Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7f56fd-b177-40e0-9c18-cd34a433e615/1/qfBi_X8yUpX76ehotu_TGma7HbU.mft
File: qfBi_X8yUpX76ehotu_TGma7HbU.mft (raw, json)
Hash identifier: 3jpcdnTuONb2NDDmYyBAsbev1A6DLJKEEnpCkUdQ5tE=
Subject key identifier: 25:8B:79:FF:C6:B3:8A:A4:BE:19:B1:A6:2C:21:9E:D9:BC:8E:43:41
Authority key identifier: A9:F0:62:FD:7F:32:52:95:FB:E9:E8:68:B6:EF:D3:1A:66:BB:1D:B5
Certificate issuer: /CN=a9f062fd7f325295fbe9e868b6efd31a66bb1db5
Certificate serial: 019462F86401DB94E7E165232BCC9D15F530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfBi_X8yUpX76ehotu_TGma7HbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7f56fd-b177-40e0-9c18-cd34a433e615/1/qfBi_X8yUpX76ehotu_TGma7HbU.mft
Manifest number: 0DF0
Signing time: Tue 14 Jan 2025 04:00:33 +0000
Manifest this update: Tue 14 Jan 2025 04:00:33 +0000
Manifest next update: Wed 15 Jan 2025 04:00:33 +0000
Files and hashes: 1: qfBi_X8yUpX76ehotu_TGma7HbU.crl (hash: Od1q19RWBezcaeMMB5jLi8pk/Qtw5MMOmi2gggiesTE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:62:f8:64:01:db:94:e7:e1:65:23:2b:cc:9d:15:f5:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9f062fd7f325295fbe9e868b6efd31a66bb1db5
Validity
Not Before: Jan 14 04:00:33 2025 GMT
Not After : Jan 15 04:00:33 2025 GMT
Subject: CN=258b79ffc6b38aa4be19b1a62c219ed9bc8e4341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:10:1a:8d:82:3a:ba:3e:01:d8:57:ae:48:c5:
ec:fd:bb:e6:36:fc:7b:8a:c1:68:0a:5a:b9:d5:8e:
80:30:3a:9f:53:68:bb:16:94:8d:78:39:fd:83:1c:
5c:b5:48:0c:0a:0a:3d:92:41:a0:27:89:8d:ee:06:
8f:39:a3:b0:06:f3:f0:f8:43:d9:fe:ee:75:63:b1:
bf:c9:7d:98:9b:ca:6f:a4:b1:c7:82:f6:cb:e1:14:
d0:59:c5:be:0e:32:e5:9a:43:80:81:65:2c:20:9b:
aa:04:ed:37:6c:59:32:be:ea:a4:3d:15:ff:b4:91:
e5:6d:71:52:05:58:fa:2c:e7:00:ad:8d:4e:75:59:
aa:0f:94:01:b4:fe:e3:eb:01:aa:49:0c:ac:6c:9f:
f1:e7:aa:90:b5:74:e3:28:69:38:b8:8c:db:8e:62:
1f:5c:a8:c5:c0:ba:4f:3c:ee:06:e6:f5:e9:e1:a6:
c8:4f:40:14:3a:07:cc:6c:fb:eb:1a:fc:62:26:f1:
9a:d3:e5:6b:8c:d6:8a:2f:f1:8f:bc:7f:2f:f0:3e:
b8:0b:84:ad:6e:42:89:9f:dc:7e:2a:5e:21:ae:58:
a9:21:96:7a:4c:9d:d6:7c:22:48:25:86:2c:cf:28:
d8:b8:d7:27:65:b6:7c:08:3b:94:2f:24:12:61:b4:
c3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8B:79:FF:C6:B3:8A:A4:BE:19:B1:A6:2C:21:9E:D9:BC:8E:43:41
X509v3 Authority Key Identifier:
keyid:A9:F0:62:FD:7F:32:52:95:FB:E9:E8:68:B6:EF:D3:1A:66:BB:1D:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfBi_X8yUpX76ehotu_TGma7HbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7f56fd-b177-40e0-9c18-cd34a433e615/1/qfBi_X8yUpX76ehotu_TGma7HbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7f56fd-b177-40e0-9c18-cd34a433e615/1/qfBi_X8yUpX76ehotu_TGma7HbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:60:78:b8:45:e8:2d:ff:93:02:52:cd:34:ce:48:3b:c8:89:
3e:86:7a:ec:58:f6:7b:db:84:91:ec:0e:8b:eb:39:bc:5c:a8:
95:c3:87:88:16:8d:75:de:83:39:59:a8:f2:cd:39:51:a8:ec:
f6:2f:a7:cd:b7:6a:3d:ad:90:29:ff:84:c7:c2:ec:09:6b:7d:
2d:b4:81:2c:28:05:84:af:aa:2f:85:77:f5:45:b1:14:fb:fa:
b6:ee:01:a1:dd:f2:57:89:d6:99:f1:72:39:cf:f3:a4:c8:35:
8b:ed:fc:37:14:2a:2e:bd:ed:94:fe:4f:9c:f9:46:85:a8:e4:
04:b6:37:e8:72:65:ee:39:d1:2b:db:49:75:33:ba:7d:46:99:
4c:73:d5:96:44:6c:d7:cb:a9:40:28:0b:a0:73:13:63:f2:1f:
8c:f4:99:e9:c2:13:5e:1c:54:aa:29:b7:c7:f9:a6:24:92:c9:
f2:3c:61:d7:fe:e3:7b:9d:9a:33:5f:98:c0:f8:e7:15:41:b5:
96:ca:d6:9c:a3:6d:da:bb:b6:70:2a:a0:02:99:f7:c4:0a:c8:
8e:60:39:60:9e:6a:85:df:8e:aa:d0:92:c9:16:fd:dd:f6:00:
32:b8:7e:6b:f7:16:00:a9:f9:58:92:3f:aa:08:07:8c:1b:6c:
c1:45:e3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:00 2025 by rpki-client