Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f812c7-a85d-4040-8b99-75a8b0974e20/1/qvNQYhzAHooe03KB3zKwlxy95Vc.mft
File: qvNQYhzAHooe03KB3zKwlxy95Vc.mft (raw, json)
Hash identifier: Jrgnjl84gZbpU/yuCsMw3CpIR4xlqSFuIy4KQcLlHjs=
Subject key identifier: F5:B2:14:87:11:1E:BF:45:0B:8E:0F:00:F0:68:63:55:DE:48:81:CC
Authority key identifier: AA:F3:50:62:1C:C0:1E:8A:1E:D3:72:81:DF:32:B0:97:1C:BD:E5:57
Certificate issuer: /CN=aaf350621cc01e8a1ed37281df32b0971cbde557
Certificate serial: 0194BC72D399FA6568164491C90BD102591D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvNQYhzAHooe03KB3zKwlxy95Vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f812c7-a85d-4040-8b99-75a8b0974e20/1/qvNQYhzAHooe03KB3zKwlxy95Vc.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 13:00:29 +0000
Manifest this update: Fri 31 Jan 2025 13:00:29 +0000
Manifest next update: Sat 01 Feb 2025 13:00:29 +0000
Files and hashes: 1: qvNQYhzAHooe03KB3zKwlxy95Vc.crl (hash: TXJFwZA72DlX1DBMOb5m4CgsbvAbGAYeBtP9J9u8+yI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d3:99:fa:65:68:16:44:91:c9:0b:d1:02:59:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf350621cc01e8a1ed37281df32b0971cbde557
Validity
Not Before: Jan 31 13:00:29 2025 GMT
Not After : Feb 1 13:00:29 2025 GMT
Subject: CN=f5b21487111ebf450b8e0f00f0686355de4881cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:dc:b5:12:ff:20:aa:4a:e4:32:39:7c:f4:bc:
3e:ee:cc:4c:ef:9f:57:49:0e:b6:47:62:e6:2f:ca:
83:3b:a2:6e:55:7b:21:e7:f8:02:06:93:ab:0c:25:
25:a2:a4:f5:75:57:70:bc:45:2e:7c:c1:61:f9:10:
4e:61:af:2e:8f:fe:42:69:51:dd:fb:ad:77:e7:96:
5f:d1:8a:bf:d2:49:fb:84:21:c5:67:82:78:17:5c:
1d:12:6b:bd:d7:25:af:8a:a6:af:2e:84:d8:a0:2f:
d7:0e:a8:6d:f1:42:27:aa:56:8e:10:ff:83:4e:a5:
b3:fc:d7:57:5b:44:2a:7e:67:15:27:93:9c:1f:ef:
04:17:52:e4:52:31:a8:d8:58:d2:1f:20:68:37:e8:
a7:85:eb:d5:eb:34:84:cf:67:bf:6d:f9:2f:b5:c8:
14:1f:93:3d:c0:af:7f:76:56:62:fb:0c:3b:36:76:
1e:a4:6c:d2:c0:46:9f:49:bc:b7:ba:ca:c0:b3:26:
81:d8:16:37:9f:f4:9d:1f:d7:59:e9:56:e6:de:07:
39:89:d4:3f:82:a5:da:fa:1a:83:81:2d:52:c2:c9:
ad:98:24:9a:29:3e:ef:a8:fa:bd:89:95:61:a4:6f:
20:2c:ba:00:49:9c:11:74:9a:10:90:07:a5:5e:a5:
cf:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B2:14:87:11:1E:BF:45:0B:8E:0F:00:F0:68:63:55:DE:48:81:CC
X509v3 Authority Key Identifier:
keyid:AA:F3:50:62:1C:C0:1E:8A:1E:D3:72:81:DF:32:B0:97:1C:BD:E5:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvNQYhzAHooe03KB3zKwlxy95Vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f812c7-a85d-4040-8b99-75a8b0974e20/1/qvNQYhzAHooe03KB3zKwlxy95Vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f812c7-a85d-4040-8b99-75a8b0974e20/1/qvNQYhzAHooe03KB3zKwlxy95Vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:81:60:e6:83:9c:b7:90:61:52:9a:a7:5f:04:a0:aa:af:25:
01:80:46:80:08:c4:49:ee:9a:2c:da:17:8f:8d:87:58:52:c0:
ae:0a:41:d8:f5:03:3d:87:11:a0:da:fa:fe:ec:1c:a9:e0:2a:
02:d3:52:7c:d5:b4:9d:b9:84:f7:4b:8e:9f:da:d6:78:70:a8:
a1:ea:55:75:ff:53:ad:fc:d3:74:09:0c:ec:c5:dc:28:73:0d:
32:4d:04:3b:51:e3:aa:96:d3:1b:c3:19:93:9e:ae:14:3a:42:
69:95:6d:f6:a1:4e:86:e5:45:b2:32:91:6f:94:9a:77:26:78:
9d:1b:fb:a6:23:8e:5b:c0:b7:40:78:8d:79:e5:6f:88:47:64:
a8:b3:59:89:5a:0d:0c:41:98:9d:09:de:03:7f:aa:8e:22:bd:
82:c4:7f:fa:ee:56:ef:30:eb:0a:34:11:db:5b:90:22:d2:26:
bc:e9:63:2d:a1:dd:61:0e:8c:ae:47:47:9b:08:dc:9f:0e:46:
e2:89:ae:5b:18:5c:72:8f:1e:c9:75:05:51:02:06:7b:d8:44:
09:5f:f7:c7:58:e6:43:2a:25:55:8b:d8:47:0b:10:10:83:ad:
d6:03:a8:47:7f:ab:be:5d:56:12:25:a2:10:f9:e4:cf:b3:7d:
19:57:d7:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8ctOZ+mVoFkSRyQvRAlkdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhZjM1MDYyMWNjMDFlOGExZWQzNzI4MWRmMzJiMDk3MWNi
ZGU1NTcwHhcNMjUwMTMxMTMwMDI5WhcNMjUwMjAxMTMwMDI5WjAzMTEwLwYDVQQD
EyhmNWIyMTQ4NzExMWViZjQ1MGI4ZTBmMDBmMDY4NjM1NWRlNDg4MWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9y1Ev8gqkrkMjl89Lw+7sxM759X
SQ62R2LmL8qDO6JuVXsh5/gCBpOrDCUloqT1dVdwvEUufMFh+RBOYa8uj/5CaVHd
+61355Zf0Yq/0kn7hCHFZ4J4F1wdEmu91yWviqavLoTYoC/XDqht8UInqlaOEP+D
TqWz/NdXW0QqfmcVJ5OcH+8EF1LkUjGo2FjSHyBoN+inhevV6zSEz2e/bfkvtcgU
H5M9wK9/dlZi+ww7NnYepGzSwEafSby3usrAsyaB2BY3n/SdH9dZ6Vbm3gc5idQ/
gqXa+hqDgS1SwsmtmCSaKT7vqPq9iZVhpG8gLLoASZwRdJoQkAelXqXPLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWyFIcRHr9FC44PAPBoY1XeSIHMMB8GA1UdIwQY
MBaAFKrzUGIcwB6KHtNygd8ysJccveVXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXZOUVloekFIb29lMDNLQjN6S3dseHk5NVZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mODEyYzctYTg1ZC00MDQwLThiOTkt
NzVhOGIwOTc0ZTIwLzEvcXZOUVloekFIb29lMDNLQjN6S3dseHk5NVZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9mODEyYzctYTg1ZC00MDQwLThiOTktNzVhOGIwOTc0ZTIw
LzEvcXZOUVloekFIb29lMDNLQjN6S3dseHk5NVZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOoFg5oOc
t5BhUpqnXwSgqq8lAYBGgAjESe6aLNoXj42HWFLArgpB2PUDPYcRoNr6/uwcqeAq
AtNSfNW0nbmE90uOn9rWeHCooepVdf9TrfzTdAkM7MXcKHMNMk0EO1HjqpbTG8MZ
k56uFDpCaZVt9qFOhuVFsjKRb5SadyZ4nRv7piOOW8C3QHiNeeVviEdkqLNZiVoN
DEGYnQneA3+qjiK9gsR/+u5W7zDrCjQR21uQItImvOljLaHdYQ6MrkdHmwjcnw5G
4omuWxhcco8eyXUFUQIGe9hECV/3x1jmQyolVYvYRwsQEIOt1gOoR3+rvl1WEiWi
EPnkz7N9GVfX4A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:17 2025 by rpki-client