Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/654968-d18e-4dc9-a50e-67521fea4ddd/1/QjU_hhSUkScQJFgtRh71XK13YWY.mft
File: QjU_hhSUkScQJFgtRh71XK13YWY.mft (raw, json)
Hash identifier: rJD6LS78MSrlpV12ds3R8z9mJESuSRxJbhCR1IXUc/4=
Subject key identifier: A4:55:34:2D:32:C1:DD:3E:83:84:C7:58:3E:C3:88:CD:F5:E2:0D:46
Authority key identifier: 42:35:3F:86:14:94:91:27:10:24:58:2D:46:1E:F5:5C:AD:77:61:66
Certificate issuer: /CN=42353f86149491271024582d461ef55cad776166
Certificate serial: 018CB497A4C2D80B2EBA1ADD0B1330897B37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QjU_hhSUkScQJFgtRh71XK13YWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/654968-d18e-4dc9-a50e-67521fea4ddd/1/QjU_hhSUkScQJFgtRh71XK13YWY.mft
Manifest number: 0D29
Signing time: Fri 29 Dec 2023 08:01:26 +0000
Manifest this update: Fri 29 Dec 2023 08:01:26 +0000
Manifest next update: Sat 30 Dec 2023 08:01:26 +0000
Files and hashes: 1: QjU_hhSUkScQJFgtRh71XK13YWY.crl (hash: Ew2AOnE3WMMp5gThFD7+6Ho2EhDoRQRwSszeIxobayA=)
2: Qz5OY3j3-s9qIqLTR9Ioyyp5esM.roa (hash: enWrA3U//X4SevjuqIqqkXe1LWPlKo4SqYrXw0Js1/I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b4:97:a4:c2:d8:0b:2e:ba:1a:dd:0b:13:30:89:7b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42353f86149491271024582d461ef55cad776166
Validity
Not Before: Dec 29 08:01:26 2023 GMT
Not After : Dec 30 08:01:26 2023 GMT
Subject: CN=a455342d32c1dd3e8384c7583ec388cdf5e20d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:49:8c:c2:b9:8a:8f:49:f4:77:43:fa:04:17:
47:0f:a9:e5:19:d5:89:78:3e:41:33:f3:90:39:c0:
00:f9:b9:a8:90:a3:0f:41:bb:2c:f2:f4:cd:49:91:
2b:a7:48:93:4c:88:49:1b:d4:93:01:62:e9:10:4b:
2f:21:e5:fb:f9:cb:5c:8c:a9:d0:9f:0f:7c:89:a1:
4f:8d:ea:54:c7:9f:e3:0c:27:fc:0d:5c:9f:48:1f:
da:f7:d2:8a:d7:88:d7:00:19:69:c7:18:55:0d:d1:
dd:eb:72:01:e3:39:69:d1:c2:62:0f:61:6d:7b:31:
0f:bc:82:63:dd:28:37:19:ba:db:86:ad:70:2c:7e:
b5:aa:3c:98:c8:8d:be:4e:b4:6f:94:08:22:b4:b6:
45:71:e3:8c:d0:77:29:3d:f1:00:0d:26:c7:66:49:
1f:db:1b:22:c7:c6:c7:6f:49:db:6c:17:61:e6:d9:
6d:0d:b4:bd:b8:21:40:2b:e4:44:f4:67:d9:ad:69:
f3:9c:aa:2e:94:d9:c0:61:36:9e:c2:67:32:ea:58:
03:6e:1c:92:22:cc:9c:50:5f:b6:2d:0f:8f:e8:33:
87:59:8f:9c:b5:63:e6:a8:48:ee:5d:f4:ca:03:5f:
06:0e:a1:37:f4:9c:0d:5b:5d:3c:83:eb:f0:8e:0a:
56:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:55:34:2D:32:C1:DD:3E:83:84:C7:58:3E:C3:88:CD:F5:E2:0D:46
X509v3 Authority Key Identifier:
keyid:42:35:3F:86:14:94:91:27:10:24:58:2D:46:1E:F5:5C:AD:77:61:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QjU_hhSUkScQJFgtRh71XK13YWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/654968-d18e-4dc9-a50e-67521fea4ddd/1/QjU_hhSUkScQJFgtRh71XK13YWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/654968-d18e-4dc9-a50e-67521fea4ddd/1/QjU_hhSUkScQJFgtRh71XK13YWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:75:12:95:52:09:98:d3:94:a0:e1:85:da:2c:22:18:02:e6:
c7:c4:19:c0:a4:14:ec:9f:c4:df:bc:45:76:c3:bc:e7:82:a5:
fe:5b:61:0f:ed:33:53:bd:8d:fd:b5:a4:d1:07:37:cb:aa:c9:
63:7d:e6:ca:74:9d:0b:90:cc:50:e4:b9:e4:ca:59:0b:d3:22:
68:9c:a1:ff:64:2a:8b:d4:99:f3:c6:8c:41:e1:8c:76:51:a2:
86:37:b1:4b:2e:01:80:08:87:08:aa:b4:33:1d:30:8e:40:0b:
77:66:08:85:f7:a7:7d:23:ac:f6:01:a8:5a:ab:94:e4:cb:9b:
43:3f:8e:b8:c7:a9:23:d1:74:1e:2a:c4:d9:bd:a8:1d:1f:7b:
f7:ce:78:25:c8:b9:69:90:0b:ee:0a:6a:e5:19:a7:77:cc:0a:
02:3a:fa:ea:ef:64:6d:bf:42:bf:d6:81:2e:55:01:ef:4d:e9:
37:a8:3d:a0:02:ff:b5:36:7a:fa:5f:0b:12:40:c3:15:21:e6:
50:5e:c1:b0:5d:1b:57:a0:2a:e9:53:93:3c:4d:c3:85:0b:2b:
a2:d3:b3:63:98:78:9f:12:b4:a5:89:4b:16:17:00:33:c9:3e:
c8:a8:81:45:61:a6:a0:a4:76:a0:a8:cb:37:a3:90:da:45:42:
f9:af:98:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYy0l6TC2AsuuhrdCxMwiXs3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMzUzZjg2MTQ5NDkxMjcxMDI0NTgyZDQ2MWVmNTVjYWQ3
NzYxNjYwHhcNMjMxMjI5MDgwMTI2WhcNMjMxMjMwMDgwMTI2WjAzMTEwLwYDVQQD
EyhhNDU1MzQyZDMyYzFkZDNlODM4NGM3NTgzZWMzODhjZGY1ZTIwZDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikmMwrmKj0n0d0P6BBdHD6nlGdWJ
eD5BM/OQOcAA+bmokKMPQbss8vTNSZErp0iTTIhJG9STAWLpEEsvIeX7+ctcjKnQ
nw98iaFPjepUx5/jDCf8DVyfSB/a99KK14jXABlpxxhVDdHd63IB4zlp0cJiD2Ft
ezEPvIJj3Sg3Gbrbhq1wLH61qjyYyI2+TrRvlAgitLZFceOM0HcpPfEADSbHZkkf
2xsix8bHb0nbbBdh5tltDbS9uCFAK+RE9GfZrWnznKoulNnAYTaewmcy6lgDbhyS
IsycUF+2LQ+P6DOHWY+ctWPmqEjuXfTKA18GDqE39JwNW108g+vwjgpWqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRVNC0ywd0+g4THWD7DiM314g1GMB8GA1UdIwQY
MBaAFEI1P4YUlJEnECRYLUYe9Vytd2FmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWpVX2hoU1VrU2NRSkZndFJoNzFYSzEzWVdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC82NTQ5NjgtZDE4ZS00ZGM5LWE1MGUt
Njc1MjFmZWE0ZGRkLzEvUWpVX2hoU1VrU2NRSkZndFJoNzFYSzEzWVdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC82NTQ5NjgtZDE4ZS00ZGM5LWE1MGUtNjc1MjFmZWE0ZGRk
LzEvUWpVX2hoU1VrU2NRSkZndFJoNzFYSzEzWVdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAHUSlVIJ
mNOUoOGF2iwiGALmx8QZwKQU7J/E37xFdsO854Kl/lthD+0zU72N/bWk0Qc3y6rJ
Y33mynSdC5DMUOS55MpZC9MiaJyh/2Qqi9SZ88aMQeGMdlGihjexSy4BgAiHCKq0
Mx0wjkALd2YIhfenfSOs9gGoWquU5MubQz+OuMepI9F0HirE2b2oHR979854Jci5
aZAL7gpq5Rmnd8wKAjr66u9kbb9Cv9aBLlUB703pN6g9oAL/tTZ6+l8LEkDDFSHm
UF7BsF0bV6Aq6VOTPE3DhQsrotOzY5h4nxK0pYlLFhcAM8k+yKiBRWGmoKR2oKjL
N6OQ2kVC+a+YlA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:48 2024 by rpki-client on console-fra.rpki-client.org