Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/db25e0-5143-4949-841b-4774089bd38e/1/QJq5wOMoITS7gl0QBJXRQiI-lew.mft
File: QJq5wOMoITS7gl0QBJXRQiI-lew.mft (raw, json)
Hash identifier: EBeF8GToCtJON9sTHKsgIvAurvbtRuf4zhUuKU8adns=
Subject key identifier: 88:56:EA:E3:E8:E4:1B:C1:E3:F3:F4:31:BE:EA:41:F1:18:ED:85:B2
Authority key identifier: 40:9A:B9:C0:E3:28:21:34:BB:82:5D:10:04:95:D1:42:22:3E:95:EC
Certificate issuer: /CN=409ab9c0e3282134bb825d100495d142223e95ec
Certificate serial: 018ACF00A9D8B8B15731DF49255F29867E84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJq5wOMoITS7gl0QBJXRQiI-lew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/db25e0-5143-4949-841b-4774089bd38e/1/QJq5wOMoITS7gl0QBJXRQiI-lew.mft
Manifest number: 07EB
Signing time: Tue 26 Sep 2023 01:00:41 +0000
Manifest this update: Tue 26 Sep 2023 01:00:41 +0000
Manifest next update: Wed 27 Sep 2023 01:00:41 +0000
Files and hashes: 1: QJq5wOMoITS7gl0QBJXRQiI-lew.crl (hash: 1p+eS2EiRS21GWGcwmSmKMk3n3Ic0B9t/GYnvDqFPgs=)
2: mGAProF0IA2D7CSgq840ez34dY4.roa (hash: QDUh/PWW4jELgr2xwf1cfOf7f5UukejPYB1s9jbGPoE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cf:00:a9:d8:b8:b1:57:31:df:49:25:5f:29:86:7e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=409ab9c0e3282134bb825d100495d142223e95ec
Validity
Not Before: Sep 26 01:00:41 2023 GMT
Not After : Sep 27 01:00:41 2023 GMT
Subject: CN=8856eae3e8e41bc1e3f3f431beea41f118ed85b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e9:e8:e0:9e:c9:93:32:8f:b2:6c:51:23:ed:
f4:eb:7d:13:66:09:54:f6:70:bb:bd:58:6c:18:43:
92:20:30:3a:96:29:bd:22:34:4e:86:99:86:a0:9f:
3c:e4:81:7a:33:c3:ee:5f:a3:b5:e2:6c:f5:b5:8a:
9e:56:14:7a:98:fc:12:5a:56:20:81:45:11:e6:93:
6c:39:c2:a2:19:d1:ea:f4:1e:bf:e2:3d:54:97:2f:
3b:eb:af:c1:c2:1b:c8:1d:87:78:d9:98:7d:c6:cc:
60:03:5e:c3:df:d8:8b:33:52:71:06:a0:2e:dc:d3:
3e:e6:2f:6c:6a:0a:5a:b4:6b:92:8a:d3:d9:2d:85:
09:a0:41:b2:97:de:a6:db:74:f2:56:7b:b0:c3:2a:
18:4f:08:77:9e:4f:15:fc:38:47:0c:69:f5:15:92:
eb:9c:f7:fe:a4:01:4f:05:d9:09:be:2a:8c:b3:f5:
9b:e0:f7:35:ae:19:83:03:19:a7:36:2c:0a:91:2b:
fd:84:5a:85:13:0e:ea:23:e8:68:e8:43:91:53:3e:
3c:61:55:d5:02:57:7b:a8:17:93:e5:b3:ba:67:12:
64:17:0f:27:7d:f0:0a:f7:08:40:ec:d9:e1:dc:34:
c6:69:71:af:e8:cf:e1:9c:bb:ba:59:73:2a:e6:34:
6f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:56:EA:E3:E8:E4:1B:C1:E3:F3:F4:31:BE:EA:41:F1:18:ED:85:B2
X509v3 Authority Key Identifier:
keyid:40:9A:B9:C0:E3:28:21:34:BB:82:5D:10:04:95:D1:42:22:3E:95:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJq5wOMoITS7gl0QBJXRQiI-lew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/db25e0-5143-4949-841b-4774089bd38e/1/QJq5wOMoITS7gl0QBJXRQiI-lew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/db25e0-5143-4949-841b-4774089bd38e/1/QJq5wOMoITS7gl0QBJXRQiI-lew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:10:51:cf:15:52:82:35:0c:c5:82:09:e7:6a:27:e2:df:c8:
df:5d:93:d5:a7:0a:a5:dd:43:e9:11:57:77:a8:35:6f:95:4f:
62:2f:a9:0a:48:84:fb:f0:2f:e7:df:d4:27:a1:24:1b:5d:a1:
23:04:3c:f4:96:d5:b0:9a:45:50:c0:07:7c:88:d4:51:f6:e4:
64:55:27:fd:1c:4b:b1:8d:c9:0b:27:20:94:b7:55:7e:e2:08:
fa:68:0e:75:08:bf:2e:e7:70:95:e8:5a:ce:1e:5c:68:8a:4f:
19:e5:bd:9b:51:08:78:43:7c:14:b5:4c:ef:19:27:8e:9f:b6:
c6:45:52:4e:57:7b:c5:01:39:be:61:eb:53:a5:e6:fc:62:d7:
9d:de:28:6a:c8:28:e5:0f:30:71:38:91:52:23:76:35:65:2f:
42:29:03:8b:da:1d:88:b0:a2:72:59:96:cd:88:da:0a:51:dc:
16:50:ab:6f:85:bd:6d:ed:47:ae:3f:a0:21:9a:01:d7:06:46:
33:19:64:48:1c:af:7a:d1:a5:9e:28:28:64:9a:ff:b2:0c:6e:
fc:aa:13:78:57:ec:96:8f:ee:8d:b3:fb:e6:6f:1f:55:7f:1d:
5e:8f:d7:29:1a:bb:23:92:2e:b6:ed:e7:0a:6a:9b:06:32:39:
f2:4b:96:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:42 2024 by rpki-client on console-fra.rpki-client.org