Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
File: CQ-seFK0LR5rHD8PKdE85ensstY.mft (raw, json)
Hash identifier: QGim9K7KVwmUZq5SlkEtfNcgHwJl2cRD/7/297AFKGo=
Subject key identifier: FA:58:61:24:68:DD:69:E4:CB:43:50:BD:E2:8C:10:2F:79:AE:1B:5A
Authority key identifier: 09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
Certificate issuer: /CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Certificate serial: 0194BBCE5A463DC7C65AD0AFF36B937F12BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:00:50 +0000
Manifest this update: Fri 31 Jan 2025 10:00:50 +0000
Manifest next update: Sat 01 Feb 2025 10:00:50 +0000
Files and hashes: 1: CQ-seFK0LR5rHD8PKdE85ensstY.crl (hash: 0AKd1XN6zOtIOm0kX/7o+xE7vZtLU3sqr43yDtPGZ88=)
2: tktnNkqo-Ucay9gG5szDFherVRo.roa (hash: fENlsqvH8zzdUmZ9S6kxqqHzh2VPnW1ALr3bQ6F8fDs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:5a:46:3d:c7:c6:5a:d0:af:f3:6b:93:7f:12:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Validity
Not Before: Jan 31 10:00:50 2025 GMT
Not After : Feb 1 10:00:50 2025 GMT
Subject: CN=fa58612468dd69e4cb4350bde28c102f79ae1b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b2:78:0d:72:ed:ee:79:bc:5d:07:09:d2:2e:
63:d9:00:1a:39:cb:ae:d0:35:b1:56:74:00:be:29:
eb:17:03:63:0a:9c:64:35:e9:11:2e:44:0e:7f:25:
04:87:0f:c6:d7:94:ec:41:7b:82:c7:7a:e5:d1:23:
bb:07:0b:32:d5:f2:0c:81:b5:ea:e0:94:1e:4f:21:
97:07:f1:8d:a6:4c:57:62:40:f7:65:3d:7b:12:e5:
07:19:e0:69:18:06:41:ea:b5:3f:9f:09:20:28:21:
56:cc:2e:9b:94:0f:ab:6c:83:3c:2f:4f:c2:73:0c:
f2:82:8c:11:49:e6:f8:96:79:fa:c7:66:6c:ba:c1:
33:6e:c7:e6:55:8f:c0:87:e8:a7:dd:63:3a:e6:70:
eb:78:a1:a3:dd:0f:03:c6:61:cb:fd:31:89:82:31:
91:dc:7f:94:0a:3c:2a:3c:8b:89:ae:63:5c:79:10:
5e:4b:7c:85:a2:91:ac:3e:b3:4c:6d:cb:83:a8:ba:
76:8f:1b:24:95:6a:81:7e:a1:8c:41:82:59:cc:31:
c2:ba:a0:9a:6a:c3:19:96:14:3d:fb:42:e2:5b:fb:
97:60:33:24:97:32:9d:a0:d2:30:a5:b5:cf:04:cf:
93:62:70:01:56:53:73:f7:66:20:03:ee:80:e4:ea:
18:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:58:61:24:68:DD:69:E4:CB:43:50:BD:E2:8C:10:2F:79:AE:1B:5A
X509v3 Authority Key Identifier:
keyid:09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:c2:e2:a5:f3:84:95:ad:2c:4a:e7:31:e2:d9:f1:8a:0a:d6:
bc:c4:68:9c:f8:6c:0f:09:42:d4:32:43:32:28:78:40:f5:93:
8a:06:3f:a8:1a:eb:77:31:76:2f:6c:ed:c9:a7:ad:fe:41:25:
bf:c3:b9:55:ac:1c:f8:2d:36:43:2b:bb:ac:c6:b3:35:35:5c:
a1:ee:41:75:3f:91:54:3c:b9:b7:84:3d:d5:36:06:15:02:2b:
31:a0:cf:eb:4f:c4:03:33:75:2f:9f:fb:90:a1:29:ec:29:b3:
f1:68:53:4d:b8:5c:ac:aa:09:b4:5e:f2:67:07:77:55:0b:65:
f4:63:39:db:48:d4:44:68:4f:ad:3d:d6:9c:02:b9:67:35:8f:
6d:27:e4:1f:73:74:67:82:45:29:f5:89:2f:92:ba:bb:32:74:
99:82:ee:b5:12:08:02:67:33:d5:09:9d:e2:97:0e:be:b0:84:
27:99:81:d8:2e:0e:e8:45:8a:53:bf:dd:59:8c:46:da:a6:ef:
ab:b8:9f:e2:7b:8c:ea:15:30:d2:1f:22:d3:cc:8a:6c:eb:20:
97:cd:7b:f9:f0:35:dc:a1:bb:49:db:51:92:bb:3c:19:ad:b9:
02:cc:40:e4:eb:b7:03:21:28:e2:ec:1f:4c:ee:6a:34:27:72:
0e:4c:33:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zlpGPcfGWtCv82uTfxK+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MGZhYzc4NTJiNDJkMWU2YjFjM2YwZjI5ZDEzY2U1ZTll
Y2IyZDYwHhcNMjUwMTMxMTAwMDUwWhcNMjUwMjAxMTAwMDUwWjAzMTEwLwYDVQQD
EyhmYTU4NjEyNDY4ZGQ2OWU0Y2I0MzUwYmRlMjhjMTAyZjc5YWUxYjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrJ4DXLt7nm8XQcJ0i5j2QAaOcuu
0DWxVnQAvinrFwNjCpxkNekRLkQOfyUEhw/G15TsQXuCx3rl0SO7Bwsy1fIMgbXq
4JQeTyGXB/GNpkxXYkD3ZT17EuUHGeBpGAZB6rU/nwkgKCFWzC6blA+rbIM8L0/C
cwzygowRSeb4lnn6x2ZsusEzbsfmVY/Ah+in3WM65nDreKGj3Q8DxmHL/TGJgjGR
3H+UCjwqPIuJrmNceRBeS3yFopGsPrNMbcuDqLp2jxsklWqBfqGMQYJZzDHCuqCa
asMZlhQ9+0LiW/uXYDMklzKdoNIwpbXPBM+TYnABVlNz92YgA+6A5OoYtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpYYSRo3Wnky0NQveKMEC95rhtaMB8GA1UdIwQY
MBaAFAkPrHhStC0eaxw/DynRPOXp7LLWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1Etc2VGSzBMUjVySEQ4UEtkRTg1ZW5zc3RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy84NzEwYmEtZmI1OS00NjZiLTllNmIt
ZTg5ODY4MWJjODllLzEvQ1Etc2VGSzBMUjVySEQ4UEtkRTg1ZW5zc3RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy84NzEwYmEtZmI1OS00NjZiLTllNmItZTg5ODY4MWJjODll
LzEvQ1Etc2VGSzBMUjVySEQ4UEtkRTg1ZW5zc3RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ8LipfOE
la0sSucx4tnxigrWvMRonPhsDwlC1DJDMih4QPWTigY/qBrrdzF2L2ztyaet/kEl
v8O5Vawc+C02Qyu7rMazNTVcoe5BdT+RVDy5t4Q91TYGFQIrMaDP60/EAzN1L5/7
kKEp7Cmz8WhTTbhcrKoJtF7yZwd3VQtl9GM520jURGhPrT3WnAK5ZzWPbSfkH3N0
Z4JFKfWJL5K6uzJ0mYLutRIIAmcz1Qmd4pcOvrCEJ5mB2C4O6EWKU7/dWYxG2qbv
q7if4nuM6hUw0h8i08yKbOsgl817+fA13KG7SdtRkrs8Ga25AsxA5Ou3AyEo4uwf
TO5qNCdyDkwzeQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:44 2025 by rpki-client