Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/68d7a4-4e73-495c-a03e-0e2769aa8ab0/1/QyExQaqTrYz4wmg3eFx4RUzbgYA.mft
File: QyExQaqTrYz4wmg3eFx4RUzbgYA.mft (raw, json)
Hash identifier: 85wkWWGv5hcOPjYsGUkrkvDIRcCWr4/1UkwGDtsbDwQ=
Subject key identifier: 6A:02:51:D5:4F:59:5A:04:83:85:FD:AB:96:4C:92:F3:8D:29:61:B9
Authority key identifier: 43:21:31:41:AA:93:AD:8C:F8:C2:68:37:78:5C:78:45:4C:DB:81:80
Certificate issuer: /CN=43213141aa93ad8cf8c26837785c78454cdb8180
Certificate serial: 0194BBCDE8414D5EBA437357930393C32CA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QyExQaqTrYz4wmg3eFx4RUzbgYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/68d7a4-4e73-495c-a03e-0e2769aa8ab0/1/QyExQaqTrYz4wmg3eFx4RUzbgYA.mft
Manifest number: 03BE
Signing time: Fri 31 Jan 2025 10:00:20 +0000
Manifest this update: Fri 31 Jan 2025 10:00:20 +0000
Manifest next update: Sat 01 Feb 2025 10:00:20 +0000
Files and hashes: 1: QyExQaqTrYz4wmg3eFx4RUzbgYA.crl (hash: 9w7Mc7YBUOwjVMOaUM5TZJzfxLhUUh+8VCpeh2uVa04=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e8:41:4d:5e:ba:43:73:57:93:03:93:c3:2c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43213141aa93ad8cf8c26837785c78454cdb8180
Validity
Not Before: Jan 31 10:00:20 2025 GMT
Not After : Feb 1 10:00:20 2025 GMT
Subject: CN=6a0251d54f595a048385fdab964c92f38d2961b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5c:38:0c:cf:ac:fd:d9:89:65:2d:3f:0a:9b:
47:df:de:d6:89:48:07:b3:28:f9:27:c6:8d:b2:df:
1f:b5:5f:6e:a1:00:3e:f2:5a:9d:16:96:88:ae:0a:
09:72:a2:fc:b7:28:62:31:fa:a4:82:6d:fe:86:67:
ad:34:be:36:dc:f9:b8:23:a7:2b:5c:c2:22:9d:c7:
f3:bd:76:16:26:87:19:46:68:4b:aa:e2:f1:e6:65:
fc:74:4e:4a:f1:e3:db:1b:59:37:71:c1:ab:05:b1:
8a:c9:1a:8b:3b:f1:cc:a4:9e:9d:b9:2c:6a:24:42:
04:3e:f2:68:04:5c:f5:79:a2:a5:06:90:96:7e:e1:
35:ec:79:0c:3b:e2:a3:48:f2:c1:92:8b:e1:a6:4f:
9a:3f:c4:6e:01:76:fc:cd:42:dc:db:c2:60:1f:07:
81:da:f1:d7:31:ea:e9:d8:c5:9c:c6:2a:4c:3c:f0:
35:c6:c2:53:be:b2:9a:72:0c:e6:6b:ec:5b:87:f0:
3c:b3:4f:77:05:99:9f:d0:b9:23:a3:7e:15:13:a3:
5a:10:28:85:14:41:67:2f:85:87:6e:b0:93:d8:9f:
5a:c2:04:a6:67:14:15:5b:d9:c0:ac:23:e5:72:8d:
f0:b7:df:cb:3b:9d:4b:12:01:f3:29:89:61:4e:5e:
e4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:02:51:D5:4F:59:5A:04:83:85:FD:AB:96:4C:92:F3:8D:29:61:B9
X509v3 Authority Key Identifier:
keyid:43:21:31:41:AA:93:AD:8C:F8:C2:68:37:78:5C:78:45:4C:DB:81:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QyExQaqTrYz4wmg3eFx4RUzbgYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/68d7a4-4e73-495c-a03e-0e2769aa8ab0/1/QyExQaqTrYz4wmg3eFx4RUzbgYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/68d7a4-4e73-495c-a03e-0e2769aa8ab0/1/QyExQaqTrYz4wmg3eFx4RUzbgYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:50:64:be:2d:55:e0:d3:a4:34:21:07:27:af:86:fe:8f:c2:
a8:78:1d:92:f9:06:9b:e1:64:cb:58:81:42:72:0f:21:85:95:
07:8e:64:1e:19:57:f3:3b:23:48:60:24:87:3f:e3:4e:85:13:
1a:15:d2:b2:2c:10:4d:c9:b9:42:0f:01:d1:9a:11:71:ed:23:
8f:95:5f:97:68:cc:04:27:31:c9:ba:f5:4e:f2:b9:cd:be:f1:
82:ab:85:0d:b3:1e:29:ee:4a:18:df:e3:fc:77:84:a2:52:59:
8a:04:f0:49:91:c4:26:b7:4d:3c:ed:4a:17:9d:8b:20:b9:6d:
64:25:4f:33:ad:84:8a:41:c4:df:be:73:72:f7:88:81:a0:de:
05:61:ba:03:f1:95:7c:9c:e0:72:2f:60:44:c0:63:97:ca:92:
a5:13:ac:57:c6:c1:4e:9c:91:ef:a7:0b:42:64:60:fe:bb:34:
ca:78:c2:88:0e:c7:0c:38:17:4f:b6:f1:cc:b4:4a:39:3f:45:
f3:a7:d6:d3:bb:03:26:86:51:7d:5c:2a:60:e1:ca:9b:7e:35:
ae:b5:4e:d9:cb:52:e5:09:42:2e:dd:f8:f8:82:e1:a7:72:0b:
56:ab:c3:0e:1a:6a:16:d1:4e:7f:09:34:e3:a8:20:48:cf:ba:
cc:f2:46:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zehBTV66Q3NXkwOTwyyoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMjEzMTQxYWE5M2FkOGNmOGMyNjgzNzc4NWM3ODQ1NGNk
YjgxODAwHhcNMjUwMTMxMTAwMDIwWhcNMjUwMjAxMTAwMDIwWjAzMTEwLwYDVQQD
Eyg2YTAyNTFkNTRmNTk1YTA0ODM4NWZkYWI5NjRjOTJmMzhkMjk2MWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFw4DM+s/dmJZS0/CptH397WiUgH
syj5J8aNst8ftV9uoQA+8lqdFpaIrgoJcqL8tyhiMfqkgm3+hmetNL423Pm4I6cr
XMIincfzvXYWJocZRmhLquLx5mX8dE5K8ePbG1k3ccGrBbGKyRqLO/HMpJ6duSxq
JEIEPvJoBFz1eaKlBpCWfuE17HkMO+KjSPLBkovhpk+aP8RuAXb8zULc28JgHweB
2vHXMerp2MWcxipMPPA1xsJTvrKacgzma+xbh/A8s093BZmf0Lkjo34VE6NaECiF
FEFnL4WHbrCT2J9awgSmZxQVW9nArCPlco3wt9/LO51LEgHzKYlhTl7kUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGoCUdVPWVoEg4X9q5ZMkvONKWG5MB8GA1UdIwQY
MBaAFEMhMUGqk62M+MJoN3hceEVM24GAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXlFeFFhcVRyWXo0d21nM2VGeDRSVXpiZ1lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC82OGQ3YTQtNGU3My00OTVjLWEwM2Ut
MGUyNzY5YWE4YWIwLzEvUXlFeFFhcVRyWXo0d21nM2VGeDRSVXpiZ1lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC82OGQ3YTQtNGU3My00OTVjLWEwM2UtMGUyNzY5YWE4YWIw
LzEvUXlFeFFhcVRyWXo0d21nM2VGeDRSVXpiZ1lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd1Bkvi1V
4NOkNCEHJ6+G/o/CqHgdkvkGm+Fky1iBQnIPIYWVB45kHhlX8zsjSGAkhz/jToUT
GhXSsiwQTcm5Qg8B0ZoRce0jj5Vfl2jMBCcxybr1TvK5zb7xgquFDbMeKe5KGN/j
/HeEolJZigTwSZHEJrdNPO1KF52LILltZCVPM62EikHE375zcveIgaDeBWG6A/GV
fJzgci9gRMBjl8qSpROsV8bBTpyR76cLQmRg/rs0ynjCiA7HDDgXT7bxzLRKOT9F
86fW07sDJoZRfVwqYOHKm341rrVO2ctS5QlCLt34+ILhp3ILVqvDDhpqFtFOfwk0
46ggSM+6zPJGtw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:05:11 2025 by rpki-client