Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e535cc-8425-4a7f-a6ae-d46d771dd1cb/1/QHSm4qvHNrn_8DtSxNexecQWut8.mft
File: QHSm4qvHNrn_8DtSxNexecQWut8.mft (raw, json)
Hash identifier: m7uKxoVzJTIlKxURL6Wc0mxEkxR9DGEbYNGsne4vTxU=
Subject key identifier: 1B:B4:29:57:BE:BD:4A:FE:DE:1A:6F:19:93:AB:DB:AC:B9:C4:20:4F
Authority key identifier: 40:74:A6:E2:AB:C7:36:B9:FF:F0:3B:52:C4:D7:B1:79:C4:16:BA:DF
Certificate issuer: /CN=4074a6e2abc736b9fff03b52c4d7b179c416badf
Certificate serial: 018BD75DAC1AA4919B55C1595B2947A143D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHSm4qvHNrn_8DtSxNexecQWut8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e535cc-8425-4a7f-a6ae-d46d771dd1cb/1/QHSm4qvHNrn_8DtSxNexecQWut8.mft
Manifest number: 0324
Signing time: Thu 16 Nov 2023 09:02:02 +0000
Manifest this update: Thu 16 Nov 2023 09:02:02 +0000
Manifest next update: Fri 17 Nov 2023 09:02:02 +0000
Files and hashes: 1: QHSm4qvHNrn_8DtSxNexecQWut8.crl (hash: RIUD6BeCkhck2lH4PXB8eW/05Ul+tneYxBmKQn3QpoU=)
2: m1xJp0OmN-z5auUb0PrYME9kxx0.roa (hash: BiGFc2/cTX7e3gmJvM+9Sc/gLl+GxX2IPrV+SHjaLhc=)
3: wccV-CL0kpYsFY2CrdMfX65CjkQ.roa (hash: ILJQ+7s/Hy+YY0wGBxH2LtTpMuaMKq5NmMSgxO3vxgo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d7:5d:ac:1a:a4:91:9b:55:c1:59:5b:29:47:a1:43:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4074a6e2abc736b9fff03b52c4d7b179c416badf
Validity
Not Before: Nov 16 09:02:02 2023 GMT
Not After : Nov 17 09:02:02 2023 GMT
Subject: CN=1bb42957bebd4afede1a6f1993abdbacb9c4204f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7a:93:f5:29:e5:f2:db:89:08:07:5a:b8:f5:
46:e4:9e:00:bc:bf:bf:50:3f:7a:94:3b:e8:d8:2f:
59:8b:2f:bd:2c:35:79:b7:95:ce:a5:88:26:48:7f:
af:93:51:c5:2d:da:f7:da:dc:8c:9f:05:5a:f2:ed:
a5:3a:b8:fb:2f:1a:f6:a6:c4:d9:8c:3f:f2:58:65:
20:c0:75:7e:e1:92:4c:95:15:99:9c:3c:40:20:b1:
57:81:16:05:b3:17:a0:12:e6:53:83:0e:17:f9:ef:
04:5b:3f:d2:d1:c4:19:dd:26:c8:1a:c3:c3:9b:49:
8c:10:05:b2:30:17:5f:85:c3:8d:f8:ca:21:42:08:
2d:b2:b3:e6:38:8f:79:a8:6e:88:4b:43:c6:52:7f:
c2:9f:9d:8e:7b:0a:9f:6e:c6:8e:ce:8b:4c:00:7f:
8f:41:c6:a4:03:95:05:a6:f8:e4:a4:3b:b1:f8:c5:
e3:0e:15:8f:42:40:71:db:02:49:f7:cf:39:53:d8:
8a:30:0c:f2:bc:f7:9e:e1:84:5d:d1:ca:fc:bc:ee:
70:04:34:6b:5a:44:45:dc:5d:27:a6:1d:b2:88:95:
a3:9a:d0:89:da:91:64:85:43:51:12:48:29:23:37:
33:2c:3f:9f:42:8d:c1:b2:30:87:0d:03:5a:0a:28:
53:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B4:29:57:BE:BD:4A:FE:DE:1A:6F:19:93:AB:DB:AC:B9:C4:20:4F
X509v3 Authority Key Identifier:
keyid:40:74:A6:E2:AB:C7:36:B9:FF:F0:3B:52:C4:D7:B1:79:C4:16:BA:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHSm4qvHNrn_8DtSxNexecQWut8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e535cc-8425-4a7f-a6ae-d46d771dd1cb/1/QHSm4qvHNrn_8DtSxNexecQWut8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e535cc-8425-4a7f-a6ae-d46d771dd1cb/1/QHSm4qvHNrn_8DtSxNexecQWut8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:4a:04:2d:72:26:c0:e4:1c:c5:32:8c:a4:37:5a:59:5e:07:
a1:8c:e2:ce:3b:19:00:60:e5:a4:7c:cb:d2:3b:32:12:6e:9b:
1e:51:11:9f:6a:c1:58:4b:40:80:ff:8f:fb:47:92:54:36:39:
c9:70:79:ba:02:6b:6b:3b:1e:cc:69:37:57:f9:d1:e7:0e:64:
96:5c:ee:6d:1d:ae:71:5d:8d:72:cf:9a:fa:5c:56:25:51:50:
9f:dc:d5:1f:02:ea:fe:a7:0e:2a:5a:01:b4:85:45:40:99:96:
48:4e:a1:ba:29:ca:f0:52:e2:b8:98:c6:dc:88:16:ad:34:d9:
32:86:d3:f7:48:7c:20:87:60:f0:09:80:38:90:cf:a9:5d:3b:
ca:2a:cd:49:83:a9:18:11:d4:3b:b7:99:11:83:d8:a1:14:78:
bb:85:4e:a0:58:0a:95:c8:10:68:fb:ad:70:3a:fd:e5:13:a3:
1c:01:e8:c4:a1:c8:61:2c:27:ef:b5:74:e1:37:bc:4b:e0:eb:
10:6b:e1:1a:0b:1c:4a:79:06:e0:8e:10:c0:78:63:40:b6:68:
20:1e:66:39:0c:13:a9:75:d3:7f:43:e1:3e:68:02:9f:b3:7b:
32:13:85:00:b0:3f:1a:4f:bd:93:5f:29:0c:a3:2b:60:47:e8:
82:39:92:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:47 2024 by rpki-client on console-fra.rpki-client.org