Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/310bec-44c2-4a5b-8bc7-c9e551449a4f/1/KQ_guFzTt8U5qxPk6upfI3yBVUk.mft
File: KQ_guFzTt8U5qxPk6upfI3yBVUk.mft (raw, json)
Hash identifier: wZ5rSh3uVxCYdIj2M60MdxO2S0nUiTCtYpbRNsQjIjk=
Subject key identifier: A6:A3:A3:47:AD:4F:08:52:D9:58:42:88:B8:B3:BB:33:7D:B9:42:11
Authority key identifier: 29:0F:E0:B8:5C:D3:B7:C5:39:AB:13:E4:EA:EA:5F:23:7C:81:55:49
Certificate issuer: /CN=290fe0b85cd3b7c539ab13e4eaea5f237c815549
Certificate serial: 018BDC8338F439955AF1021E3A0F2C82A831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQ_guFzTt8U5qxPk6upfI3yBVUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/310bec-44c2-4a5b-8bc7-c9e551449a4f/1/KQ_guFzTt8U5qxPk6upfI3yBVUk.mft
Manifest number: 0874
Signing time: Fri 17 Nov 2023 09:01:08 +0000
Manifest this update: Fri 17 Nov 2023 09:01:08 +0000
Manifest next update: Sat 18 Nov 2023 09:01:08 +0000
Files and hashes: 1: 9G9xSwBAmTtD4bc0DumPJ30X4EU.roa (hash: UJ9e3Tsnrmzqj2ofSw+CRyCvvpX7cbdzy9IheLLGcEA=)
2: KQ_guFzTt8U5qxPk6upfI3yBVUk.crl (hash: cKbZhSa+dW/7Jxx11F4esxNK6VONfX8C09uLL99Jje4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dc:83:38:f4:39:95:5a:f1:02:1e:3a:0f:2c:82:a8:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=290fe0b85cd3b7c539ab13e4eaea5f237c815549
Validity
Not Before: Nov 17 09:01:08 2023 GMT
Not After : Nov 18 09:01:08 2023 GMT
Subject: CN=a6a3a347ad4f0852d9584288b8b3bb337db94211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4b:a8:71:f2:dc:d7:ae:61:4a:a8:cf:83:68:
76:bb:ff:76:b1:51:75:2c:af:ad:94:42:0f:e7:f5:
96:c4:4d:81:ae:2c:74:ee:0b:2d:44:a4:16:93:bb:
aa:1e:10:1e:29:9a:49:e7:66:ea:0c:32:44:b6:1c:
85:28:09:55:10:fc:c7:83:41:b4:6d:e3:2b:07:13:
a5:c7:33:31:b7:c5:86:a1:1b:96:fd:a9:42:50:53:
76:13:27:b4:39:2b:3a:e0:f2:6f:d3:23:c3:15:28:
c8:4b:a2:b9:34:a2:87:c5:fe:ad:2d:6e:24:af:00:
88:bc:f6:7e:39:47:2a:84:69:f5:11:17:3b:74:9d:
c3:5d:f1:91:f5:e1:8c:92:18:98:73:7a:38:18:ba:
c7:a0:c8:a1:fd:b3:98:e3:df:c8:96:2e:77:65:05:
24:82:c7:04:63:48:30:33:d8:e5:77:74:3c:fd:f0:
03:24:05:11:23:0a:22:80:d0:5e:c2:fc:5d:08:c6:
0a:38:42:c2:e4:31:e3:fd:ce:18:ee:38:24:b5:c8:
9a:02:76:06:e9:55:52:75:fb:7d:69:97:ed:9a:47:
5a:8e:29:5d:4f:bc:85:1f:ed:ab:7e:2d:20:01:d1:
42:79:34:20:18:5d:89:1e:b7:e1:36:22:6d:7d:7a:
57:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A3:A3:47:AD:4F:08:52:D9:58:42:88:B8:B3:BB:33:7D:B9:42:11
X509v3 Authority Key Identifier:
keyid:29:0F:E0:B8:5C:D3:B7:C5:39:AB:13:E4:EA:EA:5F:23:7C:81:55:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQ_guFzTt8U5qxPk6upfI3yBVUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/310bec-44c2-4a5b-8bc7-c9e551449a4f/1/KQ_guFzTt8U5qxPk6upfI3yBVUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/310bec-44c2-4a5b-8bc7-c9e551449a4f/1/KQ_guFzTt8U5qxPk6upfI3yBVUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:4c:ce:05:1a:98:3e:e9:52:71:da:bf:a9:aa:fb:8e:fb:34:
f0:f4:bf:ae:b8:38:cd:5d:b8:8c:52:bd:79:da:10:35:6b:4a:
fe:9a:0c:c5:96:8a:78:f7:92:a2:0e:1f:cf:91:42:61:00:8e:
de:bd:66:e3:08:22:da:22:1c:ef:b8:15:99:88:60:29:4c:08:
27:43:ae:7a:9d:26:7c:e3:14:e9:28:e1:f2:7e:a6:bf:3b:cf:
62:05:33:24:e8:d8:44:a0:a6:74:57:38:ba:b6:d1:cc:41:c0:
cc:d8:22:ca:6b:76:61:b4:11:15:ef:bf:ca:14:58:90:c2:cc:
ad:14:6e:eb:a6:e3:2d:6c:21:27:45:b8:11:29:db:86:5b:08:
43:b4:64:99:33:a2:be:a4:48:5a:2e:f0:43:a7:db:a6:bf:70:
5e:1c:47:9b:b7:c9:09:3b:f4:f0:6a:78:4e:1f:bc:41:3c:7c:
31:d4:ce:08:75:e3:89:30:8b:8e:22:30:8f:7b:91:d6:c7:2d:
c9:75:e4:74:94:89:09:c7:5c:bb:11:e6:45:68:37:f1:2f:35:
a9:2a:ec:21:d7:6b:81:b8:a9:36:34:0a:8b:72:53:91:49:fc:
9a:23:40:c5:48:58:95:20:a0:d5:dc:7a:8b:c0:3e:91:4a:7f:
d4:60:df:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:07 2025 by rpki-client