Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/6d0270-95ab-4da3-abf5-8dc0d833f54b/1/3Q_rml-gQDQeoYU0xbau1-zSoN4.mft
File: 3Q_rml-gQDQeoYU0xbau1-zSoN4.mft (raw, json)
Hash identifier: cuomwEBeJnII1xyRkp/4ZokDOTymN6g5pZU8ZKfiYRg=
Subject key identifier: 6E:02:42:D1:DC:1C:3F:9E:CE:9A:37:F9:12:E2:ED:17:0A:60:1D:5A
Authority key identifier: DD:0F:EB:9A:5F:A0:40:34:1E:A1:85:34:C5:B6:AE:D7:EC:D2:A0:DE
Certificate issuer: /CN=dd0feb9a5fa040341ea18534c5b6aed7ecd2a0de
Certificate serial: 018D62D418DE175E2A3ACAE21CED79165537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Q_rml-gQDQeoYU0xbau1-zSoN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/6d0270-95ab-4da3-abf5-8dc0d833f54b/1/3Q_rml-gQDQeoYU0xbau1-zSoN4.mft
Manifest number: 0840
Signing time: Thu 01 Feb 2024 04:01:23 +0000
Manifest this update: Thu 01 Feb 2024 04:01:23 +0000
Manifest next update: Fri 02 Feb 2024 04:01:23 +0000
Files and hashes: 1: 3Q_rml-gQDQeoYU0xbau1-zSoN4.crl (hash: BOUFiTe+D7J18Tb0mATU/uJnT0okzpQoUZE2Rz5PW2E=)
2: PiAJEy9lfHDAKJ5Ilcri4vwYaNI.roa (hash: hj31vhrkbnrHemOGAuPTgzeAQ89j93aaaAFzTqJnNvQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:62:d4:18:de:17:5e:2a:3a:ca:e2:1c:ed:79:16:55:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd0feb9a5fa040341ea18534c5b6aed7ecd2a0de
Validity
Not Before: Feb 1 04:01:23 2024 GMT
Not After : Feb 2 04:01:23 2024 GMT
Subject: CN=6e0242d1dc1c3f9ece9a37f912e2ed170a601d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:01:07:99:fe:71:eb:4e:23:05:4f:70:cc:3c:
6d:8a:3c:c2:5b:41:97:fd:25:d1:be:d8:c2:20:dc:
81:c3:8f:96:47:e2:cc:70:b1:7c:cb:ef:f1:0a:11:
b7:2e:19:e4:64:ce:58:34:8d:a3:e8:41:f6:d5:98:
3a:43:a9:09:e3:9b:bb:80:2d:32:f4:0e:93:48:cc:
8f:b0:63:2f:64:40:da:7e:2c:9a:53:9d:37:a5:08:
5f:48:6d:5f:90:41:44:dd:3c:b3:c4:04:e6:92:44:
6c:3f:48:d5:01:00:40:00:19:6d:f5:3e:23:9e:b6:
3b:ec:13:76:ed:80:62:e3:03:63:39:65:bc:26:17:
0b:47:64:da:45:84:2f:59:b4:2f:6f:64:73:6b:b9:
53:44:c4:09:9d:c8:f1:a5:9c:50:94:9a:9e:0f:4b:
5f:c7:a0:08:91:94:3b:59:8e:9d:36:7d:48:1f:25:
ae:8c:00:b7:3c:4e:a7:da:4a:da:ea:ff:38:0a:a4:
a9:65:a1:2c:76:48:2f:db:59:99:37:58:35:21:12:
fc:94:6a:0a:20:a8:0a:34:2d:2c:92:11:9d:f7:10:
a5:7e:35:24:55:cf:21:85:f9:8b:49:e2:62:77:3d:
a6:71:47:cd:35:a5:d8:3e:e7:cb:b5:30:be:cf:a1:
fd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:02:42:D1:DC:1C:3F:9E:CE:9A:37:F9:12:E2:ED:17:0A:60:1D:5A
X509v3 Authority Key Identifier:
keyid:DD:0F:EB:9A:5F:A0:40:34:1E:A1:85:34:C5:B6:AE:D7:EC:D2:A0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Q_rml-gQDQeoYU0xbau1-zSoN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6d0270-95ab-4da3-abf5-8dc0d833f54b/1/3Q_rml-gQDQeoYU0xbau1-zSoN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6d0270-95ab-4da3-abf5-8dc0d833f54b/1/3Q_rml-gQDQeoYU0xbau1-zSoN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:f3:ff:99:8b:f0:00:b7:82:4d:0c:c1:ae:b7:b1:df:e8:ad:
86:c3:34:36:30:fc:af:bf:31:4e:d2:9d:68:5c:e0:b4:3a:eb:
6f:4c:4e:fc:4c:e8:1b:de:e1:91:d4:be:b4:84:39:cb:a1:1f:
3b:de:bc:56:46:f0:90:fa:26:2c:62:00:aa:1f:fe:dc:e0:dc:
e1:0c:36:60:95:c2:f0:77:81:f3:04:93:a5:2e:4b:e1:27:3b:
e0:6a:33:db:b8:1d:2e:95:e5:13:7a:93:50:bd:04:96:5a:fa:
9b:cc:29:7b:d7:ba:1e:e3:6d:95:6b:67:9b:4b:1c:b5:0c:ff:
3b:d8:b4:4c:5b:8a:ba:d3:9f:82:47:d9:13:70:63:e5:07:b2:
1e:1d:9c:95:d9:30:b5:21:3d:b1:3d:64:0c:e3:e0:96:d9:3d:
7f:c0:50:67:aa:e6:32:02:8a:b0:93:7f:df:1c:d8:e4:5d:99:
82:50:64:c5:ff:b1:7f:81:a0:a2:0f:ea:c6:53:ea:e2:40:4d:
a8:21:13:33:88:29:39:e1:1b:0f:bf:ef:fa:d6:b4:21:80:17:
2b:0b:af:f5:62:26:df:58:a6:45:1a:8b:fc:06:6f:0e:f8:17:
9b:1c:b8:5f:ca:13:58:69:64:86:f5:07:3a:1a:43:f4:24:2b:
b8:9f:33:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 16:11:04 2024 by rpki-client on console-fra.rpki-client.org