Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ecfe11-e921-40f9-bf93-1d5619c5bdb1/1/q3goucqidFn-adNK5WhfenqGPps.mft
File: q3goucqidFn-adNK5WhfenqGPps.mft (raw, json)
Hash identifier: nzLzWhi/829xn5HJJpj+0aSAKmnJSuN2AWnEJPt04pQ=
Subject key identifier: 22:7C:C5:06:4D:DE:24:F6:2D:93:25:BB:E9:8F:98:C4:AB:F5:72:04
Authority key identifier: AB:78:28:B9:CA:A2:74:59:FE:69:D3:4A:E5:68:5F:7A:7A:86:3E:9B
Certificate issuer: /CN=ab7828b9caa27459fe69d34ae5685f7a7a863e9b
Certificate serial: 01943920C51DC7B1B49776C9907369C7A584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3goucqidFn-adNK5WhfenqGPps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/ecfe11-e921-40f9-bf93-1d5619c5bdb1/1/q3goucqidFn-adNK5WhfenqGPps.mft
Manifest number: 0E66
Signing time: Mon 06 Jan 2025 01:00:36 +0000
Manifest this update: Mon 06 Jan 2025 01:00:36 +0000
Manifest next update: Tue 07 Jan 2025 01:00:36 +0000
Files and hashes: 1: q3goucqidFn-adNK5WhfenqGPps.crl (hash: TguQ2KDT/70+FD0i+OuiK7biA0niXJ2F1AEOKm3uKDc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:39:20:c5:1d:c7:b1:b4:97:76:c9:90:73:69:c7:a5:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7828b9caa27459fe69d34ae5685f7a7a863e9b
Validity
Not Before: Jan 6 01:00:36 2025 GMT
Not After : Jan 7 01:00:36 2025 GMT
Subject: CN=227cc5064dde24f62d9325bbe98f98c4abf57204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7a:c8:56:a0:b0:77:57:bd:a8:3f:10:99:38:
3b:32:f6:b3:63:f2:7d:6b:d9:69:af:83:ad:9b:0c:
e8:e6:90:67:c6:33:8a:df:cd:30:aa:d9:5a:0e:74:
c1:8a:a2:01:cf:84:b9:07:35:e0:00:ba:31:0c:0e:
58:99:14:e8:bb:8c:90:85:73:07:46:52:6b:13:6c:
27:e6:ac:1c:4c:06:73:c4:4c:b7:61:2d:f1:0c:9b:
51:05:16:ca:30:3d:6d:01:b6:46:78:40:e3:d1:e1:
96:3e:46:c5:93:80:75:20:c2:64:7a:28:16:75:e4:
c1:41:f0:8e:41:14:52:45:67:10:7f:5d:ac:3b:00:
17:fd:13:b4:bd:b7:8a:f2:d0:b9:39:ea:69:4c:b0:
5c:0d:ea:10:be:0b:c1:15:bd:09:04:a9:a2:5b:09:
e2:59:28:0a:c9:81:38:f3:3b:68:c0:3b:fd:9f:f5:
51:bb:11:1f:12:3b:46:3c:7b:b2:52:c0:c4:74:0b:
00:d1:92:a2:c5:94:ad:5a:7d:a5:bc:e0:08:86:ac:
6c:ba:f0:bd:f2:3d:e8:2d:f8:8e:d0:2f:cd:a4:fe:
7e:c1:70:30:3a:35:b2:4f:e8:f8:f8:38:18:20:d3:
ff:3c:ba:9c:4b:54:5e:ef:af:e2:58:33:fa:64:f0:
d9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7C:C5:06:4D:DE:24:F6:2D:93:25:BB:E9:8F:98:C4:AB:F5:72:04
X509v3 Authority Key Identifier:
keyid:AB:78:28:B9:CA:A2:74:59:FE:69:D3:4A:E5:68:5F:7A:7A:86:3E:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3goucqidFn-adNK5WhfenqGPps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ecfe11-e921-40f9-bf93-1d5619c5bdb1/1/q3goucqidFn-adNK5WhfenqGPps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ecfe11-e921-40f9-bf93-1d5619c5bdb1/1/q3goucqidFn-adNK5WhfenqGPps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:6d:d7:d7:f6:41:84:ff:ad:fe:9e:f4:be:cc:e3:b9:88:55:
9e:cf:ce:03:9f:ba:49:d4:84:91:18:dd:c2:6f:60:9b:6c:77:
78:86:be:11:63:48:e9:fe:fe:0b:fc:18:28:b0:f7:da:ea:9b:
77:e7:43:9a:b4:96:17:33:f5:9f:e1:61:1e:c6:ae:cd:d6:1d:
5f:d2:3e:15:88:5a:de:3e:4e:ca:18:ac:eb:7c:db:8f:50:96:
a6:fe:29:ab:d8:b5:eb:92:7a:d4:ff:69:43:e7:cb:ab:ab:17:
59:9a:00:5f:71:b6:97:13:eb:46:12:63:e2:06:69:d3:ab:9a:
31:a3:85:fb:88:12:61:45:4c:00:d7:52:79:95:a8:ba:75:1d:
3f:2c:a9:13:1b:ce:fc:d8:d3:b8:13:e6:09:98:25:bf:a2:90:
aa:33:5c:bc:47:2d:67:f4:df:1d:aa:49:2e:a3:70:a7:bf:71:
4c:cb:fc:cf:96:7a:7a:65:19:4b:0c:9d:b6:ca:72:49:47:b8:
ea:5c:6b:14:ea:6e:5f:78:4d:86:dd:db:44:6e:b1:d2:df:12:
df:e4:ee:07:cd:f7:6c:e9:67:7e:c9:fe:a1:1e:8b:a2:5b:d7:
cb:41:81:de:2a:17:a1:2b:5c:22:3f:32:8c:c7:6e:80:00:65:
00:93:d1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:48:12 2025 by rpki-client