Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft
File: q1wa2N15IqRaLMdIHv4B3UMwBsI.mft (raw, json)
Hash identifier: 66xF3K5mXPR9zElEdWq8mNQ66Ou3EsVDp4/sVYIhAwM=
Subject key identifier: BD:CE:76:94:40:1C:C7:1F:2A:7E:62:F7:23:DC:31:71:44:A9:E3:2E
Authority key identifier: AB:5C:1A:D8:DD:79:22:A4:5A:2C:C7:48:1E:FE:01:DD:43:30:06:C2
Certificate issuer: /CN=ab5c1ad8dd7922a45a2cc7481efe01dd433006c2
Certificate serial: 0194BBCDE0401B8E8ACA1CACDC21D48AEB3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1wa2N15IqRaLMdIHv4B3UMwBsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft
Manifest number: 06C6
Signing time: Fri 31 Jan 2025 10:00:19 +0000
Manifest this update: Fri 31 Jan 2025 10:00:19 +0000
Manifest next update: Sat 01 Feb 2025 10:00:19 +0000
Files and hashes: 1: q1wa2N15IqRaLMdIHv4B3UMwBsI.crl (hash: zZjrYQPw+u87JeKnkYFMYZ9Ao9u3cr2OzwmGEZpGWQs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e0:40:1b:8e:8a:ca:1c:ac:dc:21:d4:8a:eb:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab5c1ad8dd7922a45a2cc7481efe01dd433006c2
Validity
Not Before: Jan 31 10:00:19 2025 GMT
Not After : Feb 1 10:00:19 2025 GMT
Subject: CN=bdce7694401cc71f2a7e62f723dc317144a9e32e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9f:ea:98:a1:25:f4:fa:7e:18:2c:c5:5a:e9:
27:43:ef:87:00:9d:3d:47:a7:ea:c6:81:1d:cd:a7:
f5:5e:53:df:a5:03:69:92:6c:8c:36:ed:cb:f8:4c:
0b:50:ad:79:1f:ad:72:fd:c3:09:bb:fb:3d:d1:19:
1c:2f:fd:51:ad:23:9b:aa:91:82:7b:57:9d:64:80:
7f:da:f1:02:96:8a:1d:42:cd:7c:86:c5:f6:36:07:
e2:7c:ad:7f:81:30:c5:2c:07:48:5a:bd:4e:df:63:
b0:e7:fb:63:d2:45:d5:d7:c6:97:f9:0f:db:6a:f8:
0d:ea:a0:c2:6b:d7:40:6c:c5:41:fe:cc:08:8b:18:
36:40:3d:76:61:96:c6:0b:85:06:62:ec:e1:6f:ac:
79:38:50:74:5b:38:68:ce:13:37:68:87:46:8a:84:
d7:85:88:33:5b:65:1b:51:72:60:e9:2f:0d:ac:c5:
71:b4:b4:21:66:aa:41:b1:ab:30:82:98:0e:f0:c6:
b8:d6:6e:94:d2:fa:14:20:77:e4:03:55:bb:69:f1:
30:f7:ef:27:19:30:41:33:f8:2f:33:0e:49:0d:13:
03:5c:dc:ff:55:d7:9f:ef:45:8a:79:ab:bd:44:f3:
c3:05:e9:d0:ba:b9:b8:c1:0c:dc:be:f0:2c:f4:f4:
ef:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CE:76:94:40:1C:C7:1F:2A:7E:62:F7:23:DC:31:71:44:A9:E3:2E
X509v3 Authority Key Identifier:
keyid:AB:5C:1A:D8:DD:79:22:A4:5A:2C:C7:48:1E:FE:01:DD:43:30:06:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1wa2N15IqRaLMdIHv4B3UMwBsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:6c:dd:ba:da:07:5b:76:58:01:16:99:31:41:5e:91:66:1d:
b9:c9:47:a7:13:24:21:b7:39:38:c5:84:57:24:3a:84:f8:b2:
3d:36:0a:9d:ea:84:b4:5a:a9:cf:15:76:a4:de:15:57:72:59:
8b:6f:b8:38:bd:8a:2b:94:9e:2f:9c:f9:f5:18:5b:e7:80:a3:
75:a1:c6:81:85:c6:2a:eb:11:31:c9:3a:76:ad:48:be:e4:8b:
24:44:3b:e0:df:7a:fd:99:ec:be:60:8f:37:89:5d:8d:8f:3f:
59:62:0a:31:34:e8:aa:40:47:f7:c4:b4:ad:a3:d4:56:77:fc:
a5:da:ee:eb:cd:3d:22:33:6a:13:6c:c8:25:23:ae:f3:ab:60:
d7:82:c6:24:aa:91:24:dc:a6:cb:45:83:b0:0f:55:fb:ab:92:
69:d7:24:c9:d7:5f:58:ae:fd:c0:8e:9b:88:5d:9e:d0:4c:0e:
fd:eb:df:c6:3a:c9:c0:62:43:ce:61:67:06:1b:bc:46:b8:94:
2a:73:e5:86:63:a5:7f:b0:b9:1a:1a:ec:f0:ea:95:83:ce:aa:
6b:15:63:46:5b:12:9f:af:67:1e:2d:63:0a:48:5c:e9:2a:ff:
c1:2a:2b:dd:2f:62:42:12:86:eb:02:1b:0d:48:a5:65:bf:96:
b2:94:0a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:06:17 2025 by rpki-client