Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d35194-757f-459a-8492-51d8f8c04b91/1/qj7ZA0ohHUFqvLm2mJwPzDc8c6g.mft
File: qj7ZA0ohHUFqvLm2mJwPzDc8c6g.mft (raw, json)
Hash identifier: Z/cr0bBtsPwFL5m6ro9JmTUJ9AD12bCbTPpsG9GDvso=
Subject key identifier: FD:A4:22:89:CF:5D:84:49:6D:C0:BE:54:84:C9:A4:71:6C:FC:76:03
Authority key identifier: AA:3E:D9:03:4A:21:1D:41:6A:BC:B9:B6:98:9C:0F:CC:37:3C:73:A8
Certificate issuer: /CN=aa3ed9034a211d416abcb9b6989c0fcc373c73a8
Certificate serial: 019480CBE67A2E7361736E52828FCDB45F9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qj7ZA0ohHUFqvLm2mJwPzDc8c6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d35194-757f-459a-8492-51d8f8c04b91/1/qj7ZA0ohHUFqvLm2mJwPzDc8c6g.mft
Manifest number: 0654
Signing time: Sun 19 Jan 2025 23:00:33 +0000
Manifest this update: Sun 19 Jan 2025 23:00:33 +0000
Manifest next update: Mon 20 Jan 2025 23:00:33 +0000
Files and hashes: 1: qj7ZA0ohHUFqvLm2mJwPzDc8c6g.crl (hash: RjG9P/VLpH2tKekvN+18UdtWyfCeAYlV9k2ErLF0Fsw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:80:cb:e6:7a:2e:73:61:73:6e:52:82:8f:cd:b4:5f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa3ed9034a211d416abcb9b6989c0fcc373c73a8
Validity
Not Before: Jan 19 23:00:33 2025 GMT
Not After : Jan 20 23:00:33 2025 GMT
Subject: CN=fda42289cf5d84496dc0be5484c9a4716cfc7603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:2f:62:5b:ff:ed:58:8e:60:53:b5:fe:76:42:
ac:04:26:eb:7e:4d:46:df:7e:18:70:27:ba:cc:75:
8f:3b:54:bb:08:94:d7:61:8a:1e:6b:64:15:a9:d6:
96:b5:7a:9b:71:ec:fb:aa:48:44:34:cc:94:8c:8d:
c3:3e:9b:e8:ed:39:5e:09:86:05:86:98:7e:c8:56:
aa:03:b2:cf:a8:1b:fc:27:e4:38:e7:aa:99:3b:e9:
d8:9a:97:fc:3e:64:97:bd:39:77:50:01:0c:23:34:
15:4a:a0:8f:81:42:cc:4c:c3:c9:34:2b:ea:96:f2:
56:f3:3f:8f:14:ad:e5:46:1d:a3:70:25:03:bf:7f:
5d:8f:fe:71:dc:01:15:3a:e9:ed:32:3e:01:c1:66:
75:f0:76:cc:34:c1:5e:30:af:66:96:d3:46:06:16:
14:18:13:ab:3f:54:e0:95:cd:11:0d:95:55:bc:f4:
49:b6:a7:81:77:ba:66:a2:33:e0:0b:db:b5:4b:98:
28:3c:54:55:ba:21:b0:a3:b2:9d:94:9b:41:28:fd:
eb:ae:4c:25:88:34:1d:1f:d1:17:19:5a:d3:44:f2:
4c:48:45:bf:93:c1:8a:18:95:5b:5f:ff:13:45:99:
f8:f1:b0:b9:02:e9:a7:95:70:50:06:3f:98:6d:b0:
8e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A4:22:89:CF:5D:84:49:6D:C0:BE:54:84:C9:A4:71:6C:FC:76:03
X509v3 Authority Key Identifier:
keyid:AA:3E:D9:03:4A:21:1D:41:6A:BC:B9:B6:98:9C:0F:CC:37:3C:73:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qj7ZA0ohHUFqvLm2mJwPzDc8c6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d35194-757f-459a-8492-51d8f8c04b91/1/qj7ZA0ohHUFqvLm2mJwPzDc8c6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d35194-757f-459a-8492-51d8f8c04b91/1/qj7ZA0ohHUFqvLm2mJwPzDc8c6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:76:98:73:a7:95:d2:d1:c2:65:2d:23:33:6a:66:c7:e7:56:
0b:62:40:ad:62:18:f2:4d:1c:37:52:d4:af:c3:d0:0f:01:6d:
ba:49:d1:47:4a:f3:54:b8:16:e4:f6:78:0e:37:04:2d:14:c0:
b2:7d:c0:59:3a:da:8e:1c:1e:65:15:5f:1f:5a:52:8c:b0:f6:
cc:6a:53:16:32:54:b6:a0:b3:05:3f:fd:93:73:5a:50:be:7e:
fe:e3:8d:05:3d:f9:ed:10:88:39:56:46:b5:9d:26:1d:ac:c8:
2c:40:60:78:42:ca:3a:74:c5:a7:7a:5f:8e:3f:03:39:63:a6:
d1:1d:72:b1:f3:c0:97:b2:2c:42:af:7d:6c:ae:51:da:11:d1:
52:04:7f:4c:aa:8d:0c:3b:40:6e:55:47:5b:de:da:0e:8d:9d:
eb:a3:6d:40:51:f1:5d:90:58:02:5e:7c:47:0d:3f:a2:df:bb:
66:ce:c4:f7:b7:b6:64:58:6f:a9:43:06:ce:6a:b7:54:fc:4f:
39:e8:4b:c1:c6:c0:98:44:ee:be:36:08:44:fa:cf:24:5c:75:
c7:fb:ff:f1:e4:ea:70:1b:d0:75:a7:f7:5b:b3:ba:ec:29:25:
17:cb:be:43:3d:fa:c9:e3:db:58:44:ab:71:d9:66:ae:5f:48:
4b:88:7f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:03:06 2025 by rpki-client