Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/3b91a6-1f94-40b9-99eb-4204922cf203/1/QtOV_cF2Re9cNK2OUx0SJNMUZFM.mft
File: QtOV_cF2Re9cNK2OUx0SJNMUZFM.mft (raw, json)
Hash identifier: VrpVvy2ekWqRfg9wXnHG+EidMyfbYtXbKC31LAmqwuM=
Subject key identifier: ED:A5:2D:5D:EB:E1:08:06:7D:A3:6A:AA:2D:5B:C7:A7:7C:C1:80:83
Authority key identifier: 42:D3:95:FD:C1:76:45:EF:5C:34:AD:8E:53:1D:12:24:D3:14:64:53
Certificate issuer: /CN=42d395fdc17645ef5c34ad8e531d1224d3146453
Certificate serial: 018EC24EC0B49FFC5271FF230A37B58518C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtOV_cF2Re9cNK2OUx0SJNMUZFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/3b91a6-1f94-40b9-99eb-4204922cf203/1/QtOV_cF2Re9cNK2OUx0SJNMUZFM.mft
Manifest number: 0235
Signing time: Tue 09 Apr 2024 10:02:04 +0000
Manifest this update: Tue 09 Apr 2024 10:02:04 +0000
Manifest next update: Wed 10 Apr 2024 10:02:04 +0000
Files and hashes: 1: QtOV_cF2Re9cNK2OUx0SJNMUZFM.crl (hash: Y10aczCh3GXSD4DBGiTieVVJSvx7Gw4tI3HqkkiCgto=)
2: lFHrL_YNvigyYAgmHmx4kwF4fjA.roa (hash: TdWLngCvYzOj7/aalnreTfxAUVNBAlAPeR2kOZr8gMA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c2:4e:c0:b4:9f:fc:52:71:ff:23:0a:37:b5:85:18:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42d395fdc17645ef5c34ad8e531d1224d3146453
Validity
Not Before: Apr 9 10:02:04 2024 GMT
Not After : Apr 10 10:02:04 2024 GMT
Subject: CN=eda52d5debe108067da36aaa2d5bc7a77cc18083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e3:35:c5:2f:63:b5:c3:97:cd:6f:52:19:52:
bf:9c:82:3b:a5:dc:24:fa:c5:ba:5f:30:72:11:58:
8e:06:f1:5c:40:01:9b:0b:80:e4:cd:76:d1:be:e4:
17:8c:d1:e1:74:44:64:3d:c6:ed:03:20:ce:db:d3:
b3:7a:f1:f6:11:87:9d:ef:9d:43:42:1c:4f:82:15:
32:90:4a:70:b8:2e:91:a9:43:62:f7:0b:b7:d7:d3:
33:6c:fa:ec:2b:17:23:82:a9:f0:8c:8d:f2:16:95:
61:50:9f:2f:92:78:21:02:35:72:44:7c:75:16:f0:
61:f2:3f:a9:37:31:aa:ef:1a:90:85:39:35:24:e9:
4c:fa:00:52:c2:2a:6a:13:6c:53:18:44:41:c1:4a:
1c:cb:fc:ed:15:cf:71:1d:0e:39:17:e2:b3:a8:58:
05:86:34:e6:df:92:ae:a4:ae:a8:20:74:ef:3b:0a:
56:a2:0c:c0:18:e0:10:e5:cc:e6:6e:29:65:dd:17:
12:e0:f1:f2:73:80:dd:96:60:e5:7e:5c:7e:97:a0:
ef:66:a3:a5:66:cc:71:16:bb:d0:61:e6:0c:c1:22:
1f:2f:a7:aa:87:db:39:d1:c1:75:30:06:f6:87:7d:
8c:10:fa:c5:c1:28:36:4d:39:57:2c:0f:6f:23:01:
03:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A5:2D:5D:EB:E1:08:06:7D:A3:6A:AA:2D:5B:C7:A7:7C:C1:80:83
X509v3 Authority Key Identifier:
keyid:42:D3:95:FD:C1:76:45:EF:5C:34:AD:8E:53:1D:12:24:D3:14:64:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtOV_cF2Re9cNK2OUx0SJNMUZFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3b91a6-1f94-40b9-99eb-4204922cf203/1/QtOV_cF2Re9cNK2OUx0SJNMUZFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3b91a6-1f94-40b9-99eb-4204922cf203/1/QtOV_cF2Re9cNK2OUx0SJNMUZFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:53:6e:8e:33:56:4f:fc:d6:7a:1d:a2:01:7d:11:2f:ef:cf:
95:20:c5:90:1c:29:a6:8e:42:c8:2d:07:13:6e:82:e8:c2:5d:
6f:27:a4:8e:30:1b:f2:78:14:6e:02:2e:4f:80:3d:35:40:7f:
d3:60:c5:fe:42:6a:aa:30:a5:c2:12:a0:08:f3:b4:ed:26:5e:
72:26:34:f1:37:95:0f:26:83:83:cd:e9:e5:40:f7:ab:7e:99:
d1:0b:49:13:18:96:15:24:3c:3d:7c:1a:87:58:22:3c:4d:f4:
cb:71:87:e8:66:46:11:72:46:ca:fb:19:49:f3:c5:a5:1f:47:
0d:10:31:b1:50:46:31:59:10:8d:92:17:18:b3:bc:4f:f3:06:
bf:23:75:17:a8:49:dd:3b:fe:67:ca:b2:ca:f6:d7:d4:7e:14:
74:c4:b8:9d:db:09:a6:63:ab:c2:2b:c1:1c:72:80:86:02:1f:
ef:28:fa:80:9b:75:9f:84:0c:ea:42:df:2a:be:e7:8e:75:84:
4a:c2:ac:86:25:9d:27:80:fd:2b:f1:23:a5:91:18:01:f9:a6:
d5:83:f2:c9:0f:4f:53:74:92:9a:ba:1e:33:d9:12:24:e1:19:
1a:f1:0c:f3:34:b9:a0:5e:82:de:d6:1f:9c:f0:1c:01:50:52:
4a:9c:48:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 9 16:59:49 2024 by rpki-client on console.sobornost.net