Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ddb5a6-53f3-4d64-bc39-561267a42926/1/QaCIiaXMcoT9MkqZK_qN59bCwYo.mft
File: QaCIiaXMcoT9MkqZK_qN59bCwYo.mft (raw, json)
Hash identifier: YwsCiQhUXYdogmLffMrVDsepe90MUwOdXIWDvfUGXIU=
Subject key identifier: 5A:97:42:D6:61:6E:92:A2:E3:5F:A6:4B:62:E2:0E:AE:CA:8B:26:25
Authority key identifier: 41:A0:88:89:A5:CC:72:84:FD:32:4A:99:2B:FA:8D:E7:D6:C2:C1:8A
Certificate issuer: /CN=41a08889a5cc7284fd324a992bfa8de7d6c2c18a
Certificate serial: 0194BCE099F3C03656F62915150EAF811815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QaCIiaXMcoT9MkqZK_qN59bCwYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ddb5a6-53f3-4d64-bc39-561267a42926/1/QaCIiaXMcoT9MkqZK_qN59bCwYo.mft
Manifest number: 0387
Signing time: Fri 31 Jan 2025 15:00:23 +0000
Manifest this update: Fri 31 Jan 2025 15:00:23 +0000
Manifest next update: Sat 01 Feb 2025 15:00:23 +0000
Files and hashes: 1: QaCIiaXMcoT9MkqZK_qN59bCwYo.crl (hash: lMC0OLdvjqIXfOdXnCzZlJs1DpwU0urRlmAYioh4HjM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:99:f3:c0:36:56:f6:29:15:15:0e:af:81:18:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41a08889a5cc7284fd324a992bfa8de7d6c2c18a
Validity
Not Before: Jan 31 15:00:23 2025 GMT
Not After : Feb 1 15:00:23 2025 GMT
Subject: CN=5a9742d6616e92a2e35fa64b62e20eaeca8b2625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4f:c2:8e:d9:4c:a9:61:dd:b4:25:83:bd:1a:
8e:dc:37:d1:17:fc:e5:84:8f:bd:bb:3e:3f:93:f7:
0e:9b:b1:b9:59:a9:03:74:ca:b1:e6:b9:88:fc:30:
79:18:81:fe:2b:aa:5c:f3:53:70:45:09:d5:b3:78:
85:8a:a1:a3:44:67:54:63:9f:64:2b:87:fc:07:46:
25:ff:aa:41:4b:6c:f5:62:6c:79:e6:7f:5d:37:11:
2c:e0:dc:f4:c2:ca:44:7b:1f:28:0e:6e:8b:ff:1e:
75:24:b7:cb:2f:e3:a6:be:2d:b3:95:aa:5c:1b:ef:
e0:bc:54:78:6b:c6:c0:3e:19:bc:65:97:22:a5:6b:
a6:2a:a8:6f:4d:83:61:77:05:14:dd:d8:78:70:29:
8a:09:ab:f5:17:cf:89:48:42:b8:c2:3d:4d:e5:b6:
e4:f4:33:1d:77:1f:00:94:bd:ce:3e:51:20:81:1b:
c4:55:b7:40:58:22:4e:f4:71:b8:2f:f8:ff:60:48:
7e:6c:8a:08:c6:66:9a:c9:9a:45:aa:6a:41:da:42:
5c:fa:75:04:2f:22:66:83:b3:be:b5:57:c6:d5:13:
0d:e7:89:ee:51:90:a5:6b:ed:d3:04:4d:dc:b1:90:
d7:2b:28:05:c3:dd:08:67:b9:e7:20:46:6a:30:83:
5c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:97:42:D6:61:6E:92:A2:E3:5F:A6:4B:62:E2:0E:AE:CA:8B:26:25
X509v3 Authority Key Identifier:
keyid:41:A0:88:89:A5:CC:72:84:FD:32:4A:99:2B:FA:8D:E7:D6:C2:C1:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QaCIiaXMcoT9MkqZK_qN59bCwYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ddb5a6-53f3-4d64-bc39-561267a42926/1/QaCIiaXMcoT9MkqZK_qN59bCwYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ddb5a6-53f3-4d64-bc39-561267a42926/1/QaCIiaXMcoT9MkqZK_qN59bCwYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:5a:12:07:0f:67:b8:87:b2:65:d4:39:79:6e:3b:cd:43:eb:
9f:24:20:22:ff:3c:db:aa:37:a3:7b:93:d5:6a:e0:5d:f6:e7:
b4:76:63:e2:cb:58:11:8e:f3:c3:fa:0f:db:81:c2:c7:f6:02:
05:2f:1e:6c:46:fe:9c:b4:fc:d8:f2:d4:12:ca:d1:34:63:9b:
2e:00:52:a1:bf:3e:58:93:d9:76:b3:73:fc:c2:95:f2:90:92:
a2:53:fd:b2:ed:f6:3a:42:91:bd:53:69:7a:b1:37:6d:57:67:
d3:db:35:b4:a5:5f:cf:c9:ea:2f:e6:91:16:e4:f0:b1:6f:c8:
49:21:d7:2a:5b:c1:54:0e:bb:41:c9:4e:a4:9a:32:18:b4:64:
68:97:16:d2:72:27:c6:46:99:03:db:cb:fc:92:e8:20:d7:03:
fa:9a:1c:ca:d9:46:bd:d0:f9:bc:7a:07:59:01:a5:48:24:bd:
f1:49:f8:20:d9:63:45:dd:e2:dc:0f:54:bb:41:ec:b4:cc:5d:
53:a8:94:f9:b9:de:0c:26:ec:9e:41:fd:f7:4c:f6:43:5d:ec:
58:a1:02:58:6e:91:50:85:62:5a:d0:ae:ca:7c:f9:ec:87:11:
ca:d9:9c:1d:8f:48:78:54:17:f8:da:b6:ab:c2:e4:62:a4:41:
dd:31:55:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84JnzwDZW9ikVFQ6vgRgVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxYTA4ODg5YTVjYzcyODRmZDMyNGE5OTJiZmE4ZGU3ZDZj
MmMxOGEwHhcNMjUwMTMxMTUwMDIzWhcNMjUwMjAxMTUwMDIzWjAzMTEwLwYDVQQD
Eyg1YTk3NDJkNjYxNmU5MmEyZTM1ZmE2NGI2MmUyMGVhZWNhOGIyNjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk/CjtlMqWHdtCWDvRqO3DfRF/zl
hI+9uz4/k/cOm7G5WakDdMqx5rmI/DB5GIH+K6pc81NwRQnVs3iFiqGjRGdUY59k
K4f8B0Yl/6pBS2z1Ymx55n9dNxEs4Nz0wspEex8oDm6L/x51JLfLL+Omvi2zlapc
G+/gvFR4a8bAPhm8ZZcipWumKqhvTYNhdwUU3dh4cCmKCav1F8+JSEK4wj1N5bbk
9DMddx8AlL3OPlEggRvEVbdAWCJO9HG4L/j/YEh+bIoIxmaayZpFqmpB2kJc+nUE
LyJmg7O+tVfG1RMN54nuUZCla+3TBE3csZDXKygFw90IZ7nnIEZqMINcgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqXQtZhbpKi41+mS2LiDq7KiyYlMB8GA1UdIwQY
MBaAFEGgiImlzHKE/TJKmSv6jefWwsGKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWFDSWlhWE1jb1Q5TWtxWktfcU41OWJDd1lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9kZGI1YTYtNTNmMy00ZDY0LWJjMzkt
NTYxMjY3YTQyOTI2LzEvUWFDSWlhWE1jb1Q5TWtxWktfcU41OWJDd1lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9kZGI1YTYtNTNmMy00ZDY0LWJjMzktNTYxMjY3YTQyOTI2
LzEvUWFDSWlhWE1jb1Q5TWtxWktfcU41OWJDd1lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj1oSBw9n
uIeyZdQ5eW47zUPrnyQgIv8826o3o3uT1WrgXfbntHZj4stYEY7zw/oP24HCx/YC
BS8ebEb+nLT82PLUEsrRNGObLgBSob8+WJPZdrNz/MKV8pCSolP9su32OkKRvVNp
erE3bVdn09s1tKVfz8nqL+aRFuTwsW/ISSHXKlvBVA67QclOpJoyGLRkaJcW0nIn
xkaZA9vL/JLoINcD+pocytlGvdD5vHoHWQGlSCS98Un4INljRd3i3A9Uu0HstMxd
U6iU+bneDCbsnkH990z2Q13sWKECWG6RUIViWtCuynz57IcRytmcHY9IeFQX+Nq2
q8LkYqRB3TFVtQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:19:59 2025 by rpki-client