Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
File: QdFPKPmNO9zEXhkibx9WFw4xKr8.mft (raw, json)
Hash identifier: Zd9vzUv5P2KdsfSlMaU0TXP5ktxuEwD8v6hVk+7xa6Y=
Subject key identifier: 6B:36:30:74:35:CD:B2:66:83:20:52:B4:B0:DF:9E:08:3E:40:9D:EE
Authority key identifier: 41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF
Certificate issuer: /CN=41d14f28f98d3bdcc45e19226f1f56170e312abf
Certificate serial: 0194BD17622F6D65CE6FDF2C4FDCBF4044A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:13 +0000
Manifest this update: Fri 31 Jan 2025 16:00:13 +0000
Manifest next update: Sat 01 Feb 2025 16:00:13 +0000
Files and hashes: 1: QdFPKPmNO9zEXhkibx9WFw4xKr8.crl (hash: ZnvTlTU2YVk8ZC39QL29sYsjiwcZ2OWUHonjMziUqdM=)
2: TfT6AZyh9UGWuKPzLXDw4XK7Cjc.roa (hash: 4OX2vbS8uyBAPoRn5NlTz3A25sxN9Wre4w3pzzWneG0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:62:2f:6d:65:ce:6f:df:2c:4f:dc:bf:40:44:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d14f28f98d3bdcc45e19226f1f56170e312abf
Validity
Not Before: Jan 31 16:00:13 2025 GMT
Not After : Feb 1 16:00:13 2025 GMT
Subject: CN=6b36307435cdb266832052b4b0df9e083e409dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:76:a3:53:04:44:3f:5d:68:9e:86:94:e7:04:
3b:b7:fe:45:80:a7:90:79:fe:93:a9:38:8b:b6:ca:
4f:eb:cc:c9:91:aa:f8:2b:15:c5:54:c0:c8:c8:ea:
d4:69:5b:88:d0:fe:f4:79:d8:3c:0a:85:6c:52:ff:
b3:79:dc:47:21:c8:1b:84:26:e4:3c:70:1a:67:3c:
dc:94:69:c6:65:43:a3:53:03:63:a2:39:76:8c:95:
d4:df:4d:b1:81:df:9d:5c:42:cd:5c:03:b2:c9:80:
24:64:67:4e:21:f4:24:91:01:95:bf:6d:1d:f0:33:
54:53:8c:cb:a9:b6:24:03:20:ae:ff:b6:27:72:8e:
ed:e2:0a:e5:e3:14:1f:05:c2:11:fc:b3:37:04:1e:
58:25:f4:cc:72:f0:2b:24:e6:e1:20:06:d9:02:29:
0d:55:fd:f0:30:8e:ac:ac:0c:3b:b0:c1:7a:9f:fe:
3b:bb:0b:46:20:b0:f0:28:d9:86:aa:9b:30:62:3a:
a6:0e:7a:ab:01:bc:41:31:8f:26:48:f7:42:e9:d3:
32:a5:58:d2:d3:db:5a:d0:fe:7f:d3:27:88:a4:ee:
2d:2d:50:8f:75:d3:c0:78:c7:09:ce:96:51:a4:8f:
09:4f:fa:31:c9:50:80:1b:b7:23:81:16:6b:93:1d:
16:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:36:30:74:35:CD:B2:66:83:20:52:B4:B0:DF:9E:08:3E:40:9D:EE
X509v3 Authority Key Identifier:
keyid:41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d6:1b:87:3f:81:9e:cb:83:95:22:6e:e3:af:46:78:90:58:
14:65:4a:6c:9b:92:20:90:9f:2b:cd:a0:f1:41:27:f4:9c:66:
b6:d5:d1:d6:1c:9a:ce:8a:b5:40:df:45:1f:8d:e8:f0:ff:4c:
0c:38:58:25:d2:63:0e:0d:6e:1f:7a:98:32:f7:d6:0c:a6:25:
9a:96:94:ae:b4:2c:9a:14:ce:64:fb:5a:f0:d5:5f:e3:0d:09:
27:77:ff:14:84:2d:ac:ab:24:d3:06:e3:2f:05:20:75:51:0b:
23:9c:95:09:22:0d:c8:b8:24:65:24:eb:a1:b7:8a:47:40:eb:
e6:c0:7a:ea:58:76:f3:9b:1b:ff:f8:6f:0d:cd:f6:ad:e6:58:
ab:b6:eb:fa:42:47:1f:07:4d:1a:b9:fe:03:16:8d:63:5e:8f:
34:d3:5b:cd:82:4e:71:15:a7:93:ad:2c:ec:8f:5c:af:bd:8d:
52:0a:ec:2d:d3:4e:f2:97:5a:ac:52:54:7a:7f:65:57:61:b5:
15:ec:26:64:aa:d3:cf:1e:63:bd:46:2a:37:80:8d:f1:d9:05:
99:f0:eb:94:fc:62:8a:31:fd:01:16:86:b0:55:ec:17:c1:f0:
d0:91:59:48:d1:b6:7c:82:0c:4f:05:9e:81:4d:b3:d3:93:38:
49:5a:d3:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F2IvbWXOb98sT9y/QESlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZDE0ZjI4Zjk4ZDNiZGNjNDVlMTkyMjZmMWY1NjE3MGUz
MTJhYmYwHhcNMjUwMTMxMTYwMDEzWhcNMjUwMjAxMTYwMDEzWjAzMTEwLwYDVQQD
Eyg2YjM2MzA3NDM1Y2RiMjY2ODMyMDUyYjRiMGRmOWUwODNlNDA5ZGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonajUwREP11onoaU5wQ7t/5FgKeQ
ef6TqTiLtspP68zJkar4KxXFVMDIyOrUaVuI0P70edg8CoVsUv+zedxHIcgbhCbk
PHAaZzzclGnGZUOjUwNjojl2jJXU302xgd+dXELNXAOyyYAkZGdOIfQkkQGVv20d
8DNUU4zLqbYkAyCu/7Ynco7t4grl4xQfBcIR/LM3BB5YJfTMcvArJObhIAbZAikN
Vf3wMI6srAw7sMF6n/47uwtGILDwKNmGqpswYjqmDnqrAbxBMY8mSPdC6dMypVjS
09ta0P5/0yeIpO4tLVCPddPAeMcJzpZRpI8JT/oxyVCAG7cjgRZrkx0WsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGs2MHQ1zbJmgyBStLDfngg+QJ3uMB8GA1UdIwQY
MBaAFEHRTyj5jTvcxF4ZIm8fVhcOMSq/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWRGUEtQbU5POXpFWGhraWJ4OVdGdzR4S3I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9hMDc0ZTItNjZlYS00M2NjLTk0YTct
YjM4MDQ1MzI2N2Y5LzEvUWRGUEtQbU5POXpFWGhraWJ4OVdGdzR4S3I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9hMDc0ZTItNjZlYS00M2NjLTk0YTctYjM4MDQ1MzI2N2Y5
LzEvUWRGUEtQbU5POXpFWGhraWJ4OVdGdzR4S3I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAANYbhz+B
nsuDlSJu469GeJBYFGVKbJuSIJCfK82g8UEn9JxmttXR1hyazoq1QN9FH43o8P9M
DDhYJdJjDg1uH3qYMvfWDKYlmpaUrrQsmhTOZPta8NVf4w0JJ3f/FIQtrKsk0wbj
LwUgdVELI5yVCSINyLgkZSTrobeKR0Dr5sB66lh285sb//hvDc32reZYq7br+kJH
HwdNGrn+AxaNY16PNNNbzYJOcRWnk60s7I9cr72NUgrsLdNO8pdarFJUen9lV2G1
FewmZKrTzx5jvUYqN4CN8dkFmfDrlPxiijH9ARaGsFXsF8Hw0JFZSNG2fIIMTwWe
gU2z05M4SVrTuQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:05 2025 by rpki-client