Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
File: q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft (raw, json)
Hash identifier: lclewhxC681t8GZ7JC55wcBgjmxDqVr+Ybv8xX7pgPQ=
Subject key identifier: 01:DF:47:F0:E4:85:79:89:D7:9B:79:43:43:A3:F7:FD:79:98:5F:3B
Authority key identifier: AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
Certificate issuer: /CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Certificate serial: 0194BC7317979557BCBF1E88452F4432B91C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
Manifest number: 1435
Signing time: Fri 31 Jan 2025 13:00:46 +0000
Manifest this update: Fri 31 Jan 2025 13:00:46 +0000
Manifest next update: Sat 01 Feb 2025 13:00:46 +0000
Files and hashes: 1: 7XQS9fgmC0xNqPuIMhkAaeUEx0g.roa (hash: 30Yt0v1j2/2WiJgCszBG8BLPKcC0q4CL1Hk0j9TqmbM=)
2: CGRTCK3Ge4ADHzCWSkOhJS2ZO-g.roa (hash: qGlSQR4VzbycTQ4yuefrd6Ta0FRZb+PMZoj6HNp+HDk=)
3: q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl (hash: SiOciRvJl+muCP4aNLPdYE73Z//daiM3uVnlAHk2xqQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:17:97:95:57:bc:bf:1e:88:45:2f:44:32:b9:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9f84c6a48d5c6dfe64149873b148d1120b009b
Validity
Not Before: Jan 31 13:00:46 2025 GMT
Not After : Feb 1 13:00:46 2025 GMT
Subject: CN=01df47f0e4857989d79b794343a3f7fd79985f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2d:cf:65:be:6d:66:98:ad:56:43:b1:6e:b6:
22:1a:d5:6f:b8:41:88:35:3b:22:e3:cd:fa:75:4b:
ff:ec:b4:7e:89:eb:62:fa:ab:70:39:30:0e:ed:e1:
67:05:46:c4:8d:46:a7:74:d3:b8:c7:3f:5b:1e:9b:
a7:fc:b4:16:ef:db:15:a4:e9:1e:11:8e:87:12:21:
19:65:b4:3d:18:55:9f:e3:63:2e:ce:1d:aa:0f:51:
c6:e8:e4:f3:f1:95:96:89:74:2c:90:26:6c:22:2e:
b8:5c:67:64:58:06:be:3c:78:23:2e:a2:b8:a4:7f:
d9:df:ad:54:46:8c:e7:40:1f:a5:0d:de:96:d2:1d:
59:19:e5:5b:02:b8:d4:82:c5:85:85:14:97:b7:32:
c2:24:76:ef:58:9c:35:d5:c2:3d:35:36:13:9d:4b:
c6:21:ac:4b:53:2f:a7:f7:31:c0:ec:28:d2:c7:c6:
96:ac:d2:d5:42:57:21:b3:90:45:4a:77:04:ef:63:
6b:8d:40:d4:03:2e:9e:5a:19:a2:f5:f3:a8:4e:64:
63:48:a0:b6:4f:66:0a:b5:5d:50:28:06:7c:e7:04:
51:98:78:e5:70:e4:70:39:62:5d:ea:ad:8c:21:81:
ee:1e:b1:3f:d6:0c:7b:fa:55:c2:28:92:1e:3d:f5:
a7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:DF:47:F0:E4:85:79:89:D7:9B:79:43:43:A3:F7:FD:79:98:5F:3B
X509v3 Authority Key Identifier:
keyid:AB:9F:84:C6:A4:8D:5C:6D:FE:64:14:98:73:B1:48:D1:12:0B:00:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5-ExqSNXG3-ZBSYc7FI0RILAJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/36177f-7cd8-4bd3-8689-213d64beff71/1/q5-ExqSNXG3-ZBSYc7FI0RILAJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:19:b1:de:2f:ef:8b:61:fe:72:2d:c1:b0:0d:35:a4:3e:6a:
ce:32:9b:cb:ea:cb:e2:e2:32:68:1e:3b:bd:e7:08:42:d8:de:
b5:01:87:b3:20:42:68:4a:db:53:9c:f3:1a:8c:7f:c0:8b:ec:
00:97:31:86:7a:f8:cf:b4:a8:4f:c0:9c:b7:0d:3c:4a:08:1f:
0e:6d:30:af:ed:f7:b7:5c:3a:d7:76:51:e8:63:ce:7b:17:cc:
07:6f:e3:60:1c:d7:5a:f6:65:01:86:34:75:fc:43:a7:30:c3:
a7:67:4d:8c:f5:96:bc:64:93:a5:88:8f:c6:f1:6f:ff:b7:62:
db:92:6c:29:c3:77:c3:36:14:68:a0:a4:1a:9c:3b:a0:24:b3:
92:65:42:49:11:c4:5b:fa:b5:c2:0a:4a:d9:36:2f:fb:83:ac:
7c:2c:61:3f:5c:c9:1c:fa:f6:a5:76:d4:78:4a:36:6f:e6:f2:
2b:67:c5:fa:42:6a:9f:08:c4:dd:6d:8b:99:70:09:85:be:ae:
d2:d2:1b:cf:42:f4:ce:43:83:f3:d7:3b:a4:51:9d:b0:70:33:
1f:e1:52:11:99:5f:a7:c2:56:14:6c:1b:5c:55:0b:82:ef:34:
c2:4f:2d:b8:4a:a3:74:77:da:19:c6:f3:bf:ce:94:5e:5c:80:
b4:f0:19:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cxeXlVe8vx6IRS9EMrkcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiOWY4NGM2YTQ4ZDVjNmRmZTY0MTQ5ODczYjE0OGQxMTIw
YjAwOWIwHhcNMjUwMTMxMTMwMDQ2WhcNMjUwMjAxMTMwMDQ2WjAzMTEwLwYDVQQD
EygwMWRmNDdmMGU0ODU3OTg5ZDc5Yjc5NDM0M2EzZjdmZDc5OTg1ZjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC3PZb5tZpitVkOxbrYiGtVvuEGI
NTsi4836dUv/7LR+ieti+qtwOTAO7eFnBUbEjUandNO4xz9bHpun/LQW79sVpOke
EY6HEiEZZbQ9GFWf42Muzh2qD1HG6OTz8ZWWiXQskCZsIi64XGdkWAa+PHgjLqK4
pH/Z361URoznQB+lDd6W0h1ZGeVbArjUgsWFhRSXtzLCJHbvWJw11cI9NTYTnUvG
IaxLUy+n9zHA7CjSx8aWrNLVQlchs5BFSncE72NrjUDUAy6eWhmi9fOoTmRjSKC2
T2YKtV1QKAZ85wRRmHjlcORwOWJd6q2MIYHuHrE/1gx7+lXCKJIePfWnBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHfR/DkhXmJ15t5Q0Oj9/15mF87MB8GA1UdIwQY
MBaAFKufhMakjVxt/mQUmHOxSNESCwCbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTUtRXhxU05YRzMtWkJTWWM3RkkwUklMQUpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zNjE3N2YtN2NkOC00YmQzLTg2ODkt
MjEzZDY0YmVmZjcxLzEvcTUtRXhxU05YRzMtWkJTWWM3RkkwUklMQUpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8zNjE3N2YtN2NkOC00YmQzLTg2ODktMjEzZDY0YmVmZjcx
LzEvcTUtRXhxU05YRzMtWkJTWWM3RkkwUklMQUpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFBmx3i/v
i2H+ci3BsA01pD5qzjKby+rL4uIyaB47vecIQtjetQGHsyBCaErbU5zzGox/wIvs
AJcxhnr4z7SoT8Cctw08SggfDm0wr+33t1w613ZR6GPOexfMB2/jYBzXWvZlAYY0
dfxDpzDDp2dNjPWWvGSTpYiPxvFv/7di25JsKcN3wzYUaKCkGpw7oCSzkmVCSRHE
W/q1wgpK2TYv+4OsfCxhP1zJHPr2pXbUeEo2b+byK2fF+kJqnwjE3W2LmXAJhb6u
0tIbz0L0zkOD89c7pFGdsHAzH+FSEZlfp8JWFGwbXFULgu80wk8tuEqjdHfaGcbz
v86UXlyAtPAZmg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:01:41 2025 by rpki-client