Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6b6ef2-82e2-429a-a797-c682232b5525/1/qCoHBaqEpjsBv31W1h_-9V2YSZI.mft
File: qCoHBaqEpjsBv31W1h_-9V2YSZI.mft (raw, json)
Hash identifier: Kxz590gvWNQCPy6GXj30RijnL/8wKaJiLBDgEV2Io3E=
Subject key identifier: 3B:FD:36:FA:59:C6:52:7A:36:82:EC:D0:B5:F4:44:B3:8E:06:4E:42
Authority key identifier: A8:2A:07:05:AA:84:A6:3B:01:BF:7D:56:D6:1F:FE:F5:5D:98:49:92
Certificate issuer: /CN=a82a0705aa84a63b01bf7d56d61ffef55d984992
Certificate serial: 018CA9DD58222A5465858168D32AEA1FA8D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCoHBaqEpjsBv31W1h_-9V2YSZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6b6ef2-82e2-429a-a797-c682232b5525/1/qCoHBaqEpjsBv31W1h_-9V2YSZI.mft
Manifest number: 0B7A
Signing time: Wed 27 Dec 2023 06:01:44 +0000
Manifest this update: Wed 27 Dec 2023 06:01:44 +0000
Manifest next update: Thu 28 Dec 2023 06:01:44 +0000
Files and hashes: 1: jDLthW2ehpqE1xDreHc1Isu5naI.roa (hash: ldZ3YCMzEjvfawfPGL8foyRhzoNhs5dxbRSYC5JQ3h0=)
2: qCoHBaqEpjsBv31W1h_-9V2YSZI.crl (hash: UyxVdhm058xkMQSL6oAXTmI6K6VgLgkKIgUweNFocf8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a9:dd:58:22:2a:54:65:85:81:68:d3:2a:ea:1f:a8:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82a0705aa84a63b01bf7d56d61ffef55d984992
Validity
Not Before: Dec 27 06:01:44 2023 GMT
Not After : Dec 28 06:01:44 2023 GMT
Subject: CN=3bfd36fa59c6527a3682ecd0b5f444b38e064e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a4:16:df:73:00:e4:ae:96:6a:39:ae:58:c7:
4e:57:d2:d2:10:3f:e8:87:ab:e9:35:83:f1:04:e5:
bc:ef:0d:be:fc:ba:0e:b6:5a:ec:7f:94:0c:a6:82:
d0:87:8c:44:f9:31:80:fa:95:99:51:3f:b4:5b:c6:
a6:20:09:80:5c:a4:43:ee:e5:36:ed:1e:ad:76:06:
32:1a:ea:4a:e2:65:04:df:dc:d1:e2:c4:e4:89:88:
47:06:6c:5b:d5:8b:bb:be:1f:cf:7c:68:6a:e5:99:
92:8b:da:72:25:2c:e2:0b:7a:a5:2f:0c:92:33:24:
7b:c9:f1:c9:ca:8a:9e:e6:5e:b9:3b:3c:7c:13:8a:
00:d8:b5:b7:46:c2:b7:e8:39:6a:35:c3:f9:ac:fe:
2b:eb:ab:cc:ec:83:8e:fe:06:39:9c:48:b3:52:d7:
03:c2:7a:84:7d:3b:bf:dd:bf:73:0f:03:f1:bd:4c:
43:ea:0e:6c:a7:ba:64:3f:01:93:82:71:26:3c:f3:
a7:37:10:15:37:58:cb:65:fe:b0:4d:25:e8:1e:c2:
38:f8:09:28:85:17:8e:7c:ad:eb:2b:ba:9f:52:64:
99:73:f1:0e:78:9d:7e:7f:72:ad:3c:5b:1f:db:1e:
6b:aa:c2:1c:08:ba:65:53:98:ef:02:0b:c5:7f:f5:
a3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:FD:36:FA:59:C6:52:7A:36:82:EC:D0:B5:F4:44:B3:8E:06:4E:42
X509v3 Authority Key Identifier:
keyid:A8:2A:07:05:AA:84:A6:3B:01:BF:7D:56:D6:1F:FE:F5:5D:98:49:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCoHBaqEpjsBv31W1h_-9V2YSZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6b6ef2-82e2-429a-a797-c682232b5525/1/qCoHBaqEpjsBv31W1h_-9V2YSZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6b6ef2-82e2-429a-a797-c682232b5525/1/qCoHBaqEpjsBv31W1h_-9V2YSZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:61:a3:a4:73:88:ed:b8:bd:3f:99:da:f0:a8:e0:20:56:f1:
48:59:e2:af:8a:6a:b7:18:8a:9a:3c:34:f8:df:95:8c:ea:41:
12:4c:45:46:93:64:00:e6:64:de:50:f9:74:1f:40:d1:d1:84:
8c:de:9f:fc:f3:ac:8c:44:ca:40:51:d2:e7:3d:63:13:22:a2:
e5:69:66:2e:3a:b3:ab:a7:35:c7:a1:b9:95:f3:13:5e:31:51:
2a:8a:de:55:d8:fd:cb:96:1d:23:f9:1a:5a:fb:7f:57:18:5c:
f8:dd:8d:b7:ec:19:34:24:e4:35:6c:09:d8:64:73:60:60:8c:
c8:84:79:2f:3a:63:83:82:10:1c:e6:92:b0:1f:c3:24:9d:55:
93:5a:8b:19:73:2a:92:44:23:a1:6d:e4:1c:bb:d9:65:9e:19:
16:dc:89:fc:69:be:be:b3:98:22:05:82:c8:fe:98:55:0a:ab:
72:95:cd:e7:7a:9a:c8:b4:c3:8e:3b:b9:2f:6f:f7:08:e6:d2:
1e:c0:57:42:d1:00:db:13:58:3a:8a:1c:47:12:4c:d3:57:ac:
fc:83:65:23:4f:50:39:02:b8:8f:6d:59:42:5f:43:cf:b8:20:
6b:95:ff:64:ca:da:f5:2f:19:3d:fd:34:66:c0:ff:d6:c4:df:
ba:fc:dd:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:14 2025 by rpki-client