Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
File: SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft (raw, json)
Hash identifier: JZfneM5Mrl9YwXef5tC47Ye6fOIC68jz0pMI5lXxnA8=
Subject key identifier: B0:C3:84:CB:9E:59:99:92:FE:0D:17:87:1C:E1:01:11:5D:0E:E8:DE
Authority key identifier: 49:09:57:F7:9E:6C:28:14:66:43:F4:9D:9F:E1:7F:C4:F1:63:77:6C
Certificate issuer: /CN=490957f79e6c28146643f49d9fe17fc4f163776c
Certificate serial: 0194BBCE06A5F76A28BBACF9062ED4DBFE16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
Manifest number: 0B0D
Signing time: Fri 31 Jan 2025 10:00:28 +0000
Manifest this update: Fri 31 Jan 2025 10:00:28 +0000
Manifest next update: Sat 01 Feb 2025 10:00:28 +0000
Files and hashes: 1: SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl (hash: E1AuG2nbMi2VWvAEmS76BmYaWVNja++dGyc5OerwnJs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:06:a5:f7:6a:28:bb:ac:f9:06:2e:d4:db:fe:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490957f79e6c28146643f49d9fe17fc4f163776c
Validity
Not Before: Jan 31 10:00:28 2025 GMT
Not After : Feb 1 10:00:28 2025 GMT
Subject: CN=b0c384cb9e599992fe0d17871ce101115d0ee8de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:93:40:e2:7f:19:8c:0e:ec:64:ff:e9:8f:4d:
be:db:b5:5e:a1:a0:19:45:72:96:84:33:c2:e9:d3:
2a:ec:1d:53:9f:d0:ff:c4:49:e4:56:de:f1:0d:68:
24:89:66:4d:10:11:76:5a:cd:dc:7d:72:62:65:ec:
10:c9:fa:c3:ca:fc:1c:58:61:51:c7:1d:11:ba:f0:
c7:15:03:6d:51:27:60:bd:ae:75:f8:58:fc:67:3e:
87:02:e0:ce:54:31:e9:22:83:34:bd:33:1a:52:b2:
d1:a4:74:a9:0d:1b:d5:2b:a8:9c:e9:01:29:5d:69:
b0:88:94:78:33:f8:33:50:b1:85:82:8b:2b:5a:ce:
de:5d:c6:97:0f:81:67:6d:e5:90:42:21:38:34:97:
57:f4:61:0e:45:ee:3e:7c:02:e8:09:26:03:36:57:
ea:91:82:4d:2f:66:b8:65:54:b7:e6:eb:37:11:f7:
b3:fb:3b:97:c4:95:36:5d:03:ff:c7:67:fc:4d:9d:
f6:b8:4e:02:2b:90:7a:b5:5d:af:5e:c3:5c:29:b3:
f1:83:4e:f0:8e:53:47:c9:a7:07:f9:cd:df:5d:5a:
9e:1f:f0:0f:36:68:f8:0a:d9:0d:cf:d5:20:d0:e2:
c5:8a:0d:e0:95:83:70:2a:be:b5:49:ab:06:6a:37:
04:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C3:84:CB:9E:59:99:92:FE:0D:17:87:1C:E1:01:11:5D:0E:E8:DE
X509v3 Authority Key Identifier:
keyid:49:09:57:F7:9E:6C:28:14:66:43:F4:9D:9F:E1:7F:C4:F1:63:77:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:4e:94:5d:78:7a:f3:6b:ae:17:49:95:16:8a:cc:46:3e:a1:
f1:e9:8a:9e:76:ae:16:a3:c0:45:e2:26:fc:86:25:22:19:28:
27:ba:33:e0:4f:9a:88:37:ca:44:1d:8d:6b:75:a5:61:e4:df:
6c:c3:fa:9d:28:6e:4b:87:91:10:bc:42:10:43:70:9c:1e:7c:
cb:f0:89:44:93:69:c4:f7:71:1d:7e:17:3a:95:25:05:bf:9e:
1c:84:ec:f5:fa:5c:93:92:38:cf:5d:e9:57:d2:dd:f5:2b:c1:
d9:cf:e9:51:24:f5:6d:e3:56:b4:9b:c9:0f:0f:95:74:1c:41:
19:f2:8b:89:8a:41:e1:a5:68:a2:41:33:97:5c:dd:6d:fe:63:
76:08:c5:14:97:a4:ca:9f:b5:4c:62:64:13:5b:e3:ac:c6:a2:
21:b0:c7:17:46:6e:09:67:40:bd:7d:6a:d8:21:23:6b:60:01:
6e:2f:ff:3c:a7:df:93:b9:7a:5b:07:f2:e5:7b:a3:19:08:91:
97:da:10:da:41:2f:3f:46:b7:09:96:f0:5b:25:12:2b:ef:86:
00:67:04:65:c9:df:07:62:f3:05:32:7e:3a:57:4c:8a:61:bb:
88:c7:f4:e8:37:65:d1:5e:6b:d4:6c:df:a8:5f:4c:07:86:c7:
8b:63:0b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:10:57 2025 by rpki-client