Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/481ea2-570c-48ac-8a37-7269b78f9cff/1/QfxINXn14C0-SZzXOiOq2RQDGDE.mft
File: QfxINXn14C0-SZzXOiOq2RQDGDE.mft (raw, json)
Hash identifier: 6TkCXGIRZWDfEj8UwULFEc/ILynG0kN5+k/icAqyWkI=
Subject key identifier: 77:DB:58:8B:A6:5B:BF:F8:76:C3:89:81:58:65:E1:A9:2A:D0:66:92
Authority key identifier: 41:FC:48:35:79:F5:E0:2D:3E:49:9C:D7:3A:23:AA:D9:14:03:18:31
Certificate issuer: /CN=41fc483579f5e02d3e499cd73a23aad914031831
Certificate serial: 0194455C6742ED34D81999D1EF84554383B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfxINXn14C0-SZzXOiOq2RQDGDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/481ea2-570c-48ac-8a37-7269b78f9cff/1/QfxINXn14C0-SZzXOiOq2RQDGDE.mft
Manifest number: 101B
Signing time: Wed 08 Jan 2025 10:01:11 +0000
Manifest this update: Wed 08 Jan 2025 10:01:11 +0000
Manifest next update: Thu 09 Jan 2025 10:01:11 +0000
Files and hashes: 1: QfxINXn14C0-SZzXOiOq2RQDGDE.crl (hash: jgnXixCK/TUEf1lTSr7MMXmTJUV1bXYkUMFvZpJYlcM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:45:5c:67:42:ed:34:d8:19:99:d1:ef:84:55:43:83:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fc483579f5e02d3e499cd73a23aad914031831
Validity
Not Before: Jan 8 10:01:11 2025 GMT
Not After : Jan 9 10:01:11 2025 GMT
Subject: CN=77db588ba65bbff876c389815865e1a92ad06692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7b:e1:a8:d9:6f:09:25:a5:40:13:b1:bd:ba:
b8:04:30:13:c9:bc:94:82:11:5c:f0:a5:1c:eb:71:
0f:53:6b:f9:7c:d1:ce:48:c0:7b:d0:58:ba:13:63:
60:18:8d:c2:bf:bd:40:b1:20:df:dd:0c:a5:eb:39:
55:f0:ce:cb:73:56:26:97:1a:b1:62:fe:3f:80:67:
c1:bc:50:9a:28:80:7d:3d:83:3b:12:6f:51:1d:2a:
42:7a:c6:e2:e4:19:53:08:30:cc:f6:35:cd:e5:9e:
af:b8:f3:5c:bd:b5:87:ab:da:24:72:dc:97:ae:8f:
5c:22:84:96:6c:ad:ed:76:f1:be:b2:63:48:e5:4b:
6f:e2:eb:06:ee:27:9a:b4:43:9d:df:6d:45:18:e6:
c5:95:5f:9d:1c:98:95:67:ec:fa:89:21:f7:f6:5b:
87:77:c0:eb:cd:5d:36:0b:52:4b:1e:26:02:33:6c:
5c:5a:40:10:ad:4f:c0:45:93:6c:ae:c2:78:c7:08:
da:c9:24:4f:19:5b:8c:67:d4:ec:03:9c:43:bf:db:
c2:36:51:0d:4b:a9:4f:be:cd:c5:75:5e:b9:53:23:
ca:88:05:61:a4:9d:b9:c0:c7:00:39:5f:00:be:16:
3d:ac:08:05:e0:47:92:2f:a5:8f:27:24:06:04:06:
a6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:DB:58:8B:A6:5B:BF:F8:76:C3:89:81:58:65:E1:A9:2A:D0:66:92
X509v3 Authority Key Identifier:
keyid:41:FC:48:35:79:F5:E0:2D:3E:49:9C:D7:3A:23:AA:D9:14:03:18:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfxINXn14C0-SZzXOiOq2RQDGDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/481ea2-570c-48ac-8a37-7269b78f9cff/1/QfxINXn14C0-SZzXOiOq2RQDGDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/481ea2-570c-48ac-8a37-7269b78f9cff/1/QfxINXn14C0-SZzXOiOq2RQDGDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:46:1c:43:63:1c:13:49:9e:d2:97:e3:80:b9:52:8a:97:64:
ad:cd:e0:ae:43:44:0d:56:14:8c:ca:2e:22:88:77:78:fb:8c:
f8:bd:de:67:fc:aa:f0:b4:83:d8:7a:53:3f:a4:57:99:65:40:
e2:d4:2a:c5:10:e8:c8:38:a4:14:80:61:e0:2d:3e:5c:f7:ef:
3b:ae:5c:5a:89:92:2d:9e:eb:7d:51:14:da:87:7a:75:d2:d7:
fb:03:af:aa:37:dc:54:f9:ef:48:d7:4a:df:ba:22:41:4b:fd:
c4:b8:69:89:bf:95:47:39:a7:71:99:9e:48:0b:42:d0:a0:fe:
74:87:2b:dc:7d:4b:a6:36:26:99:6c:77:55:34:2b:e3:e9:63:
9b:1c:97:74:06:74:45:61:1b:1b:c6:a0:0d:53:cc:81:25:9f:
5b:4c:50:cf:7a:c7:37:92:bc:8c:c0:ee:c5:c5:cb:04:61:cf:
4b:a7:52:fe:84:87:83:60:0c:38:16:7d:aa:4b:43:5d:fb:22:
4a:1f:4a:27:d4:69:c6:72:6c:79:1a:3f:ca:51:75:44:cd:58:
8c:42:cf:b9:b7:d5:87:c1:cd:ba:ab:ee:ed:75:af:d3:15:56:
4f:f5:f9:c8:64:09:a9:f5:4b:e3:1a:9a:6e:d2:cb:c1:88:eb:
27:ff:9d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:07:06 2025 by rpki-client