Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/038397-99a1-4a36-85aa-ed9afcebd0b1/1/QrNyHMEkzCw3YkfdSKXUtrqAIsA.mft
File: QrNyHMEkzCw3YkfdSKXUtrqAIsA.mft (raw, json)
Hash identifier: HniV0UChztRf+t3YeFYd1fHNV0ZIAhUstrvY9GDXZS0=
Subject key identifier: 8C:76:F3:62:A1:D9:11:8B:59:E3:9A:69:FD:38:30:12:E4:D6:1F:A9
Authority key identifier: 42:B3:72:1C:C1:24:CC:2C:37:62:47:DD:48:A5:D4:B6:BA:80:22:C0
Certificate issuer: /CN=42b3721cc124cc2c376247dd48a5d4b6ba8022c0
Certificate serial: 0184BD5287819BDEDB1D11122C43FD2A1A3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QrNyHMEkzCw3YkfdSKXUtrqAIsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/038397-99a1-4a36-85aa-ed9afcebd0b1/1/QrNyHMEkzCw3YkfdSKXUtrqAIsA.mft
Manifest number: 12
Signing time: Mon 28 Nov 2022 08:20:13 +0000
Manifest this update: Mon 28 Nov 2022 08:20:13 +0000
Manifest next update: Tue 29 Nov 2022 08:20:13 +0000
Files and hashes: 1: 4K8ieu8c0790OU-e8SiJIkpDMEU.roa (hash: enfuXlaiBLNafE5SwgJ4EJxu42LYeZUsbp3nHpMvRPk=)
2: QrNyHMEkzCw3YkfdSKXUtrqAIsA.crl (hash: rDlifTPsvI2QCRK5UAHrkEsE53mfDqfgHEJFGS1X5tI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bd:52:87:81:9b:de:db:1d:11:12:2c:43:fd:2a:1a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42b3721cc124cc2c376247dd48a5d4b6ba8022c0
Validity
Not Before: Nov 28 08:20:13 2022 GMT
Not After : Nov 29 08:20:13 2022 GMT
Subject: CN=8c76f362a1d9118b59e39a69fd383012e4d61fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:cb:bc:0e:ea:51:9c:42:f6:80:0c:8a:d1:fd:
6c:69:83:b7:c2:51:17:9d:66:b2:0a:3e:b4:dd:36:
b5:10:fb:ce:4d:b3:cf:27:c2:9f:27:eb:8b:a5:66:
b7:d1:5e:e9:22:35:f9:6b:45:e1:f8:9c:1a:f9:50:
fc:8e:34:8b:72:b4:95:b8:df:13:80:a9:ef:6c:ac:
42:6c:12:1c:c9:d4:42:19:3b:73:03:47:95:dc:57:
c6:1b:cd:4b:5d:bb:08:62:ac:1f:5d:ca:a0:c7:83:
2e:23:c2:58:1d:ce:6a:44:16:fd:72:0e:d8:5c:f6:
e4:52:6d:ee:dd:04:35:13:23:70:27:b8:c9:77:b6:
22:42:a0:1a:8e:45:9d:7d:5e:6a:ad:e2:0c:a5:28:
b0:85:3d:ba:5c:1e:99:a5:59:70:82:37:09:82:f6:
fa:30:2f:dd:9c:08:7a:69:02:2a:fe:e7:da:6d:d2:
f6:bc:a8:52:70:1b:db:26:64:b8:9a:61:6a:30:8d:
60:fe:87:77:46:84:68:b0:13:8f:90:d1:02:89:7e:
14:91:19:01:43:37:d2:89:c2:ee:01:57:d5:53:2d:
42:2b:d8:14:6d:d0:cf:24:83:bc:79:63:50:e2:1b:
16:9d:43:d2:d1:64:61:66:f2:d4:01:36:38:cb:ea:
ef:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:76:F3:62:A1:D9:11:8B:59:E3:9A:69:FD:38:30:12:E4:D6:1F:A9
X509v3 Authority Key Identifier:
keyid:42:B3:72:1C:C1:24:CC:2C:37:62:47:DD:48:A5:D4:B6:BA:80:22:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QrNyHMEkzCw3YkfdSKXUtrqAIsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/038397-99a1-4a36-85aa-ed9afcebd0b1/1/QrNyHMEkzCw3YkfdSKXUtrqAIsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/038397-99a1-4a36-85aa-ed9afcebd0b1/1/QrNyHMEkzCw3YkfdSKXUtrqAIsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:93:39:3b:34:a2:69:ea:04:f2:88:5a:14:57:d8:94:c1:4d:
45:6e:ae:81:00:ca:b2:c0:74:1b:66:2b:43:79:f2:6e:f6:30:
2e:16:c6:dd:a6:9e:62:61:bc:75:d8:2d:46:98:fd:27:13:fc:
4d:5c:65:78:79:76:86:18:af:60:16:aa:ee:20:27:d8:f7:cc:
5d:75:f1:c4:fb:eb:9a:0b:83:e8:20:12:bc:3d:33:11:b4:16:
ee:54:53:75:43:1f:d0:52:ce:39:ef:15:32:7b:ee:dd:3a:56:
19:9c:c6:09:28:ca:b2:f3:d9:aa:88:27:fc:26:3b:98:87:2b:
18:0d:4e:eb:4a:88:ed:25:ce:3c:5d:ca:7f:e6:09:67:a9:9e:
d4:52:ce:e7:91:6b:0c:99:0f:db:56:f0:af:7a:36:79:1f:0f:
37:c6:d9:7c:d3:68:f1:7d:7c:7f:7c:db:7e:83:ba:a9:d1:91:
f8:cf:1e:ce:8a:1c:d4:23:bf:73:e3:8a:57:ce:19:30:c5:44:
8c:67:17:c6:2d:3b:b8:f1:90:d5:19:1c:7f:ba:98:a9:e4:32:
45:7c:ec:72:94:f6:bd:16:76:17:f2:0c:95:48:24:ea:b0:b2:
61:77:8e:5e:5f:d1:18:b6:31:0b:ef:37:ea:be:c6:5e:83:56:
29:8c:e9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:13 2025 by rpki-client