Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ecfe11-e921-40f9-bf93-1d5619c5bdb1/1/q3goucqidFn-adNK5WhfenqGPps.mft
File: q3goucqidFn-adNK5WhfenqGPps.mft (raw, json)
Hash identifier: gNp8Nbl6qP59TGZ9xdlJ8kAJEUHHEYWXQ7eo5VpdkZo=
Subject key identifier: A2:74:2E:7C:A9:D2:2C:E3:A2:77:9E:FF:93:49:35:90:9A:8A:A3:07
Authority key identifier: AB:78:28:B9:CA:A2:74:59:FE:69:D3:4A:E5:68:5F:7A:7A:86:3E:9B
Certificate issuer: /CN=ab7828b9caa27459fe69d34ae5685f7a7a863e9b
Certificate serial: 0193F96619DDDB7BCBF7F74A1B75F0FA110B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3goucqidFn-adNK5WhfenqGPps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/ecfe11-e921-40f9-bf93-1d5619c5bdb1/1/q3goucqidFn-adNK5WhfenqGPps.mft
Manifest number: 0E45
Signing time: Tue 24 Dec 2024 16:00:38 +0000
Manifest this update: Tue 24 Dec 2024 16:00:38 +0000
Manifest next update: Wed 25 Dec 2024 16:00:38 +0000
Files and hashes: 1: q3goucqidFn-adNK5WhfenqGPps.crl (hash: X2WYnqQhsv9O8z3afuP9kiLK8KA/hKVQhgnCKqXPZ40=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f9:66:19:dd:db:7b:cb:f7:f7:4a:1b:75:f0:fa:11:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7828b9caa27459fe69d34ae5685f7a7a863e9b
Validity
Not Before: Dec 24 16:00:38 2024 GMT
Not After : Dec 25 16:00:38 2024 GMT
Subject: CN=a2742e7ca9d22ce3a2779eff934935909a8aa307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:68:5b:69:28:fa:7a:7c:3b:25:fa:7f:37:fa:
d3:26:e2:57:18:e9:de:d6:33:b1:2c:97:07:b7:f5:
af:ea:d1:bf:82:85:6b:b8:06:27:18:7a:6b:18:c4:
22:71:62:6d:9e:7d:74:61:7c:41:e5:d3:3c:df:9e:
b4:18:7d:62:ed:1b:ce:f5:a1:84:53:bb:e1:91:79:
1b:c6:17:cc:bc:3e:7c:0e:17:8a:a3:67:1d:7d:5c:
52:83:65:46:a9:44:c1:c5:39:0e:a8:59:cd:8b:2b:
1d:33:ae:e9:54:f8:e9:7c:79:e5:b6:f3:fe:f4:41:
b0:c7:06:6d:fd:ab:2e:e5:f0:fa:16:fb:95:e7:22:
10:eb:2c:2e:99:d1:01:75:c0:95:53:7c:2c:40:f5:
a7:91:eb:02:2c:05:fa:bf:5f:64:c4:88:31:de:62:
74:af:50:37:36:77:e0:4c:65:ed:ef:6a:fc:c7:0c:
5e:43:8b:04:b4:df:4d:84:c7:8d:a1:a2:36:17:c6:
d5:9e:d8:65:8d:44:60:0c:4d:8c:96:18:a9:e3:14:
28:50:39:1a:87:e4:e1:c2:d4:d5:49:28:a4:5a:f2:
ae:6a:de:d0:d4:9e:ab:b9:96:5b:5a:d2:b1:d6:bd:
d7:39:f2:26:8c:40:b9:7b:4d:85:78:21:cf:57:84:
18:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:74:2E:7C:A9:D2:2C:E3:A2:77:9E:FF:93:49:35:90:9A:8A:A3:07
X509v3 Authority Key Identifier:
keyid:AB:78:28:B9:CA:A2:74:59:FE:69:D3:4A:E5:68:5F:7A:7A:86:3E:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3goucqidFn-adNK5WhfenqGPps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ecfe11-e921-40f9-bf93-1d5619c5bdb1/1/q3goucqidFn-adNK5WhfenqGPps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ecfe11-e921-40f9-bf93-1d5619c5bdb1/1/q3goucqidFn-adNK5WhfenqGPps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:82:7e:b7:14:e9:9c:b7:08:0b:79:42:e8:d9:b8:1e:22:b2:
6b:f5:cd:d6:ce:9c:ec:91:db:69:19:5d:5d:50:35:c2:8b:62:
af:c6:21:36:a0:4d:a4:24:d6:0a:19:bc:0e:85:c2:c1:22:15:
b0:d3:60:e8:2b:1a:05:29:f0:dc:02:aa:d9:c9:ef:8f:76:44:
c0:ae:f6:ce:43:bf:cc:70:a1:2e:ad:7e:5b:4e:b5:37:c1:96:
88:94:6b:21:7e:59:57:31:9e:6a:6c:a5:72:05:82:1d:60:c7:
fa:5b:11:c3:ce:51:94:41:2d:1d:6d:b2:95:76:b6:51:0f:72:
22:27:39:13:4d:8f:27:a4:40:fa:3f:12:1a:86:56:40:b9:47:
62:31:cf:22:85:c3:b2:91:9f:8b:e2:da:6d:a7:c7:c8:27:84:
2e:78:49:46:92:17:6c:8e:6b:a0:e0:e6:fd:a9:a6:42:45:72:
5b:c1:53:85:e0:48:d7:57:b8:05:f3:86:b0:d1:bb:b8:eb:4b:
9b:da:60:1c:b5:d2:f4:f0:80:11:7b:02:fe:8d:13:a2:80:65:
73:91:52:30:9b:7e:02:67:af:d1:8a:52:2d:2c:ac:a6:b2:9d:
0b:cc:e9:8d:fd:47:45:cf:c3:02:2f:b1:a2:54:5d:b6:93:2b:
d3:69:b8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:25 2024 by rpki-client on console.sobornost.net