Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/0c880d-b4d3-449c-8ec8-4b7025948de0/1/qjqRw2dU14ZduTmGMi8lHRQau-4.mft
File: qjqRw2dU14ZduTmGMi8lHRQau-4.mft (raw, json)
Hash identifier: kCCBC4VtrRkyCLTq6NB7RwG6+jca/RJPBWT1EHXDAEU=
Subject key identifier: EB:B9:1C:7C:59:42:F5:50:36:CB:1E:64:D0:22:24:43:24:E4:5D:FE
Authority key identifier: AA:3A:91:C3:67:54:D7:86:5D:B9:39:86:32:2F:25:1D:14:1A:BB:EE
Certificate issuer: /CN=aa3a91c36754d7865db93986322f251d141abbee
Certificate serial: 018E60752782A90528F01C16E9778825B8F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjqRw2dU14ZduTmGMi8lHRQau-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/0c880d-b4d3-449c-8ec8-4b7025948de0/1/qjqRw2dU14ZduTmGMi8lHRQau-4.mft
Manifest number: 0504
Signing time: Thu 21 Mar 2024 10:01:14 +0000
Manifest this update: Thu 21 Mar 2024 10:01:14 +0000
Manifest next update: Fri 22 Mar 2024 10:01:14 +0000
Files and hashes: 1: KtWriAMFYwW2ntc3CG8aj0I98Ks.roa (hash: rYPTVFJwU7qDb2KBf2WJIy3MhFZyf4IJnFiQXaK4PUs=)
2: qjqRw2dU14ZduTmGMi8lHRQau-4.crl (hash: 9Zh7uCyNoX5XC9X5JodMeaTiyoa/z2+0DaHMLphwsZk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:60:75:27:82:a9:05:28:f0:1c:16:e9:77:88:25:b8:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa3a91c36754d7865db93986322f251d141abbee
Validity
Not Before: Mar 21 10:01:14 2024 GMT
Not After : Mar 22 10:01:14 2024 GMT
Subject: CN=ebb91c7c5942f55036cb1e64d022244324e45dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:be:d8:cc:5c:e6:b9:b1:94:b7:39:4e:7f:98:
d2:b2:da:77:f4:a3:e7:36:5b:bc:97:87:07:37:8c:
13:ce:35:ab:56:a9:7f:1d:a7:a2:89:0a:3c:66:81:
f0:84:6e:03:2d:17:9a:fb:14:c3:a2:8e:e6:5a:c1:
63:52:22:b0:03:d6:65:74:06:36:83:eb:6a:a1:c0:
2e:de:e6:fd:45:2b:10:ff:3d:28:ca:9f:47:26:33:
58:66:fd:87:f4:2a:6f:46:c2:75:6d:36:8f:17:58:
ce:9c:75:16:74:cc:91:c6:ad:8c:5e:b1:96:3f:62:
72:ee:a4:b8:ac:a3:fa:4d:35:c1:02:0c:0b:a1:98:
d2:21:8d:35:1b:f9:c2:d9:47:d4:89:4e:dd:c8:07:
22:a3:68:19:67:d0:37:8e:5b:4a:1c:2e:db:80:22:
86:69:c4:ee:80:8d:ae:c4:37:78:eb:a4:f6:74:e1:
4c:d4:58:32:02:dc:c9:c7:de:0b:c0:4a:94:a3:91:
84:6a:bd:cd:1d:9c:48:c8:ac:85:26:d0:35:26:46:
68:5b:45:70:1d:8a:e0:84:f1:c2:de:8b:b1:94:72:
b0:cf:26:7a:29:85:f9:c0:21:35:78:dc:07:f8:5a:
22:b6:55:08:1b:4f:73:20:f7:5d:0e:2f:87:91:5f:
09:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B9:1C:7C:59:42:F5:50:36:CB:1E:64:D0:22:24:43:24:E4:5D:FE
X509v3 Authority Key Identifier:
keyid:AA:3A:91:C3:67:54:D7:86:5D:B9:39:86:32:2F:25:1D:14:1A:BB:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjqRw2dU14ZduTmGMi8lHRQau-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/0c880d-b4d3-449c-8ec8-4b7025948de0/1/qjqRw2dU14ZduTmGMi8lHRQau-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/0c880d-b4d3-449c-8ec8-4b7025948de0/1/qjqRw2dU14ZduTmGMi8lHRQau-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b6:39:f0:af:cf:3b:46:cf:07:74:04:c9:4c:42:a5:fa:a0:
90:bb:6e:51:12:af:ed:dd:fe:fb:9e:63:9e:5e:72:0c:e3:9f:
ba:c3:86:08:7a:74:a2:c1:44:ba:5e:0a:d6:f4:25:34:c8:96:
69:d4:da:c3:0a:af:17:02:42:f3:52:c3:6c:79:8b:10:ac:af:
67:bf:ed:eb:8f:b5:3f:98:e0:c9:bb:e8:95:d2:03:b7:65:1b:
a9:1e:e4:29:34:03:ff:d7:9a:7f:f4:d9:ef:07:51:d4:e8:f2:
85:fa:ca:03:97:79:8a:e8:5f:e6:df:0f:f7:56:3b:97:5e:19:
75:e9:2e:60:a1:85:d0:2f:60:2a:12:0b:83:c2:6f:dd:71:5a:
bd:39:36:d0:b6:bb:74:0a:c2:25:5c:d6:96:00:d9:62:3c:d5:
98:c1:e0:25:85:ed:c1:b1:42:5d:c5:3d:4f:ca:8a:20:bb:98:
79:43:89:10:ac:0e:f9:5f:67:dd:23:79:6a:96:31:ad:93:68:
a1:1f:67:1f:3e:e4:b5:20:1c:0a:14:f7:65:f8:d8:24:52:ec:
d8:02:b8:aa:9e:13:bf:7c:78:95:21:19:69:4f:d1:f9:c9:83:
bb:30:46:cf:f1:bc:e6:6e:5c:d0:9d:09:87:bc:18:84:de:50:
52:ad:2e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:16 2024 by rpki-client on console-ams.rpki-client.org