Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/f44760-7ed6-4813-abcf-0fdf15ae569f/1/QDS297MUdKxB0DO-lJXRwGCx_XE.mft
File: QDS297MUdKxB0DO-lJXRwGCx_XE.mft (raw, json)
Hash identifier: JJJokoyR0va/E8c0QCVXESUeQ5q4v7wfre9RduoAVr0=
Subject key identifier: 8A:F7:16:BF:B5:23:A4:14:51:1E:78:33:ED:C0:29:99:41:DB:33:F9
Authority key identifier: 40:34:B6:F7:B3:14:74:AC:41:D0:33:BE:94:95:D1:C0:60:B1:FD:71
Certificate issuer: /CN=4034b6f7b31474ac41d033be9495d1c060b1fd71
Certificate serial: 32EF132D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDS297MUdKxB0DO-lJXRwGCx_XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/f44760-7ed6-4813-abcf-0fdf15ae569f/1/QDS297MUdKxB0DO-lJXRwGCx_XE.mft
Manifest number: 08E1
Signing time: Thu 07 Apr 2022 06:12:22 +0000
Manifest this update: Thu 07 Apr 2022 06:12:22 +0000
Manifest next update: Fri 08 Apr 2022 06:12:22 +0000
Files and hashes: 1: EjIV8wNkAqsn5vtpQreS8Y9rgSI.roa (hash: qkpp2L4R00I4gCCUIjoWtID+B/9YS6Dxj9NP+2hO4io=)
2: QDS297MUdKxB0DO-lJXRwGCx_XE.crl (hash: 0CvWBonLJNb8WJ/cdxLH+mnlJ0kYeuLUApH02nLHQRU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 854528813 (0x32ef132d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4034b6f7b31474ac41d033be9495d1c060b1fd71
Validity
Not Before: Apr 7 06:12:22 2022 GMT
Not After : Apr 8 06:12:22 2022 GMT
Subject: CN=8af716bfb523a414511e7833edc0299941db33f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b9:bd:d5:91:43:3e:96:15:88:b5:11:a6:ba:
3f:f5:50:bb:dc:37:3a:f5:26:7c:45:b4:7d:52:69:
58:71:44:3f:56:6d:d7:b8:ca:2e:b6:de:d1:26:89:
ed:de:cd:e2:09:63:5a:dd:5a:29:57:2d:91:42:d8:
13:51:94:36:78:b4:3d:90:34:a9:1b:76:12:9f:f7:
ae:85:33:5d:5e:b8:20:47:fd:39:49:d7:ed:de:91:
3f:ab:0d:b5:2d:a5:ce:e6:c5:1f:0a:76:75:4c:e4:
e1:40:38:41:73:de:cd:21:1e:78:fd:41:48:92:cf:
3b:7d:8f:d3:92:7e:f7:6e:82:3c:0b:a9:49:46:f1:
2a:0e:25:b4:c2:ad:83:16:91:f7:30:ad:a7:3c:d8:
0a:27:4e:fd:92:c3:40:df:ec:1c:c8:d8:bc:32:1a:
51:fc:4a:fe:26:c4:c6:d7:2c:7f:5b:b4:20:25:79:
1d:c7:c2:ad:9c:3c:ec:cc:03:24:e2:94:1a:db:5c:
51:d7:3a:81:a5:8e:b8:6b:08:f2:7d:5f:c9:43:7e:
5f:79:36:01:93:be:42:ca:92:0d:ad:92:cb:61:52:
df:c6:82:3c:d1:2f:cc:cc:d5:5e:21:0c:4f:74:73:
cd:87:11:71:e5:99:98:bb:49:b2:36:83:e3:55:4f:
59:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F7:16:BF:B5:23:A4:14:51:1E:78:33:ED:C0:29:99:41:DB:33:F9
X509v3 Authority Key Identifier:
keyid:40:34:B6:F7:B3:14:74:AC:41:D0:33:BE:94:95:D1:C0:60:B1:FD:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDS297MUdKxB0DO-lJXRwGCx_XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f44760-7ed6-4813-abcf-0fdf15ae569f/1/QDS297MUdKxB0DO-lJXRwGCx_XE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/f44760-7ed6-4813-abcf-0fdf15ae569f/1/QDS297MUdKxB0DO-lJXRwGCx_XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:fd:f1:78:08:1b:5f:35:6c:42:b5:a2:44:89:f9:2d:4f:e3:
21:08:29:f0:66:08:19:88:ce:f4:f4:11:a8:29:fc:79:7f:35:
eb:b7:84:18:5f:26:73:17:f1:cf:6e:84:c1:9c:bf:c5:1c:a8:
4a:46:36:6e:e9:2e:95:a4:73:bc:3e:81:af:98:90:92:48:69:
6c:fa:e6:27:77:55:95:30:9d:aa:ac:a1:b3:07:2a:d4:11:1b:
c1:88:26:f9:e6:f5:4c:fb:a4:18:25:0c:85:2c:c4:96:4a:8b:
3f:f3:6a:5b:ac:6f:4a:54:8f:b8:04:20:d8:0f:74:3a:4f:0e:
48:db:2a:97:dd:4d:7a:cb:49:cc:39:2e:12:fb:96:a6:78:65:
35:61:27:8b:cb:b5:de:42:a3:61:89:7e:ab:91:9c:6a:43:23:
e4:6b:48:c3:a2:21:22:9e:77:8f:01:53:4d:8e:ad:63:ed:6f:
f0:e1:46:dc:31:fd:b4:8f:a9:72:43:53:27:4a:8c:99:76:64:
21:d0:90:47:52:78:55:46:3f:fd:cb:41:eb:84:6d:cd:e9:41:
85:73:6c:91:64:20:f6:38:bf:be:19:02:20:a2:3c:5c:b5:00:
76:7d:a2:cb:63:14:e3:0b:10:c3:13:76:fa:81:91:61:a9:62:
cf:fb:27:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 21:20:21 2025 by rpki-client