Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
File: Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft (raw, json)
Hash identifier: ibZAF6rcATH7bbkVckAzfq4Tf+rtfydFPBz0KBsFd6c=
Subject key identifier: 42:98:09:E3:0C:AE:EE:13:9B:B3:FB:13:EB:A8:DE:9A:A8:B2:B8:C0
Authority key identifier: 43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD
Certificate issuer: /CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd
Certificate serial: 0194BCA9C58F8A2E9BB872732635C23D14DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
Manifest number: 0F04
Signing time: Fri 31 Jan 2025 14:00:30 +0000
Manifest this update: Fri 31 Jan 2025 14:00:30 +0000
Manifest next update: Sat 01 Feb 2025 14:00:30 +0000
Files and hashes: 1: Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl (hash: 58NcGaL1YAeuRRvHMJ/KuLIabkHz0ajUQtfxkVu5fb0=)
2: va7AQWl8BQjaONNSCF5yVhc4880.roa (hash: AGJNupVoKM3POzJ8IDK+xNNPIdqw4tebW6fT+PeJcHc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c5:8f:8a:2e:9b:b8:72:73:26:35:c2:3d:14:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd
Validity
Not Before: Jan 31 14:00:30 2025 GMT
Not After : Feb 1 14:00:30 2025 GMT
Subject: CN=429809e30caeee139bb3fb13eba8de9aa8b2b8c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d8:1b:af:9d:c6:a1:22:9d:b8:57:3c:3e:f6:
20:a2:9f:33:66:b9:8f:9b:df:b8:a5:4b:35:b2:f2:
f0:c6:01:80:3f:aa:e6:5c:35:7f:db:ba:4b:a1:d1:
4b:3d:df:7b:da:d9:fe:5a:e5:75:61:1a:af:6a:a4:
9a:78:14:a8:b9:f0:e8:bb:13:ca:4d:02:e7:92:c2:
17:77:8a:95:b2:10:c2:11:98:6f:03:81:ef:a0:60:
5f:db:80:9e:34:eb:aa:4f:45:33:a5:36:3d:7e:ab:
28:8f:d9:39:6f:96:5d:06:5a:19:32:be:44:30:39:
a6:2a:b1:78:c5:3f:40:2c:a2:2a:83:f8:ea:e4:08:
06:c9:30:de:9f:9b:d3:0d:22:c0:d6:3d:e2:1b:f3:
21:85:58:1f:ed:22:05:4d:d8:56:d2:99:4b:29:00:
ff:74:e3:1f:94:18:75:20:fc:29:66:5d:bd:2b:23:
64:6f:c6:44:fe:54:19:bc:71:54:21:03:42:de:bb:
f3:d2:c4:00:b7:db:25:38:3f:8e:21:61:bf:96:ed:
6c:02:51:66:8c:fa:a6:c0:96:a0:75:8f:30:50:d1:
57:5c:14:04:69:10:e6:07:28:79:87:45:bc:1a:5b:
06:d9:25:b1:8d:05:97:ca:26:46:74:cb:6e:96:06:
9c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:98:09:E3:0C:AE:EE:13:9B:B3:FB:13:EB:A8:DE:9A:A8:B2:B8:C0
X509v3 Authority Key Identifier:
keyid:43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:3e:e8:03:4f:92:b2:29:b5:d7:d1:ad:05:af:67:7d:a7:78:
db:d0:8f:4f:e5:84:89:21:9a:cc:c4:a1:05:36:5b:4d:3f:c1:
98:10:d9:18:e2:75:c1:74:eb:05:1c:27:a4:fb:e7:db:fe:84:
c6:93:7e:f6:7e:e7:6a:df:39:df:42:99:80:8e:d1:ac:96:1e:
fa:cd:97:d6:5f:e5:e0:79:16:6a:9d:92:16:42:ea:65:2d:6e:
fd:bc:f5:4a:2e:f5:50:d3:a5:15:da:ca:6d:83:eb:ca:8d:9b:
2c:16:62:37:78:04:71:98:94:68:ee:e5:26:52:1f:d1:4b:ac:
f2:65:9c:b4:fe:e3:27:61:4e:94:a4:ee:20:83:7a:cf:a1:02:
9a:90:11:5c:55:50:40:92:c7:6a:23:07:a4:23:16:e0:d0:2e:
f2:7a:6a:b4:f8:9a:a7:a3:68:53:74:f7:f3:2d:4a:22:f7:a4:
47:00:53:2a:ff:68:bc:67:48:24:ab:28:7c:d9:4f:79:97:f0:
c9:8e:3a:06:83:88:1b:25:bd:b4:ed:83:3a:89:25:1e:d7:ee:
c2:3a:ce:03:96:4f:05:08:44:d7:f3:5e:3b:ad:64:0f:d6:df:
0d:30:4f:70:53:09:8e:c3:4c:79:9a:a8:80:07:22:61:ca:23:
fc:56:18:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qcWPii6buHJzJjXCPRTdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzN2E1YzdlN2M3ZWFiMjM5MjM3MmZjMzhkNDhjN2E5Nzdi
MjRhYmQwHhcNMjUwMTMxMTQwMDMwWhcNMjUwMjAxMTQwMDMwWjAzMTEwLwYDVQQD
Eyg0Mjk4MDllMzBjYWVlZTEzOWJiM2ZiMTNlYmE4ZGU5YWE4YjJiOGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdgbr53GoSKduFc8PvYgop8zZrmP
m9+4pUs1svLwxgGAP6rmXDV/27pLodFLPd972tn+WuV1YRqvaqSaeBSoufDouxPK
TQLnksIXd4qVshDCEZhvA4HvoGBf24CeNOuqT0UzpTY9fqsoj9k5b5ZdBloZMr5E
MDmmKrF4xT9ALKIqg/jq5AgGyTDen5vTDSLA1j3iG/MhhVgf7SIFTdhW0plLKQD/
dOMflBh1IPwpZl29KyNkb8ZE/lQZvHFUIQNC3rvz0sQAt9slOD+OIWG/lu1sAlFm
jPqmwJagdY8wUNFXXBQEaRDmByh5h0W8GlsG2SWxjQWXyiZGdMtulgachwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKYCeMMru4Tm7P7E+uo3pqosrjAMB8GA1UdIwQY
MBaAFEN6XH58fqsjkjcvw41Ix6l3skq9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTNwY2ZueC1xeU9TTnlfRGpVakhxWGV5U3IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy83ZmFhZTYtOWYzMC00MmVkLWIzNzUt
NTVhNDNhYWI4ZjczLzEvUTNwY2ZueC1xeU9TTnlfRGpVakhxWGV5U3IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy83ZmFhZTYtOWYzMC00MmVkLWIzNzUtNTVhNDNhYWI4Zjcz
LzEvUTNwY2ZueC1xeU9TTnlfRGpVakhxWGV5U3IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGD7oA0+S
sim119GtBa9nfad429CPT+WEiSGazMShBTZbTT/BmBDZGOJ1wXTrBRwnpPvn2/6E
xpN+9n7nat8530KZgI7RrJYe+s2X1l/l4HkWap2SFkLqZS1u/bz1Si71UNOlFdrK
bYPryo2bLBZiN3gEcZiUaO7lJlIf0Uus8mWctP7jJ2FOlKTuIIN6z6ECmpARXFVQ
QJLHaiMHpCMW4NAu8npqtPiap6NoU3T38y1KIvekRwBTKv9ovGdIJKsofNlPeZfw
yY46BoOIGyW9tO2DOoklHtfuwjrOA5ZPBQhE1/NeO61kD9bfDTBPcFMJjsNMeZqo
gAciYcoj/FYYeQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 23:42:12 2025 by rpki-client