Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
File: qvSWmELenEweGldZ2Y0e1cDWLvg.mft (raw, json)
Hash identifier: lzU2JWaP3LAR8myzuvRb+f1EMUB4n+4vVt4RiWdfujI=
Subject key identifier: 52:D1:A0:5C:B0:DF:1D:94:72:FA:50:C3:C6:9F:2B:8D:7D:7A:7F:45
Authority key identifier: AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
Certificate issuer: /CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Certificate serial: 0194BC04F06C6A4673F793803BB9FD1AD765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
Manifest number: 0FDE
Signing time: Fri 31 Jan 2025 11:00:27 +0000
Manifest this update: Fri 31 Jan 2025 11:00:27 +0000
Manifest next update: Sat 01 Feb 2025 11:00:27 +0000
Files and hashes: 1: 1-9PbJd606SAcljFaDXOqMtimHsk.roa (hash: KXw8kntxbx0A19gUTumtpNuhW4BHiQmmsQFSl5B6ZYs=)
2: 8w9BEQzRPPy9olwFaw-Zn6Va6YU.roa (hash: g6jDxz/UxGzzizwSc5CDzUUAAjalGAWQr2yYfR64f7Y=)
3: Egh3cL0v2_H-TY-QEmnrWnX0arg.roa (hash: uAUHTXbdFEHAhORw9S54HkonrjueALJUqc4yeHLWHu8=)
4: O93z9J0rbyaeCFXcs4eSEHW-b9g.roa (hash: 7KyqnvgwtoRUDncyt5nR24naYWkBOuGF6zEjC4PH/8g=)
5: TvcD9AMtT0yWtHonps0hocI3dlg.roa (hash: fuU4HZNYKHN5G71TXaO9NMKHsWQTf51zKQ44BmOWV1o=)
6: qvSWmELenEweGldZ2Y0e1cDWLvg.crl (hash: /3Ge+S5koX7nHUMASTpjGIkD0dgZ0i1OWsbEuimwOA0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f0:6c:6a:46:73:f7:93:80:3b:b9:fd:1a:d7:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Validity
Not Before: Jan 31 11:00:27 2025 GMT
Not After : Feb 1 11:00:27 2025 GMT
Subject: CN=52d1a05cb0df1d9472fa50c3c69f2b8d7d7a7f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c5:76:c7:fe:20:8b:9e:59:7f:e4:d0:b6:02:
b5:65:2f:68:d5:da:59:93:b3:cb:b7:62:a6:da:bd:
d8:12:a5:1c:2f:30:f5:84:07:20:bc:66:96:35:2d:
20:6e:82:12:fe:4e:42:dd:ef:f3:54:be:12:aa:76:
7b:b5:c8:72:27:67:fe:3e:bb:56:ac:12:7f:53:05:
7f:ba:d8:d6:4a:d3:dd:c9:28:2c:fe:d6:5a:24:ba:
41:bf:2d:82:82:a8:8b:14:7d:f4:da:8f:dc:d7:65:
d4:33:16:58:03:a6:f7:0b:11:7f:6b:33:e8:ff:1b:
98:da:cd:47:91:38:7f:80:60:a9:b2:8c:fc:ec:66:
fe:b5:c7:60:4b:8a:53:2b:5a:27:39:c5:a9:5a:9b:
e3:ac:6b:e8:a1:c5:b1:ba:12:e4:dc:84:16:bc:bf:
0f:01:5c:9c:d0:d9:86:e2:1c:a9:77:ed:1f:cc:4d:
c5:02:88:9a:03:cb:15:c0:27:45:8d:23:ac:8d:0f:
76:9c:cd:ad:09:f3:54:3e:50:41:ba:15:a3:0f:03:
99:c8:5c:cf:57:8e:bf:43:83:d4:ef:33:db:2f:34:
b5:db:c0:63:47:bc:55:9f:68:92:ac:21:f0:f0:69:
98:c0:73:99:61:82:d3:e1:8f:76:62:99:15:3b:cf:
a7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D1:A0:5C:B0:DF:1D:94:72:FA:50:C3:C6:9F:2B:8D:7D:7A:7F:45
X509v3 Authority Key Identifier:
keyid:AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c0:43:13:f7:e5:f7:44:a9:bd:4f:2b:8b:57:0b:3b:82:1c:
fb:a1:e3:f3:1b:17:62:83:ab:d6:63:de:c9:df:67:ec:17:a7:
b9:c8:f4:9a:55:bc:37:63:8a:6b:86:8e:1a:11:7a:4a:4c:52:
d4:cb:50:12:2f:47:39:dc:b6:3b:46:2e:e1:53:a8:0e:e4:4e:
e0:3a:6f:a9:ba:ad:f1:34:81:86:6b:ce:25:03:a7:f0:de:67:
dc:e4:a0:80:16:ad:40:5e:90:55:01:86:0f:05:9e:8b:48:8c:
88:2c:71:4d:07:a9:8e:94:69:36:2b:6f:52:2e:fd:ba:c7:5b:
a4:14:ab:d3:f2:3d:04:3f:c3:a5:21:1b:a0:52:23:48:c7:c4:
7d:11:d4:92:cf:d6:4c:83:13:72:0a:72:5c:9f:89:64:22:78:
d7:56:46:b9:d4:21:90:33:b2:62:ec:06:8b:40:43:94:f9:53:
d3:fa:ce:c1:9d:3d:44:d9:68:c9:85:b9:47:b1:42:ad:18:0f:
84:81:06:0f:ea:11:35:6f:ac:a2:dc:ff:98:91:c8:5d:1d:e0:
53:28:b7:3a:c9:fa:71:de:22:59:2e:2d:d8:60:20:18:b5:b1:
e4:f8:6d:af:39:35:aa:a6:e0:a6:4d:f5:8b:ba:06:e8:d1:43:
18:56:5a:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BPBsakZz95OAO7n9GtdlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhZjQ5Njk4NDJkZTljNGMxZTFhNTc1OWQ5OGQxZWQ1YzBk
NjJlZjgwHhcNMjUwMTMxMTEwMDI3WhcNMjUwMjAxMTEwMDI3WjAzMTEwLwYDVQQD
Eyg1MmQxYTA1Y2IwZGYxZDk0NzJmYTUwYzNjNjlmMmI4ZDdkN2E3ZjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMV2x/4gi55Zf+TQtgK1ZS9o1dpZ
k7PLt2Km2r3YEqUcLzD1hAcgvGaWNS0gboIS/k5C3e/zVL4SqnZ7tchyJ2f+PrtW
rBJ/UwV/utjWStPdySgs/tZaJLpBvy2CgqiLFH302o/c12XUMxZYA6b3CxF/azPo
/xuY2s1HkTh/gGCpsoz87Gb+tcdgS4pTK1onOcWpWpvjrGvoocWxuhLk3IQWvL8P
AVyc0NmG4hypd+0fzE3FAoiaA8sVwCdFjSOsjQ92nM2tCfNUPlBBuhWjDwOZyFzP
V46/Q4PU7zPbLzS128BjR7xVn2iSrCHw8GmYwHOZYYLT4Y92YpkVO8+njwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFLRoFyw3x2UcvpQw8afK419en9FMB8GA1UdIwQY
MBaAFKr0lphC3pxMHhpXWdmNHtXA1i74MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXZTV21FTGVuRXdlR2xkWjJZMGUxY0RXTHZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MjBmOWYtZjBiOC00NGQyLTgzNjct
ZjgxZmRmNzRlNjU1LzEvcXZTV21FTGVuRXdlR2xkWjJZMGUxY0RXTHZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC83MjBmOWYtZjBiOC00NGQyLTgzNjctZjgxZmRmNzRlNjU1
LzEvcXZTV21FTGVuRXdlR2xkWjJZMGUxY0RXTHZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXMBDE/fl
90SpvU8ri1cLO4Ic+6Hj8xsXYoOr1mPeyd9n7Benucj0mlW8N2OKa4aOGhF6SkxS
1MtQEi9HOdy2O0Yu4VOoDuRO4Dpvqbqt8TSBhmvOJQOn8N5n3OSggBatQF6QVQGG
DwWei0iMiCxxTQepjpRpNitvUi79usdbpBSr0/I9BD/DpSEboFIjSMfEfRHUks/W
TIMTcgpyXJ+JZCJ411ZGudQhkDOyYuwGi0BDlPlT0/rOwZ09RNloyYW5R7FCrRgP
hIEGD+oRNW+sotz/mJHIXR3gUyi3Osn6cd4iWS4t2GAgGLWx5Phtrzk1qqbgpk31
i7oG6NFDGFZaZw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:41:25 2025 by rpki-client