Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/0beccb-24f7-4a3c-be1c-c32ac5ef18ad/1/QJMwQEDrVDA-SbIEUe-ERWzLSss.mft
File: QJMwQEDrVDA-SbIEUe-ERWzLSss.mft (raw, json)
Hash identifier: STzkX6gkZCxv5RU4lMm8fNOk06Xwzoy1icq/EH74QwY=
Subject key identifier: DD:A0:1E:1E:16:D3:73:AD:9B:09:5E:BB:D2:54:AA:CC:8C:5B:32:F9
Authority key identifier: 40:93:30:40:40:EB:54:30:3E:49:B2:04:51:EF:84:45:6C:CB:4A:CB
Certificate issuer: /CN=4093304040eb54303e49b20451ef84456ccb4acb
Certificate serial: 060B4F14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJMwQEDrVDA-SbIEUe-ERWzLSss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/0beccb-24f7-4a3c-be1c-c32ac5ef18ad/1/QJMwQEDrVDA-SbIEUe-ERWzLSss.mft
Manifest number: 07EC
Signing time: Mon 14 Mar 2022 03:12:45 +0000
Manifest this update: Mon 14 Mar 2022 03:12:45 +0000
Manifest next update: Tue 15 Mar 2022 03:12:45 +0000
Files and hashes: 1: NFKvV3nMLtlS-1vokalFgEyqOcA.roa (hash: PA5KqEf0T82TvcdMjYh8f6Jp2mJe7Kfrb7wDQ/kUgw4=)
2: QJMwQEDrVDA-SbIEUe-ERWzLSss.crl (hash: xdX25KYl1QFRmrGtdWDFzOfgN8lIThhmdbkRLAmnvl4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101404436 (0x60b4f14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4093304040eb54303e49b20451ef84456ccb4acb
Validity
Not Before: Mar 14 03:12:45 2022 GMT
Not After : Mar 15 03:12:45 2022 GMT
Subject: CN=dda01e1e16d373ad9b095ebbd254aacc8c5b32f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:89:61:f4:0b:f7:dc:5c:84:ae:0f:34:6e:35:
ed:f3:5c:1b:4d:f5:be:f2:10:df:c5:1d:56:79:d1:
90:a9:cf:2b:a6:0c:1a:e2:82:cf:bb:68:aa:7d:56:
6b:b1:16:6d:73:d0:66:48:c2:6d:b2:83:b9:ea:b8:
1f:c3:87:ff:ed:06:86:46:e8:dd:b8:dc:4c:51:20:
1d:d9:dd:03:bf:a0:f5:6e:12:b1:7d:e6:31:17:b3:
fb:37:32:68:71:b9:79:0a:1b:cf:c7:29:93:e5:ea:
d9:98:ad:1e:2e:ae:cb:74:c6:15:7d:7a:ef:31:f7:
ce:8b:69:70:2a:51:5d:d3:d1:04:e2:43:3b:68:7e:
52:4f:c3:e6:c0:24:9b:be:9f:78:8e:65:52:e6:dc:
75:4e:6b:2d:8b:05:32:97:34:13:2e:d3:06:00:2f:
d0:4a:fe:a9:e4:58:a0:d4:41:01:c7:40:f7:cf:67:
4b:5a:1f:5f:55:ae:7b:40:74:de:62:ef:e4:e1:83:
bf:55:f4:3f:0a:25:55:38:e2:f4:6f:1c:34:57:00:
29:85:f3:58:af:e6:9e:16:82:d3:e0:8b:0c:f8:be:
ce:df:95:c3:14:9f:40:e4:a0:0e:3e:38:19:d0:3b:
0c:e2:39:03:73:17:55:49:56:2e:2c:e8:b2:a5:38:
17:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A0:1E:1E:16:D3:73:AD:9B:09:5E:BB:D2:54:AA:CC:8C:5B:32:F9
X509v3 Authority Key Identifier:
keyid:40:93:30:40:40:EB:54:30:3E:49:B2:04:51:EF:84:45:6C:CB:4A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJMwQEDrVDA-SbIEUe-ERWzLSss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/0beccb-24f7-4a3c-be1c-c32ac5ef18ad/1/QJMwQEDrVDA-SbIEUe-ERWzLSss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/0beccb-24f7-4a3c-be1c-c32ac5ef18ad/1/QJMwQEDrVDA-SbIEUe-ERWzLSss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:21:79:a8:6b:d4:4c:7c:4c:a1:33:15:7d:cd:b2:a3:f8:ef:
f8:28:b9:59:c3:fc:09:e5:ad:9b:0f:39:3b:3a:bd:57:3f:92:
a8:c9:88:bc:85:4f:4f:70:26:e4:40:40:e6:8a:0c:ae:cd:12:
0c:94:e1:bc:45:5e:34:25:1c:77:b5:f8:59:14:30:70:8a:f3:
c4:b1:3d:17:31:88:71:a0:ee:3d:72:f0:eb:b0:43:04:63:b8:
b8:95:e8:12:c4:d5:6e:3a:a7:35:ca:c8:f9:73:c1:7f:d8:b3:
12:d0:64:86:b8:99:92:d7:4f:5f:24:55:c7:a0:f6:fd:31:2b:
b1:41:20:62:f1:b4:53:51:40:b3:b7:e0:95:b0:3f:9b:e2:41:
76:30:c9:1d:f1:33:6a:ec:05:80:7c:c6:95:ae:f9:48:6d:8f:
5e:b8:96:37:be:01:fe:83:b7:02:8b:b8:48:4b:1c:cc:af:30:
b2:a7:45:56:25:52:46:35:ad:51:29:e8:1d:ec:13:06:45:63:
50:8c:34:fd:9d:49:de:79:8f:67:e1:90:00:e8:77:48:ea:de:
8f:f4:ca:3a:a8:86:1e:b1:a0:56:78:7f:ac:d4:f9:fe:a6:36:
e6:74:59:37:59:f9:5a:be:cc:e3:95:f1:b8:4e:26:fb:57:e2:
4b:a9:bf:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:41 2025 by rpki-client