Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e88416-250d-42cb-88d9-476faa7cbe93/1/QCA4zxEo5UY3A2xhgsEfZULnZDs.mft
File: QCA4zxEo5UY3A2xhgsEfZULnZDs.mft (raw, json)
Hash identifier: KRJnhVWRBMCfq4R7iiFV+ws+OHR7Z43bDtZoGHKYAHk=
Subject key identifier: CD:CF:4F:D6:65:78:D7:8F:44:CA:7C:2F:59:F3:69:18:6B:CE:05:89
Authority key identifier: 40:20:38:CF:11:28:E5:46:37:03:6C:61:82:C1:1F:65:42:E7:64:3B
Certificate issuer: /CN=402038cf1128e54637036c6182c11f6542e7643b
Certificate serial: 01899B3C1DBCFE56F2803C932ED8C05CF909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCA4zxEo5UY3A2xhgsEfZULnZDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e88416-250d-42cb-88d9-476faa7cbe93/1/QCA4zxEo5UY3A2xhgsEfZULnZDs.mft
Manifest number: 021F
Signing time: Fri 28 Jul 2023 06:42:35 +0000
Manifest this update: Fri 28 Jul 2023 06:42:35 +0000
Manifest next update: Sat 29 Jul 2023 06:42:35 +0000
Files and hashes: 1: QCA4zxEo5UY3A2xhgsEfZULnZDs.crl (hash: K7R3Xxl6eIOuUaYyANtrE5R6SRAiXHLkWXx8CuPpXIE=)
2: aU4buxJHsBY-vtJd1jvSYnVemv4.roa (hash: yFrGHKXjN92eZG2oMti8Tbs8IaM6TFIqrs15xp9VUUY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9b:3c:1d:bc:fe:56:f2:80:3c:93:2e:d8:c0:5c:f9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=402038cf1128e54637036c6182c11f6542e7643b
Validity
Not Before: Jul 28 06:42:35 2023 GMT
Not After : Jul 29 06:42:35 2023 GMT
Subject: CN=cdcf4fd66578d78f44ca7c2f59f369186bce0589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3c:df:0c:4f:11:de:50:26:31:31:f2:c2:87:
48:46:87:fd:d1:dd:c3:fc:88:cd:fb:fe:05:6a:39:
5a:1e:87:9f:ed:a8:b0:bf:3c:1d:98:fd:15:5e:fa:
24:29:c2:f3:7a:f3:9b:7f:8a:fd:23:02:6b:0e:88:
d5:3f:49:f3:25:1a:a7:f3:ca:17:79:d0:a0:ab:76:
ed:57:92:db:ea:14:44:44:80:b9:ee:d9:7b:5f:c0:
77:26:8b:83:83:45:64:12:55:bf:bc:71:6c:69:01:
01:49:f3:12:28:8e:2b:73:03:3f:f5:e5:76:a3:0c:
85:bb:c3:30:0a:b2:31:04:41:5d:38:9f:fd:52:2a:
f3:2a:12:c3:42:79:bc:04:1c:55:23:97:7e:8d:27:
5d:76:b2:25:bb:39:15:ab:65:ac:b8:1b:2a:31:17:
f9:20:af:35:31:fc:ac:89:f4:94:63:58:59:40:6b:
18:46:3c:8b:a2:bf:80:0e:6b:f3:bd:9e:ed:b0:5e:
29:7c:87:df:48:3b:8d:16:ab:2f:e0:6b:99:8d:b7:
6b:3b:82:f9:8f:94:37:90:cb:5f:87:bc:4a:ef:03:
e9:ed:ec:4f:04:91:51:88:c5:14:e4:2b:fc:ce:bc:
12:37:82:14:cc:a9:e6:b0:c1:e3:63:b0:8e:d0:fa:
a9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CF:4F:D6:65:78:D7:8F:44:CA:7C:2F:59:F3:69:18:6B:CE:05:89
X509v3 Authority Key Identifier:
keyid:40:20:38:CF:11:28:E5:46:37:03:6C:61:82:C1:1F:65:42:E7:64:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCA4zxEo5UY3A2xhgsEfZULnZDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e88416-250d-42cb-88d9-476faa7cbe93/1/QCA4zxEo5UY3A2xhgsEfZULnZDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e88416-250d-42cb-88d9-476faa7cbe93/1/QCA4zxEo5UY3A2xhgsEfZULnZDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:67:ea:35:86:67:0e:2a:f0:01:f8:cc:55:4f:fb:09:bf:8c:
ee:78:7a:64:ec:8f:96:41:3c:a6:75:ff:c6:a9:e4:45:7a:18:
30:ee:72:36:f4:08:46:84:cd:a2:a0:c4:80:e4:b2:16:9e:e7:
7f:a7:64:e3:8e:8a:09:5f:62:3d:ee:25:13:47:01:38:33:c5:
98:ec:91:31:0c:0c:49:f9:8b:ef:c9:25:cc:b8:ab:d7:30:0c:
e9:9f:c4:e3:09:61:a0:14:d6:2b:a0:a0:51:e8:32:fc:58:2a:
00:93:af:60:1a:59:9a:14:17:2b:51:4b:ad:94:23:9d:e1:89:
94:98:0e:ce:03:c9:e5:cc:9c:d4:8e:bc:62:6f:ff:b6:c4:c1:
8c:b0:82:64:0b:c9:6d:fa:da:1c:63:80:bb:df:63:2f:76:46:
7e:69:da:4f:b8:0a:4e:58:cf:4e:69:0f:1e:f5:81:6b:35:0b:
62:f3:c9:89:1b:93:02:ff:cf:18:07:3d:52:9f:a5:47:52:45:
6e:25:b2:be:18:c5:d2:07:f2:fc:42:46:2f:ac:38:e3:7f:6b:
c9:4c:cb:76:55:a4:96:8d:35:f9:77:70:e5:bb:80:6b:7a:6d:
22:80:f5:86:39:18:23:70:92:ab:54:0d:48:5d:84:e9:79:1d:
ce:c5:57:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:37:17 2025 by rpki-client