Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d023bd-3db5-4439-886e-797b0eff3601/1/Q0AIFfw7Gz6DecH2Iy_j2wPTG5s.mft
File: Q0AIFfw7Gz6DecH2Iy_j2wPTG5s.mft (raw, json)
Hash identifier: mdlrwqxC+QZGmWbdCKQ2CJ9sgUGcW21AC3VBnKhqdWU=
Subject key identifier: 70:DF:0A:18:7D:53:C3:74:1E:5F:C1:3E:FA:23:C3:E8:E9:CC:4E:44
Authority key identifier: 43:40:08:15:FC:3B:1B:3E:83:79:C1:F6:23:2F:E3:DB:03:D3:1B:9B
Certificate issuer: /CN=43400815fc3b1b3e8379c1f6232fe3db03d31b9b
Certificate serial: 018D1A4C54A503026C598831C8B3DF14F100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0AIFfw7Gz6DecH2Iy_j2wPTG5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d023bd-3db5-4439-886e-797b0eff3601/1/Q0AIFfw7Gz6DecH2Iy_j2wPTG5s.mft
Manifest number: 28
Signing time: Thu 18 Jan 2024 02:00:26 +0000
Manifest this update: Thu 18 Jan 2024 02:00:26 +0000
Manifest next update: Fri 19 Jan 2024 02:00:26 +0000
Files and hashes: 1: Q0AIFfw7Gz6DecH2Iy_j2wPTG5s.crl (hash: KV53hjerv40+crHLOYO3ABUJEQWHoSHPYcJTw6JVaGU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1a:4c:54:a5:03:02:6c:59:88:31:c8:b3:df:14:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43400815fc3b1b3e8379c1f6232fe3db03d31b9b
Validity
Not Before: Jan 18 02:00:26 2024 GMT
Not After : Jan 19 02:00:26 2024 GMT
Subject: CN=70df0a187d53c3741e5fc13efa23c3e8e9cc4e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e3:61:7a:e6:1d:c1:fa:af:f1:b1:6d:99:12:
54:b8:21:58:ad:44:d3:13:cc:ab:62:cc:7c:96:48:
13:1b:c2:d6:95:75:e8:51:14:8d:26:16:38:a2:25:
83:dd:7c:9f:d5:fe:75:eb:c6:b1:d6:fd:0e:90:9c:
05:43:ac:ab:55:e4:17:7e:90:84:c9:04:c0:f5:ee:
c9:24:03:f8:9b:6c:3b:90:ef:4d:0a:f1:47:91:5c:
2b:27:c1:87:af:30:8b:47:e8:33:ee:77:73:90:06:
1f:f2:ed:97:9c:18:a7:af:22:0a:00:46:53:85:63:
2e:ad:9f:dd:22:ee:dc:0e:f0:06:2c:c7:fa:2a:6d:
cb:e1:07:f6:42:1d:40:86:80:55:f2:57:69:e7:b0:
58:30:57:3c:ef:c8:9c:d9:28:6a:22:d7:51:3f:ff:
f1:7c:03:af:7a:a7:dc:f1:20:1b:93:9a:12:e9:49:
b1:4f:cd:5a:cd:32:20:e7:b3:74:37:ff:88:fb:1f:
68:5f:ff:f7:c1:c8:ff:fe:08:1a:81:f6:fc:21:e0:
18:7a:72:43:21:49:9c:6e:73:85:e2:35:8b:ca:19:
3d:10:03:2d:73:1e:d2:25:af:2b:85:e3:c2:a7:21:
a5:08:c4:90:e9:72:3d:a6:81:3f:58:e8:f8:4a:a6:
af:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DF:0A:18:7D:53:C3:74:1E:5F:C1:3E:FA:23:C3:E8:E9:CC:4E:44
X509v3 Authority Key Identifier:
keyid:43:40:08:15:FC:3B:1B:3E:83:79:C1:F6:23:2F:E3:DB:03:D3:1B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0AIFfw7Gz6DecH2Iy_j2wPTG5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d023bd-3db5-4439-886e-797b0eff3601/1/Q0AIFfw7Gz6DecH2Iy_j2wPTG5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d023bd-3db5-4439-886e-797b0eff3601/1/Q0AIFfw7Gz6DecH2Iy_j2wPTG5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:dc:52:4b:fe:b8:1e:48:a1:85:bb:31:af:05:53:40:13:3c:
ed:fe:9b:b7:d5:63:03:c7:ec:77:5d:13:03:b9:00:ae:5b:3d:
f2:7f:8e:98:67:ae:15:d8:00:9b:e8:c3:51:b2:e2:19:13:0e:
23:96:ba:02:f6:59:87:21:10:3a:c0:4b:b7:5b:dd:ac:b5:fe:
85:59:ae:f4:be:07:79:13:f4:2f:52:e7:ce:6d:e3:a5:0e:86:
32:70:1d:29:1c:54:47:ae:27:4e:cf:ce:ff:e0:79:c0:bb:28:
68:66:0b:9b:b7:4c:dd:89:69:83:65:6e:59:93:12:3f:fd:02:
07:54:4a:1a:b3:1f:81:df:b5:ee:93:91:48:ef:fe:5d:b0:9b:
12:78:bf:c0:59:2d:b7:06:8e:5d:b6:de:70:44:25:2e:f7:e7:
9e:03:60:7c:fd:64:dd:1e:f7:e1:0f:80:5e:3f:e4:e5:fd:31:
c0:bc:f1:b8:0d:10:c0:a6:1a:4c:37:28:3f:ff:ca:53:73:c7:
ca:06:11:f1:c8:38:08:62:72:7c:8a:a9:96:c9:e3:c2:31:d0:
57:92:81:c9:38:d1:88:52:8c:f4:ca:3a:07:59:42:0a:25:97:
0e:12:54:57:2b:fe:c6:b1:71:ec:23:96:69:6c:98:d4:f0:27:
d5:8f:0d:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY0aTFSlAwJsWYgxyLPfFPEAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNDAwODE1ZmMzYjFiM2U4Mzc5YzFmNjIzMmZlM2RiMDNk
MzFiOWIwHhcNMjQwMTE4MDIwMDI2WhcNMjQwMTE5MDIwMDI2WjAzMTEwLwYDVQQD
Eyg3MGRmMGExODdkNTNjMzc0MWU1ZmMxM2VmYTIzYzNlOGU5Y2M0ZTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuNheuYdwfqv8bFtmRJUuCFYrUTT
E8yrYsx8lkgTG8LWlXXoURSNJhY4oiWD3Xyf1f5168ax1v0OkJwFQ6yrVeQXfpCE
yQTA9e7JJAP4m2w7kO9NCvFHkVwrJ8GHrzCLR+gz7ndzkAYf8u2XnBinryIKAEZT
hWMurZ/dIu7cDvAGLMf6Km3L4Qf2Qh1AhoBV8ldp57BYMFc878ic2ShqItdRP//x
fAOveqfc8SAbk5oS6UmxT81azTIg57N0N/+I+x9oX//3wcj//ggagfb8IeAYenJD
IUmcbnOF4jWLyhk9EAMtcx7SJa8rhePCpyGlCMSQ6XI9poE/WOj4SqavfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDfChh9U8N0Hl/BPvojw+jpzE5EMB8GA1UdIwQY
MBaAFENACBX8Oxs+g3nB9iMv49sD0xubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTBBSUZmdzdHejZEZWNIMkl5X2oyd1BURzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kMDIzYmQtM2RiNS00NDM5LTg4NmUt
Nzk3YjBlZmYzNjAxLzEvUTBBSUZmdzdHejZEZWNIMkl5X2oyd1BURzVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9kMDIzYmQtM2RiNS00NDM5LTg4NmUtNzk3YjBlZmYzNjAx
LzEvUTBBSUZmdzdHejZEZWNIMkl5X2oyd1BURzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU9xSS/64
HkihhbsxrwVTQBM87f6bt9VjA8fsd10TA7kArls98n+OmGeuFdgAm+jDUbLiGRMO
I5a6AvZZhyEQOsBLt1vdrLX+hVmu9L4HeRP0L1Lnzm3jpQ6GMnAdKRxUR64nTs/O
/+B5wLsoaGYLm7dM3Ylpg2VuWZMSP/0CB1RKGrMfgd+17pORSO/+XbCbEni/wFkt
twaOXbbecEQlLvfnngNgfP1k3R734Q+AXj/k5f0xwLzxuA0QwKYaTDcoP//KU3PH
ygYR8cg4CGJyfIqplsnjwjHQV5KByTjRiFKM9Mo6B1lCCiWXDhJUVyv+xrFx7COW
aWyY1PAn1Y8N3w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:57 2024 by rpki-client on console-ams.rpki-client.org