Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/fa9411-134e-4dea-8a19-b03415cf0daf/1/nquBWtA6DuffFol0T8Q-acmRbyM.mft
File: nquBWtA6DuffFol0T8Q-acmRbyM.mft (raw, json)
Hash identifier: eP5cVg1Ks0NX/NPk1lZHVWsTqwa+/wTJCcDY0QmQXTQ=
Subject key identifier: B7:D2:7B:AE:D8:62:EC:7B:D6:F6:33:83:9D:90:BA:17:45:22:F0:2F
Authority key identifier: 9E:AB:81:5A:D0:3A:0E:E7:DF:16:89:74:4F:C4:3E:69:C9:91:6F:23
Certificate issuer: /CN=9eab815ad03a0ee7df1689744fc43e69c9916f23
Certificate serial: 01827034E0962E78806D95D85DD73DC793A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nquBWtA6DuffFol0T8Q-acmRbyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/fa9411-134e-4dea-8a19-b03415cf0daf/1/nquBWtA6DuffFol0T8Q-acmRbyM.mft
Manifest number: 16
Signing time: Fri 05 Aug 2022 22:51:29 +0000
Manifest this update: Fri 05 Aug 2022 22:51:29 +0000
Manifest next update: Sat 06 Aug 2022 22:51:29 +0000
Files and hashes: 1: nquBWtA6DuffFol0T8Q-acmRbyM.crl (hash: d9hjOhDNWvoCbObRFe6XESqRylEo8RWhuVbTQnL8Y1k=)
2: sP-kcAbPU8Fx3FDnNp9k6ADai9w.roa (hash: V8N5wRJLnnDeYE3U6J340bWdWPyXCrvJtlkHEpjnQ74=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:70:34:e0:96:2e:78:80:6d:95:d8:5d:d7:3d:c7:93:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eab815ad03a0ee7df1689744fc43e69c9916f23
Validity
Not Before: Aug 5 22:51:29 2022 GMT
Not After : Aug 6 22:51:29 2022 GMT
Subject: CN=b7d27baed862ec7bd6f633839d90ba174522f02f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:65:ea:eb:06:2a:a0:f1:53:9f:6f:9f:22:b0:
a5:ff:bc:5e:ce:e3:f0:87:6b:aa:20:1b:40:ae:5c:
4e:69:fb:e8:23:b0:ef:41:72:2d:3f:d4:6b:ee:b2:
e0:32:f2:30:a1:55:2b:69:43:29:6c:92:03:68:da:
0d:fa:eb:5f:33:34:c8:1f:65:79:16:2e:e4:4e:6f:
c0:bf:8c:a7:38:a2:8b:22:11:6f:8e:12:a7:33:5a:
39:e3:c6:43:21:e5:50:17:3a:20:d0:1d:58:78:17:
53:e2:ab:55:7d:46:73:14:7e:51:4e:33:95:3f:a8:
b9:c9:45:f4:ea:20:83:ea:4c:04:4b:7e:9c:8c:d0:
15:b9:76:31:70:75:1f:a1:46:79:05:93:03:23:d1:
a8:f8:37:52:64:3c:bb:10:c7:df:4b:12:8e:a4:26:
3c:d2:f1:df:d0:0a:a1:87:32:d5:08:97:64:e5:a0:
20:1c:b6:e0:43:5f:2b:8b:e4:22:3e:c0:59:be:ea:
89:db:28:d0:69:10:a5:dd:97:fc:83:b5:e9:97:08:
fa:5c:6f:b4:33:f8:a3:d8:26:d9:bb:97:f8:00:3f:
a6:3f:48:31:e0:04:97:e2:b0:85:4f:ce:6a:64:ce:
08:6d:2a:0f:c4:56:14:27:a1:3d:24:91:49:6d:af:
74:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D2:7B:AE:D8:62:EC:7B:D6:F6:33:83:9D:90:BA:17:45:22:F0:2F
X509v3 Authority Key Identifier:
keyid:9E:AB:81:5A:D0:3A:0E:E7:DF:16:89:74:4F:C4:3E:69:C9:91:6F:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nquBWtA6DuffFol0T8Q-acmRbyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fa9411-134e-4dea-8a19-b03415cf0daf/1/nquBWtA6DuffFol0T8Q-acmRbyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fa9411-134e-4dea-8a19-b03415cf0daf/1/nquBWtA6DuffFol0T8Q-acmRbyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ae:2f:ef:cc:f1:31:a4:c9:f3:2c:a4:dd:81:58:83:b9:2f:
c5:f8:87:a4:b0:f3:b1:e4:b7:af:86:a7:15:c3:7b:71:5d:b3:
fd:bd:77:77:8e:ea:51:5d:88:e8:28:5e:d3:d8:22:ad:08:dc:
91:6c:14:f7:27:62:95:f8:43:51:7e:32:8f:e9:34:ac:06:e2:
72:13:fb:f9:54:f3:04:55:b4:d3:7a:cf:f6:74:30:5f:4a:77:
41:5a:f3:8e:68:9e:48:21:32:12:12:ef:93:e2:5e:94:6d:70:
6b:c3:da:4c:d3:87:dc:c3:c7:c7:c0:38:5d:ad:ad:8d:8d:c4:
70:5a:8a:98:37:71:59:5e:73:3b:8c:60:28:cf:e6:29:0c:83:
de:d1:58:c2:26:ae:cd:6f:98:71:77:89:c0:2e:8a:f7:2e:a1:
45:a2:0f:b9:0a:8d:e0:6e:32:49:03:ca:a7:8a:4a:05:6b:67:
6c:46:2d:89:01:ba:08:4c:67:be:1b:ca:a9:90:09:33:29:98:
79:78:00:8a:58:3c:e4:b2:c7:cb:09:3f:c9:55:7a:b2:e5:2e:
06:02:4e:98:86:4e:82:24:cf:29:e2:90:db:9f:de:51:02:92:
d0:58:1c:55:cd:fe:e9:b8:fe:48:b7:2e:0f:a2:18:e3:83:c3:
36:6c:ef:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYJwNOCWLniAbZXYXdc9x5OiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYWI4MTVhZDAzYTBlZTdkZjE2ODk3NDRmYzQzZTY5Yzk5
MTZmMjMwHhcNMjIwODA1MjI1MTI5WhcNMjIwODA2MjI1MTI5WjAzMTEwLwYDVQQD
EyhiN2QyN2JhZWQ4NjJlYzdiZDZmNjMzODM5ZDkwYmExNzQ1MjJmMDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWXq6wYqoPFTn2+fIrCl/7xezuPw
h2uqIBtArlxOafvoI7DvQXItP9Rr7rLgMvIwoVUraUMpbJIDaNoN+utfMzTIH2V5
Fi7kTm/Av4ynOKKLIhFvjhKnM1o548ZDIeVQFzog0B1YeBdT4qtVfUZzFH5RTjOV
P6i5yUX06iCD6kwES36cjNAVuXYxcHUfoUZ5BZMDI9Go+DdSZDy7EMffSxKOpCY8
0vHf0AqhhzLVCJdk5aAgHLbgQ18ri+QiPsBZvuqJ2yjQaRCl3Zf8g7Xplwj6XG+0
M/ij2CbZu5f4AD+mP0gx4ASX4rCFT85qZM4IbSoPxFYUJ6E9JJFJba90kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLfSe67YYux71vYzg52QuhdFIvAvMB8GA1UdIwQY
MBaAFJ6rgVrQOg7n3xaJdE/EPmnJkW8jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnF1Qld0QTZEdWZmRm9sMFQ4US1hY21SYnlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mYTk0MTEtMTM0ZS00ZGVhLThhMTkt
YjAzNDE1Y2YwZGFmLzEvbnF1Qld0QTZEdWZmRm9sMFQ4US1hY21SYnlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9mYTk0MTEtMTM0ZS00ZGVhLThhMTktYjAzNDE1Y2YwZGFm
LzEvbnF1Qld0QTZEdWZmRm9sMFQ4US1hY21SYnlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYa4v78zx
MaTJ8yyk3YFYg7kvxfiHpLDzseS3r4anFcN7cV2z/b13d47qUV2I6Che09girQjc
kWwU9ydilfhDUX4yj+k0rAbichP7+VTzBFW003rP9nQwX0p3QVrzjmieSCEyEhLv
k+JelG1wa8PaTNOH3MPHx8A4Xa2tjY3EcFqKmDdxWV5zO4xgKM/mKQyD3tFYwiau
zW+YcXeJwC6K9y6hRaIPuQqN4G4ySQPKp4pKBWtnbEYtiQG6CExnvhvKqZAJMymY
eXgAilg85LLHywk/yVV6suUuBgJOmIZOgiTPKeKQ25/eUQKS0FgcVc3+6bj+SLcu
D6IY44PDNmzvQQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:06 2025 by rpki-client