Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/cbbb25-a170-4e24-bb00-970e2d555c44/1/Q4PDjhk-zeJ3ysjwnaQYf669phY.mft
File: Q4PDjhk-zeJ3ysjwnaQYf669phY.mft (raw, json)
Hash identifier: ++5q7Uc7dXCSzy7D1AqX7vPf8AQh/19wE0fMV7/LZSc=
Subject key identifier: 42:6A:AB:B7:16:A5:9C:30:93:56:00:9A:9E:69:BA:74:1A:BF:38:67
Authority key identifier: 43:83:C3:8E:19:3E:CD:E2:77:CA:C8:F0:9D:A4:18:7F:AE:BD:A6:16
Certificate issuer: /CN=4383c38e193ecde277cac8f09da4187faebda616
Certificate serial: 018B890A69BCB93D4743C8B6B2D96B545CCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4PDjhk-zeJ3ysjwnaQYf669phY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/cbbb25-a170-4e24-bb00-970e2d555c44/1/Q4PDjhk-zeJ3ysjwnaQYf669phY.mft
Manifest number: 08EB
Signing time: Wed 01 Nov 2023 04:00:42 +0000
Manifest this update: Wed 01 Nov 2023 04:00:42 +0000
Manifest next update: Thu 02 Nov 2023 04:00:42 +0000
Files and hashes: 1: BR8A5tkartY4kBNt56F-GrLkdmE.roa (hash: yrkKzbxGc1C6vQgKM6czgb11pgCHneWp7Ucs3ISZzLE=)
2: Q4PDjhk-zeJ3ysjwnaQYf669phY.crl (hash: jir5HfrwjXyQriECKBzv34xRJtE88gpfOlNCgEKA6zU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:89:0a:69:bc:b9:3d:47:43:c8:b6:b2:d9:6b:54:5c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4383c38e193ecde277cac8f09da4187faebda616
Validity
Not Before: Nov 1 04:00:42 2023 GMT
Not After : Nov 2 04:00:42 2023 GMT
Subject: CN=426aabb716a59c309356009a9e69ba741abf3867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a8:c6:bf:85:14:28:c5:c0:82:3c:66:ac:b6:
a8:40:91:42:c4:b6:50:8f:4b:34:f5:66:7c:40:71:
99:24:bf:94:53:cc:83:e1:e6:ec:46:65:cb:fb:00:
59:0a:52:90:70:23:ad:7d:37:b8:98:68:b1:34:61:
80:08:c6:27:82:0e:27:7d:67:38:54:d6:11:2d:e6:
28:1c:11:11:bd:ec:8f:36:b1:2b:88:0b:00:8e:b3:
f0:ba:e3:35:85:c1:0b:82:a5:e5:67:ff:d2:f5:6c:
40:dc:d8:9d:5d:31:3d:42:24:32:4d:34:18:3e:0b:
a8:2a:f9:c2:d5:f6:ff:8a:37:ae:59:9f:d7:a2:2d:
3e:11:5c:b8:03:63:22:67:80:87:8b:b7:04:1f:1c:
47:28:67:d4:27:6e:f9:8f:22:ef:6c:f3:75:2a:29:
d6:3a:27:77:5a:47:f2:b3:8a:03:af:ef:c1:16:81:
fa:44:39:11:76:41:a0:70:3f:2d:54:45:22:3b:ec:
64:13:67:e4:84:9e:2d:85:4a:cd:12:5b:64:5c:35:
cb:6a:fc:b3:d9:56:97:30:c2:2d:b0:78:39:41:51:
2f:c9:00:98:ac:c3:cd:af:3a:02:af:28:a8:c7:43:
4a:b7:aa:df:ac:4a:de:15:b3:96:06:fe:3a:ad:5a:
d9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:6A:AB:B7:16:A5:9C:30:93:56:00:9A:9E:69:BA:74:1A:BF:38:67
X509v3 Authority Key Identifier:
keyid:43:83:C3:8E:19:3E:CD:E2:77:CA:C8:F0:9D:A4:18:7F:AE:BD:A6:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4PDjhk-zeJ3ysjwnaQYf669phY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cbbb25-a170-4e24-bb00-970e2d555c44/1/Q4PDjhk-zeJ3ysjwnaQYf669phY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/cbbb25-a170-4e24-bb00-970e2d555c44/1/Q4PDjhk-zeJ3ysjwnaQYf669phY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e2:84:2b:ad:45:b4:14:e6:8b:6b:f8:a9:23:f4:78:da:31:
00:42:48:72:9e:dc:a8:ac:22:27:b6:12:5f:fb:5d:83:4b:6c:
28:44:17:54:97:10:fb:cc:85:25:38:f6:01:31:f2:4f:9d:4a:
8e:5f:90:b7:98:0f:42:24:45:15:28:e6:66:18:76:13:a2:9b:
18:fe:6b:1f:e2:f2:19:c1:10:03:a6:fa:3d:06:ee:6c:40:c3:
ca:b6:b4:e8:5d:ea:1f:d1:bf:d3:96:3f:86:2f:5e:1f:21:93:
c6:37:5c:88:db:77:c3:46:7d:b4:98:13:3d:47:50:72:8e:6e:
7e:b8:62:91:f2:53:60:e6:3b:23:05:93:15:b2:dd:f7:04:45:
90:81:80:b0:9e:7a:94:2d:11:a1:43:86:c7:26:29:db:29:17:
b3:f7:73:36:0f:e2:59:84:b5:f3:5c:de:e3:c4:01:3a:7b:3a:
d6:7a:ef:26:01:2e:12:c2:c8:6f:b0:23:b5:ae:a4:a9:af:b1:
bc:16:a0:df:c4:ba:ef:39:bc:fe:bb:3e:50:19:cc:58:20:32:
d2:4e:7d:e0:c3:72:f8:1e:3f:05:fc:00:75:0b:9c:25:ba:0f:
3f:0b:db:b3:68:a2:84:0f:2c:de:38:99:20:8c:53:70:28:d5:
e8:0d:d0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 1 09:13:54 2023 by rpki-client on console-fra.rpki-client.org