1e:da:
fb:d7:bf:68:86:6f:20:df:d6:eb:0c:57:8c:9f:e0:1b:a1:77:
1e:a6:ae:d3:ab:c0:dc:31:48:e7:2c:58:1c:f1:48:3d:af:3c:
fb:96:73:1e:e8:cf:6f:eb:c4:40:c2:13:ea:35:3f:87:53:e5:
19:2f:62:fa:7f:90:af:fb:6e:dd:1b:c9:81:96:5a:37:9f:aa:
65:94:1b:0b:a0:08:2e:73:dc:1f:dc:c7:eb:a4:d1:7f:79:00:
63:12:91:e0:a1:3c:9c:07:e6:46:7c:02:07:3d:a0:d7:4b:14:
8d:42:90:6b:37:8d:76:98:69:f7:ff:c7:b8:50:28:26:58:79:
dc:b8:be:d5:3b:be:02:31:f7:a8:2c:25:1f:0a:a9:bf:9b:b2:
f4:98:e2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:20 2025 by rpki-client