Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/4c2346-8a2c-4373-a44a-6e95f88dc33b/1/QzofMrkqFEYRrrMxHsh6SNBhf0M.mft
File: QzofMrkqFEYRrrMxHsh6SNBhf0M.mft (raw, json)
Hash identifier: L9CM95+PfmnSSv6+GcaqPXOdnybcKSrX982qYNAG/0o=
Subject key identifier: A1:47:5C:A0:24:07:E6:2B:18:56:6A:DC:D8:F2:35:B3:16:5E:ED:A5
Authority key identifier: 43:3A:1F:32:B9:2A:14:46:11:AE:B3:31:1E:C8:7A:48:D0:61:7F:43
Certificate issuer: /CN=433a1f32b92a144611aeb3311ec87a48d0617f43
Certificate serial: 018DAF6E7C7C35A005771BE91210259165C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QzofMrkqFEYRrrMxHsh6SNBhf0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/4c2346-8a2c-4373-a44a-6e95f88dc33b/1/QzofMrkqFEYRrrMxHsh6SNBhf0M.mft
Manifest number: 03B0
Signing time: Fri 16 Feb 2024 01:01:10 +0000
Manifest this update: Fri 16 Feb 2024 01:01:10 +0000
Manifest next update: Sat 17 Feb 2024 01:01:10 +0000
Files and hashes: 1: QzofMrkqFEYRrrMxHsh6SNBhf0M.crl (hash: wgBNQDwqr9Eko3VDOoORVsM7Z89E4kBC4B09e9gNvmE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:af:6e:7c:7c:35:a0:05:77:1b:e9:12:10:25:91:65:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=433a1f32b92a144611aeb3311ec87a48d0617f43
Validity
Not Before: Feb 16 01:01:10 2024 GMT
Not After : Feb 17 01:01:10 2024 GMT
Subject: CN=a1475ca02407e62b18566adcd8f235b3165eeda5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fe:2f:04:49:36:cb:3f:27:72:6f:70:ab:39:
aa:16:b5:cb:1b:23:f7:35:cf:ac:82:10:cc:46:b2:
00:06:5a:f3:9a:ea:ce:4c:50:b7:7f:2d:4b:46:55:
3d:d7:0f:39:de:8f:60:0e:98:30:e7:43:42:62:95:
e2:b6:a0:93:24:1a:54:33:71:be:b3:95:03:db:59:
1d:e5:55:30:14:1d:ca:b6:6c:1b:c7:ac:7c:e3:53:
08:86:db:80:79:83:55:9e:e9:50:27:bf:54:30:b1:
59:b4:94:12:9a:b0:6b:d8:b4:57:2b:fc:0b:e1:20:
3a:60:fe:61:f0:8b:d8:3d:4a:23:31:b0:25:eb:98:
89:aa:ec:6f:ae:18:8a:f7:30:65:11:40:53:db:30:
ce:12:7b:57:01:85:b2:1b:0d:8e:31:75:9a:35:00:
01:46:09:18:96:9c:37:cd:16:e1:7e:44:d8:94:af:
c3:82:f8:e3:a1:98:7a:a0:2e:92:89:f9:a5:35:1b:
a7:7b:f4:eb:49:51:fe:1a:cf:cd:80:cd:7b:2a:58:
91:ff:8d:a8:7f:bc:04:28:77:44:ef:49:eb:89:68:
c1:97:d1:ce:7f:7c:c1:27:a9:8a:1f:d1:7a:35:f5:
e2:9d:28:7d:b9:d1:5c:01:49:0e:0a:62:fc:e3:67:
14:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:47:5C:A0:24:07:E6:2B:18:56:6A:DC:D8:F2:35:B3:16:5E:ED:A5
X509v3 Authority Key Identifier:
keyid:43:3A:1F:32:B9:2A:14:46:11:AE:B3:31:1E:C8:7A:48:D0:61:7F:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QzofMrkqFEYRrrMxHsh6SNBhf0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4c2346-8a2c-4373-a44a-6e95f88dc33b/1/QzofMrkqFEYRrrMxHsh6SNBhf0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4c2346-8a2c-4373-a44a-6e95f88dc33b/1/QzofMrkqFEYRrrMxHsh6SNBhf0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:78:f1:99:f8:78:67:2b:d8:e8:b5:39:75:65:b1:bb:25:0c:
00:4c:72:ce:5c:e3:ca:34:48:7c:f2:76:34:7d:63:e6:da:52:
40:a4:53:22:9a:b6:2a:39:89:68:bb:bb:0d:2b:95:2b:64:92:
94:31:64:33:31:08:fc:2b:b6:12:3c:f0:74:ed:08:1e:00:71:
f6:d6:89:e8:45:d8:29:4b:24:d9:94:ad:a5:73:f1:ab:b4:9b:
c4:cf:0b:aa:42:1d:b0:e3:31:c0:8b:9e:57:4c:aa:d4:90:16:
8b:a4:06:3a:b4:5d:54:dd:83:ec:b3:d0:f7:7e:2e:7a:b2:46:
c5:7a:e8:a8:54:b4:47:2c:f3:9f:64:c0:d2:88:e1:1d:3d:d9:
09:3e:fb:06:53:07:b9:b1:81:3b:0c:0d:96:ec:9f:8b:d9:34:
9f:93:35:b5:b6:dd:25:ea:c0:d5:ad:72:fb:b3:0e:26:b2:be:
87:8b:2c:28:a9:8d:ef:15:6b:b1:c8:f0:2d:27:06:ae:60:19:
52:40:d4:13:2e:d6:65:1c:af:89:21:47:59:a9:51:e9:58:15:
2f:87:67:4e:99:17:81:5a:a0:db:d5:dd:2b:88:48:a1:7b:52:
0e:9e:6c:55:e6:d9:f8:31:a2:c5:b1:e2:f0:1a:c5:a1:5d:d2:
6a:25:1d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:37 2025 by rpki-client