Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a98a04-3309-4e72-a289-a65a835534e3/1/qPkQ_A8Lbp1kZm0Gjxzg_08pbcI.mft
File: qPkQ_A8Lbp1kZm0Gjxzg_08pbcI.mft (raw, json)
Hash identifier: b7apeGUNarSfUCPMyPI+uDFsYtUf49rC1D5J5eLlXok=
Subject key identifier: 9E:24:80:9B:B8:26:6F:99:F5:BA:9B:68:85:35:11:4E:63:E8:44:FA
Authority key identifier: A8:F9:10:FC:0F:0B:6E:9D:64:66:6D:06:8F:1C:E0:FF:4F:29:6D:C2
Certificate issuer: /CN=a8f910fc0f0b6e9d64666d068f1ce0ff4f296dc2
Certificate serial: 018A5E598A712DC48850D732EF9B8F05370C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPkQ_A8Lbp1kZm0Gjxzg_08pbcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a98a04-3309-4e72-a289-a65a835534e3/1/qPkQ_A8Lbp1kZm0Gjxzg_08pbcI.mft
Manifest number: 0870
Signing time: Mon 04 Sep 2023 04:00:40 +0000
Manifest this update: Mon 04 Sep 2023 04:00:40 +0000
Manifest next update: Tue 05 Sep 2023 04:00:40 +0000
Files and hashes: 1: HCSuRu3287bNnXln1--8HQeyZ1w.roa (hash: jD1poNDqAil36M4rur1XWYa1RClhfi9DYZntBrVVTco=)
2: qPkQ_A8Lbp1kZm0Gjxzg_08pbcI.crl (hash: WUOk08GxtJITtO/qKnhXwTmOV13oupOQHTn9VdzkmXU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5e:59:8a:71:2d:c4:88:50:d7:32:ef:9b:8f:05:37:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f910fc0f0b6e9d64666d068f1ce0ff4f296dc2
Validity
Not Before: Sep 4 04:00:40 2023 GMT
Not After : Sep 5 04:00:40 2023 GMT
Subject: CN=9e24809bb8266f99f5ba9b688535114e63e844fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5c:dd:15:07:2c:17:6f:59:3d:19:a0:ed:d4:
d7:eb:a0:03:01:fe:4a:6b:66:7d:48:c2:10:19:24:
17:96:58:67:c4:d1:26:75:79:62:5a:a0:85:6b:ea:
ca:73:48:aa:44:49:4a:c7:8c:9b:77:7c:7c:39:00:
a0:af:c2:0d:7c:3a:89:85:aa:ca:86:cd:57:d3:8f:
17:93:b1:87:2e:1d:31:ec:a1:c0:90:59:bb:0e:ee:
f0:7d:03:41:c6:f2:43:6f:63:b9:3a:d7:49:00:fe:
a7:78:3e:41:c9:df:08:65:c9:1a:8a:68:dd:aa:92:
9d:cd:d2:43:09:24:99:df:12:37:d0:7b:a4:bc:f2:
33:b1:b8:d0:42:ab:5e:0e:09:fc:4f:4c:a3:67:04:
9d:02:7d:c0:cc:48:58:13:2f:a8:59:ff:e2:f5:d0:
29:a5:d3:fb:3f:ac:01:72:24:10:71:bf:33:0f:2c:
25:48:f7:8d:12:09:52:a5:d4:9b:73:d3:33:b4:e5:
d9:c7:4f:eb:71:7b:06:93:93:33:dd:46:94:a1:94:
81:31:c8:c2:9e:00:d5:aa:8a:40:cc:71:a9:8a:37:
45:e9:91:50:62:e4:bd:68:6a:d3:5f:5f:76:b8:ae:
ff:6b:6f:00:4f:4c:2d:c7:5f:34:91:32:8f:80:1a:
03:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:24:80:9B:B8:26:6F:99:F5:BA:9B:68:85:35:11:4E:63:E8:44:FA
X509v3 Authority Key Identifier:
keyid:A8:F9:10:FC:0F:0B:6E:9D:64:66:6D:06:8F:1C:E0:FF:4F:29:6D:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPkQ_A8Lbp1kZm0Gjxzg_08pbcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a98a04-3309-4e72-a289-a65a835534e3/1/qPkQ_A8Lbp1kZm0Gjxzg_08pbcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a98a04-3309-4e72-a289-a65a835534e3/1/qPkQ_A8Lbp1kZm0Gjxzg_08pbcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c7:24:ae:f2:92:88:7f:0f:ee:1f:e3:c0:cb:cc:a5:c6:52:
40:c3:b8:c6:18:32:e4:35:47:bd:ca:01:c9:2c:3e:43:c9:29:
5c:59:88:89:af:29:3d:a2:f9:05:0c:9f:6f:57:bc:86:dc:be:
24:4c:de:3d:f4:f6:5c:3f:20:ca:8a:62:32:4d:ad:ce:65:36:
0c:f1:5c:23:66:ac:8f:20:b1:96:6a:c8:38:cf:da:25:f5:bf:
c0:47:5d:e6:13:90:b5:68:a3:5f:c6:31:f3:93:df:82:fe:45:
e0:5f:89:11:e3:87:ae:16:53:1e:f2:1f:92:d7:5d:94:d5:7c:
0c:38:ca:0a:1f:7f:d8:60:7c:1f:68:67:11:81:02:ea:cb:bc:
1a:d6:16:64:89:1b:72:02:e8:19:dd:fe:3c:29:96:81:83:02:
90:ea:d4:98:6a:e4:56:a3:f9:a0:57:a6:45:d6:26:9f:f6:a9:
b4:02:b1:16:ca:26:30:1f:b5:d2:92:de:11:68:0f:fd:e7:31:
38:5a:d3:b4:a4:35:ab:49:c4:9e:2a:4b:29:a2:20:cc:f1:ad:
7d:cb:f0:b3:ac:56:55:e6:30:73:e7:ac:5f:90:36:4b:0d:c7:
22:c7:9c:fc:40:95:c4:d0:a2:b6:3d:11:0a:25:a7:78:41:f0:
96:86:6a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:19 2025 by rpki-client