Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/8af000-0437-41e5-bbb4-056d9e57b30c/1/Q0_Jk4hJL3sgRIYa7yIyKg6txM4.mft
File: Q0_Jk4hJL3sgRIYa7yIyKg6txM4.mft (raw, json)
Hash identifier: ZVcUM+m+DEScJMANZWc04MsdByb+5BFowJ0KvzIdHU0=
Subject key identifier: 75:41:E7:B7:00:65:21:66:9A:BC:EF:92:59:89:B9:F3:A0:01:FA:8F
Authority key identifier: 43:4F:C9:93:88:49:2F:7B:20:44:86:1A:EF:22:32:2A:0E:AD:C4:CE
Certificate issuer: /CN=434fc99388492f7b2044861aef22322a0eadc4ce
Certificate serial: 018AFF11F98327231C751885413B799F78B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0_Jk4hJL3sgRIYa7yIyKg6txM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/8af000-0437-41e5-bbb4-056d9e57b30c/1/Q0_Jk4hJL3sgRIYa7yIyKg6txM4.mft
Manifest number: 0425
Signing time: Thu 05 Oct 2023 09:01:22 +0000
Manifest this update: Thu 05 Oct 2023 09:01:22 +0000
Manifest next update: Fri 06 Oct 2023 09:01:22 +0000
Files and hashes: 1: Q0_Jk4hJL3sgRIYa7yIyKg6txM4.crl (hash: NqKKbw8SE4fYU7J+joTTnvnXezpiizaS06J7qr0rLYM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ff:11:f9:83:27:23:1c:75:18:85:41:3b:79:9f:78:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=434fc99388492f7b2044861aef22322a0eadc4ce
Validity
Not Before: Oct 5 09:01:22 2023 GMT
Not After : Oct 6 09:01:22 2023 GMT
Subject: CN=7541e7b7006521669abcef925989b9f3a001fa8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9e:7f:45:c6:4f:f1:cd:37:d2:21:99:d0:1f:
a2:40:c7:31:ea:e0:75:66:f1:b1:5d:33:0c:8e:f3:
05:40:c7:5a:c3:61:7b:32:ca:cc:66:96:a0:b2:72:
82:7d:76:4d:38:9b:6e:a2:c4:8c:a7:96:07:62:9d:
f8:f3:f0:2c:fc:dc:5f:c7:f2:94:89:65:ee:bb:e4:
28:e2:25:61:ac:5e:c4:59:d9:a7:11:15:ff:f1:c6:
27:fa:84:c8:37:53:fc:b7:b8:39:45:b0:95:e7:1a:
d1:cc:fe:2a:76:5a:bb:dd:e9:13:5c:54:ed:8b:f7:
85:68:c1:1c:09:df:dd:a7:fc:78:9d:57:bc:88:16:
fa:e0:82:c7:07:da:00:b7:9d:8e:e1:da:77:6e:3f:
93:ca:69:ea:20:29:c9:7d:35:39:3c:5c:d2:20:01:
37:82:af:b5:3a:26:b8:99:bb:0f:d8:44:cb:cf:01:
6e:4b:68:2d:4b:9c:5b:c7:70:32:62:f0:fe:84:db:
63:cc:a7:ae:63:e8:41:2c:88:62:d3:ec:f9:b3:34:
2e:75:d7:01:6f:74:e2:8c:15:27:55:cd:27:4e:07:
9a:1e:72:f2:84:27:0b:7a:06:d5:3b:8e:e0:bd:0e:
e4:f5:40:70:cc:97:b4:7f:46:6d:5d:c0:3b:66:bf:
3e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:41:E7:B7:00:65:21:66:9A:BC:EF:92:59:89:B9:F3:A0:01:FA:8F
X509v3 Authority Key Identifier:
keyid:43:4F:C9:93:88:49:2F:7B:20:44:86:1A:EF:22:32:2A:0E:AD:C4:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0_Jk4hJL3sgRIYa7yIyKg6txM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8af000-0437-41e5-bbb4-056d9e57b30c/1/Q0_Jk4hJL3sgRIYa7yIyKg6txM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8af000-0437-41e5-bbb4-056d9e57b30c/1/Q0_Jk4hJL3sgRIYa7yIyKg6txM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:aa:c1:0a:f6:87:42:67:b3:8b:60:bd:1e:77:fa:3e:b4:74:
d7:4e:ca:2f:11:5e:42:e5:3f:16:d4:94:fc:b8:36:16:9b:01:
c2:8a:0b:e4:4a:3c:36:d3:6c:63:b9:34:92:12:52:cc:10:4d:
6a:2b:12:5d:4e:0c:98:34:c6:c2:22:70:d7:61:cf:6e:d5:e6:
6d:2a:ae:25:7c:b3:77:95:d3:0e:f3:bc:5e:71:85:da:aa:7a:
22:41:9e:71:85:dc:0f:e9:a0:57:78:71:4e:9d:2e:15:1e:2b:
cb:e2:f6:b4:59:b6:42:82:0b:25:a6:9c:89:9f:b6:08:de:9d:
8c:d7:e6:d2:99:8f:39:4e:9b:21:84:6b:fc:ec:82:3f:d7:8c:
89:d5:1f:da:7a:fb:ac:d8:84:24:62:08:08:e1:77:3b:c4:62:
d1:15:00:3d:e4:2f:63:10:ce:38:ee:1d:e8:6f:73:0e:3a:92:
3c:54:c9:1f:7a:ed:a9:36:c6:5f:4a:37:63:5e:aa:58:ec:06:
a5:b0:82:46:41:eb:ea:16:0c:3f:e2:fa:07:ae:8b:63:a8:b9:
03:a3:c9:88:f4:98:53:ab:ef:47:4a:f2:b4:03:67:1f:d4:fb:
c1:91:48:c5:e6:80:83:06:fb:d7:44:25:bf:ba:2b:04:ff:84:
8e:bc:46:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:28:45 2025 by rpki-client