Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/27d0cc-b209-41e5-be05-2b8910a95514/1/qNU3xJFGmEjfCf1xqkcz-fyMoJc.mft
File: qNU3xJFGmEjfCf1xqkcz-fyMoJc.mft (raw, json)
Hash identifier: VtHd81G7fs8fzJKd6ytH9Jh03FGMWnSkIklGFp7Dugo=
Subject key identifier: 71:9D:4A:C5:F2:FF:79:5B:F6:30:89:93:40:D9:01:51:F2:D2:DA:63
Authority key identifier: A8:D5:37:C4:91:46:98:48:DF:09:FD:71:AA:47:33:F9:FC:8C:A0:97
Certificate issuer: /CN=a8d537c491469848df09fd71aa4733f9fc8ca097
Certificate serial: 018B8F433727DC1D5712A0F33DDB1531C692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qNU3xJFGmEjfCf1xqkcz-fyMoJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/27d0cc-b209-41e5-be05-2b8910a95514/1/qNU3xJFGmEjfCf1xqkcz-fyMoJc.mft
Manifest number: 020A
Signing time: Thu 02 Nov 2023 09:00:28 +0000
Manifest this update: Thu 02 Nov 2023 09:00:28 +0000
Manifest next update: Fri 03 Nov 2023 09:00:28 +0000
Files and hashes: 1: qNU3xJFGmEjfCf1xqkcz-fyMoJc.crl (hash: JKQL/Y9fCuOms/TOpaf0E0Z05odIufgVjCm8uw7Ak2o=)
2: yevzHrnGVKRiRD2vmyIK3kVlhGw.roa (hash: a3tPh2icVNxtYcB28tDWP7UZEruXFp89wgQ3NSJEb6A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8f:43:37:27:dc:1d:57:12:a0:f3:3d:db:15:31:c6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8d537c491469848df09fd71aa4733f9fc8ca097
Validity
Not Before: Nov 2 09:00:28 2023 GMT
Not After : Nov 3 09:00:28 2023 GMT
Subject: CN=719d4ac5f2ff795bf630899340d90151f2d2da63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:21:7a:f1:d7:fe:b1:26:96:ec:d3:b0:05:f6:
a8:88:af:f6:d0:31:b1:81:23:ce:7a:e9:6b:46:94:
66:58:f4:05:d6:9a:00:9d:55:66:b2:17:a6:e4:63:
18:1f:cc:03:9c:34:c6:ff:42:96:47:e2:a7:83:97:
90:e8:a7:f9:2a:c3:7f:d5:4a:fe:80:83:86:64:d5:
f8:fb:97:83:3a:e1:bc:28:ab:91:cd:03:20:4b:74:
44:b3:4a:38:b7:9e:7a:1e:af:d4:08:02:be:27:4e:
55:83:60:03:2a:bc:dd:91:33:e3:f5:9c:77:ad:9a:
d2:59:fa:35:65:5d:f6:a4:44:e9:0b:ae:41:f9:b8:
c5:2b:56:c5:31:31:71:aa:c4:4c:0a:aa:30:d6:1d:
ec:2e:d5:8d:c0:4a:30:fb:08:b6:5f:b3:c7:53:5f:
12:d3:f0:f8:92:33:ef:fd:63:97:a0:61:af:22:18:
68:7a:49:a6:c8:0c:eb:6f:64:f8:28:04:55:0a:40:
80:2a:21:54:6d:e0:1f:c9:00:24:ea:5e:0f:20:f7:
bc:9e:1d:f3:1e:7c:d5:8f:72:14:a7:ef:e1:ff:04:
dc:f1:27:eb:c7:05:c6:36:46:27:86:25:e9:eb:8a:
2d:c0:52:91:1f:c9:97:99:fa:e5:39:36:ce:ec:f0:
80:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9D:4A:C5:F2:FF:79:5B:F6:30:89:93:40:D9:01:51:F2:D2:DA:63
X509v3 Authority Key Identifier:
keyid:A8:D5:37:C4:91:46:98:48:DF:09:FD:71:AA:47:33:F9:FC:8C:A0:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qNU3xJFGmEjfCf1xqkcz-fyMoJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/27d0cc-b209-41e5-be05-2b8910a95514/1/qNU3xJFGmEjfCf1xqkcz-fyMoJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/27d0cc-b209-41e5-be05-2b8910a95514/1/qNU3xJFGmEjfCf1xqkcz-fyMoJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:6a:f9:e1:65:77:b8:a1:84:97:f7:d1:2d:ae:7c:f7:e0:54:
7e:9f:bc:f5:a3:a5:2d:06:6d:4f:d3:7c:7b:77:40:90:16:f9:
24:e3:58:26:18:c4:8d:cd:83:2d:b2:af:c2:94:f1:af:2f:ba:
b9:9e:b3:65:da:d4:3e:16:23:26:8c:50:4c:86:7e:a4:1e:d2:
4c:10:dd:49:fa:06:c7:c9:f7:da:f8:f6:e4:f3:f2:cb:0d:29:
16:0a:41:25:6d:aa:7a:fa:58:7c:a4:10:d7:23:f2:ee:b9:d4:
87:27:7c:ba:35:79:22:8b:01:33:51:01:a8:48:36:ea:b2:80:
4f:b0:33:15:03:db:8b:c3:0b:15:ab:d9:a7:99:6c:61:b0:63:
1e:5b:b2:db:bd:e6:46:bc:d0:8a:07:9e:9e:e2:71:16:a2:3c:
11:ce:b8:20:74:a2:fc:2c:54:cb:17:46:8e:7a:63:a0:19:8c:
ea:46:bc:25:23:f7:17:a9:b4:7e:8a:67:5e:05:1c:42:4d:6b:
d8:d9:b0:7e:b3:b6:6b:58:b6:bb:95:1f:2e:25:4b:d6:0a:06:
9e:10:1c:1d:83:27:bf:3b:29:68:83:c5:cb:db:19:2a:ab:fa:
61:c8:44:f5:48:07:0a:f7:55:a1:24:df:02:be:29:18:9b:f8:
60:2c:90:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:21 2024 by rpki-client on console-fra.rpki-client.org