Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
File: QNTjO-cdM587wMxtrmXoeS_01dw.mft (raw, json)
Hash identifier: OFYjJwS/rD3z2hvwqmwXObKwOeuboob243BaWTls8MM=
Subject key identifier: 0F:0A:37:B9:F5:DC:47:1B:4F:35:B7:8F:C8:41:FA:E4:90:36:9A:0E
Authority key identifier: 40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC
Certificate issuer: /CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc
Certificate serial: 0194BC3BFBB9A8607B3A0C22572A17E10DC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:35 +0000
Manifest this update: Fri 31 Jan 2025 12:00:35 +0000
Manifest next update: Sat 01 Feb 2025 12:00:35 +0000
Files and hashes: 1: QNTjO-cdM587wMxtrmXoeS_01dw.crl (hash: GTwBotm/3OhCQkT0oivnWlFWFOo3No1GRbGV9bFO0a8=)
2: a3rqfPfqZxHF_NahNNUvEq5fk5g.roa (hash: I+M1Q116pruNGKV2ARftKr/KQ/3izABmgVobB9drMwo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:fb:b9:a8:60:7b:3a:0c:22:57:2a:17:e1:0d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc
Validity
Not Before: Jan 31 12:00:35 2025 GMT
Not After : Feb 1 12:00:35 2025 GMT
Subject: CN=0f0a37b9f5dc471b4f35b78fc841fae490369a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:42:f0:9c:22:58:d1:43:a3:e0:c6:bc:00:26:
23:69:29:aa:8c:26:00:5c:03:7d:f3:a9:a1:cf:1a:
6c:0d:37:d3:66:25:42:81:3a:a1:55:da:ef:54:23:
70:d9:91:53:b8:53:eb:5c:a9:f3:a0:7a:0b:72:dd:
cf:68:40:53:89:b9:bf:9b:d6:45:7f:52:ae:7c:29:
4e:dc:29:a4:c8:85:22:53:bf:07:24:d3:c6:49:6e:
5f:b5:07:b7:e8:a5:ec:45:10:f6:77:2d:17:d9:32:
bb:15:4b:db:60:7f:c7:c7:57:d9:22:e6:2d:b6:0c:
41:6f:36:90:cf:60:0f:a0:ee:0a:a7:98:7d:db:c3:
f2:10:d8:c6:23:ad:f8:07:c6:4e:24:ca:4f:b3:b4:
65:e2:d5:9a:15:62:c9:d6:a0:2f:58:5f:1c:c4:04:
8e:8b:79:63:35:ce:49:77:d6:c1:1c:f4:6b:6b:6a:
8f:8c:24:fa:c5:46:08:20:9a:ec:fc:a4:ad:b2:6e:
04:c1:aa:e2:dd:25:7b:d3:2f:ff:db:8f:70:3d:49:
b8:ea:76:82:fa:42:4f:cd:22:ed:a1:d1:97:be:32:
dc:06:00:c1:73:b8:f2:36:15:63:78:0c:bc:9d:8a:
9e:81:68:4e:e7:68:42:bd:b1:d3:f1:39:bb:d2:45:
9e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0A:37:B9:F5:DC:47:1B:4F:35:B7:8F:C8:41:FA:E4:90:36:9A:0E
X509v3 Authority Key Identifier:
keyid:40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ea:35:c3:14:50:8c:73:2b:bb:46:67:07:08:ab:d7:fb:c0:
83:00:ab:c0:f0:08:23:ec:7b:92:c8:88:0a:ac:e4:81:30:9f:
c2:0a:87:20:85:a9:9c:ba:20:73:4f:17:87:82:34:71:7b:20:
28:58:59:54:e6:2e:ef:1d:79:c2:f8:16:d2:93:56:7a:42:be:
aa:2e:f8:cf:49:47:70:0a:af:bd:56:73:62:20:0c:fd:44:9b:
ff:1b:60:f0:19:91:1e:88:27:8b:2c:f8:9e:a0:5c:03:69:7d:
a9:e8:f0:54:d9:44:66:f2:25:b0:88:aa:c3:32:e1:4f:5b:1d:
aa:c6:d3:6d:b0:6f:cd:17:02:9d:75:30:a5:c3:91:e3:d8:57:
d5:3a:ca:22:e5:ea:64:7a:ef:c2:ad:3c:56:13:32:fc:12:16:
71:89:0b:13:76:1a:dd:24:56:17:4a:76:19:01:ba:d4:a8:1b:
aa:74:9a:2b:1e:23:75:5b:f2:6e:15:85:76:22:9e:5d:f9:6d:
d9:e2:87:c1:7f:a2:67:95:8b:96:01:92:09:24:26:0d:dc:8a:
d1:cb:21:24:85:38:9b:90:af:93:be:ea:b7:e8:3a:5f:92:83:
4c:26:57:77:f8:94:51:c9:dd:71:aa:36:68:d4:9b:c7:85:fd:
26:2b:17:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O/u5qGB7OgwiVyoX4Q3JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZDRlMzNiZTcxZDMzOWYzYmMwY2M2ZGFlNjVlODc5MmZm
NGQ1ZGMwHhcNMjUwMTMxMTIwMDM1WhcNMjUwMjAxMTIwMDM1WjAzMTEwLwYDVQQD
EygwZjBhMzdiOWY1ZGM0NzFiNGYzNWI3OGZjODQxZmFlNDkwMzY5YTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvULwnCJY0UOj4Ma8ACYjaSmqjCYA
XAN986mhzxpsDTfTZiVCgTqhVdrvVCNw2ZFTuFPrXKnzoHoLct3PaEBTibm/m9ZF
f1KufClO3CmkyIUiU78HJNPGSW5ftQe36KXsRRD2dy0X2TK7FUvbYH/Hx1fZIuYt
tgxBbzaQz2APoO4Kp5h928PyENjGI634B8ZOJMpPs7Rl4tWaFWLJ1qAvWF8cxASO
i3ljNc5Jd9bBHPRra2qPjCT6xUYIIJrs/KStsm4Ewari3SV70y//249wPUm46naC
+kJPzSLtodGXvjLcBgDBc7jyNhVjeAy8nYqegWhO52hCvbHT8Tm70kWe5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA8KN7n13EcbTzW3j8hB+uSQNpoOMB8GA1UdIwQY
MBaAFEDU4zvnHTOfO8DMba5l6Hkv9NXcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU5Uak8tY2RNNTg3d014dHJtWG9lU18wMWR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hYzY5ZDItOTI5OS00OWIwLTkxYzgt
MDIzM2I3YjI2ZDVkLzEvUU5Uak8tY2RNNTg3d014dHJtWG9lU18wMWR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9hYzY5ZDItOTI5OS00OWIwLTkxYzgtMDIzM2I3YjI2ZDVk
LzEvUU5Uak8tY2RNNTg3d014dHJtWG9lU18wMWR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASuo1wxRQ
jHMru0ZnBwir1/vAgwCrwPAII+x7ksiICqzkgTCfwgqHIIWpnLogc08Xh4I0cXsg
KFhZVOYu7x15wvgW0pNWekK+qi74z0lHcAqvvVZzYiAM/USb/xtg8BmRHogniyz4
nqBcA2l9qejwVNlEZvIlsIiqwzLhT1sdqsbTbbBvzRcCnXUwpcOR49hX1TrKIuXq
ZHrvwq08VhMy/BIWcYkLE3Ya3SRWF0p2GQG61KgbqnSaKx4jdVvybhWFdiKeXflt
2eKHwX+iZ5WLlgGSCSQmDdyK0cshJIU4m5Cvk77qt+g6X5KDTCZXd/iUUcndcao2
aNSbx4X9JisXDg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:20 2025 by rpki-client