Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0506cf-4d17-440d-86a1-e7a54a6bec32/1/QIz5bm5Fp-fk9DU0qy32hijL2Rk.mft
File: QIz5bm5Fp-fk9DU0qy32hijL2Rk.mft (raw, json)
Hash identifier: MvNsQK/Iw+vR7RIoBsZzvAncO0J3lycteb+ofT8Go44=
Subject key identifier: 51:C3:C5:B8:FD:3A:2B:D2:8F:0C:AA:2D:E8:39:E2:2E:59:F6:BE:65
Authority key identifier: 40:8C:F9:6E:6E:45:A7:E7:E4:F4:35:34:AB:2D:F6:86:28:CB:D9:19
Certificate issuer: /CN=408cf96e6e45a7e7e4f43534ab2df68628cbd919
Certificate serial: 018F9E75FE6E3F327E5702BA0B92CBF22FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIz5bm5Fp-fk9DU0qy32hijL2Rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0506cf-4d17-440d-86a1-e7a54a6bec32/1/QIz5bm5Fp-fk9DU0qy32hijL2Rk.mft
Manifest number: 0B6D
Signing time: Wed 22 May 2024 04:01:23 +0000
Manifest this update: Wed 22 May 2024 04:01:23 +0000
Manifest next update: Thu 23 May 2024 04:01:23 +0000
Files and hashes: 1: QIz5bm5Fp-fk9DU0qy32hijL2Rk.crl (hash: bmXfs22rcqrGxRl4pq36jt6Oj/S51bnF8lRpRdX9xaA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9e:75:fe:6e:3f:32:7e:57:02:ba:0b:92:cb:f2:2f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408cf96e6e45a7e7e4f43534ab2df68628cbd919
Validity
Not Before: May 22 04:01:23 2024 GMT
Not After : May 23 04:01:23 2024 GMT
Subject: CN=51c3c5b8fd3a2bd28f0caa2de839e22e59f6be65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8b:7c:9a:02:e7:fd:fd:89:39:7f:13:bd:c0:
f4:97:b3:64:2b:a2:91:30:61:3d:96:a1:9f:58:bc:
b0:47:97:21:c9:66:6d:83:d0:fc:d7:b6:11:4b:db:
80:59:d0:3b:0f:15:db:82:e1:1e:45:43:57:7f:f1:
ca:61:b4:5c:f1:04:35:1d:3a:7f:43:0e:1f:92:ee:
e5:0a:9f:2b:25:e1:90:b3:63:71:91:47:37:3f:f7:
f2:cd:89:ee:25:96:46:e2:09:d6:fc:9d:e5:bf:01:
3b:97:7d:ed:e0:15:45:f4:c1:ce:e7:81:f6:0a:30:
ec:80:09:02:c2:61:df:08:69:6e:32:13:9c:ab:53:
63:e9:eb:47:f1:e5:0f:b1:eb:c5:7e:8e:2c:01:af:
ae:be:1b:52:d6:13:ce:83:14:4e:ba:04:87:48:fd:
1c:55:46:42:43:d4:5c:ba:22:a1:37:b3:c7:32:9a:
bd:f5:b9:1e:d9:76:2a:94:e3:e1:d2:ac:9a:ad:43:
95:10:4f:95:cc:29:47:9e:8c:4d:1b:b5:55:15:60:
88:c2:ca:77:03:24:d4:7b:a7:9f:ff:f5:ce:5b:3b:
b8:47:0a:71:d2:ea:e9:6e:00:61:d7:71:fd:68:82:
0a:4a:4c:b9:d8:39:3b:51:c9:25:e2:f5:61:45:5f:
a1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C3:C5:B8:FD:3A:2B:D2:8F:0C:AA:2D:E8:39:E2:2E:59:F6:BE:65
X509v3 Authority Key Identifier:
keyid:40:8C:F9:6E:6E:45:A7:E7:E4:F4:35:34:AB:2D:F6:86:28:CB:D9:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIz5bm5Fp-fk9DU0qy32hijL2Rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0506cf-4d17-440d-86a1-e7a54a6bec32/1/QIz5bm5Fp-fk9DU0qy32hijL2Rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0506cf-4d17-440d-86a1-e7a54a6bec32/1/QIz5bm5Fp-fk9DU0qy32hijL2Rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:2e:90:5d:3c:55:f3:c4:f6:bd:b8:49:1a:6a:0b:58:9b:b7:
e8:d0:03:16:f2:b3:a2:cc:d2:55:ba:9e:fd:fc:ac:73:89:27:
34:6f:3d:a7:da:cd:f0:d0:1a:fd:f6:96:7d:d8:4d:e6:38:da:
7c:a5:e3:33:3d:d3:8c:9e:0e:b8:d8:4d:58:1b:69:8e:40:ce:
25:a3:df:77:b0:27:7a:11:2d:6c:d9:a5:1f:9d:80:2b:11:81:
30:39:ad:23:38:db:9e:89:09:a2:64:53:02:8c:c9:6d:52:37:
07:55:32:d8:fb:62:aa:2a:78:e7:c4:cc:9a:09:7a:19:5a:ad:
e5:a7:da:21:dd:49:81:a5:0f:b8:1d:99:85:a0:2c:45:57:1d:
fd:8b:d5:44:0b:9a:ec:35:88:c0:9e:a9:dc:38:a1:c6:44:15:
d6:78:92:6d:51:1e:1c:f6:f7:1e:c8:ce:a5:55:4e:12:a1:3b:
e4:fd:85:d1:9d:ea:ca:81:3e:27:72:b5:65:5c:06:31:16:4e:
9b:dc:87:a3:86:f8:8b:7b:bc:6f:95:32:93:0f:78:d5:a9:71:
9f:43:6e:be:1c:14:af:d2:85:b9:fd:62:8b:f4:38:a6:46:81:
a8:f2:88:60:77:0b:26:60:6a:14:9d:c6:9f:4c:9b:0a:b7:7b:
bd:50:32:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:43 2025 by rpki-client