Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft
File: Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft (raw, json)
Hash identifier: cH1Ai0jyrVSsQl5aMt2LvLdBNcdPwvparPcKOXeIxHQ=
Subject key identifier: DC:D0:52:E4:96:C0:24:64:BE:D2:E9:1B:9A:47:75:23:4B:E4:7B:C1
Authority key identifier: 42:DE:27:FA:88:79:05:E0:C9:C1:F5:3F:67:F2:3F:29:6D:04:5F:0E
Certificate issuer: /CN=42de27fa887905e0c9c1f53f67f23f296d045f0e
Certificate serial: 0194BC3C8AA90EAE9740FB6609DDA71764FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft
Manifest number: 09F3
Signing time: Fri 31 Jan 2025 12:01:11 +0000
Manifest this update: Fri 31 Jan 2025 12:01:11 +0000
Manifest next update: Sat 01 Feb 2025 12:01:11 +0000
Files and hashes: 1: GjL9gwLKb-oKSYTlHtFQE_CZaJs.roa (hash: mCVCuaWcX9YvC2fV3yIwbRSQDcC/PmXYfMHTWio0d9k=)
2: Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.crl (hash: zRvwxups8UXJfW9HVbkvH24jjL31xMeNBqBGFpNdS5w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8a:a9:0e:ae:97:40:fb:66:09:dd:a7:17:64:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42de27fa887905e0c9c1f53f67f23f296d045f0e
Validity
Not Before: Jan 31 12:01:11 2025 GMT
Not After : Feb 1 12:01:11 2025 GMT
Subject: CN=dcd052e496c02464bed2e91b9a4775234be47bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:87:9d:32:df:72:70:ce:c5:b8:fe:f2:ce:b1:
7a:2a:b8:87:1a:96:55:28:e6:71:af:7e:01:98:c4:
13:42:3b:a7:88:8e:6b:5d:a7:ea:e7:62:29:76:a6:
3a:ec:da:f3:7e:d9:68:04:46:7c:ac:d7:71:6d:44:
1f:9c:93:b1:05:a6:66:e7:57:60:54:21:f5:cc:f8:
99:f2:6d:df:7b:24:15:d8:b3:d1:ad:98:34:a9:27:
dd:40:b5:ec:16:52:13:11:b3:b2:cf:bd:7c:36:43:
d1:81:7f:49:b5:3d:58:d2:64:f8:50:cb:6a:83:14:
3d:a6:06:95:60:55:ab:c2:09:eb:bd:a8:b4:ff:3c:
7e:2d:b0:66:17:a5:f8:4d:1a:f0:2f:54:48:2d:dc:
dd:84:d3:92:64:88:46:34:64:e3:6d:1e:9b:1f:ed:
74:de:50:d4:78:e2:b7:a0:34:ac:0b:9d:6a:3e:64:
6f:c0:55:2c:e4:85:b1:49:55:ef:fd:35:25:34:fc:
7d:d3:ed:04:e0:dc:23:80:04:81:d4:9f:ea:dc:39:
e4:dd:29:56:22:4f:d5:f0:35:7f:85:1a:12:75:b8:
33:e1:49:20:3c:91:55:5d:d5:89:87:e7:bd:79:9e:
8b:e3:67:7a:ab:fe:9c:de:d6:eb:e1:15:d5:b0:36:
b2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D0:52:E4:96:C0:24:64:BE:D2:E9:1B:9A:47:75:23:4B:E4:7B:C1
X509v3 Authority Key Identifier:
keyid:42:DE:27:FA:88:79:05:E0:C9:C1:F5:3F:67:F2:3F:29:6D:04:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a2:cb:72:db:9b:30:e0:25:7d:25:fc:e1:9f:bb:7f:7c:01:
e4:4c:ce:20:14:16:83:43:4f:10:d7:3c:0b:4b:e7:bb:54:16:
bb:86:8a:38:d3:b2:2a:96:9c:4a:55:f1:68:63:52:8d:4a:fd:
ac:16:f4:12:33:04:c9:71:03:16:40:4c:0e:7b:fc:a0:3c:0d:
df:a7:27:c0:2c:f5:7d:b8:44:8d:80:26:97:34:45:c1:09:64:
33:dc:d8:d7:f0:f5:80:c6:07:21:03:93:8e:79:2e:ec:bd:30:
01:ef:8b:42:df:53:54:f4:3c:3b:87:13:74:a6:7e:77:e2:4f:
0c:72:08:30:af:97:d6:53:8d:61:17:5e:bd:ff:0a:8d:09:55:
c6:bf:9b:ed:e5:28:45:3b:41:89:6f:33:b3:a8:b0:9d:2d:74:
04:3d:77:66:3d:3b:94:7d:a0:23:99:21:7e:0d:e5:93:f4:5a:
4d:71:4c:67:93:00:f7:5d:7f:99:10:7a:cd:01:f6:b2:0c:95:
0f:85:cc:63:5b:a8:af:4a:4c:76:72:49:aa:b0:ec:63:e1:48:
6c:ea:3d:8e:54:61:47:43:80:83:a6:79:d1:36:a9:19:af:e0:
4a:d2:2a:79:b4:fb:1d:7a:0e:a0:24:a2:54:60:72:4f:40:01:
34:aa:39:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PIqpDq6XQPtmCd2nF2T/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZGUyN2ZhODg3OTA1ZTBjOWMxZjUzZjY3ZjIzZjI5NmQw
NDVmMGUwHhcNMjUwMTMxMTIwMTExWhcNMjUwMjAxMTIwMTExWjAzMTEwLwYDVQQD
EyhkY2QwNTJlNDk2YzAyNDY0YmVkMmU5MWI5YTQ3NzUyMzRiZTQ3YmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IedMt9ycM7FuP7yzrF6KriHGpZV
KOZxr34BmMQTQjuniI5rXafq52IpdqY67NrzftloBEZ8rNdxbUQfnJOxBaZm51dg
VCH1zPiZ8m3feyQV2LPRrZg0qSfdQLXsFlITEbOyz718NkPRgX9JtT1Y0mT4UMtq
gxQ9pgaVYFWrwgnrvai0/zx+LbBmF6X4TRrwL1RILdzdhNOSZIhGNGTjbR6bH+10
3lDUeOK3oDSsC51qPmRvwFUs5IWxSVXv/TUlNPx90+0E4NwjgASB1J/q3Dnk3SlW
Ik/V8DV/hRoSdbgz4UkgPJFVXdWJh+e9eZ6L42d6q/6c3tbr4RXVsDaytwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNzQUuSWwCRkvtLpG5pHdSNL5HvBMB8GA1UdIwQY
MBaAFELeJ/qIeQXgycH1P2fyPyltBF8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXQ0bi1vaDVCZURKd2ZVX1pfSV9LVzBFWHc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9hYTRjYzQtNTUzNy00YWViLTlmZWQt
ZDI5YjdkNDc4NjMxLzEvUXQ0bi1vaDVCZURKd2ZVX1pfSV9LVzBFWHc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9hYTRjYzQtNTUzNy00YWViLTlmZWQtZDI5YjdkNDc4NjMx
LzEvUXQ0bi1vaDVCZURKd2ZVX1pfSV9LVzBFWHc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaqLLctub
MOAlfSX84Z+7f3wB5EzOIBQWg0NPENc8C0vnu1QWu4aKONOyKpacSlXxaGNSjUr9
rBb0EjMEyXEDFkBMDnv8oDwN36cnwCz1fbhEjYAmlzRFwQlkM9zY1/D1gMYHIQOT
jnku7L0wAe+LQt9TVPQ8O4cTdKZ+d+JPDHIIMK+X1lONYRdevf8KjQlVxr+b7eUo
RTtBiW8zs6iwnS10BD13Zj07lH2gI5khfg3lk/RaTXFMZ5MA911/mRB6zQH2sgyV
D4XMY1uor0pMdnJJqrDsY+FIbOo9jlRhR0OAg6Z50TapGa/gStIqebT7HXoOoCSi
VGByT0ABNKo50Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:28 2025 by rpki-client