Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/0ba6a9-375d-485b-b0ec-42676f09f099/1/CqmeHMdLTKd7Ys-gk555I10qucE.mft
File: CqmeHMdLTKd7Ys-gk555I10qucE.mft (raw, json)
Hash identifier: yVHzXvpp6njdoodQ9k6366DkyOuYkLmblNNdAUZxuK0=
Subject key identifier: 3C:9F:B1:A6:1D:F0:55:A3:E4:83:48:E2:1D:76:25:C2:C8:EE:98:3C
Authority key identifier: 0A:A9:9E:1C:C7:4B:4C:A7:7B:62:CF:A0:93:9E:79:23:5D:2A:B9:C1
Certificate issuer: /CN=0aa99e1cc74b4ca77b62cfa0939e79235d2ab9c1
Certificate serial: 0184E0D07C0E46796E3F21CE2D91F1C702B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CqmeHMdLTKd7Ys-gk555I10qucE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/0ba6a9-375d-485b-b0ec-42676f09f099/1/CqmeHMdLTKd7Ys-gk555I10qucE.mft
Manifest number: 0BAB
Signing time: Mon 05 Dec 2022 05:44:30 +0000
Manifest this update: Mon 05 Dec 2022 05:44:30 +0000
Manifest next update: Tue 06 Dec 2022 05:44:30 +0000
Files and hashes: 1: CqmeHMdLTKd7Ys-gk555I10qucE.crl (hash: 8E6kaaPpNiYUtEDaCwwQKcnqBXuwtDgyWmt5+c930O0=)
2: RR12MExxr56-19XPnUGe1XiD0AQ.roa (hash: HQd2rYF6B5cFYSPgnAM+8VYXtxywZZ1cjcnIy5+NE3Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e0:d0:7c:0e:46:79:6e:3f:21:ce:2d:91:f1:c7:02:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0aa99e1cc74b4ca77b62cfa0939e79235d2ab9c1
Validity
Not Before: Dec 5 05:44:30 2022 GMT
Not After : Dec 6 05:44:30 2022 GMT
Subject: CN=3c9fb1a61df055a3e48348e21d7625c2c8ee983c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:76:df:15:ad:24:b5:cb:91:2a:3c:b6:2b:76:
c8:8b:5e:68:4b:dc:16:c4:65:31:a9:e3:b4:a8:41:
df:b2:79:7d:10:50:6b:28:64:54:a3:36:9f:2a:63:
f1:36:71:91:73:22:56:2e:53:56:e8:e6:14:2b:04:
91:ee:c9:bb:f5:2a:29:1b:fc:30:b2:f3:3a:2c:63:
7d:33:56:3c:d4:93:0f:01:14:ab:ea:e4:08:a4:31:
20:e0:bd:b7:2f:b3:48:94:ca:26:9e:85:4f:b7:01:
62:ca:da:12:92:bb:5d:70:c7:a0:90:45:14:d6:d6:
bd:bf:aa:1a:ec:e3:1f:1f:75:e5:0f:32:69:b2:40:
eb:12:b5:f0:f3:f0:be:ad:bc:70:3c:b0:0d:7b:4b:
90:f5:29:45:ef:c7:38:8b:8b:3e:15:f2:92:73:bf:
46:5f:63:22:dd:ad:6c:1f:21:93:62:71:aa:77:d0:
16:ae:76:7c:6c:17:f6:83:b1:a7:da:2c:03:b2:5d:
c5:6f:d8:d5:de:e2:f3:ab:20:9b:ab:b0:32:ae:72:
74:c5:47:a9:4d:f6:3f:a7:88:2e:e8:20:91:a5:1c:
7c:4a:e0:ad:ef:a5:0a:de:6a:0d:1c:38:c7:88:ea:
d5:72:4c:9a:a3:9a:15:59:d4:a5:a2:49:e0:e6:45:
61:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9F:B1:A6:1D:F0:55:A3:E4:83:48:E2:1D:76:25:C2:C8:EE:98:3C
X509v3 Authority Key Identifier:
keyid:0A:A9:9E:1C:C7:4B:4C:A7:7B:62:CF:A0:93:9E:79:23:5D:2A:B9:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CqmeHMdLTKd7Ys-gk555I10qucE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0ba6a9-375d-485b-b0ec-42676f09f099/1/CqmeHMdLTKd7Ys-gk555I10qucE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0ba6a9-375d-485b-b0ec-42676f09f099/1/CqmeHMdLTKd7Ys-gk555I10qucE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:4f:c2:71:90:2f:8c:e2:1e:44:ae:7d:f3:74:c0:85:db:b9:
21:02:92:d2:22:64:c2:57:3c:cd:01:83:e8:fb:39:b5:2b:83:
f1:cf:91:a8:01:e4:6a:80:b2:76:b2:48:89:bb:4b:5e:a4:53:
fb:f7:06:72:23:6f:11:49:7d:87:36:eb:28:a1:33:d9:a2:e0:
14:b6:3e:9e:ae:a1:99:ce:57:e5:e0:9f:67:96:f4:12:31:42:
e4:3b:fd:89:41:04:95:b3:c5:73:93:f4:d6:16:5e:4b:61:70:
32:ee:f1:58:fb:8d:41:36:4d:aa:e1:4a:19:9d:71:5d:d7:5a:
e7:72:fc:e0:55:20:19:e5:4d:f2:34:76:ba:bf:41:4e:95:62:
55:a1:ff:9c:68:0a:a1:e9:bd:c2:ac:26:5c:4c:dc:8a:5a:6b:
32:c5:cb:b8:ae:ac:a0:bf:63:58:2f:df:10:c4:35:b7:b0:13:
85:a4:1c:e5:3e:28:e1:10:a4:9f:54:92:24:6e:2f:81:fe:68:
4a:e5:ad:3e:4b:72:be:d9:5b:82:e9:ec:c5:53:22:be:e2:a1:
2c:5a:2f:de:1d:66:59:b1:81:4a:16:3a:92:26:45:48:37:56:
e0:4a:04:da:e0:a7:89:1e:b7:3b:9b:17:83:d4:58:58:bc:06:
70:19:16:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:52 2024 by rpki-client on console-ams.rpki-client.org