Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
File: qKumPoBqIdRgNcpunTRbA9vI5VM.mft (raw, json)
Hash identifier: oBIedE/9YHnH7lrT/j7qKd3hbmnmSG2fXnnPtABLgQY=
Subject key identifier: 0B:2C:C4:06:A0:1A:04:FF:C3:34:5F:20:C1:8E:2D:C3:D0:73:14:A1
Authority key identifier: A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53
Certificate issuer: /CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
Certificate serial: 0194BC73251957B627CC539618C6F7C13EA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
Manifest number: 04B6
Signing time: Fri 31 Jan 2025 13:00:50 +0000
Manifest this update: Fri 31 Jan 2025 13:00:50 +0000
Manifest next update: Sat 01 Feb 2025 13:00:50 +0000
Files and hashes: 1: hLWYDKGkI0R5I2b6JbMOAvEbobg.roa (hash: aHTGbClBDx12Nmfza+jRQVDlfN2BuzhbxoY4KmHz1F0=)
2: qKumPoBqIdRgNcpunTRbA9vI5VM.crl (hash: 94EKf+uOoqiBOgu5AHgibI5eoXdsgpF8wEkzebO2RY4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:25:19:57:b6:27:cc:53:96:18:c6:f7:c1:3e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
Validity
Not Before: Jan 31 13:00:50 2025 GMT
Not After : Feb 1 13:00:50 2025 GMT
Subject: CN=0b2cc406a01a04ffc3345f20c18e2dc3d07314a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cd:f3:39:49:3c:59:88:6f:44:7e:9e:2a:b4:
77:7e:86:56:6b:79:59:c1:67:1e:82:70:7e:32:eb:
4a:df:f4:5e:ed:bb:94:dd:fe:fd:2e:69:13:77:25:
d2:65:1a:30:51:f3:96:15:17:e2:80:7c:8a:b7:39:
bd:ac:8c:25:21:77:37:06:e8:2d:b4:36:aa:81:84:
27:84:05:19:28:51:07:2e:08:9e:86:e9:de:6f:b4:
02:5d:8a:31:fc:2e:f4:65:d0:13:0b:2b:cb:f1:2a:
77:43:d4:ef:ad:04:4b:1d:51:8e:2c:ff:fe:f8:e5:
5d:ca:bd:a1:0b:33:42:5e:4c:c2:ca:66:8e:e1:da:
59:a7:cd:d1:76:36:c3:7c:4b:8d:d1:ce:0b:25:56:
82:2d:82:28:23:4b:11:79:a8:34:22:2c:09:61:ef:
df:95:1a:ba:cc:a8:c3:7d:9b:c1:98:1a:63:71:d7:
a7:55:48:fa:d0:d7:b2:02:c1:bf:2e:35:7f:7d:d1:
ce:4e:a1:36:87:09:87:9e:ca:89:e5:c1:00:6a:fc:
ae:f9:16:5b:2e:7b:4c:cf:9e:7b:e6:13:59:e7:cd:
c2:39:5e:5b:eb:6b:cc:79:c2:29:07:9b:d6:e5:e5:
e6:b8:e0:5c:3b:f5:fa:73:57:b0:89:e7:71:a1:42:
25:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2C:C4:06:A0:1A:04:FF:C3:34:5F:20:C1:8E:2D:C3:D0:73:14:A1
X509v3 Authority Key Identifier:
keyid:A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:74:4c:92:1b:6f:df:f5:5d:4d:ce:7b:ea:83:5a:a7:00:31:
80:0d:2f:94:08:0e:0e:74:56:8d:7d:b5:bc:f3:cc:b7:54:8c:
9c:bd:33:7e:e3:13:ad:60:ff:79:1a:ab:e1:51:4e:3c:32:05:
6b:b5:0b:85:33:95:c8:af:28:50:88:2e:02:69:ac:7c:57:49:
74:ad:e3:3f:f9:0f:d3:e2:e2:9a:d8:9c:13:7c:da:5a:96:b0:
54:3d:d4:f7:12:b1:1e:03:4c:c5:52:62:77:88:0f:73:b1:ae:
c2:09:41:95:22:49:fb:22:47:9a:d7:ad:69:bf:23:86:9b:29:
f6:4a:f9:71:4a:db:aa:fd:b4:60:2c:aa:b7:0b:a8:62:ca:ff:
02:02:38:72:f9:69:f8:76:53:3c:b2:a8:45:4b:76:85:e0:7e:
16:02:7b:c7:c2:62:0f:b6:fd:46:84:a4:19:0d:3b:f5:a0:c5:
60:db:47:62:ad:71:ab:38:bd:ec:fa:02:fa:8d:ad:40:d2:24:
e6:1a:9f:4d:1f:fb:09:1f:cc:d7:b7:4c:cb:3a:2b:b3:9f:c8:
57:9e:18:1a:d8:be:3c:17:e5:e0:e0:b6:81:0f:9a:87:5d:c1:
84:51:c6:cc:e5:60:f6:47:08:e5:f0:1d:ff:3b:c3:70:93:e9:
85:bf:0d:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cyUZV7YnzFOWGMb3wT6gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YWJhNjNlODA2YTIxZDQ2MDM1Y2E2ZTlkMzQ1YjAzZGJj
OGU1NTMwHhcNMjUwMTMxMTMwMDUwWhcNMjUwMjAxMTMwMDUwWjAzMTEwLwYDVQQD
EygwYjJjYzQwNmEwMWEwNGZmYzMzNDVmMjBjMThlMmRjM2QwNzMxNGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs3zOUk8WYhvRH6eKrR3foZWa3lZ
wWcegnB+MutK3/Re7buU3f79LmkTdyXSZRowUfOWFRfigHyKtzm9rIwlIXc3Bugt
tDaqgYQnhAUZKFEHLgiehuneb7QCXYox/C70ZdATCyvL8Sp3Q9TvrQRLHVGOLP/+
+OVdyr2hCzNCXkzCymaO4dpZp83RdjbDfEuN0c4LJVaCLYIoI0sReag0IiwJYe/f
lRq6zKjDfZvBmBpjcdenVUj60NeyAsG/LjV/fdHOTqE2hwmHnsqJ5cEAavyu+RZb
LntMz5575hNZ583COV5b62vMecIpB5vW5eXmuOBcO/X6c1ewiedxoUIl8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAssxAagGgT/wzRfIMGOLcPQcxShMB8GA1UdIwQY
MBaAFKirpj6AaiHUYDXKbp00WwPbyOVTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUt1bVBvQnFJZFJnTmNwdW5UUmJBOXZJNVZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82MTg2ZGEtNTFkNC00NjE4LTk1Zjkt
ZjRhMzllMThjZmI0LzEvcUt1bVBvQnFJZFJnTmNwdW5UUmJBOXZJNVZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi82MTg2ZGEtNTFkNC00NjE4LTk1ZjktZjRhMzllMThjZmI0
LzEvcUt1bVBvQnFJZFJnTmNwdW5UUmJBOXZJNVZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf3RMkhtv
3/VdTc576oNapwAxgA0vlAgODnRWjX21vPPMt1SMnL0zfuMTrWD/eRqr4VFOPDIF
a7ULhTOVyK8oUIguAmmsfFdJdK3jP/kP0+LimticE3zaWpawVD3U9xKxHgNMxVJi
d4gPc7GuwglBlSJJ+yJHmtetab8jhpsp9kr5cUrbqv20YCyqtwuoYsr/AgI4cvlp
+HZTPLKoRUt2heB+FgJ7x8JiD7b9RoSkGQ079aDFYNtHYq1xqzi97PoC+o2tQNIk
5hqfTR/7CR/M17dMyzors5/IV54YGti+PBfl4OC2gQ+ah13BhFHGzOVg9kcI5fAd
/zvDcJPphb8NkA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:31 2025 by rpki-client