Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/24e16c-1b0d-4a81-a2dc-63b5a9c1332c/1/Qj-M-HK0keBVwEbASybGUaKekv4.mft
File: Qj-M-HK0keBVwEbASybGUaKekv4.mft (raw, json)
Hash identifier: JOkn3LN02QeH5iSy/x3VqZsIn419waSdyd2Kwz8gYF0=
Subject key identifier: 0F:65:FF:AB:8E:2C:0D:F6:D3:1D:2C:EA:C3:6E:23:0E:29:93:41:AA
Authority key identifier: 42:3F:8C:F8:72:B4:91:E0:55:C0:46:C0:4B:26:C6:51:A2:9E:92:FE
Certificate issuer: /CN=423f8cf872b491e055c046c04b26c651a29e92fe
Certificate serial: 018AA67324C0433E2A48ACDB9E429CB05A1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj-M-HK0keBVwEbASybGUaKekv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/24e16c-1b0d-4a81-a2dc-63b5a9c1332c/1/Qj-M-HK0keBVwEbASybGUaKekv4.mft
Manifest number: 0EEF
Signing time: Mon 18 Sep 2023 04:01:18 +0000
Manifest this update: Mon 18 Sep 2023 04:01:18 +0000
Manifest next update: Tue 19 Sep 2023 04:01:18 +0000
Files and hashes: 1: Qj-M-HK0keBVwEbASybGUaKekv4.crl (hash: 8xa+JJIs0hLove+WsCfICRaoVQKGsdJALjPewbT2tXw=)
2: WYnb5YzCm6Y9a-mb1olyTyjyXrk.roa (hash: DqwXisANKQDPMwNx7//oHmd5OvpIfce5xBHeDH35O3c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a6:73:24:c0:43:3e:2a:48:ac:db:9e:42:9c:b0:5a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423f8cf872b491e055c046c04b26c651a29e92fe
Validity
Not Before: Sep 18 04:01:18 2023 GMT
Not After : Sep 19 04:01:18 2023 GMT
Subject: CN=0f65ffab8e2c0df6d31d2ceac36e230e299341aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7a:bb:37:c9:40:dc:93:84:54:c1:0c:ee:b1:
85:c6:29:58:af:8d:d9:8c:e1:3b:4a:0c:ea:01:e8:
ef:91:e1:c7:e4:37:80:52:e6:ac:22:b8:4e:1c:77:
22:55:a9:2f:86:1d:cd:8c:ac:24:4e:96:39:be:b0:
d3:e4:38:8e:0b:01:43:89:f9:33:86:b3:e7:3c:97:
85:69:66:fc:af:29:ab:b4:0b:70:52:1d:6a:04:2f:
dd:76:90:c6:cd:6a:54:53:b6:73:c4:5d:74:c2:f8:
18:53:47:09:21:c0:9a:96:e3:1a:fa:b4:a0:41:7a:
63:ec:f2:3b:ea:1b:0b:ed:24:03:40:28:b4:cb:ff:
43:e3:16:bc:00:c0:04:3b:9a:03:ac:f9:e1:c2:31:
f1:6a:c2:b9:7b:12:86:a1:f3:17:9a:df:8f:15:f9:
68:db:6e:f9:d0:d1:f0:67:a6:6f:56:05:21:41:cf:
1c:ad:20:f2:4a:63:b9:10:60:c2:c1:03:55:0e:5e:
f5:38:68:9d:1a:83:ab:08:4b:d1:b0:0d:5b:52:4d:
f6:82:e0:39:b7:d2:77:45:ad:f5:65:bf:9a:c5:c9:
5a:1e:09:a0:87:86:61:1f:19:f5:be:66:6d:23:3b:
10:58:5c:e0:40:ba:c0:3d:9a:0f:59:03:b4:56:06:
e4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:65:FF:AB:8E:2C:0D:F6:D3:1D:2C:EA:C3:6E:23:0E:29:93:41:AA
X509v3 Authority Key Identifier:
keyid:42:3F:8C:F8:72:B4:91:E0:55:C0:46:C0:4B:26:C6:51:A2:9E:92:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj-M-HK0keBVwEbASybGUaKekv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/24e16c-1b0d-4a81-a2dc-63b5a9c1332c/1/Qj-M-HK0keBVwEbASybGUaKekv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/24e16c-1b0d-4a81-a2dc-63b5a9c1332c/1/Qj-M-HK0keBVwEbASybGUaKekv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c9:7d:55:c3:27:89:d9:64:67:89:a1:76:7c:63:30:ed:42:
32:3c:d7:20:e9:22:70:2f:36:5e:2e:e0:56:ed:b3:18:cb:a4:
8b:c0:47:5e:b1:a1:20:6e:13:db:c8:f2:ad:5a:fd:6a:65:06:
a3:3c:b6:2e:42:87:52:86:fe:d9:8a:71:1e:54:47:af:eb:60:
2f:75:20:06:b6:f4:8b:bd:72:41:bd:40:b0:69:a6:a8:86:29:
d6:34:58:49:cb:7a:04:30:2a:38:44:df:1d:d5:8b:a2:57:fa:
42:32:58:44:1f:09:90:aa:81:c5:ed:dd:24:c0:ae:50:85:a3:
da:d2:80:52:59:45:9f:2c:44:19:9b:b2:ef:2a:c4:7a:be:73:
e8:2c:3a:a5:25:90:95:6f:3f:7d:aa:41:d1:85:c8:d7:7a:c5:
3c:fc:ab:34:62:18:53:ac:bc:24:96:30:1d:cd:ef:39:f7:43:
f7:07:f8:b6:93:e6:0c:5f:cc:5c:ea:77:ab:b5:ec:4d:67:39:
89:ff:34:13:53:89:ba:96:d3:63:f4:01:3e:9d:7a:e5:d1:8c:
35:dd:f1:c7:24:58:35:5e:74:6a:a2:e6:fa:4e:1e:41:f2:f1:
77:8f:1a:24:41:04:f8:44:ff:20:28:80:54:86:83:fb:4f:77:
53:64:7b:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYqmcyTAQz4qSKzbnkKcsFofMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyM2Y4Y2Y4NzJiNDkxZTA1NWMwNDZjMDRiMjZjNjUxYTI5
ZTkyZmUwHhcNMjMwOTE4MDQwMTE4WhcNMjMwOTE5MDQwMTE4WjAzMTEwLwYDVQQD
EygwZjY1ZmZhYjhlMmMwZGY2ZDMxZDJjZWFjMzZlMjMwZTI5OTM0MWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnq7N8lA3JOEVMEM7rGFxilYr43Z
jOE7SgzqAejvkeHH5DeAUuasIrhOHHciVakvhh3NjKwkTpY5vrDT5DiOCwFDifkz
hrPnPJeFaWb8rymrtAtwUh1qBC/ddpDGzWpUU7ZzxF10wvgYU0cJIcCaluMa+rSg
QXpj7PI76hsL7SQDQCi0y/9D4xa8AMAEO5oDrPnhwjHxasK5exKGofMXmt+PFflo
22750NHwZ6ZvVgUhQc8crSDySmO5EGDCwQNVDl71OGidGoOrCEvRsA1bUk32guA5
t9J3Ra31Zb+axclaHgmgh4ZhHxn1vmZtIzsQWFzgQLrAPZoPWQO0VgbkSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA9l/6uOLA320x0s6sNuIw4pk0GqMB8GA1UdIwQY
MBaAFEI/jPhytJHgVcBGwEsmxlGinpL+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWotTS1ISzBrZUJWd0ViQVN5YkdVYUtla3Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8yNGUxNmMtMWIwZC00YTgxLWEyZGMt
NjNiNWE5YzEzMzJjLzEvUWotTS1ISzBrZUJWd0ViQVN5YkdVYUtla3Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8yNGUxNmMtMWIwZC00YTgxLWEyZGMtNjNiNWE5YzEzMzJj
LzEvUWotTS1ISzBrZUJWd0ViQVN5YkdVYUtla3Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhMl9VcMn
idlkZ4mhdnxjMO1CMjzXIOkicC82Xi7gVu2zGMuki8BHXrGhIG4T28jyrVr9amUG
ozy2LkKHUob+2YpxHlRHr+tgL3UgBrb0i71yQb1AsGmmqIYp1jRYSct6BDAqOETf
HdWLolf6QjJYRB8JkKqBxe3dJMCuUIWj2tKAUllFnyxEGZuy7yrEer5z6Cw6pSWQ
lW8/fapB0YXI13rFPPyrNGIYU6y8JJYwHc3vOfdD9wf4tpPmDF/MXOp3q7XsTWc5
if80E1OJupbTY/QBPp165dGMNd3xxyRYNV50aqLm+k4eQfLxd48aJEEE+ET/ICiA
VIaD+093U2R7/w==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:51 2025 by rpki-client