Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
File: Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft (raw, json)
Hash identifier: Jd0W/kgShNrEzrAZih8bZ0qSj16J1aSZCGykxRnRzlU=
Subject key identifier: 27:62:87:FD:4D:B0:BE:22:79:79:81:B5:9E:74:73:7F:ED:92:B9:BF
Authority key identifier: 42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
Certificate issuer: /CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Certificate serial: 0194BD17FB6053331FBDFB9ED92D08FAD4C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
Manifest number: 02AD
Signing time: Fri 31 Jan 2025 16:00:52 +0000
Manifest this update: Fri 31 Jan 2025 16:00:52 +0000
Manifest next update: Sat 01 Feb 2025 16:00:52 +0000
Files and hashes: 1: BVTw6vsjUxNoBbJObq9Iw2eDZYs.roa (hash: N/vjSEKCprvMbHrwkuq5WBhfoLp/HEmES1XrVOaxIlk=)
2: Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl (hash: oYhcuov9fabD0afpHrgD/hTokU1mdWH/oRRxJ34EmEM=)
3: V-XUhjY8P8gJedZg5y5GP34G3CM.roa (hash: y3SF9VXUrzGYogG7i1lmhrHQedHaUwlvjOO7lhb5ku4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:fb:60:53:33:1f:bd:fb:9e:d9:2d:08:fa:d4:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Validity
Not Before: Jan 31 16:00:52 2025 GMT
Not After : Feb 1 16:00:52 2025 GMT
Subject: CN=276287fd4db0be22797981b59e74737fed92b9bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:60:d6:27:15:04:93:f0:c5:3f:3c:f4:3d:67:
70:f0:90:45:02:5c:e3:b8:69:a4:3e:e1:d8:e7:de:
f9:56:16:c2:be:71:e2:0e:d7:2c:ed:ee:f3:ee:14:
66:00:21:1c:fd:6f:b1:e0:67:9f:d4:f4:1c:c5:50:
b3:75:a5:50:27:67:5e:12:6f:aa:20:e5:77:ef:1a:
8e:89:97:d9:7f:13:da:5a:8f:fa:51:6e:2a:80:22:
c2:49:7d:a5:d0:1a:c6:03:ce:ee:fb:24:bd:f8:f5:
91:5b:a1:d3:3c:76:39:49:2e:b4:0e:ff:17:0b:7b:
2d:93:46:47:cd:5b:99:95:07:f7:c5:48:6b:7e:41:
02:10:d0:d5:c3:0f:b3:75:b0:33:e5:6c:24:1a:18:
91:0f:90:35:3f:15:1d:01:b9:0d:bb:64:82:83:73:
c9:ca:ae:d0:99:34:96:ee:c9:bc:74:73:78:2d:be:
f2:80:50:5e:56:3c:bc:b2:4c:21:4b:ca:bc:fe:ef:
d2:bc:fe:1b:52:c1:ee:37:ba:aa:33:0f:73:9d:c0:
21:bc:f3:e4:4c:bc:dc:a2:a4:3e:db:09:12:61:94:
69:c6:b6:35:38:26:6a:5c:b1:49:fd:33:80:b6:a4:
28:74:a7:61:6b:f2:d1:bc:be:ee:fb:0e:38:ef:6e:
fc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:62:87:FD:4D:B0:BE:22:79:79:81:B5:9E:74:73:7F:ED:92:B9:BF
X509v3 Authority Key Identifier:
keyid:42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ca:e8:3c:cd:41:58:94:28:05:e5:15:83:2f:94:fb:ad:23:
af:da:0c:92:91:30:04:0a:5a:65:e9:21:ac:71:f7:50:d4:28:
b5:90:ff:fd:83:96:9d:26:48:07:f1:a1:4b:d9:7c:35:0e:a8:
02:23:11:de:94:fb:eb:be:11:f0:4c:eb:76:6e:12:c2:79:7c:
84:94:52:75:aa:6e:dc:92:01:f7:7e:cd:14:7b:32:88:09:1e:
ac:b1:6a:72:2f:a2:2c:ad:5f:e3:8d:9c:9e:1e:83:a2:76:c2:
3a:f1:09:94:ea:fc:63:62:b6:7f:85:4a:7e:9b:3d:0d:69:2a:
41:40:42:dc:ed:1f:59:bc:6a:38:8e:ae:37:be:5e:96:84:b5:
1a:c7:69:d8:6f:ba:1f:34:a6:a8:12:87:04:4a:eb:3d:f1:d5:
2b:2c:31:f8:e9:72:aa:e4:63:af:29:7a:e1:96:c7:d5:bc:29:
b2:ad:31:0f:80:b0:f0:55:b4:82:f4:7e:9d:31:c7:e5:4a:ef:
ef:c7:88:7c:4b:de:04:f6:89:a0:86:e2:64:99:c4:30:58:60:
c2:15:ce:b0:75:37:bc:65:04:ae:21:e3:1c:a0:4f:35:5e:aa:
d8:a8:e0:7e:3e:32:28:f5:c5:a2:b4:a9:b2:a9:29:60:eb:be:
71:38:ea:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F/tgUzMfvfue2S0I+tTIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMWNiYTU4OTkyMGJlZWJiMTliYzU3MmFlNmQ1MDFiOGNm
NmJiZjAwHhcNMjUwMTMxMTYwMDUyWhcNMjUwMjAxMTYwMDUyWjAzMTEwLwYDVQQD
EygyNzYyODdmZDRkYjBiZTIyNzk3OTgxYjU5ZTc0NzM3ZmVkOTJiOWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmDWJxUEk/DFPzz0PWdw8JBFAlzj
uGmkPuHY5975VhbCvnHiDtcs7e7z7hRmACEc/W+x4Gef1PQcxVCzdaVQJ2deEm+q
IOV37xqOiZfZfxPaWo/6UW4qgCLCSX2l0BrGA87u+yS9+PWRW6HTPHY5SS60Dv8X
C3stk0ZHzVuZlQf3xUhrfkECENDVww+zdbAz5WwkGhiRD5A1PxUdAbkNu2SCg3PJ
yq7QmTSW7sm8dHN4Lb7ygFBeVjy8skwhS8q8/u/SvP4bUsHuN7qqMw9zncAhvPPk
TLzcoqQ+2wkSYZRpxrY1OCZqXLFJ/TOAtqQodKdha/LRvL7u+w447278RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCdih/1NsL4ieXmBtZ50c3/tkrm/MB8GA1UdIwQY
MBaAFEIculiZIL7rsZvFcq5tUBuM9rvwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWh5NldKa2d2dXV4bThWeXJtMVFHNHoydV9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8xYzQ5ZWItNGRkYS00NGVmLWJmMDQt
ZWMwMGUxYTI3Y2M4LzEvUWh5NldKa2d2dXV4bThWeXJtMVFHNHoydV9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8xYzQ5ZWItNGRkYS00NGVmLWJmMDQtZWMwMGUxYTI3Y2M4
LzEvUWh5NldKa2d2dXV4bThWeXJtMVFHNHoydV9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmMroPM1B
WJQoBeUVgy+U+60jr9oMkpEwBApaZekhrHH3UNQotZD//YOWnSZIB/GhS9l8NQ6o
AiMR3pT7674R8Ezrdm4Swnl8hJRSdapu3JIB937NFHsyiAkerLFqci+iLK1f442c
nh6DonbCOvEJlOr8Y2K2f4VKfps9DWkqQUBC3O0fWbxqOI6uN75eloS1Gsdp2G+6
HzSmqBKHBErrPfHVKywx+OlyquRjryl64ZbH1bwpsq0xD4Cw8FW0gvR+nTHH5Urv
78eIfEveBPaJoIbiZJnEMFhgwhXOsHU3vGUEriHjHKBPNV6q2Kjgfj4yKPXForSp
sqkpYOu+cTjq7A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:38 2025 by rpki-client