Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
File: qTS43sEoG8VDF8f-0OmsvHuXysc.mft (raw, json)
Hash identifier: MQEfLOHZpMq7JUKLMex31Y0E7zj89pzRrmxZCxkZ8qI=
Subject key identifier: 74:65:C0:AB:6E:72:98:8A:DC:15:7C:1E:AC:2D:4C:75:E4:06:B7:2B
Authority key identifier: A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
Certificate issuer: /CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Certificate serial: 0194BC730376F44F7950AB29676291B4864A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 13:00:41 +0000
Manifest this update: Fri 31 Jan 2025 13:00:41 +0000
Manifest next update: Sat 01 Feb 2025 13:00:41 +0000
Files and hashes: 1: nNICaFb7G3xV0xaZvY4tLFZeqjU.roa (hash: 5uzWSjZq0ATl8Nrn/VGx6JZA+5X6g81sHleJ+o0B2vM=)
2: qTS43sEoG8VDF8f-0OmsvHuXysc.crl (hash: IuP8WQrQ/affTeaGukHjkeNK4RSJz5HynqZH0/5V1SY=)
3: vlECbF8HkBG6WpBhMBZnOl_AraI.roa (hash: 3UR9pQsXBE1n+38LaDwJGSYsS95ZptnvsHsDatSDo+E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:03:76:f4:4f:79:50:ab:29:67:62:91:b4:86:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Validity
Not Before: Jan 31 13:00:41 2025 GMT
Not After : Feb 1 13:00:41 2025 GMT
Subject: CN=7465c0ab6e72988adc157c1eac2d4c75e406b72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:16:da:06:e5:07:1e:1e:ce:a8:61:0a:c8:46:
53:6a:fa:e4:43:dd:0b:17:46:3f:3f:f3:16:5d:df:
96:75:dd:f4:5e:52:0b:15:09:9c:d2:82:25:29:d7:
da:a2:fe:04:9a:ba:da:14:51:d6:57:58:91:68:52:
4e:1c:22:69:79:ee:6a:97:d5:3d:cc:27:47:48:e2:
7f:64:de:d1:03:19:71:42:cb:eb:1c:e1:fb:a6:d1:
4e:1b:20:68:c3:cb:61:72:62:53:bb:93:0e:8c:a6:
fa:96:59:c0:f3:80:3c:8b:11:20:31:cc:ea:b6:a0:
a1:47:be:49:2a:1b:6f:f0:fa:64:10:23:e2:b2:3a:
98:3c:f2:f9:b6:cc:19:bd:e5:22:6a:5c:e1:e8:a1:
60:f5:7d:8c:80:13:f8:97:d5:67:6e:5d:ea:d1:ad:
24:f6:f8:ae:b3:4b:24:7c:08:3d:5b:7b:82:04:6e:
78:13:d4:d7:67:c8:f9:4d:3d:45:f1:68:48:43:aa:
5d:48:8e:eb:1e:38:84:5b:24:b5:1b:43:29:ca:ec:
f7:fc:af:ce:d7:d6:a0:0d:e5:89:71:72:b9:ee:c7:
6c:77:5a:99:c2:ce:ef:06:23:43:f5:33:b6:9f:09:
2f:34:66:4b:a0:73:d5:59:8c:89:40:81:5c:4b:ed:
11:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:65:C0:AB:6E:72:98:8A:DC:15:7C:1E:AC:2D:4C:75:E4:06:B7:2B
X509v3 Authority Key Identifier:
keyid:A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:90:66:1f:70:05:fa:08:f4:24:93:b5:bd:13:87:88:10:77:
af:d9:5a:02:72:5f:d7:24:44:7d:e5:70:4c:e2:27:ec:92:f8:
a6:a5:db:12:bb:ea:02:73:b7:63:8d:07:f4:94:09:8d:58:b9:
f2:94:9c:1f:aa:14:35:e8:c4:c4:31:c4:30:a7:2b:7f:8f:2c:
d3:cc:21:37:2b:54:23:7d:57:81:14:43:a9:6d:0c:69:9c:01:
42:18:96:40:1c:86:f2:ce:01:cc:67:94:da:5d:01:68:32:b7:
65:57:49:d6:fb:b9:7b:4a:8f:61:c0:10:ce:3a:f4:92:f2:13:
09:1a:17:82:53:17:9b:41:d4:a2:f4:c4:c1:4b:4c:e2:6b:52:
c6:2e:0f:78:ca:25:82:e2:27:e8:6f:b7:df:a5:8c:1e:6f:5a:
5e:78:5c:61:b4:3d:a5:fb:be:94:99:de:c3:6e:37:31:bb:2d:
ee:a6:9e:f2:11:b9:1b:e9:da:0f:93:21:20:39:34:ca:04:5a:
99:02:a5:e3:1a:77:83:c1:bb:8c:46:e7:cd:58:39:c0:7f:94:
89:92:b7:e3:ea:2b:86:9a:2b:1d:31:e5:af:7e:a9:5a:c8:3d:
a1:dd:42:54:e6:63:d3:82:e8:24:19:a3:4d:bc:3f:04:8d:12:
13:27:fb:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cwN29E95UKspZ2KRtIZKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MzRiOGRlYzEyODFiYzU0MzE3YzdmZWQwZTlhY2JjN2I5
N2NhYzcwHhcNMjUwMTMxMTMwMDQxWhcNMjUwMjAxMTMwMDQxWjAzMTEwLwYDVQQD
Eyg3NDY1YzBhYjZlNzI5ODhhZGMxNTdjMWVhYzJkNGM3NWU0MDZiNzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBbaBuUHHh7OqGEKyEZTavrkQ90L
F0Y/P/MWXd+Wdd30XlILFQmc0oIlKdfaov4EmrraFFHWV1iRaFJOHCJpee5ql9U9
zCdHSOJ/ZN7RAxlxQsvrHOH7ptFOGyBow8thcmJTu5MOjKb6llnA84A8ixEgMczq
tqChR75JKhtv8PpkECPisjqYPPL5tswZveUialzh6KFg9X2MgBP4l9Vnbl3q0a0k
9vius0skfAg9W3uCBG54E9TXZ8j5TT1F8WhIQ6pdSI7rHjiEWyS1G0Mpyuz3/K/O
19agDeWJcXK57sdsd1qZws7vBiND9TO2nwkvNGZLoHPVWYyJQIFcS+0RJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHRlwKtucpiK3BV8HqwtTHXkBrcrMB8GA1UdIwQY
MBaAFKk0uN7BKBvFQxfH/tDprLx7l8rHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVRTNDNzRW9HOFZERjhmLTBPbXN2SHVYeXNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC84N2I1NjItY2I3ZC00YTkzLWJkNDMt
MjdlZTQyZDkyNWFkLzEvcVRTNDNzRW9HOFZERjhmLTBPbXN2SHVYeXNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC84N2I1NjItY2I3ZC00YTkzLWJkNDMtMjdlZTQyZDkyNWFk
LzEvcVRTNDNzRW9HOFZERjhmLTBPbXN2SHVYeXNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUpBmH3AF
+gj0JJO1vROHiBB3r9laAnJf1yREfeVwTOIn7JL4pqXbErvqAnO3Y40H9JQJjVi5
8pScH6oUNejExDHEMKcrf48s08whNytUI31XgRRDqW0MaZwBQhiWQByG8s4BzGeU
2l0BaDK3ZVdJ1vu5e0qPYcAQzjr0kvITCRoXglMXm0HUovTEwUtM4mtSxi4PeMol
guIn6G+336WMHm9aXnhcYbQ9pfu+lJnew243Mbst7qae8hG5G+naD5MhIDk0ygRa
mQKl4xp3g8G7jEbnzVg5wH+UiZK34+orhporHTHlr36pWsg9od1CVOZj04LoJBmj
Tbw/BI0SEyf7Fw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:32:39 2025 by rpki-client