Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a88dcf-13e7-4874-9828-48db3ffca1f6/1/QLSkmPXvSLdq2Yi9NiLdin9X4r0.mft
File: QLSkmPXvSLdq2Yi9NiLdin9X4r0.mft (raw, json)
Hash identifier: wNJhvRZdW55uSFYkcQBw3nUu7XAS6ovB04QCDvnfx/o=
Subject key identifier: 0A:49:A6:C9:24:E5:A7:82:6E:4A:B3:A0:CA:AF:A7:95:25:5F:3E:91
Authority key identifier: 40:B4:A4:98:F5:EF:48:B7:6A:D9:88:BD:36:22:DD:8A:7F:57:E2:BD
Certificate issuer: /CN=40b4a498f5ef48b76ad988bd3622dd8a7f57e2bd
Certificate serial: 019367CCB97BEAA486286F05F682FB2939CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLSkmPXvSLdq2Yi9NiLdin9X4r0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a88dcf-13e7-4874-9828-48db3ffca1f6/1/QLSkmPXvSLdq2Yi9NiLdin9X4r0.mft
Manifest number: 02
Signing time: Tue 26 Nov 2024 09:28:10 +0000
Manifest this update: Tue 26 Nov 2024 09:28:10 +0000
Manifest next update: Wed 27 Nov 2024 09:28:10 +0000
Files and hashes: 1: OY4rSXrmYagmWkF80J3fYT9FTE0.roa (hash: 8r2GxHqurfeS7/ZiaoqgFPPq88XfUPsSSOf2pYTVQr8=)
2: QLSkmPXvSLdq2Yi9NiLdin9X4r0.crl (hash: rZaVk+1i76P/QOK3t5StDiQJgNVRDas6Zfhn6VrY56A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:67:cc:b9:7b:ea:a4:86:28:6f:05:f6:82:fb:29:39:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b4a498f5ef48b76ad988bd3622dd8a7f57e2bd
Validity
Not Before: Nov 26 09:28:10 2024 GMT
Not After : Nov 27 09:28:10 2024 GMT
Subject: CN=0a49a6c924e5a7826e4ab3a0caafa795255f3e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ef:e9:52:d4:f4:2b:96:8f:80:49:8f:db:80:
38:20:4a:b7:46:75:2d:e3:95:7b:08:50:86:b9:90:
d3:9e:16:10:78:3e:2a:51:fa:00:ed:4f:32:66:b2:
33:72:eb:7d:9d:84:f4:b8:75:f4:91:ae:a9:9e:3d:
e9:6c:cc:e2:1b:b9:a7:39:79:26:04:17:f4:4f:35:
9b:05:04:70:c5:72:31:e8:42:d2:9a:f1:e7:a0:11:
e4:38:ea:c2:b9:e1:38:3c:43:17:a1:8d:c4:8c:7c:
03:1d:df:e6:9b:aa:8f:8b:1c:01:b0:f6:82:b2:0b:
55:a9:68:ff:c7:ee:88:6c:47:ec:db:0d:2e:9a:ae:
b0:f4:0a:ee:6a:65:5f:80:5b:0c:01:fc:d7:9b:0e:
58:3e:0d:38:bb:14:4d:ca:db:3b:d7:42:97:b3:ea:
d3:70:7c:f6:83:3e:29:35:8e:41:fc:ca:dd:8e:8e:
c8:9b:fd:5f:cd:19:b1:98:33:09:86:c0:cb:49:5a:
f0:8b:fc:a3:60:1f:b2:60:2e:27:01:ad:f5:0f:08:
b4:56:df:23:b1:ea:9a:6a:2f:52:65:a9:39:22:68:
21:c7:fc:cd:c7:00:c4:31:16:28:01:4c:57:56:34:
c8:b9:34:da:be:27:b1:58:44:f7:66:1d:c1:fb:9d:
92:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:49:A6:C9:24:E5:A7:82:6E:4A:B3:A0:CA:AF:A7:95:25:5F:3E:91
X509v3 Authority Key Identifier:
keyid:40:B4:A4:98:F5:EF:48:B7:6A:D9:88:BD:36:22:DD:8A:7F:57:E2:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLSkmPXvSLdq2Yi9NiLdin9X4r0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a88dcf-13e7-4874-9828-48db3ffca1f6/1/QLSkmPXvSLdq2Yi9NiLdin9X4r0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a88dcf-13e7-4874-9828-48db3ffca1f6/1/QLSkmPXvSLdq2Yi9NiLdin9X4r0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:19:cd:6e:33:4a:4a:d6:59:2a:71:9f:87:e9:84:5f:1f:d8:
86:ad:01:45:dd:94:e4:e3:12:28:be:19:cb:ba:89:00:50:a8:
1b:3d:2b:15:9e:8b:5c:93:fe:8c:4b:85:db:9e:05:13:8f:14:
e8:3f:3d:51:de:7d:ea:67:e6:80:d9:3d:35:6a:73:70:85:21:
f8:e3:16:db:a7:8e:37:39:11:ab:64:18:4a:2f:7c:70:0a:20:
68:89:b0:f7:bc:ea:3c:d3:32:ee:4c:b4:ab:cd:62:8c:71:1c:
d9:fb:4a:a9:25:2e:82:e1:19:e2:7c:2a:34:46:31:a1:44:dd:
71:fd:e7:81:98:c9:92:a2:35:23:7a:d9:8a:b1:4d:71:90:77:
42:fd:d2:b9:e6:9b:23:9f:d6:4e:9b:ef:9b:63:b9:2c:f5:10:
97:76:c6:25:e0:31:7e:c2:fa:35:16:bb:8f:d8:a9:6a:97:89:
fb:d3:76:cc:cb:8f:33:7e:64:97:0e:81:6e:30:18:ff:2d:b4:
48:df:69:18:32:a5:73:64:07:9f:20:48:a2:5b:4d:94:2d:5e:
e6:23:7b:e8:8e:e1:ed:1a:07:9d:69:3e:4b:69:3f:3f:59:3d:
ce:21:22:19:10:b6:28:9f:2d:ef:3b:bf:25:86:7b:d6:6f:d5:
e9:e9:c7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:28:27 2025 by rpki-client