Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/707992-d6d6-46ef-9f7e-6eb5b64d46c7/1/Qn3KYxdMb3ztK6TzGdzCmkiSiYU.mft
File: Qn3KYxdMb3ztK6TzGdzCmkiSiYU.mft (raw, json)
Hash identifier: 9HvED9z/A4uRNmlSMhEAGRpwRfjWO9Er4SUiweF2nCs=
Subject key identifier: 05:6D:6B:C2:FA:CA:3A:A5:95:28:DA:76:85:C1:C3:85:1E:D2:84:F7
Authority key identifier: 42:7D:CA:63:17:4C:6F:7C:ED:2B:A4:F3:19:DC:C2:9A:48:92:89:85
Certificate issuer: /CN=427dca63174c6f7ced2ba4f319dcc29a48928985
Certificate serial: 018D8D197CAA71F1024444F2EF475AC6BD59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qn3KYxdMb3ztK6TzGdzCmkiSiYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/707992-d6d6-46ef-9f7e-6eb5b64d46c7/1/Qn3KYxdMb3ztK6TzGdzCmkiSiYU.mft
Manifest number: 0860
Signing time: Fri 09 Feb 2024 09:01:14 +0000
Manifest this update: Fri 09 Feb 2024 09:01:14 +0000
Manifest next update: Sat 10 Feb 2024 09:01:14 +0000
Files and hashes: 1: Qn3KYxdMb3ztK6TzGdzCmkiSiYU.crl (hash: ZH4jhysNOPPh/3/Qj2NriceoC/IutfNiMuZD/Jq6oTo=)
2: V2DrHsg_1co8O5IwJG3yoDueJhM.roa (hash: x5bRvDYAPzGVNO+m09M5SzYJdQizHZhCqcNBumSvDdo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8d:19:7c:aa:71:f1:02:44:44:f2:ef:47:5a:c6:bd:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427dca63174c6f7ced2ba4f319dcc29a48928985
Validity
Not Before: Feb 9 09:01:14 2024 GMT
Not After : Feb 10 09:01:14 2024 GMT
Subject: CN=056d6bc2faca3aa59528da7685c1c3851ed284f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f0:f1:dc:4d:36:14:05:5e:9d:e1:e5:69:00:
49:9a:95:68:0c:69:fd:4a:b0:12:d8:47:6a:20:8f:
71:77:98:a8:0b:37:1d:24:d5:5a:de:a0:ec:63:a4:
7a:18:82:7c:73:c7:ef:db:ed:7d:e6:ab:7d:27:0c:
82:9f:7e:cb:82:a7:af:93:9c:92:99:2e:54:22:2e:
37:8e:bb:8b:80:e7:f4:b3:54:77:44:1d:21:1c:b0:
ae:e6:69:ce:ed:0f:ce:fd:ba:fc:e4:c1:d0:b6:df:
81:66:11:5d:4d:60:8c:ee:ee:65:e8:8a:8f:61:63:
bd:20:0f:4a:2d:ee:3d:f4:95:46:99:c9:68:ed:dd:
48:d2:d6:88:28:3b:2a:2f:1b:7f:fa:8e:62:60:8c:
2b:8a:d6:a1:a6:35:89:65:c2:d8:9f:0a:a1:35:7f:
1e:64:96:e2:15:b9:63:61:fd:41:38:2f:61:08:93:
51:59:97:6a:c3:75:50:65:d4:13:96:3a:37:72:b8:
c6:6d:22:a2:a4:77:19:4c:d1:8a:8e:79:37:4d:54:
0d:92:2a:c8:0a:ae:65:70:e2:1d:48:0b:d7:99:ad:
d4:2c:5f:c8:56:fe:bd:b5:c3:94:63:54:28:2c:fd:
6f:8d:27:4c:4a:1b:0b:64:a1:54:6a:56:1f:34:81:
92:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6D:6B:C2:FA:CA:3A:A5:95:28:DA:76:85:C1:C3:85:1E:D2:84:F7
X509v3 Authority Key Identifier:
keyid:42:7D:CA:63:17:4C:6F:7C:ED:2B:A4:F3:19:DC:C2:9A:48:92:89:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qn3KYxdMb3ztK6TzGdzCmkiSiYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/707992-d6d6-46ef-9f7e-6eb5b64d46c7/1/Qn3KYxdMb3ztK6TzGdzCmkiSiYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/707992-d6d6-46ef-9f7e-6eb5b64d46c7/1/Qn3KYxdMb3ztK6TzGdzCmkiSiYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f2:8d:5e:70:ac:a5:73:9f:6f:60:c6:af:3f:8c:98:e9:79:
33:46:09:c5:00:2c:e5:01:01:e0:0e:be:4f:46:45:91:b6:15:
45:a4:13:97:8f:da:ba:4c:37:39:16:7d:b8:aa:6c:da:8b:05:
6b:09:46:67:06:6d:d8:fa:8e:6f:5e:fa:8c:e8:6c:0e:88:95:
b4:3c:7b:7b:7d:79:15:db:83:cf:3f:6b:ae:6d:18:79:87:c8:
08:ad:1c:eb:51:0e:74:55:59:ff:82:6b:22:48:93:68:48:b2:
ee:04:f9:bb:b7:40:83:98:53:66:fd:d0:6b:13:8a:77:b9:a7:
aa:7c:d1:0b:a0:9a:6b:4e:4b:6b:2e:d8:f7:b2:d5:af:8f:dc:
c2:4a:84:88:80:49:36:4c:69:34:f0:76:45:1a:18:cd:69:a3:
a4:46:a2:df:c9:ba:40:0b:08:e7:d0:78:a7:09:56:7a:8b:8e:
40:f5:a6:44:e1:85:7b:a8:8b:0d:40:76:9f:84:79:13:7c:d3:
56:08:09:90:fc:5f:9b:b6:d2:45:4e:14:9c:0a:60:2d:5f:f7:
5a:5b:c2:26:fd:00:eb:35:be:a4:02:52:09:1e:aa:42:f6:5f:
dd:56:07:0c:a8:59:7e:7e:58:29:be:ec:39:88:bb:fd:e7:23:
59:3f:db:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:28:51 2025 by rpki-client