Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/6c9ced-462e-4910-b247-15b0706c1a76/1/QS1QZoDd--HB7BbnmWJo5SZPwCY.mft
File: QS1QZoDd--HB7BbnmWJo5SZPwCY.mft (raw, json)
Hash identifier: LVmmFoBR998sbaFVRrBwU6hcYegkVuhXLP3E13k3Z5k=
Subject key identifier: 69:6B:87:03:AA:73:C7:E8:88:D4:6E:F7:57:6E:8D:32:F0:2C:EB:81
Authority key identifier: 41:2D:50:66:80:DD:FB:E1:C1:EC:16:E7:99:62:68:E5:26:4F:C0:26
Certificate issuer: /CN=412d506680ddfbe1c1ec16e7996268e5264fc026
Certificate serial: 0191DF06CFC11DDFE0E2561DC39A14993390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QS1QZoDd--HB7BbnmWJo5SZPwCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/6c9ced-462e-4910-b247-15b0706c1a76/1/QS1QZoDd--HB7BbnmWJo5SZPwCY.mft
Manifest number: 0194
Signing time: Wed 11 Sep 2024 03:00:50 +0000
Manifest this update: Wed 11 Sep 2024 03:00:50 +0000
Manifest next update: Thu 12 Sep 2024 03:00:50 +0000
Files and hashes: 1: QS1QZoDd--HB7BbnmWJo5SZPwCY.crl (hash: edVC6cpOqsttS8zWhTBMXTD83feSgKQ6UcOgfEhsE3g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:df:06:cf:c1:1d:df:e0:e2:56:1d:c3:9a:14:99:33:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412d506680ddfbe1c1ec16e7996268e5264fc026
Validity
Not Before: Sep 11 03:00:50 2024 GMT
Not After : Sep 12 03:00:50 2024 GMT
Subject: CN=696b8703aa73c7e888d46ef7576e8d32f02ceb81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:eb:df:76:7c:fc:fb:09:76:22:30:47:55:8a:
ea:04:63:e8:8a:13:09:0a:4a:82:87:c2:04:39:54:
26:50:32:47:3b:b5:6c:01:a9:36:9c:89:cd:8a:69:
ef:ac:cf:9b:c5:1a:cb:e2:63:18:0a:a2:5c:ac:c9:
ad:e2:98:2c:f5:3e:1a:56:b5:49:d3:82:2e:da:78:
4a:13:46:ff:ba:48:14:d5:d9:4f:d7:b0:71:72:fe:
00:21:2e:4f:62:52:6c:34:10:32:76:02:56:fa:fd:
d1:bf:46:c3:34:d9:2f:09:5a:0e:98:6b:79:59:aa:
ac:b8:06:db:43:74:6f:db:d0:e7:6e:90:e0:07:c8:
5e:b2:5f:13:47:9e:0d:52:ee:3d:eb:3e:fc:57:cb:
71:01:d8:af:c7:04:95:0a:25:2b:87:0e:61:ff:8f:
36:d5:d7:51:88:f5:e4:bf:48:84:39:59:69:52:07:
72:fb:28:90:d4:0e:9b:10:c1:f1:0c:39:f0:bc:04:
ac:c5:ee:cf:19:4b:b5:94:02:03:b5:19:66:89:39:
84:3e:26:d2:3c:17:5b:0e:a0:52:a6:aa:17:9a:a9:
e1:0a:ef:99:b2:28:f7:14:4a:27:bd:c8:d0:e9:1b:
f6:16:38:52:3f:ab:a5:9c:52:37:2c:f8:cb:44:d8:
c2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6B:87:03:AA:73:C7:E8:88:D4:6E:F7:57:6E:8D:32:F0:2C:EB:81
X509v3 Authority Key Identifier:
keyid:41:2D:50:66:80:DD:FB:E1:C1:EC:16:E7:99:62:68:E5:26:4F:C0:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QS1QZoDd--HB7BbnmWJo5SZPwCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6c9ced-462e-4910-b247-15b0706c1a76/1/QS1QZoDd--HB7BbnmWJo5SZPwCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6c9ced-462e-4910-b247-15b0706c1a76/1/QS1QZoDd--HB7BbnmWJo5SZPwCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:8e:7f:fa:98:fb:07:f2:19:de:ad:64:2b:ec:ca:30:c5:6f:
d2:6e:43:1d:ab:5f:ba:59:d5:18:f3:a0:10:27:8c:a1:ba:82:
4d:e8:85:53:cf:bb:fb:61:ee:bd:83:1c:1d:79:18:24:0e:5c:
cc:9b:33:93:cb:fe:89:fd:2d:2a:91:ee:17:47:8d:49:a1:37:
5e:3e:46:78:c2:fe:16:a4:5b:7a:1c:15:a1:6e:2f:02:98:fe:
c4:83:0b:fb:f9:07:5e:9b:f8:8e:f7:e9:83:6d:8a:13:78:d4:
46:b0:54:d7:3e:c5:98:89:b2:0e:3c:8a:2a:cc:e1:2a:6c:b5:
cd:97:a7:4d:3d:20:58:44:c3:f0:86:b4:d7:12:b6:db:61:84:
04:d5:61:06:4b:a5:db:23:b7:e9:84:b3:b2:8b:0c:98:e5:da:
cf:86:de:8b:ba:06:17:3e:c7:04:42:b8:f3:d4:04:fe:bf:01:
cc:bf:ee:06:73:8a:fc:71:e4:6c:6d:b8:34:b1:67:e0:02:09:
1d:93:b7:e3:26:dc:dc:50:42:49:04:53:a1:43:0d:c5:8f:04:
a3:27:40:6b:50:1e:eb:8e:14:8f:80:e2:0c:75:b5:6a:dc:23:
96:95:bc:2b:60:e9:33:b3:b1:21:58:fb:fc:df:9e:10:f8:6f:
a2:93:45:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 09:55:36 2024 by rpki-client on console-fra.rpki-client.org