Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/bd6a19-2595-4df9-84b5-ebadbc34a124/1/QGZc6AggpHzjuD9IAolVSlikXfQ.mft
File: QGZc6AggpHzjuD9IAolVSlikXfQ.mft (raw, json)
Hash identifier: uvVTAKz7UCx7FUFblIsmr7kyhFsTjn8TnF+Gl5cNVV8=
Subject key identifier: BF:E2:C0:82:B4:C7:F4:30:5C:46:D3:F6:6A:90:5E:7D:DC:99:4D:2D
Authority key identifier: 40:66:5C:E8:08:20:A4:7C:E3:B8:3F:48:02:89:55:4A:58:A4:5D:F4
Certificate issuer: /CN=40665ce80820a47ce3b83f480289554a58a45df4
Certificate serial: 01934783675784896EEA23E1C10EF24899A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGZc6AggpHzjuD9IAolVSlikXfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/bd6a19-2595-4df9-84b5-ebadbc34a124/1/QGZc6AggpHzjuD9IAolVSlikXfQ.mft
Manifest number: 0813
Signing time: Wed 20 Nov 2024 03:00:14 +0000
Manifest this update: Wed 20 Nov 2024 03:00:14 +0000
Manifest next update: Thu 21 Nov 2024 03:00:14 +0000
Files and hashes: 1: 4fy3vWdarcLkTpJwYhN0-mujCFw.roa (hash: 7wuNe9z7h5OV3utTfrlA+yDD7ovgc0KJaIDtfaZjsCo=)
2: QGZc6AggpHzjuD9IAolVSlikXfQ.crl (hash: kTHpYEyHKjZTnXc14gDKZ18c+JwINZXb/VC7Y59G4pU=)
3: w3nqlWhDUzrIGoUXM_6aB7XZoPg.roa (hash: nR2cGzYvREGUXYAEW54OaPIpQqe6J5b5qeOulW4ga5k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:47:83:67:57:84:89:6e:ea:23:e1:c1:0e:f2:48:99:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40665ce80820a47ce3b83f480289554a58a45df4
Validity
Not Before: Nov 20 03:00:14 2024 GMT
Not After : Nov 21 03:00:14 2024 GMT
Subject: CN=bfe2c082b4c7f4305c46d3f66a905e7ddc994d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:66:f6:56:c2:9b:26:8f:dc:6d:27:c7:26:b3:
95:07:e8:9f:91:6c:a1:03:9d:c9:14:34:3e:7a:68:
4e:cd:72:6c:0f:55:e9:d4:3d:ef:f6:ca:50:3c:ac:
f3:e1:c2:74:06:3d:ca:f9:09:3b:96:e3:ea:2c:09:
92:c2:f2:97:d0:9b:4a:fe:87:42:de:cf:24:de:56:
a6:ec:5a:20:72:68:6f:89:3b:63:ec:4f:ba:c4:f9:
40:66:dc:74:7d:d3:0c:d7:84:f1:2b:2d:32:fc:9e:
92:2d:22:5c:f4:84:85:9d:2f:d2:3d:08:ae:c8:69:
0d:59:9d:b4:03:9c:0b:0c:d0:bd:fb:30:23:2d:e2:
80:69:82:22:3f:36:86:2e:68:07:3a:d4:be:0d:85:
78:14:31:86:22:c3:07:36:2f:17:d2:98:ae:5c:4c:
19:32:c6:d5:e0:54:28:05:1a:45:f4:23:24:6c:ad:
dc:86:b5:28:e0:cb:9b:0c:7d:83:70:b2:77:1f:b8:
11:ad:23:d7:47:3f:b0:e2:aa:ff:6f:0b:4d:8f:32:
85:1e:aa:c6:80:19:08:06:e8:62:6b:18:6d:89:55:
57:7e:0f:c7:c6:94:70:0f:0e:85:0d:77:39:4e:7e:
68:c4:22:e7:d5:68:65:35:0a:35:b9:0e:10:eb:de:
5b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E2:C0:82:B4:C7:F4:30:5C:46:D3:F6:6A:90:5E:7D:DC:99:4D:2D
X509v3 Authority Key Identifier:
keyid:40:66:5C:E8:08:20:A4:7C:E3:B8:3F:48:02:89:55:4A:58:A4:5D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGZc6AggpHzjuD9IAolVSlikXfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/bd6a19-2595-4df9-84b5-ebadbc34a124/1/QGZc6AggpHzjuD9IAolVSlikXfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/bd6a19-2595-4df9-84b5-ebadbc34a124/1/QGZc6AggpHzjuD9IAolVSlikXfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d7:8a:46:be:5b:ab:91:54:b6:ed:5b:1a:dc:e6:59:85:6b:
39:dd:50:23:62:cc:1b:bd:18:9e:ab:f3:18:2a:e8:4e:06:83:
cc:28:c9:a8:4b:7b:9e:60:cb:23:fe:1d:51:4f:b6:97:8c:fc:
57:5b:42:7d:60:b4:8f:87:6d:9b:8c:13:6d:f8:09:17:99:46:
37:09:40:09:f1:b4:07:9b:ca:d1:eb:18:02:3a:27:28:ad:0b:
25:99:4c:fc:9d:95:75:45:f3:d0:c7:6c:de:c0:91:2b:00:c2:
13:3d:3b:e8:09:c6:95:fd:9b:75:38:68:47:c0:e8:15:b6:b3:
cb:b6:c4:d3:8d:d0:3e:7b:98:84:8e:99:5c:28:21:f7:1c:07:
e7:2b:f8:2c:5c:19:a9:e0:e5:f0:23:79:81:11:0c:5f:04:5a:
54:a7:56:9a:d2:56:48:50:24:06:d4:f0:18:28:db:e8:e9:c8:
99:4b:b5:73:d0:76:14:c8:5c:c5:d9:4e:f6:9c:9b:c3:5b:66:
a0:72:5f:36:0a:15:2e:53:19:c0:df:1b:40:a9:84:64:85:27:
29:a0:54:cc:2d:d3:9d:30:34:bd:20:60:30:97:9a:7e:dc:b8:
c7:f4:43:c3:37:1e:28:c5:e5:07:ce:61:fe:9c:3c:27:75:7d:
f6:45:3d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:13:35 2024 by rpki-client on console.sobornost.net