Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/278cfe-eaeb-4bae-a0db-a17011e4557b/1/Qd6VK1JCO0AaqfTkniQJ0C06Yz8.mft
File: Qd6VK1JCO0AaqfTkniQJ0C06Yz8.mft (raw, json)
Hash identifier: ItodkPQZOqWtYJfCitZtSco6izwZVIUaQLGbnth2kXg=
Subject key identifier: A9:ED:33:CB:29:D4:EC:26:6B:B3:7E:21:7D:28:7F:1C:E6:68:09:2F
Authority key identifier: 41:DE:95:2B:52:42:3B:40:1A:A9:F4:E4:9E:24:09:D0:2D:3A:63:3F
Certificate issuer: /CN=41de952b52423b401aa9f4e49e2409d02d3a633f
Certificate serial: 0195A2E8376DDE25E5DD6C8583914918ADC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qd6VK1JCO0AaqfTkniQJ0C06Yz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/278cfe-eaeb-4bae-a0db-a17011e4557b/1/Qd6VK1JCO0AaqfTkniQJ0C06Yz8.mft
Manifest number: 0A20
Signing time: Mon 17 Mar 2025 07:01:22 +0000
Manifest this update: Mon 17 Mar 2025 07:01:22 +0000
Manifest next update: Tue 18 Mar 2025 07:01:22 +0000
Files and hashes: 1: Qd6VK1JCO0AaqfTkniQJ0C06Yz8.crl (hash: wzGjEGe8+bsi+m6L2R8fst0K63xvQ68NIj0XceESjYc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a2:e8:37:6d:de:25:e5:dd:6c:85:83:91:49:18:ad:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41de952b52423b401aa9f4e49e2409d02d3a633f
Validity
Not Before: Mar 17 07:01:22 2025 GMT
Not After : Mar 18 07:01:22 2025 GMT
Subject: CN=a9ed33cb29d4ec266bb37e217d287f1ce668092f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9d:b6:c6:41:b4:d6:81:2a:6d:3c:e0:dc:e4:
3c:56:7b:ab:9b:6c:13:9f:0c:61:e9:ee:a3:69:d5:
6f:63:38:8e:74:cf:fb:18:4d:f3:04:0f:5d:97:e7:
aa:76:e7:22:c6:33:6f:37:0a:c1:3f:5b:eb:85:ea:
be:7c:22:57:fd:8a:86:77:cb:4c:fa:8c:7a:69:b9:
46:d4:db:dd:87:9e:46:70:e1:51:0f:2f:25:e3:31:
6e:d5:53:2c:59:01:06:f3:2b:88:bf:71:5d:63:24:
65:f7:9a:00:b3:1e:20:8d:81:fb:e0:81:ed:ee:08:
5c:e2:af:4e:52:89:f5:0a:d7:0f:f8:d9:cb:ee:fe:
7b:e6:5f:36:47:63:9f:b8:96:5a:b3:bb:49:44:d4:
b1:24:ff:0f:b1:82:28:0f:6b:41:06:97:c1:ac:51:
f9:4c:0d:1b:91:30:6a:fc:df:28:dd:ba:e6:df:62:
c3:25:97:0f:be:43:28:a4:62:8f:cf:4e:f0:f2:2c:
df:10:2a:dc:48:67:1b:16:a7:43:2f:ae:f9:6d:45:
4e:21:f3:ef:94:ae:62:e7:cc:50:b8:2c:42:ec:97:
f3:86:15:40:e2:14:c6:71:e5:bd:26:b1:c0:ff:d5:
78:e4:17:6c:6e:48:b5:01:81:4b:f8:33:bf:f0:cd:
40:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:ED:33:CB:29:D4:EC:26:6B:B3:7E:21:7D:28:7F:1C:E6:68:09:2F
X509v3 Authority Key Identifier:
keyid:41:DE:95:2B:52:42:3B:40:1A:A9:F4:E4:9E:24:09:D0:2D:3A:63:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd6VK1JCO0AaqfTkniQJ0C06Yz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/278cfe-eaeb-4bae-a0db-a17011e4557b/1/Qd6VK1JCO0AaqfTkniQJ0C06Yz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/278cfe-eaeb-4bae-a0db-a17011e4557b/1/Qd6VK1JCO0AaqfTkniQJ0C06Yz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:8f:b6:04:00:4c:ff:f8:86:9a:e0:b3:d2:c8:27:b5:2d:3e:
7c:af:d3:af:fb:85:53:5a:a1:e4:80:de:10:26:d5:62:a1:5d:
a9:87:3a:0a:ec:26:21:8b:3c:52:65:45:4e:90:e9:bd:43:26:
13:de:ed:69:32:88:5d:70:e1:85:ed:80:bb:f0:a4:f6:08:73:
17:66:bd:85:53:01:93:99:03:e9:fe:4c:9b:df:ac:e9:9e:64:
46:d8:4b:a4:f1:9e:0e:75:23:48:ae:44:f3:02:af:68:3b:b4:
5f:87:df:5b:3f:97:5d:8c:7e:4f:46:5c:e0:4e:b0:16:85:e9:
19:15:77:76:30:68:9e:e3:c6:f4:e8:d6:52:4c:d4:da:18:b0:
34:d8:63:85:bf:e5:dd:2f:e1:9d:88:51:ec:1c:06:d3:6f:3b:
38:37:f9:6a:1e:e3:6b:56:f0:a2:c6:de:a1:d3:07:a8:9d:5e:
b7:d8:ee:a4:51:60:e5:08:26:77:aa:36:b9:24:d9:59:7b:db:
cf:b4:9e:76:58:6e:3a:09:1e:2c:17:e1:5e:4f:b8:fc:d0:0c:
d7:f0:e7:53:9f:ad:cd:7a:b1:9c:16:1f:78:58:77:f7:e0:a4:
11:69:2b:c5:25:ab:54:ed:a8:82:92:92:67:ed:ef:7b:e6:be:
8c:34:81:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:12:47 2025 by rpki-client