Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ca687e-5ff3-41ee-8cfc-7dac5fa0f07d/1/QJnkrGPEwSohYkgZy_eGOLhtQvM.mft
File: QJnkrGPEwSohYkgZy_eGOLhtQvM.mft (raw, json)
Hash identifier: /nxahQurj45vUZmgaXSf3aEVPdN9WC7lFY/MzZl7/aA=
Subject key identifier: 6D:8A:41:5F:EC:11:E1:1C:CF:12:53:45:65:CC:99:94:B4:90:A9:0A
Authority key identifier: 40:99:E4:AC:63:C4:C1:2A:21:62:48:19:CB:F7:86:38:B8:6D:42:F3
Certificate issuer: /CN=4099e4ac63c4c12a21624819cbf78638b86d42f3
Certificate serial: 018BFF7CC5E8BC0C87CB49C586CDEEA45E21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJnkrGPEwSohYkgZy_eGOLhtQvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ca687e-5ff3-41ee-8cfc-7dac5fa0f07d/1/QJnkrGPEwSohYkgZy_eGOLhtQvM.mft
Manifest number: 06A4
Signing time: Fri 24 Nov 2023 04:00:48 +0000
Manifest this update: Fri 24 Nov 2023 04:00:48 +0000
Manifest next update: Sat 25 Nov 2023 04:00:48 +0000
Files and hashes: 1: LbI5MlYE-MxEsNqdlhlwLWhNQxM.roa (hash: /sgZPQBC2hXvau2tiTDy/SGHI8QEtiXC61n/F6JcrRs=)
2: QJnkrGPEwSohYkgZy_eGOLhtQvM.crl (hash: mBNbKZi8xYhetu9p7qOxMOQqHnl6ijdDoLFlUh7SOdE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ff:7c:c5:e8:bc:0c:87:cb:49:c5:86:cd:ee:a4:5e:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4099e4ac63c4c12a21624819cbf78638b86d42f3
Validity
Not Before: Nov 24 04:00:48 2023 GMT
Not After : Nov 25 04:00:48 2023 GMT
Subject: CN=6d8a415fec11e11ccf12534565cc9994b490a90a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5a:ee:ea:b7:d6:42:e1:54:b6:c5:c3:ca:6e:
e5:96:af:48:20:40:8e:3b:af:46:29:92:39:7b:dd:
85:9a:6c:55:d8:f8:2c:58:bf:80:20:d1:a7:9a:75:
65:87:20:ba:24:63:2d:ab:58:da:83:46:da:e1:0f:
78:77:be:a4:d2:d4:b2:ca:19:66:1f:82:a0:8a:7f:
6e:69:44:09:5e:b7:73:d3:18:38:f0:89:22:b0:57:
9e:75:2d:68:f7:fa:14:be:d5:7f:d3:f4:7a:6e:d2:
0f:76:62:f0:6c:07:cb:b7:5d:ec:15:38:ef:af:62:
90:06:f9:48:81:e7:58:22:fb:d8:52:ab:62:2e:58:
67:ca:75:5a:67:1e:7f:b4:fe:c4:e8:48:37:07:c6:
99:ca:3e:93:aa:65:92:a7:76:00:6b:d9:63:c0:fa:
67:12:b4:3a:92:96:6a:75:ad:a5:7c:93:0d:17:9a:
5f:3a:98:ea:d4:bc:d2:44:f2:c3:b5:de:2f:89:98:
fc:4f:13:be:82:6d:1c:7a:60:e3:b2:12:59:e8:73:
71:8f:f7:f6:f6:23:fe:41:6f:3a:75:38:22:6a:4d:
27:28:d1:54:34:ee:37:6d:a6:f4:5b:db:ed:62:63:
b1:db:25:a7:89:19:ec:37:ae:48:1c:3e:66:1e:d8:
c8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8A:41:5F:EC:11:E1:1C:CF:12:53:45:65:CC:99:94:B4:90:A9:0A
X509v3 Authority Key Identifier:
keyid:40:99:E4:AC:63:C4:C1:2A:21:62:48:19:CB:F7:86:38:B8:6D:42:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJnkrGPEwSohYkgZy_eGOLhtQvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ca687e-5ff3-41ee-8cfc-7dac5fa0f07d/1/QJnkrGPEwSohYkgZy_eGOLhtQvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ca687e-5ff3-41ee-8cfc-7dac5fa0f07d/1/QJnkrGPEwSohYkgZy_eGOLhtQvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e5:58:24:16:ea:9c:2e:99:94:b2:72:bb:b3:bc:f5:2e:e7:
2f:d4:4b:53:48:6b:85:9a:37:85:cb:9f:9d:eb:ec:46:24:56:
0f:15:5d:f3:c0:ee:08:f1:34:8e:a8:97:ce:59:2f:43:51:8d:
78:d8:6c:da:95:97:fd:b7:95:76:68:f4:e3:5d:de:d6:75:9a:
d0:52:ef:92:00:44:ed:f3:52:e6:9f:b6:91:65:99:d7:fe:0e:
27:87:d1:85:d3:b2:2b:8a:9e:02:1d:1f:17:c1:0e:2b:77:a3:
c9:4e:73:43:ce:19:68:90:45:37:ad:07:79:4d:57:4b:07:81:
fa:65:eb:56:a6:88:7f:44:8e:7a:29:2a:c0:cd:b5:2e:0b:6f:
8d:02:9d:7e:a5:21:46:da:cf:dc:c7:68:8d:ec:6f:a3:09:87:
83:32:71:d3:f1:11:59:7e:8c:93:e4:76:f9:9d:18:e7:1d:6b:
4e:86:40:65:65:f2:11:b1:d1:85:67:e6:fc:f3:87:fa:e5:01:
fa:0c:3f:d4:e3:b8:7d:c0:e3:ca:21:bb:69:b3:42:44:74:35:
3b:95:af:9d:5b:9f:c2:6d:cf:87:9b:cf:50:d9:9e:3f:f7:03:
b4:c0:bc:16:64:17:a3:e7:80:ba:80:8d:3c:82:72:f1:cb:06:
cc:46:7f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:27:50 2025 by rpki-client