Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.mft
File: qh8UyFB0WnwxLqLrC-AwUuSWcnU.mft (raw, json)
Hash identifier: D1qfIVd/GDQXGFlDA10kcMiodq3w5wnryWASEYr66fA=
Subject key identifier: 84:45:3C:49:7C:CF:A9:22:0B:EB:36:0A:EB:E6:56:6F:60:87:21:6A
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018AAD1D41D850B1DFF5EB381D2D94F32923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.mft
Manifest number: 03C5
Signing time: Tue 19 Sep 2023 11:04:50 +0000
Manifest this update: Tue 19 Sep 2023 11:04:50 +0000
Manifest next update: Wed 20 Sep 2023 11:04:50 +0000
Files and hashes: 1: J5lIxzrdLMpQ8tfF46dBDChC0n4.roa (hash: 8WC5hJvG5MnwEH0920cl168QYLqpOWJC5wBDGX33EmM=)
2: qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl (hash: /usWsX/QOp2OD/mFbp5jvA/C6fE6hxZZB8k/Gv57TYg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ad:1d:41:d8:50:b1:df:f5:eb:38:1d:2d:94:f3:29:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 19 11:04:50 2023 GMT
Not After : Sep 20 11:04:50 2023 GMT
Subject: CN=84453c497ccfa9220beb360aebe6566f6087216a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8f:b1:30:81:7d:99:91:9f:ff:4d:4e:f2:8c:
04:88:d1:f6:79:5b:5b:b6:7d:ad:61:c8:c7:65:90:
27:1a:07:cd:f5:7f:c8:85:ec:86:a0:ce:99:c9:51:
e3:a2:23:7c:43:21:77:37:fd:03:0c:0f:fa:68:67:
97:82:88:58:76:3f:c7:8b:45:0d:54:32:8b:f5:e8:
44:45:d8:ea:e7:91:2e:77:e4:6b:d4:7d:35:df:81:
ac:1d:3b:5e:3a:ee:e9:dc:22:42:c8:4d:ce:cf:95:
9d:5a:cc:10:56:af:05:f5:a6:bc:fa:f4:c6:91:fd:
c6:d4:83:b3:7c:f9:40:a4:cb:b1:3d:af:0e:d6:6c:
99:24:4d:f6:80:c4:26:61:a0:50:a7:0b:07:d4:1d:
c0:14:3f:e0:d7:55:61:52:5c:b1:8f:e1:39:70:06:
be:78:0b:eb:f1:a8:08:a4:ee:be:cb:7d:b7:45:d0:
e0:79:ec:22:bf:17:10:cf:1b:23:ab:5b:5a:c2:32:
95:58:8f:a4:43:8b:af:79:6b:0b:73:0a:6f:87:17:
64:43:8c:46:65:2f:f8:4f:4f:88:98:61:fe:64:cd:
73:86:c1:26:29:78:72:7c:7e:d9:01:5b:f2:f3:2b:
d5:c8:0f:12:3b:cf:89:4d:b2:70:6b:ae:d0:b7:cb:
b9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:45:3C:49:7C:CF:A9:22:0B:EB:36:0A:EB:E6:56:6F:60:87:21:6A
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ad:c5:0b:57:ed:09:80:2f:19:f3:b7:e7:89:3a:98:7e:47:
5f:b8:61:62:1e:84:ce:73:0c:d5:12:01:29:09:f1:81:31:f0:
f7:52:95:fc:93:58:d4:77:83:68:54:02:e5:2c:30:30:79:61:
f7:d5:49:e6:57:40:08:e7:68:bd:a3:e9:27:4a:96:76:0e:1e:
f7:f7:c7:04:0e:07:37:3d:31:d5:7d:39:d0:1c:9a:28:9f:76:
61:84:90:04:8a:34:d4:9b:3b:3d:76:0f:c5:f6:93:5c:0d:a2:
02:6e:83:da:67:93:30:25:69:2b:21:0e:c0:04:ec:5d:cf:fa:
c1:0b:6a:68:c6:44:14:eb:5a:bd:5b:2f:93:6d:02:97:61:f1:
81:10:49:41:38:7e:ab:ed:31:e6:09:8b:ac:35:ed:8f:bf:9a:
84:06:28:9e:ac:61:45:8e:c4:b6:b9:96:63:39:ea:ea:71:b2:
0b:26:d6:d4:ed:63:ab:7d:d0:37:6b:e9:e5:c0:3f:57:dc:53:
fc:c3:23:f6:7e:a2:08:65:f8:46:5e:fc:87:28:5a:0b:93:c0:
8f:9f:a6:3d:31:8d:13:f2:4f:96:81:ad:37:84:72:e8:7c:66:
b2:2d:f1:76:da:eb:31:db:bd:0f:9a:b7:fe:1d:e2:a0:ec:a9:
4d:09:18:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:14 2025 by rpki-client