Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.mft
File: qh8UyFB0WnwxLqLrC-AwUuSWcnU.mft (raw, json)
Hash identifier: OpEg+ZdMNov9bbG/KP0hKlnw/C7iqojuKV+Jc+5J0fA=
Subject key identifier: CA:34:73:88:05:23:54:E1:6E:9C:77:01:EA:CE:B8:28:20:9A:FD:48
Authority key identifier: AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
Certificate issuer: /CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Certificate serial: 018AAD249487EAA3B8C48F571C1A1FCE387C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.mft
Manifest number: 03C6
Signing time: Tue 19 Sep 2023 11:12:50 +0000
Manifest this update: Tue 19 Sep 2023 11:12:50 +0000
Manifest next update: Wed 20 Sep 2023 11:12:50 +0000
Files and hashes: 1: iGnV9DkDa60MLHCnWsZ35TcTVQA.roa (hash: neRyD+ypCf1mcGnCsUsHwVCjUvFYbEkUlWnzZMZ9+Fg=)
2: qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl (hash: TzYX3Ck2RuDFXPleOWaVEn8k/tkAGXzDobMTHq1wHZc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ad:24:94:87:ea:a3:b8:c4:8f:57:1c:1a:1f:ce:38:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1f14c850745a7c312ea2eb0be03052e4967275
Validity
Not Before: Sep 19 11:12:50 2023 GMT
Not After : Sep 20 11:12:50 2023 GMT
Subject: CN=ca347388052354e16e9c7701eaceb828209afd48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:83:29:76:d2:31:70:1e:ed:ac:0b:1b:57:6b:
47:fe:12:a4:5f:6f:6a:9a:6c:54:8b:cf:9d:55:c9:
cd:83:e0:7f:1d:b5:88:7c:11:85:6c:a7:78:6b:f7:
45:34:69:7d:72:37:19:55:96:2f:7f:9d:85:ad:2d:
98:0a:71:45:c1:80:f2:c0:91:b2:f6:ef:05:3a:52:
72:7c:d9:b2:bc:cb:a9:19:30:0d:e0:f0:a5:a9:2a:
31:d0:d1:6a:82:81:bc:8b:94:fc:d4:4c:76:91:3c:
ce:45:9a:14:88:8d:fa:9f:a8:b0:97:c4:eb:ea:a9:
f0:0b:48:20:60:c8:ca:cd:cf:a3:36:87:d7:6d:0c:
8a:1a:f7:d1:68:33:47:02:ad:9b:03:96:49:d8:0d:
20:56:37:18:6e:1a:71:04:e4:1b:3e:89:7b:ca:b0:
0a:ff:5e:c9:7d:03:ef:b7:bc:a6:14:35:0f:6c:ad:
d5:d7:d7:79:22:b9:41:8b:2e:49:a1:1f:f1:cf:40:
a1:f5:2c:d7:44:14:4f:a2:33:cc:1f:4e:ab:ad:b0:
fe:fc:a0:e7:bc:7b:6a:0c:f9:d8:bb:87:8c:16:26:
25:45:6d:d5:05:9b:bc:69:77:73:8a:78:fb:22:be:
e2:8d:ab:91:b2:36:56:bc:85:b3:bf:6e:8b:24:81:
cb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:34:73:88:05:23:54:E1:6E:9C:77:01:EA:CE:B8:28:20:9A:FD:48
X509v3 Authority Key Identifier:
keyid:AA:1F:14:C8:50:74:5A:7C:31:2E:A2:EB:0B:E0:30:52:E4:96:72:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh8UyFB0WnwxLqLrC-AwUuSWcnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8bf9c5-1d22-439e-b0bd-83fcd225482a/1/qh8UyFB0WnwxLqLrC-AwUuSWcnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:48:16:0d:71:bf:72:f6:98:a3:7a:cd:ef:cc:11:1b:5a:2f:
1b:3c:b7:6b:dc:dc:d1:ce:8d:97:b9:8b:c1:63:bd:68:bb:f8:
9d:5a:23:2f:be:a4:2d:fb:d2:2c:78:78:4b:a5:c8:ca:aa:f7:
e9:47:d8:d0:97:c6:63:aa:12:cd:44:91:ad:73:c1:95:28:18:
ca:7e:49:b4:76:5f:fa:b1:15:46:0c:30:6c:10:02:99:52:1f:
36:f9:27:5f:da:ff:7f:6c:ec:3e:47:73:2d:7d:fd:b0:8d:85:
24:dd:31:3e:47:ac:c4:63:6b:17:8e:8b:92:ea:0f:03:58:84:
8d:a6:fa:6d:31:86:eb:ea:62:15:0f:cc:41:9f:7f:0d:22:07:
b3:aa:85:e8:b1:68:ad:51:f5:07:e9:a2:24:73:4f:46:29:b2:
07:ec:39:78:ad:7d:75:4b:98:5d:bb:1d:7d:28:dd:93:74:d6:
c3:70:1d:69:21:59:26:d0:76:c7:64:9c:1e:13:9e:e6:16:9c:
ec:17:a2:d3:72:6d:ae:4d:19:9c:0a:91:2f:90:b6:86:d1:aa:
89:52:74:2d:eb:ce:db:02:90:4c:d5:39:9e:b3:1e:4c:19:6a:
09:8f:86:5e:b5:71:09:d7:14:2c:26:56:1b:af:8b:f1:b0:ef:
b3:f9:fa:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:08:19 2025 by rpki-client