Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a7ff8c-147e-4c4a-8675-8778cd8c0500/1/qJyEDR7wzVLc9fqmUzWl3VBUxGU.mft
File: qJyEDR7wzVLc9fqmUzWl3VBUxGU.mft (raw, json)
Hash identifier: PeOXQfpR3Zq8LCjWbjoTKVq0PvgBOpAg991z0eYkkbs=
Subject key identifier: 27:74:17:F8:C8:68:AC:BE:B7:94:A0:99:5D:51:E7:17:5E:8B:76:79
Authority key identifier: A8:9C:84:0D:1E:F0:CD:52:DC:F5:FA:A6:53:35:A5:DD:50:54:C4:65
Certificate issuer: /CN=a89c840d1ef0cd52dcf5faa65335a5dd5054c465
Certificate serial: 019352ADE473572BE6F9E468D4E41DD5FB3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJyEDR7wzVLc9fqmUzWl3VBUxGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/a7ff8c-147e-4c4a-8675-8778cd8c0500/1/qJyEDR7wzVLc9fqmUzWl3VBUxGU.mft
Manifest number: 136F
Signing time: Fri 22 Nov 2024 07:02:28 +0000
Manifest this update: Fri 22 Nov 2024 07:02:28 +0000
Manifest next update: Sat 23 Nov 2024 07:02:28 +0000
Files and hashes: 1: cxYc9OSKga3MpsK4SgHckun8egc.roa (hash: Xex5j/4fsjtzs0yjCJOL9FmoH9/auaK6odqOy/29bsE=)
2: qJyEDR7wzVLc9fqmUzWl3VBUxGU.crl (hash: DP+B1egJY2T40jyBWh6mhTk5VowVM3Bt6+ipVuV36ZQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:ad:e4:73:57:2b:e6:f9:e4:68:d4:e4:1d:d5:fb:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a89c840d1ef0cd52dcf5faa65335a5dd5054c465
Validity
Not Before: Nov 22 07:02:28 2024 GMT
Not After : Nov 23 07:02:28 2024 GMT
Subject: CN=277417f8c868acbeb794a0995d51e7175e8b7679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d0:52:58:1c:51:5e:0f:b7:27:e6:bd:2b:d7:
48:2e:6b:1d:4f:8c:a0:09:f1:af:98:b2:d2:30:b0:
4a:45:05:74:12:ce:84:13:44:6d:d7:e9:90:0b:6a:
78:05:44:5a:45:7a:09:b8:4e:44:66:63:0c:03:7e:
5c:2c:5a:2c:67:ba:18:9d:8a:8e:d0:eb:8f:b9:b1:
79:b6:71:52:24:fd:ee:69:cd:2d:5f:09:f9:59:59:
34:e2:85:b9:87:ec:7a:60:63:98:9c:a0:83:68:7a:
27:af:b0:e3:af:fc:08:9f:95:93:90:c6:6e:03:fc:
d3:65:08:bf:74:f0:71:e0:6f:6f:32:7b:0e:a8:24:
84:f4:91:48:b5:eb:5d:51:37:6e:d9:b9:7e:ee:1e:
e4:c9:33:6b:84:9f:ed:f6:d6:87:22:2d:04:3d:3a:
c1:ff:30:1c:56:1f:e5:92:03:c3:0f:56:f0:07:9a:
c9:31:56:42:ee:94:da:05:74:5e:2a:e0:d0:a7:d6:
8c:ad:b1:72:aa:e9:ab:03:14:67:37:7c:1f:5a:91:
19:a9:1f:a8:38:ce:a2:c8:d2:66:78:6d:8f:19:fa:
54:be:60:79:ed:31:8c:5b:b3:7d:21:59:01:5c:27:
2b:d7:1c:81:ea:aa:ee:cc:d4:80:72:aa:49:80:2e:
31:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:74:17:F8:C8:68:AC:BE:B7:94:A0:99:5D:51:E7:17:5E:8B:76:79
X509v3 Authority Key Identifier:
keyid:A8:9C:84:0D:1E:F0:CD:52:DC:F5:FA:A6:53:35:A5:DD:50:54:C4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJyEDR7wzVLc9fqmUzWl3VBUxGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a7ff8c-147e-4c4a-8675-8778cd8c0500/1/qJyEDR7wzVLc9fqmUzWl3VBUxGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a7ff8c-147e-4c4a-8675-8778cd8c0500/1/qJyEDR7wzVLc9fqmUzWl3VBUxGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f9:a0:a2:8d:ea:58:40:2f:92:2c:5d:45:40:e6:d5:49:94:
27:40:02:f8:77:33:b9:a2:e0:e8:c0:7c:57:36:c8:88:0a:5f:
48:42:13:5b:c0:08:ab:8b:03:d8:1c:2e:7d:e9:93:6d:76:e0:
f0:2a:b2:6d:87:7a:e9:47:b0:55:0c:9b:74:ee:0f:b3:1a:f1:
35:59:79:3a:9e:52:b3:82:d8:84:1f:ad:32:e2:13:a1:ff:1b:
52:0c:c8:9a:b6:1f:f5:6e:d4:bb:3f:7b:ce:95:92:61:e8:5c:
a0:66:ad:ae:8d:4d:21:05:ae:f9:88:19:95:ae:8d:b8:8c:4b:
27:5f:99:c0:9e:e4:4f:50:f8:1e:f5:65:c7:82:24:4c:79:13:
63:ee:a5:19:6c:98:ac:4d:29:e0:46:1f:99:ff:c4:68:d9:8f:
72:11:97:57:56:30:67:47:2a:79:cf:e8:e9:47:fd:90:af:9a:
d6:b7:46:d1:c1:7d:a2:19:42:51:55:6d:b0:11:a4:d1:dd:17:
c9:65:f1:b4:6a:09:1e:c5:45:b4:58:7b:09:8a:5b:ac:39:c7:
46:2c:7f:9e:94:4b:5b:b0:cc:3d:04:4a:ba:b5:e1:28:ad:52:
dc:21:7f:a0:50:9b:27:4f:12:a0:66:4c:ea:be:1d:d0:c1:15:
26:cb:9b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:10:43 2025 by rpki-client