Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/2098ac-c2de-4362-a255-acd72d2c6cb6/1/QA-ULrBzNco-f70Y8GwVjbN8_Us.mft
File: QA-ULrBzNco-f70Y8GwVjbN8_Us.mft (raw, json)
Hash identifier: BQwkv/puUI82AUIxuRTYdGgfLMS26hGh0QXAJUxEos8=
Subject key identifier: 84:6F:DE:1E:D3:A6:CB:E2:34:8E:C9:45:17:21:71:98:6F:F6:C5:25
Authority key identifier: 40:0F:94:2E:B0:73:35:CA:3E:7F:BD:18:F0:6C:15:8D:B3:7C:FD:4B
Certificate issuer: /CN=400f942eb07335ca3e7fbd18f06c158db37cfd4b
Certificate serial: 0194BD8567DE8AFD0CF39862DA9A064D07B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA-ULrBzNco-f70Y8GwVjbN8_Us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/2098ac-c2de-4362-a255-acd72d2c6cb6/1/QA-ULrBzNco-f70Y8GwVjbN8_Us.mft
Manifest number: 108F
Signing time: Fri 31 Jan 2025 18:00:24 +0000
Manifest this update: Fri 31 Jan 2025 18:00:24 +0000
Manifest next update: Sat 01 Feb 2025 18:00:24 +0000
Files and hashes: 1: CRyZWe4rqJ2qdiNWuAP-OJQeZow.roa (hash: g+uZ3IirtTKelPa51RylP3yoQBkp1cF9hHY0LUNHp8g=)
2: QA-ULrBzNco-f70Y8GwVjbN8_Us.crl (hash: 6sp1yDLXzTxBHFbk+p+B1FztrekIKy0M7RZGeUUqBEM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:67:de:8a:fd:0c:f3:98:62:da:9a:06:4d:07:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400f942eb07335ca3e7fbd18f06c158db37cfd4b
Validity
Not Before: Jan 31 18:00:24 2025 GMT
Not After : Feb 1 18:00:24 2025 GMT
Subject: CN=846fde1ed3a6cbe2348ec945172171986ff6c525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d9:a8:33:98:55:bb:b6:99:4a:e1:3e:76:9f:
3a:7f:be:91:e0:5b:e2:1f:af:41:f7:f2:9d:a3:27:
c7:fb:17:f4:14:fc:03:8e:cf:53:4c:0e:43:cd:75:
95:24:af:1e:9d:74:ca:8e:f8:a0:4f:0d:13:90:7f:
4f:57:b5:95:08:36:0e:79:27:ef:bd:0d:32:a5:0e:
60:e6:2e:df:54:ca:83:7d:81:6d:aa:f7:a6:5a:05:
2a:79:31:6b:17:4e:6d:f1:16:9b:c7:80:76:0b:19:
41:c0:06:c5:4a:7c:3f:06:97:f4:b9:6b:e5:35:28:
26:ac:4c:d2:fc:af:6f:ab:cb:47:91:4b:7e:be:9d:
08:c6:c9:c2:47:3b:bf:d7:80:54:74:7a:6e:4d:d0:
d0:7e:62:7a:37:a5:f2:df:f6:c2:a2:2a:1b:e8:c4:
50:fd:3f:3c:90:d5:75:f9:ac:a4:1b:ad:e1:f0:01:
9b:86:1e:09:26:ba:12:5c:dd:52:f7:d0:5d:ab:cb:
69:04:2a:36:a2:3e:24:22:37:bc:73:56:f2:3a:28:
d0:20:57:63:7f:b1:47:16:1c:4e:f7:16:20:29:d6:
43:a5:cf:d4:c9:b6:60:aa:98:87:6b:e3:2d:93:ef:
33:78:60:7a:e0:40:fd:15:80:b8:4a:1a:d2:50:1b:
5d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6F:DE:1E:D3:A6:CB:E2:34:8E:C9:45:17:21:71:98:6F:F6:C5:25
X509v3 Authority Key Identifier:
keyid:40:0F:94:2E:B0:73:35:CA:3E:7F:BD:18:F0:6C:15:8D:B3:7C:FD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA-ULrBzNco-f70Y8GwVjbN8_Us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2098ac-c2de-4362-a255-acd72d2c6cb6/1/QA-ULrBzNco-f70Y8GwVjbN8_Us.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2098ac-c2de-4362-a255-acd72d2c6cb6/1/QA-ULrBzNco-f70Y8GwVjbN8_Us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:3f:52:03:55:29:b5:db:37:2e:d0:a0:1c:c2:39:83:7b:4d:
7f:1a:26:3a:be:8c:9d:98:e7:b6:91:4d:e6:2c:e6:dc:63:be:
bf:ce:11:6d:66:78:6b:c7:6f:a4:c4:27:7d:e9:61:4a:55:31:
00:a7:4c:ec:b9:91:33:65:8f:81:e8:73:da:3a:31:88:bf:b0:
97:b0:f8:48:68:19:7a:ad:05:ca:51:d7:56:2e:8d:5f:0d:4c:
6b:e3:27:ef:5f:8c:7a:dd:45:ca:00:74:92:b4:81:30:2c:c9:
f1:5c:32:25:60:52:8a:3b:b2:ff:82:be:fe:58:37:a5:40:a5:
20:e7:b2:4f:56:a3:33:02:5e:ad:b8:be:7f:b2:11:44:e5:09:
1f:f4:ab:d7:7d:c6:10:9d:a4:fe:ec:33:42:2c:a5:ac:d7:b6:
62:d4:98:bd:3e:6e:fe:af:b4:d1:f5:37:93:bb:5f:71:42:14:
d2:f8:81:cd:3d:29:b1:ed:4a:c1:fd:ac:12:4e:95:c7:6d:45:
52:cb:30:83:9c:1f:75:6d:c8:c9:9e:f8:01:44:82:c0:af:e7:
99:76:f5:f5:a1:aa:b7:b3:b4:32:cb:ad:e4:e4:8c:f4:14:a2:
82:eb:2e:c1:59:78:c3:a8:3c:15:29:2f:b0:08:f9:3c:6c:ff:
85:1f:07:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hWfeiv0M85hi2poGTQeyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMGY5NDJlYjA3MzM1Y2EzZTdmYmQxOGYwNmMxNThkYjM3
Y2ZkNGIwHhcNMjUwMTMxMTgwMDI0WhcNMjUwMjAxMTgwMDI0WjAzMTEwLwYDVQQD
Eyg4NDZmZGUxZWQzYTZjYmUyMzQ4ZWM5NDUxNzIxNzE5ODZmZjZjNTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdmoM5hVu7aZSuE+dp86f76R4Fvi
H69B9/KdoyfH+xf0FPwDjs9TTA5DzXWVJK8enXTKjvigTw0TkH9PV7WVCDYOeSfv
vQ0ypQ5g5i7fVMqDfYFtqvemWgUqeTFrF05t8Rabx4B2CxlBwAbFSnw/Bpf0uWvl
NSgmrEzS/K9vq8tHkUt+vp0IxsnCRzu/14BUdHpuTdDQfmJ6N6Xy3/bCoiob6MRQ
/T88kNV1+aykG63h8AGbhh4JJroSXN1S99Bdq8tpBCo2oj4kIje8c1byOijQIFdj
f7FHFhxO9xYgKdZDpc/UybZgqpiHa+Mtk+8zeGB64ED9FYC4ShrSUBtdcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRv3h7TpsviNI7JRRchcZhv9sUlMB8GA1UdIwQY
MBaAFEAPlC6wczXKPn+9GPBsFY2zfP1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUEtVUxyQnpOY28tZjcwWThHd1ZqYk44X1VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8yMDk4YWMtYzJkZS00MzYyLWEyNTUt
YWNkNzJkMmM2Y2I2LzEvUUEtVUxyQnpOY28tZjcwWThHd1ZqYk44X1VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8yMDk4YWMtYzJkZS00MzYyLWEyNTUtYWNkNzJkMmM2Y2I2
LzEvUUEtVUxyQnpOY28tZjcwWThHd1ZqYk44X1VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAez9SA1Up
tds3LtCgHMI5g3tNfxomOr6MnZjntpFN5izm3GO+v84RbWZ4a8dvpMQnfelhSlUx
AKdM7LmRM2WPgehz2joxiL+wl7D4SGgZeq0FylHXVi6NXw1Ma+Mn71+Met1FygB0
krSBMCzJ8VwyJWBSijuy/4K+/lg3pUClIOeyT1ajMwJerbi+f7IRROUJH/Sr133G
EJ2k/uwzQiylrNe2YtSYvT5u/q+00fU3k7tfcUIU0viBzT0pse1Kwf2sEk6Vx21F
Usswg5wfdW3IyZ74AUSCwK/nmXb19aGqt7O0Msut5OSM9BSigusuwVl4w6g8FSkv
sAj5PGz/hR8HTA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:43:38 2025 by rpki-client