Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft
File: QIyWuStsaY_TT6x9WB1MCQjczpk.mft (raw, json)
Hash identifier: w+4VdhOzEhLhy1m2ignBTv1da+o2DJY5GFJrJRjE4Hs=
Subject key identifier: 39:41:15:FB:1D:68:35:94:41:26:9A:58:E7:AC:4D:43:2B:63:B3:27
Authority key identifier: 40:8C:96:B9:2B:6C:69:8F:D3:4F:AC:7D:58:1D:4C:09:08:DC:CE:99
Certificate issuer: /CN=408c96b92b6c698fd34fac7d581d4c0908dcce99
Certificate serial: 0194BC3C5EE80F8471882A1CDA03D71A1B59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIyWuStsaY_TT6x9WB1MCQjczpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft
Manifest number: 0FFA
Signing time: Fri 31 Jan 2025 12:01:00 +0000
Manifest this update: Fri 31 Jan 2025 12:01:00 +0000
Manifest next update: Sat 01 Feb 2025 12:01:00 +0000
Files and hashes: 1: QIyWuStsaY_TT6x9WB1MCQjczpk.crl (hash: Lq4siESOJ0BXMIRQuluB7wdVMKNnp5INlhuC/t+G5UA=)
2: o7v3w6s-TtM4FqHNx2KIzrdDfyg.roa (hash: E/bv9FlRfrfb8DUNG3s4m8ELhpH6SWFAZyVqbfxptQo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5e:e8:0f:84:71:88:2a:1c:da:03:d7:1a:1b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408c96b92b6c698fd34fac7d581d4c0908dcce99
Validity
Not Before: Jan 31 12:01:00 2025 GMT
Not After : Feb 1 12:01:00 2025 GMT
Subject: CN=394115fb1d68359441269a58e7ac4d432b63b327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:03:b9:63:18:e3:11:fd:14:ce:3d:6d:dc:82:
db:41:ae:81:2d:d0:9b:72:d9:0e:20:d6:83:79:a7:
da:9f:68:15:76:2d:a5:63:5d:b3:c9:24:b7:8d:e6:
05:35:f9:b5:50:3c:f1:8e:88:a0:ea:b9:7b:12:21:
b5:1c:16:da:f5:e2:da:51:14:9f:0c:d4:dd:9d:7b:
2a:88:df:ea:bf:00:f9:42:d0:72:cc:41:8e:89:23:
f9:46:23:89:76:9b:f0:1c:e5:b3:4b:a4:2c:9e:aa:
fa:5e:80:23:57:85:76:f1:b7:2f:6c:ee:23:6b:bb:
ca:8b:d7:d4:c4:27:4b:4f:e4:81:b9:27:dd:9a:74:
76:4e:7e:c1:48:b1:b8:5b:62:a1:dd:d6:86:75:df:
70:1b:61:33:3b:5c:81:4f:e1:f1:ee:5e:da:c2:15:
6e:57:14:88:fd:2b:89:d3:22:dd:7b:5e:a7:28:f9:
ec:a5:65:c8:20:95:86:d5:f8:3e:c5:36:79:70:76:
11:32:84:df:d0:45:b0:3b:ef:3e:fd:34:2a:cf:1b:
c9:3d:82:77:c0:9c:de:41:80:55:fe:25:26:4f:5a:
99:92:b8:05:1b:65:3f:9d:b5:c4:27:c2:3d:ec:b0:
93:c2:a8:b4:d3:f5:e2:34:b4:ab:0c:c8:78:a2:d3:
9f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:41:15:FB:1D:68:35:94:41:26:9A:58:E7:AC:4D:43:2B:63:B3:27
X509v3 Authority Key Identifier:
keyid:40:8C:96:B9:2B:6C:69:8F:D3:4F:AC:7D:58:1D:4C:09:08:DC:CE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIyWuStsaY_TT6x9WB1MCQjczpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b6:cf:1d:8f:61:0b:68:7d:55:68:0e:6f:3c:77:14:d1:48:
61:cb:53:a2:69:3b:cc:63:d2:71:4a:a1:e4:2d:5a:31:3a:4b:
44:06:b0:7b:1f:5a:5b:62:dc:6f:90:d6:9f:9d:36:70:22:a4:
32:df:d1:ac:69:13:fe:52:db:75:7c:ab:2e:8d:68:7d:f0:b5:
a3:37:a2:1e:70:5a:aa:17:05:63:dd:dd:96:45:c6:e7:f2:fc:
dc:8d:db:d9:8e:dd:c8:3c:7b:ce:57:c5:2d:a0:5d:72:2c:78:
c0:aa:1b:9c:08:fb:6f:b8:f3:c1:60:0d:e0:ee:ea:7b:87:a3:
50:ff:47:55:0d:83:a7:aa:ef:b7:1c:39:07:f4:cb:3b:41:8c:
d3:6c:00:12:83:1e:58:0e:a0:55:ed:21:16:9b:49:d8:e1:fe:
84:19:ca:d8:2a:5b:bc:5a:1f:aa:01:78:a4:de:33:4d:38:bd:
2b:b9:ea:97:95:ec:14:c0:a6:f8:9e:09:c4:70:0d:b8:5e:8b:
95:21:36:dd:83:ff:a4:28:1a:5b:7e:03:85:e3:b6:fc:7a:74:
f8:9d:47:4f:43:81:7f:ab:6c:af:cd:9d:80:80:83:39:80:58:
4c:57:bc:02:9d:b5:97:3c:84:99:0f:2d:d3:72:44:38:5f:3f:
e2:98:ff:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PF7oD4RxiCoc2gPXGhtZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwOGM5NmI5MmI2YzY5OGZkMzRmYWM3ZDU4MWQ0YzA5MDhk
Y2NlOTkwHhcNMjUwMTMxMTIwMTAwWhcNMjUwMjAxMTIwMTAwWjAzMTEwLwYDVQQD
EygzOTQxMTVmYjFkNjgzNTk0NDEyNjlhNThlN2FjNGQ0MzJiNjNiMzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9gO5YxjjEf0Uzj1t3ILbQa6BLdCb
ctkOINaDeafan2gVdi2lY12zySS3jeYFNfm1UDzxjoig6rl7EiG1HBba9eLaURSf
DNTdnXsqiN/qvwD5QtByzEGOiSP5RiOJdpvwHOWzS6Qsnqr6XoAjV4V28bcvbO4j
a7vKi9fUxCdLT+SBuSfdmnR2Tn7BSLG4W2Kh3daGdd9wG2EzO1yBT+Hx7l7awhVu
VxSI/SuJ0yLde16nKPnspWXIIJWG1fg+xTZ5cHYRMoTf0EWwO+8+/TQqzxvJPYJ3
wJzeQYBV/iUmT1qZkrgFG2U/nbXEJ8I97LCTwqi00/XiNLSrDMh4otOf0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlBFfsdaDWUQSaaWOesTUMrY7MnMB8GA1UdIwQY
MBaAFECMlrkrbGmP00+sfVgdTAkI3M6ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUl5V3VTdHNhWV9UVDZ4OVdCMU1DUWpjenBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8yMjlmYTItMzJjYy00YjU5LTkzNzct
NTZiYmYwYmVhZjQ3LzEvUUl5V3VTdHNhWV9UVDZ4OVdCMU1DUWpjenBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8yMjlmYTItMzJjYy00YjU5LTkzNzctNTZiYmYwYmVhZjQ3
LzEvUUl5V3VTdHNhWV9UVDZ4OVdCMU1DUWpjenBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfLbPHY9h
C2h9VWgObzx3FNFIYctTomk7zGPScUqh5C1aMTpLRAawex9aW2Lcb5DWn502cCKk
Mt/RrGkT/lLbdXyrLo1offC1ozeiHnBaqhcFY93dlkXG5/L83I3b2Y7dyDx7zlfF
LaBdcix4wKobnAj7b7jzwWAN4O7qe4ejUP9HVQ2Dp6rvtxw5B/TLO0GM02wAEoMe
WA6gVe0hFptJ2OH+hBnK2CpbvFofqgF4pN4zTTi9K7nql5XsFMCm+J4JxHANuF6L
lSE23YP/pCgaW34DheO2/Hp0+J1HT0OBf6tsr82dgICDOYBYTFe8Ap21lzyEmQ8t
03JEOF8/4pj/nw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:26:19 2025 by rpki-client