Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/3b91a6-1f94-40b9-99eb-4204922cf203/1/QtOV_cF2Re9cNK2OUx0SJNMUZFM.mft
File: QtOV_cF2Re9cNK2OUx0SJNMUZFM.mft (raw, json)
Hash identifier: M3jg4KMdGbwoQrpd5n88DCwxasoUbWF3pKxSHp4qhZs=
Subject key identifier: 05:49:C6:C0:18:C2:DE:52:7C:B5:FC:EE:BC:4F:9C:0E:23:53:EF:19
Authority key identifier: 42:D3:95:FD:C1:76:45:EF:5C:34:AD:8E:53:1D:12:24:D3:14:64:53
Certificate issuer: /CN=42d395fdc17645ef5c34ad8e531d1224d3146453
Certificate serial: 018EC05F63E13F140504D62CDB9C860DE23B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtOV_cF2Re9cNK2OUx0SJNMUZFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/3b91a6-1f94-40b9-99eb-4204922cf203/1/QtOV_cF2Re9cNK2OUx0SJNMUZFM.mft
Manifest number: 0234
Signing time: Tue 09 Apr 2024 01:01:00 +0000
Manifest this update: Tue 09 Apr 2024 01:01:00 +0000
Manifest next update: Wed 10 Apr 2024 01:01:00 +0000
Files and hashes: 1: QtOV_cF2Re9cNK2OUx0SJNMUZFM.crl (hash: aFBNF3DvBK7Uw4HZNIjxOeMAk8ZMjGdLRl/j8JANVfg=)
2: lFHrL_YNvigyYAgmHmx4kwF4fjA.roa (hash: TdWLngCvYzOj7/aalnreTfxAUVNBAlAPeR2kOZr8gMA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c0:5f:63:e1:3f:14:05:04:d6:2c:db:9c:86:0d:e2:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42d395fdc17645ef5c34ad8e531d1224d3146453
Validity
Not Before: Apr 9 01:01:00 2024 GMT
Not After : Apr 10 01:01:00 2024 GMT
Subject: CN=0549c6c018c2de527cb5fceebc4f9c0e2353ef19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e3:b8:96:95:cd:62:f9:5f:f8:00:dc:4e:66:
0c:6e:3c:9d:e0:61:96:86:86:fa:f9:88:49:5d:f8:
49:39:ec:ff:ef:a3:76:90:50:a8:f8:af:eb:01:75:
85:9b:c8:6b:b8:65:8b:d0:95:31:ff:9e:d6:8e:6a:
4b:44:8d:a5:58:5b:04:8a:1b:cd:0a:5e:99:ad:b6:
62:a0:72:f9:45:ca:9b:e7:35:95:c6:19:8f:c1:c5:
1b:ff:31:e8:5f:72:1b:b4:01:2b:30:94:9b:c2:c1:
12:03:40:e2:3e:04:db:4b:d9:b5:1e:a3:90:b1:20:
16:d5:5d:81:2d:6f:c3:40:e2:8c:19:98:18:3b:fe:
2e:ad:0c:60:25:b3:4f:90:1b:f6:f5:48:ef:d3:d3:
37:c5:5e:41:e9:9a:2f:c4:cc:37:9d:f1:a6:dc:15:
9a:bf:9a:7f:83:a1:4d:40:0d:9f:aa:f0:f4:cb:df:
1a:34:c4:81:66:c2:75:1f:b5:35:55:86:cc:9f:a7:
81:fb:32:3d:ed:fa:37:e2:bc:5d:06:09:3f:1f:27:
c8:9b:87:65:59:24:26:c6:65:56:eb:6c:aa:27:f5:
e7:b4:37:78:58:c4:4a:50:2e:9d:c9:b9:75:06:e2:
57:3d:17:48:c7:86:c7:ad:c5:0c:5e:9f:84:f7:19:
7a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:49:C6:C0:18:C2:DE:52:7C:B5:FC:EE:BC:4F:9C:0E:23:53:EF:19
X509v3 Authority Key Identifier:
keyid:42:D3:95:FD:C1:76:45:EF:5C:34:AD:8E:53:1D:12:24:D3:14:64:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtOV_cF2Re9cNK2OUx0SJNMUZFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3b91a6-1f94-40b9-99eb-4204922cf203/1/QtOV_cF2Re9cNK2OUx0SJNMUZFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3b91a6-1f94-40b9-99eb-4204922cf203/1/QtOV_cF2Re9cNK2OUx0SJNMUZFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:15:96:73:ac:b1:aa:aa:30:eb:3c:18:26:cd:94:d2:41:e4:
ff:15:98:5b:19:1e:44:a9:98:51:53:0c:c7:fa:ef:7d:a5:35:
0e:ec:da:6c:c2:96:db:4b:84:f0:57:2a:66:8a:a3:53:0c:13:
f8:55:d7:d7:dc:6a:1a:4c:7f:73:07:1b:81:5b:09:44:66:59:
62:06:09:16:43:6f:50:ba:cb:2b:8e:c1:bf:46:21:f3:86:b2:
a3:76:e4:af:e6:ec:4f:af:7e:00:74:71:80:ea:51:d1:1d:4f:
68:34:2a:e1:0e:1c:63:7f:41:ea:bb:df:ba:75:c6:e7:94:32:
fe:d2:7e:57:fe:1b:05:86:f9:55:bd:ec:c7:07:5c:90:f6:53:
c5:38:54:e9:57:df:21:06:a2:a7:31:bb:25:91:be:b6:0c:a3:
a2:92:b9:cb:6c:20:76:2e:de:e5:08:bd:87:0b:f4:db:30:b3:
a5:88:8e:43:e9:fb:66:ce:9f:58:f2:2b:ec:0c:82:91:37:9f:
16:60:ad:eb:92:aa:02:06:64:95:5f:1d:5c:d5:0e:78:f3:b1:
93:c3:a8:fc:94:31:a4:30:6a:43:91:24:27:35:c2:05:92:a4:
d8:67:85:be:9a:a6:7d:26:25:e4:3f:75:e8:a9:c0:79:34:60:
dc:ce:f1:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY7AX2PhPxQFBNYs25yGDeI7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZDM5NWZkYzE3NjQ1ZWY1YzM0YWQ4ZTUzMWQxMjI0ZDMx
NDY0NTMwHhcNMjQwNDA5MDEwMTAwWhcNMjQwNDEwMDEwMTAwWjAzMTEwLwYDVQQD
EygwNTQ5YzZjMDE4YzJkZTUyN2NiNWZjZWViYzRmOWMwZTIzNTNlZjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uO4lpXNYvlf+ADcTmYMbjyd4GGW
hob6+YhJXfhJOez/76N2kFCo+K/rAXWFm8hruGWL0JUx/57WjmpLRI2lWFsEihvN
Cl6ZrbZioHL5Rcqb5zWVxhmPwcUb/zHoX3IbtAErMJSbwsESA0DiPgTbS9m1HqOQ
sSAW1V2BLW/DQOKMGZgYO/4urQxgJbNPkBv29Ujv09M3xV5B6ZovxMw3nfGm3BWa
v5p/g6FNQA2fqvD0y98aNMSBZsJ1H7U1VYbMn6eB+zI97fo34rxdBgk/HyfIm4dl
WSQmxmVW62yqJ/XntDd4WMRKUC6dybl1BuJXPRdIx4bHrcUMXp+E9xl6VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVJxsAYwt5SfLX87rxPnA4jU+8ZMB8GA1UdIwQY
MBaAFELTlf3BdkXvXDStjlMdEiTTFGRTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXRPVl9jRjJSZTljTksyT1V4MFNKTk1VWkZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8zYjkxYTYtMWY5NC00MGI5LTk5ZWIt
NDIwNDkyMmNmMjAzLzEvUXRPVl9jRjJSZTljTksyT1V4MFNKTk1VWkZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8zYjkxYTYtMWY5NC00MGI5LTk5ZWItNDIwNDkyMmNmMjAz
LzEvUXRPVl9jRjJSZTljTksyT1V4MFNKTk1VWkZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGhWWc6yx
qqow6zwYJs2U0kHk/xWYWxkeRKmYUVMMx/rvfaU1DuzabMKW20uE8FcqZoqjUwwT
+FXX19xqGkx/cwcbgVsJRGZZYgYJFkNvULrLK47Bv0Yh84ayo3bkr+bsT69+AHRx
gOpR0R1PaDQq4Q4cY39B6rvfunXG55Qy/tJ+V/4bBYb5Vb3sxwdckPZTxThU6Vff
IQaipzG7JZG+tgyjopK5y2wgdi7e5Qi9hwv02zCzpYiOQ+n7Zs6fWPIr7AyCkTef
FmCt65KqAgZklV8dXNUOePOxk8Oo/JQxpDBqQ5EkJzXCBZKk2GeFvpqmfSYl5D91
6KnAeTRg3M7xvA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:37 2025 by rpki-client