Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/73e13f-65a3-4226-b375-1af70662f603/1/QHlRPULig0GAnxVLrytRQIT3jvo.mft
File: QHlRPULig0GAnxVLrytRQIT3jvo.mft (raw, json)
Hash identifier: wvqfZdmq821lB1vwgILf1PcF5fGLRAtgH1XOxoE6mz0=
Subject key identifier: 7E:92:AD:38:55:A9:54:5A:1D:AF:65:86:A2:57:BB:21:E9:4A:D2:60
Authority key identifier: 40:79:51:3D:42:E2:83:41:80:9F:15:4B:AF:2B:51:40:84:F7:8E:FA
Certificate issuer: /CN=4079513d42e28341809f154baf2b514084f78efa
Certificate serial: 0183CA9870FC6955D71BA2C535481EC8427F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHlRPULig0GAnxVLrytRQIT3jvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/73e13f-65a3-4226-b375-1af70662f603/1/QHlRPULig0GAnxVLrytRQIT3jvo.mft
Manifest number: 0B0A
Signing time: Wed 12 Oct 2022 05:08:51 +0000
Manifest this update: Wed 12 Oct 2022 05:08:51 +0000
Manifest next update: Thu 13 Oct 2022 05:08:51 +0000
Files and hashes: 1: QHlRPULig0GAnxVLrytRQIT3jvo.crl (hash: RvlRhcaiJogwpase/85Cr0WagQqIJpjFAeY4/gjN8X4=)
2: yJVgkH3aZE7MWTgqnGLD925cFZg.roa (hash: /MPrIl4O7d7SRlnHxCQCx9Wh/OSGtPImiSi223QQOvo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ca:98:70:fc:69:55:d7:1b:a2:c5:35:48:1e:c8:42:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4079513d42e28341809f154baf2b514084f78efa
Validity
Not Before: Oct 12 05:08:51 2022 GMT
Not After : Oct 13 05:08:51 2022 GMT
Subject: CN=7e92ad3855a9545a1daf6586a257bb21e94ad260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:db:b6:36:2c:c4:e7:b5:2e:2b:b7:b7:d2:7f:
73:84:ae:a3:c8:56:80:10:8a:78:55:bb:37:4c:ae:
d9:e7:52:b4:17:b1:c9:26:02:bf:8a:87:33:47:65:
91:57:74:16:ea:bb:65:b0:ff:8e:45:5e:38:39:02:
39:0f:92:61:b7:38:d8:40:0c:cd:bd:d1:51:fd:f0:
94:a4:96:1c:69:e6:96:70:62:b4:87:1a:91:66:61:
92:65:d0:98:91:5e:47:ab:be:eb:ab:2a:5d:88:0a:
16:c4:ba:39:b1:8f:7b:32:03:32:73:b8:0a:0f:6e:
b8:59:ec:d2:aa:5c:c9:b5:f1:34:9e:42:dd:aa:b1:
6b:c6:c9:46:db:5f:a2:0f:3a:6a:0b:00:42:b6:f3:
e2:ba:c2:30:0d:86:e7:c6:16:c1:53:3c:65:a7:e2:
6b:ed:47:98:95:16:93:50:00:74:1a:7a:0b:05:03:
c9:f7:6e:b0:76:f8:72:17:30:78:fc:0e:fc:10:72:
4e:0f:12:82:e3:32:ec:d3:7d:f4:47:80:05:73:08:
12:1f:c2:03:29:cc:63:a5:81:43:c9:ee:03:ed:ad:
c5:70:18:bf:46:2e:e4:c5:ba:9f:b5:c9:2b:bd:b6:
e7:25:c9:05:58:a8:3e:57:de:0a:73:74:1a:77:18:
d2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:92:AD:38:55:A9:54:5A:1D:AF:65:86:A2:57:BB:21:E9:4A:D2:60
X509v3 Authority Key Identifier:
keyid:40:79:51:3D:42:E2:83:41:80:9F:15:4B:AF:2B:51:40:84:F7:8E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHlRPULig0GAnxVLrytRQIT3jvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/73e13f-65a3-4226-b375-1af70662f603/1/QHlRPULig0GAnxVLrytRQIT3jvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/73e13f-65a3-4226-b375-1af70662f603/1/QHlRPULig0GAnxVLrytRQIT3jvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:5e:d8:5c:ae:14:d9:8c:a4:f5:6b:b0:ee:33:7b:c7:a2:81:
25:de:e8:89:84:b3:66:05:d7:04:1b:9b:91:da:d0:cf:ec:12:
65:4f:02:25:6e:b5:6d:17:12:25:55:50:0c:50:d3:3b:e0:18:
50:2b:05:fb:ef:8e:da:b8:ba:9c:34:a1:0a:ae:40:bf:50:5b:
85:5a:45:7e:06:39:b3:ff:0c:39:6f:b8:66:90:7a:72:9d:4f:
07:b6:8a:b8:83:19:2c:65:83:a4:a6:01:ba:f5:4f:00:ec:b8:
d3:23:fc:3c:15:28:1a:b5:9a:9f:c4:8e:8d:fe:13:b3:14:cb:
c2:47:1a:f1:1d:90:4a:2e:c3:03:b1:99:b3:ae:5f:85:6f:1d:
e7:6d:73:b5:03:43:06:b2:6e:f7:60:70:54:b9:9b:67:19:a7:
4e:f7:bb:49:ea:d0:35:de:1c:1f:11:5d:b3:a3:14:fa:49:bd:
6a:b6:d0:19:1b:c9:87:b3:b8:81:eb:33:07:7d:3e:35:8b:5b:
e1:55:4b:12:9f:bb:8b:27:fd:dd:3d:73:13:d4:60:1e:d3:67:
da:21:a1:d0:56:a0:13:a3:da:fa:44:c4:a6:f7:2b:bf:78:a5:
1c:12:44:9b:2d:c3:ff:bc:12:7a:fe:9a:16:64:55:5d:d0:f7:
3b:ac:3a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:51 2025 by rpki-client