Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
File: QftrFwgzUAawpqrGUL-v8_yNKSw.mft (raw, json)
Hash identifier: t43F9LLUlpDDDhfGPAVxS9Q98p6HYKRfF0T5deCClOM=
Subject key identifier: AF:A4:89:B5:E5:8E:CE:96:A0:E6:63:8C:27:5A:D3:A6:16:6C:85:50
Authority key identifier: 41:FB:6B:17:08:33:50:06:B0:A6:AA:C6:50:BF:AF:F3:FC:8D:29:2C
Certificate issuer: /CN=41fb6b1708335006b0a6aac650bfaff3fc8d292c
Certificate serial: 0194BCE09E655C9EA6CABC57452C1C29DFEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 15:00:24 +0000
Manifest this update: Fri 31 Jan 2025 15:00:24 +0000
Manifest next update: Sat 01 Feb 2025 15:00:24 +0000
Files and hashes: 1: FmQTGAptfwQVIkuMpg8hJc2vZxA.roa (hash: e7opOpYhedUnony/T0f78z282oNfXK2DZuJyjlY4Q0s=)
2: N5QNqPYfQDsZsb3UbswlkLMUOVI.roa (hash: K+50oxv12Lx2bczUpm74apszZeVkTFLJaHzFVSZLhe4=)
3: QftrFwgzUAawpqrGUL-v8_yNKSw.crl (hash: e9xE0eDPdEANVxqtrEfHA0vN096+AZW4DdZny7yJE18=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:9e:65:5c:9e:a6:ca:bc:57:45:2c:1c:29:df:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fb6b1708335006b0a6aac650bfaff3fc8d292c
Validity
Not Before: Jan 31 15:00:24 2025 GMT
Not After : Feb 1 15:00:24 2025 GMT
Subject: CN=afa489b5e58ece96a0e6638c275ad3a6166c8550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:92:94:2d:db:37:cf:28:c0:8b:09:df:3d:05:
d2:bb:97:67:c5:64:d8:99:08:11:ec:95:fb:00:a2:
6d:50:f2:44:52:d0:6c:3a:e6:41:7e:d5:12:29:d3:
1f:17:f8:ae:b7:a3:cb:11:29:cb:d4:a7:b0:65:22:
22:cb:b4:d4:5c:9b:9b:b5:5a:df:7c:7a:5c:07:3b:
e3:51:ba:c5:ab:a2:03:9d:f3:90:ec:d7:05:5c:93:
32:6e:45:19:9c:91:d8:23:b2:31:b8:ed:d7:ca:ad:
19:08:42:42:36:11:78:7c:13:d1:c8:37:9c:fa:b3:
58:d4:f6:87:0f:15:85:59:00:26:09:91:50:55:9b:
1d:50:e0:e4:32:6a:27:6e:47:80:6a:f4:8e:58:ae:
f5:f0:98:b0:ef:0d:88:54:15:f4:1d:04:aa:0a:9d:
6c:69:40:27:6e:80:eb:b1:2a:73:a0:51:53:b2:86:
00:eb:01:ca:ab:40:54:65:f6:80:bc:4c:ab:da:15:
b0:d1:48:60:b1:56:8d:34:5c:6b:5d:51:70:0f:57:
30:09:27:cf:82:d3:20:81:d6:6c:91:b6:2a:e5:21:
2c:3b:87:71:da:dc:33:82:a5:90:65:f1:60:af:d2:
98:24:82:b9:67:0d:4a:78:be:37:fe:8f:8d:61:f3:
c6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A4:89:B5:E5:8E:CE:96:A0:E6:63:8C:27:5A:D3:A6:16:6C:85:50
X509v3 Authority Key Identifier:
keyid:41:FB:6B:17:08:33:50:06:B0:A6:AA:C6:50:BF:AF:F3:FC:8D:29:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:64:3b:77:8e:36:7b:f2:32:0a:e4:08:cb:16:fb:36:38:1c:
fa:6f:c0:41:53:32:9a:94:5c:ca:11:80:0e:92:a5:0a:45:23:
77:2f:3a:8a:d3:af:7c:9c:05:66:23:cf:a9:35:8b:f9:b8:c3:
91:ce:83:d9:74:35:f2:48:cd:ec:a8:57:63:38:b0:05:9c:eb:
4d:be:44:3b:3b:54:9c:f2:d0:b9:ff:0c:59:92:39:e6:d2:c1:
36:51:b8:7c:41:d1:0b:51:5c:c9:62:47:42:b2:27:4c:4f:fb:
f5:96:ec:57:8e:ae:a8:ff:23:3c:5d:51:d1:17:71:18:ed:5a:
0f:4e:38:77:69:ad:d8:de:61:c1:d8:5d:af:03:0e:06:76:44:
ae:cf:c0:ef:3e:ea:99:24:fa:4c:f7:19:61:11:d8:d8:ea:ca:
54:cf:1f:79:29:1c:85:4b:82:81:6f:c5:36:0b:29:e5:f3:79:
b0:89:c0:ee:8f:a6:29:55:26:30:32:63:56:6c:5c:b9:e4:bb:
44:6f:99:98:2f:50:30:8d:39:ba:6e:94:4f:1b:7b:ea:10:0a:
2b:76:ea:19:41:d1:6e:e6:01:0e:c0:9f:4d:fc:46:a0:7c:f9:
60:67:3f:b9:5e:bf:0f:8a:5e:96:5c:63:23:43:93:01:a2:28:
19:6f:7c:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84J5lXJ6myrxXRSwcKd/uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZmI2YjE3MDgzMzUwMDZiMGE2YWFjNjUwYmZhZmYzZmM4
ZDI5MmMwHhcNMjUwMTMxMTUwMDI0WhcNMjUwMjAxMTUwMDI0WjAzMTEwLwYDVQQD
EyhhZmE0ODliNWU1OGVjZTk2YTBlNjYzOGMyNzVhZDNhNjE2NmM4NTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJKULds3zyjAiwnfPQXSu5dnxWTY
mQgR7JX7AKJtUPJEUtBsOuZBftUSKdMfF/iut6PLESnL1KewZSIiy7TUXJubtVrf
fHpcBzvjUbrFq6IDnfOQ7NcFXJMybkUZnJHYI7IxuO3Xyq0ZCEJCNhF4fBPRyDec
+rNY1PaHDxWFWQAmCZFQVZsdUODkMmonbkeAavSOWK718Jiw7w2IVBX0HQSqCp1s
aUAnboDrsSpzoFFTsoYA6wHKq0BUZfaAvEyr2hWw0UhgsVaNNFxrXVFwD1cwCSfP
gtMggdZskbYq5SEsO4dx2twzgqWQZfFgr9KYJIK5Zw1KeL43/o+NYfPGWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+kibXljs6WoOZjjCda06YWbIVQMB8GA1UdIwQY
MBaAFEH7axcIM1AGsKaqxlC/r/P8jSksMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWZ0ckZ3Z3pVQWF3cHFyR1VMLXY4X3lOS1N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9jNzcxYzMtY2E5MC00ZmQyLTk5YWMt
MDRjODJlZDZlZDRjLzEvUWZ0ckZ3Z3pVQWF3cHFyR1VMLXY4X3lOS1N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9jNzcxYzMtY2E5MC00ZmQyLTk5YWMtMDRjODJlZDZlZDRj
LzEvUWZ0ckZ3Z3pVQWF3cHFyR1VMLXY4X3lOS1N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGQ7d442
e/IyCuQIyxb7Njgc+m/AQVMympRcyhGADpKlCkUjdy86itOvfJwFZiPPqTWL+bjD
kc6D2XQ18kjN7KhXYziwBZzrTb5EOztUnPLQuf8MWZI55tLBNlG4fEHRC1FcyWJH
QrInTE/79ZbsV46uqP8jPF1R0RdxGO1aD044d2mt2N5hwdhdrwMOBnZErs/A7z7q
mST6TPcZYRHY2OrKVM8feSkchUuCgW/FNgsp5fN5sInA7o+mKVUmMDJjVmxcueS7
RG+ZmC9QMI05um6UTxt76hAKK3bqGUHRbuYBDsCfTfxGoHz5YGc/uV6/D4pellxj
I0OTAaIoGW98og==
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:43:45 2025 by rpki-client