Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/0f4168-7deb-4544-ac81-485d832a5f82/1/QQHhBqnKexSmerQCd4NqGML3EL4.mft
File: QQHhBqnKexSmerQCd4NqGML3EL4.mft (raw, json)
Hash identifier: wL5MrOY0rHT2QkykvHCor/XR3zPh0mqOsY00hNY5nOM=
Subject key identifier: 90:33:82:E9:42:FF:39:6C:56:74:D3:A6:A2:AD:ED:F2:DC:D5:79:D2
Authority key identifier: 41:01:E1:06:A9:CA:7B:14:A6:7A:B4:02:77:83:6A:18:C2:F7:10:BE
Certificate issuer: /CN=4101e106a9ca7b14a67ab40277836a18c2f710be
Certificate serial: 0192AF980D7B9A50B114A1DB159728E9D88A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQHhBqnKexSmerQCd4NqGML3EL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/0f4168-7deb-4544-ac81-485d832a5f82/1/QQHhBqnKexSmerQCd4NqGML3EL4.mft
Manifest number: 02FB
Signing time: Mon 21 Oct 2024 15:00:30 +0000
Manifest this update: Mon 21 Oct 2024 15:00:30 +0000
Manifest next update: Tue 22 Oct 2024 15:00:30 +0000
Files and hashes: 1: QQHhBqnKexSmerQCd4NqGML3EL4.crl (hash: 0IAZfABs0Y9vKScJNzqbX4rRButUraAH8r0mxat3aO0=)
2: ZTP89xnF66Cq5r9iUeYn_mSlGBk.roa (hash: +5eZ4UhYEiBd6PfRN/atXZVSuW7mLTcvKOA2/rTg4ik=)
3: lu4CXeH14G3mXj5GUScERmL7f5w.roa (hash: Fj3VqCkbbeRzHiRO9XV7VObWNnGtqHjEeVw/Accb4zw=)
4: omh1U3zLbKyMkt_dCxaF0vo_19c.roa (hash: lpidoufXuaztuUDY1BZIY91HDN9n1if5n329gypK40g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:af:98:0d:7b:9a:50:b1:14:a1:db:15:97:28:e9:d8:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4101e106a9ca7b14a67ab40277836a18c2f710be
Validity
Not Before: Oct 21 15:00:30 2024 GMT
Not After : Oct 22 15:00:30 2024 GMT
Subject: CN=903382e942ff396c5674d3a6a2adedf2dcd579d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a1:75:97:1f:e3:b2:cb:3d:d4:cf:72:7b:4f:
8f:7d:23:a3:6d:65:ba:0a:e4:20:27:95:2b:fa:66:
5f:fe:1b:ce:9d:ee:b9:a0:1e:c8:85:3a:6c:98:13:
97:3c:11:59:4d:67:f4:3f:e7:e0:1e:18:10:45:47:
76:9d:f2:f3:9c:91:47:e8:17:52:19:cd:d2:39:d9:
95:e3:45:61:3e:08:53:44:d9:d6:59:37:39:ed:e5:
97:67:64:4f:06:a3:ab:49:df:8b:b0:95:d3:12:64:
9e:e1:39:44:dd:71:20:28:90:ec:04:87:76:63:0b:
46:60:2c:bf:c6:2d:0e:23:f8:e0:98:89:b1:c4:93:
56:84:b8:7f:d7:51:72:e5:34:18:b1:5b:36:02:92:
6a:3e:36:17:68:4d:73:db:9b:ed:d9:ae:29:05:c5:
16:a4:11:ae:1b:41:35:90:5e:3f:af:7c:70:50:8a:
27:ca:05:92:33:08:67:dc:03:e4:9d:1c:6a:49:63:
02:b6:de:0f:ca:52:bd:aa:d9:84:d5:6d:29:97:65:
24:61:90:0c:da:ff:12:36:2f:75:bb:50:4e:45:69:
96:b3:8a:26:3b:f3:cf:c6:4c:1e:8e:0f:1c:9a:b3:
50:39:2a:d1:8f:85:d2:61:fb:67:4b:73:d1:41:d0:
fd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:33:82:E9:42:FF:39:6C:56:74:D3:A6:A2:AD:ED:F2:DC:D5:79:D2
X509v3 Authority Key Identifier:
keyid:41:01:E1:06:A9:CA:7B:14:A6:7A:B4:02:77:83:6A:18:C2:F7:10:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQHhBqnKexSmerQCd4NqGML3EL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0f4168-7deb-4544-ac81-485d832a5f82/1/QQHhBqnKexSmerQCd4NqGML3EL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0f4168-7deb-4544-ac81-485d832a5f82/1/QQHhBqnKexSmerQCd4NqGML3EL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:50:e2:1d:35:99:fe:fe:ad:f8:5b:c2:56:41:b0:82:cb:5b:
54:30:61:51:4c:b0:db:2d:bd:57:65:d3:9a:67:a2:02:98:5b:
fc:43:9d:40:af:04:80:c1:74:5d:db:69:36:51:96:1e:b0:83:
5b:53:16:7b:31:3e:b7:67:33:5d:1f:ce:c7:8e:9f:85:30:52:
88:ed:9e:d2:09:28:4b:ef:a9:59:f5:22:20:f7:8b:db:99:af:
6d:8d:bb:71:3b:ee:29:66:a9:a1:04:d0:28:dd:a8:eb:1e:0b:
fc:0a:19:b8:f7:e7:c0:70:2f:33:85:0c:55:7f:7c:48:de:83:
ba:70:82:cd:5d:06:33:c1:27:2d:0b:cd:7b:b4:85:22:c8:02:
90:2f:2a:1e:01:1a:d2:8a:74:16:af:5a:e8:72:f6:00:53:4e:
3d:18:5c:8d:5d:fd:12:52:0b:3d:a9:94:0f:23:91:40:5b:81:
ac:6c:80:86:6e:41:76:ac:c0:99:3a:53:e8:c4:aa:c3:33:52:
33:7b:56:61:5e:ed:5a:57:5f:f9:09:a9:3c:4f:77:e4:44:ea:
01:e4:ee:28:68:fd:09:5e:4b:5a:68:f5:f2:06:05:5f:2b:43:
5d:86:83:42:d1:14:d6:a5:40:ff:bb:64:d3:ee:e7:9b:2e:af:
da:38:a8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:19:14 2024 by rpki-client on console.sobornost.net