Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
File: qdM_4RuZSVFsHx3YFOJOR0U6npY.mft (raw, json)
Hash identifier: NnmcdLS6k5Ndniptm6oPZDF3SNc7S1o8DhOGtirISKc=
Subject key identifier: 3B:E6:A1:A9:A7:F2:EB:BF:A7:9A:E8:3F:2A:B4:C0:31:F4:A2:E0:D1
Authority key identifier: A9:D3:3F:E1:1B:99:49:51:6C:1F:1D:D8:14:E2:4E:47:45:3A:9E:96
Certificate issuer: /CN=a9d33fe11b9949516c1f1dd814e24e47453a9e96
Certificate serial: 0194BC04DF0B5FB5645BD43FB778473D6EEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
Manifest number: 36
Signing time: Fri 31 Jan 2025 11:00:23 +0000
Manifest this update: Fri 31 Jan 2025 11:00:23 +0000
Manifest next update: Sat 01 Feb 2025 11:00:23 +0000
Files and hashes: 1: qdM_4RuZSVFsHx3YFOJOR0U6npY.crl (hash: PyfW08NcTV5lNU1DmHhj3MgKHXUPNaV9WAkJ/+JQXDo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:df:0b:5f:b5:64:5b:d4:3f:b7:78:47:3d:6e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d33fe11b9949516c1f1dd814e24e47453a9e96
Validity
Not Before: Jan 31 11:00:23 2025 GMT
Not After : Feb 1 11:00:23 2025 GMT
Subject: CN=3be6a1a9a7f2ebbfa79ae83f2ab4c031f4a2e0d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3e:b4:ee:f5:36:bf:26:88:7a:ab:8c:f0:ca:
e0:63:11:d7:58:65:b5:f0:1e:a1:58:b3:21:eb:53:
81:69:fa:8d:e1:cb:a5:ef:12:6a:5a:48:c2:b1:b0:
cf:0c:82:6c:91:16:b8:b4:f4:91:53:44:5a:cd:3b:
0d:d5:c3:91:08:13:54:90:0d:93:1b:d8:22:d0:79:
04:87:fa:42:ae:5c:65:7e:b6:ab:3d:7b:80:b7:a5:
89:4b:dd:f5:77:e6:c9:7a:03:6d:96:02:97:8c:2f:
75:b1:a9:74:58:3a:ff:1b:e5:db:41:18:3e:cb:79:
61:83:20:9b:8c:30:ae:85:0f:f9:37:1a:ab:26:fc:
1a:30:79:9a:ee:35:83:63:52:f0:29:33:35:c8:4c:
e6:8f:6c:ea:98:50:99:58:f2:9d:b5:3a:50:bb:dc:
dc:40:d8:c9:b1:89:ae:8b:27:6b:33:3c:31:a8:2c:
65:e9:05:e6:a8:96:87:15:57:01:d8:d0:1a:67:68:
94:d9:1d:fc:5e:ab:f0:49:af:33:80:9f:52:17:31:
45:3b:a9:1e:9c:e7:76:10:ed:1f:69:be:15:5c:ab:
c1:69:a4:08:9b:3a:98:9a:88:b9:2c:83:cd:78:4f:
75:1f:03:53:e6:55:c9:77:c7:a1:d1:4d:65:65:b8:
d3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E6:A1:A9:A7:F2:EB:BF:A7:9A:E8:3F:2A:B4:C0:31:F4:A2:E0:D1
X509v3 Authority Key Identifier:
keyid:A9:D3:3F:E1:1B:99:49:51:6C:1F:1D:D8:14:E2:4E:47:45:3A:9E:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f3:26:ac:cb:93:ec:1a:17:43:b9:6d:56:59:13:c6:9e:6f:
64:7c:72:40:03:a2:89:b8:40:d0:d0:d8:25:e4:c6:35:17:9d:
14:31:73:65:ce:ff:96:9f:5b:99:3a:57:de:c0:85:59:ec:14:
bc:0d:14:f1:ea:fa:21:b7:05:4d:97:d4:a6:98:cd:ee:6a:9c:
c2:2b:57:2d:5f:ea:5d:67:8d:41:01:5a:d5:86:9b:72:44:06:
4c:5a:28:65:8e:65:43:74:30:af:e2:72:29:27:a8:03:7d:d7:
b9:06:9d:12:8e:ab:ec:2f:1d:67:fb:0a:f4:a4:12:1b:f3:3c:
c6:6d:38:9b:51:0e:2b:b5:54:12:f7:2a:01:d5:d4:4f:07:ea:
94:46:00:fa:82:f6:21:05:32:df:43:e9:6a:69:20:3b:ab:29:
33:a9:58:e7:37:7b:da:5e:ad:61:51:29:09:76:d7:fe:8b:7e:
3c:2e:4d:bf:f3:32:2e:dd:7c:be:33:39:8c:89:55:a2:6d:45:
d1:62:6f:f2:c9:5d:00:9a:a4:52:4d:79:6e:c9:61:b9:78:9b:
19:90:77:27:1a:31:7d:c5:e7:90:7d:c0:6a:80:8b:e5:b8:ca:
ab:c8:a6:1f:0b:39:38:df:53:7d:4d:2c:e3:86:b0:73:89:27:
5c:f9:75:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:38:45 2025 by rpki-client