Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/2f0dc3-0fde-4cd2-9803-d1ef4c4d5157/1/qLG5am6eXjonNwjfXOZD3VA8kTs.mft
File: qLG5am6eXjonNwjfXOZD3VA8kTs.mft (raw, json)
Hash identifier: q0pFGAjqBPt5Kxj3u2Bfet6Gx1QdxI+B0PYS7Bu0W8A=
Subject key identifier: A8:40:AC:D4:33:48:20:0C:4C:97:B1:B6:63:14:3D:AE:E3:84:BE:5E
Authority key identifier: A8:B1:B9:6A:6E:9E:5E:3A:27:37:08:DF:5C:E6:43:DD:50:3C:91:3B
Certificate issuer: /CN=a8b1b96a6e9e5e3a273708df5ce643dd503c913b
Certificate serial: 018DF3AABF5F137F7080CE0B03CBCE8A9165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLG5am6eXjonNwjfXOZD3VA8kTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/2f0dc3-0fde-4cd2-9803-d1ef4c4d5157/1/qLG5am6eXjonNwjfXOZD3VA8kTs.mft
Manifest number: 0831
Signing time: Thu 29 Feb 2024 07:01:10 +0000
Manifest this update: Thu 29 Feb 2024 07:01:10 +0000
Manifest next update: Fri 01 Mar 2024 07:01:10 +0000
Files and hashes: 1: qLG5am6eXjonNwjfXOZD3VA8kTs.crl (hash: 5luew0vf3Y5aKmiFL7oBT6pa4mGrTV41KMCMRuXb6BM=)
2: qzy4eSxB3llwIqzNAxG26PAkOLU.roa (hash: XfkqXxNisqlxnd653iB20bEx4cLoo6F+pPJgI5RNwQw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f3:aa:bf:5f:13:7f:70:80:ce:0b:03:cb:ce:8a:91:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b1b96a6e9e5e3a273708df5ce643dd503c913b
Validity
Not Before: Feb 29 07:01:10 2024 GMT
Not After : Mar 1 07:01:10 2024 GMT
Subject: CN=a840acd43348200c4c97b1b663143daee384be5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ba:01:20:06:45:27:94:63:a4:3e:4a:eb:49:
f2:37:a5:ca:47:cb:e5:c9:45:2a:e5:ca:95:17:8d:
02:7d:07:a6:07:17:66:7c:1f:fe:81:b5:58:a8:fa:
94:54:6f:6b:7d:13:65:d4:5f:4d:6d:fd:a7:e0:4c:
d4:64:fc:cc:e7:5b:37:c7:c0:cd:50:ac:e9:83:9a:
d0:c2:59:f8:1b:c8:4e:f6:e7:eb:12:0c:cc:b3:ca:
05:04:a0:c2:4f:98:cc:06:88:c3:52:da:d9:41:99:
13:35:6e:a5:a6:3e:64:62:34:99:4e:fb:2d:a4:82:
d6:e3:6b:95:7c:ac:3b:b6:56:cb:0e:11:9e:14:48:
4d:b5:5d:e3:bc:f5:89:81:7d:f7:fb:0b:fb:1c:2d:
f4:8a:12:28:c4:0a:4f:e0:40:14:a0:43:2b:be:85:
d8:e8:5f:99:65:86:e5:6b:32:15:fa:1e:df:32:31:
75:b7:4b:12:2f:e7:20:5e:6c:bf:c5:c6:60:e6:36:
eb:a0:02:44:b7:dd:e9:87:c1:89:b7:a5:f6:7a:95:
ae:97:da:0b:65:66:a9:fd:80:87:77:dc:7f:06:1f:
a0:4e:5f:21:e7:f0:4b:6f:73:1c:06:0d:1c:2a:d1:
74:68:32:ba:a6:ef:1d:8f:f2:1d:99:51:43:e9:3f:
5d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:40:AC:D4:33:48:20:0C:4C:97:B1:B6:63:14:3D:AE:E3:84:BE:5E
X509v3 Authority Key Identifier:
keyid:A8:B1:B9:6A:6E:9E:5E:3A:27:37:08:DF:5C:E6:43:DD:50:3C:91:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLG5am6eXjonNwjfXOZD3VA8kTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2f0dc3-0fde-4cd2-9803-d1ef4c4d5157/1/qLG5am6eXjonNwjfXOZD3VA8kTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2f0dc3-0fde-4cd2-9803-d1ef4c4d5157/1/qLG5am6eXjonNwjfXOZD3VA8kTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:03:c3:1f:fd:ca:5d:fa:47:09:73:0a:3a:82:7b:af:c1:18:
fb:dd:e6:07:ab:d1:e8:8c:de:c8:7c:0f:29:20:f3:ba:6b:d9:
73:68:bc:9c:1e:2c:36:26:3d:d7:bd:d4:8d:87:da:50:90:5c:
be:2a:ce:8c:ec:6f:e5:b0:9b:66:91:69:3d:8b:b2:d1:62:84:
01:75:f2:55:54:1e:f1:0c:3f:b4:74:86:23:f7:ef:ae:e7:1e:
aa:41:df:a8:3d:c8:d0:39:3e:3f:49:47:1d:4d:32:ca:bc:0d:
ac:c9:45:c9:30:22:3c:9a:e4:44:e3:c0:ab:1d:a2:b8:ed:e3:
78:ac:07:7b:56:ab:b9:1a:9a:2a:46:e6:0c:40:04:20:0c:e7:
7a:de:e2:70:f1:6a:48:e4:42:8f:95:8e:f1:34:48:d6:b0:80:
bb:fb:c0:df:f2:f2:b8:a3:df:76:0d:a1:83:96:0d:28:1a:6a:
5e:15:7d:e3:61:97:a9:c6:07:fc:5f:b2:66:f8:09:64:0a:4e:
33:35:99:06:35:3e:8c:42:e1:df:e4:bd:a0:87:30:1a:85:a6:
27:db:f8:4e:62:11:10:4f:3f:de:52:3b:2a:f4:ca:58:dd:f9:
c7:28:de:44:21:6f:98:90:50:f7:4f:4b:38:b1:79:c6:1b:57:
2b:60:bd:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:28 2024 by rpki-client on console-ams.rpki-client.org