Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/1e1ca8-5ac4-44e6-8df9-d9fde6da633a/1/QRpB3PSSjvXvjoN9qp1am_NBUsk.mft
File: QRpB3PSSjvXvjoN9qp1am_NBUsk.mft (raw, json)
Hash identifier: wJIW63fWQ32ExUI4r9bdO8T/VG159vADFevEnxeSw0s=
Subject key identifier: DD:AE:29:1D:BB:F6:31:69:4C:BC:8D:AD:93:80:6B:68:DF:B7:65:FA
Authority key identifier: 41:1A:41:DC:F4:92:8E:F5:EF:8E:83:7D:AA:9D:5A:9B:F3:41:52:C9
Certificate issuer: /CN=411a41dcf4928ef5ef8e837daa9d5a9bf34152c9
Certificate serial: 018A8ED940224B37784AA1FD39F00B3BBBD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRpB3PSSjvXvjoN9qp1am_NBUsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/1e1ca8-5ac4-44e6-8df9-d9fde6da633a/1/QRpB3PSSjvXvjoN9qp1am_NBUsk.mft
Manifest number: 085E
Signing time: Wed 13 Sep 2023 14:01:56 +0000
Manifest this update: Wed 13 Sep 2023 14:01:56 +0000
Manifest next update: Thu 14 Sep 2023 14:01:56 +0000
Files and hashes: 1: QRpB3PSSjvXvjoN9qp1am_NBUsk.crl (hash: luDakV7qziag0lwucnlVjTJr1+CpBNndydllCL0WDLo=)
2: ylATl-J_gs1qEV0-vxW9Ri7qGxU.roa (hash: 5JHb27tWQoOoTsXgdk66DJXqCVM2b3Jya9l5h8JtPOc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8e:d9:40:22:4b:37:78:4a:a1:fd:39:f0:0b:3b:bb:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411a41dcf4928ef5ef8e837daa9d5a9bf34152c9
Validity
Not Before: Sep 13 14:01:56 2023 GMT
Not After : Sep 14 14:01:56 2023 GMT
Subject: CN=ddae291dbbf631694cbc8dad93806b68dfb765fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:75:12:84:78:cb:60:fa:a1:83:25:bd:0f:2a:
c4:9a:87:22:76:c7:b6:87:0b:c3:49:2e:eb:3a:8f:
69:1e:d4:f4:92:e5:f6:d0:9a:de:3a:70:d5:1f:f9:
f9:6f:39:d2:fc:5e:fc:15:ba:ca:af:9e:3e:91:eb:
7f:1c:5e:8c:88:12:8e:62:d2:9c:28:14:19:19:2e:
de:68:11:8c:83:72:3a:06:80:23:16:a8:1f:a6:0c:
fc:63:12:de:f7:6d:82:e4:a6:1b:55:b1:fb:c6:53:
3f:ac:1f:10:8f:0e:e4:9c:73:7d:82:21:fe:10:67:
ec:df:bf:a6:16:0f:c3:6b:f6:2c:00:e8:75:f1:68:
4a:06:f1:63:4f:11:46:76:50:50:e5:0f:58:a9:48:
2f:e4:6c:3f:6a:22:ba:5d:23:c3:e5:41:45:0d:dc:
26:de:4f:de:e5:d9:c0:e1:ff:6d:24:aa:16:07:3c:
a5:71:a6:ab:47:aa:8f:55:57:75:48:f1:5f:14:0c:
6f:52:ac:ea:d4:c5:d7:8b:df:40:65:c3:01:c8:b5:
04:b3:b7:32:88:96:55:fc:72:89:55:9b:09:53:53:
b0:15:b1:6b:a1:d3:9c:94:48:29:b8:77:82:c0:0c:
95:39:eb:9f:15:54:79:7b:3e:52:66:fe:39:08:bb:
87:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AE:29:1D:BB:F6:31:69:4C:BC:8D:AD:93:80:6B:68:DF:B7:65:FA
X509v3 Authority Key Identifier:
keyid:41:1A:41:DC:F4:92:8E:F5:EF:8E:83:7D:AA:9D:5A:9B:F3:41:52:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRpB3PSSjvXvjoN9qp1am_NBUsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/1e1ca8-5ac4-44e6-8df9-d9fde6da633a/1/QRpB3PSSjvXvjoN9qp1am_NBUsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/1e1ca8-5ac4-44e6-8df9-d9fde6da633a/1/QRpB3PSSjvXvjoN9qp1am_NBUsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:26:9d:8b:d5:57:dc:4c:3f:71:ed:74:65:3b:62:8b:72:6e:
47:aa:10:33:ae:f1:81:52:0a:4e:2b:ab:89:12:ec:0a:06:39:
2b:60:91:0a:2b:75:f9:d3:1d:96:c3:44:2b:9d:ba:d7:de:20:
67:4a:55:b1:0f:d9:fe:ab:0f:e9:7b:ff:04:15:10:d7:c2:70:
b4:f4:02:bb:4b:9b:5c:c3:fb:2c:bb:f1:1c:2c:c0:1b:ae:d4:
67:d6:b0:56:af:45:77:64:f8:22:7d:69:68:f1:f5:4a:7c:f8:
61:a9:9c:00:66:3f:33:80:ca:80:43:73:d1:9a:36:01:e4:ab:
f3:03:3f:f3:f4:50:03:2b:42:7a:b7:a1:25:fa:d8:d4:28:b9:
02:b1:85:2e:12:8e:28:26:6b:79:63:ce:9f:5f:fb:2e:93:73:
b6:d8:43:18:89:a0:e2:a2:8f:6e:87:e4:46:19:05:a6:ab:ab:
70:b2:c3:dd:a7:83:4a:77:80:4b:cb:ce:89:48:f5:a3:81:fc:
d3:ef:f9:d6:69:3b:8f:9a:23:6a:e7:9f:15:35:15:d8:3a:af:
cc:41:bd:57:25:dd:39:f8:59:0c:73:97:24:4b:b0:92:87:13:
8a:0f:cb:94:d2:61:c0:b3:90:8a:36:2b:ac:1d:51:8a:f5:88:
3e:0c:a1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:46:49 2025 by rpki-client