Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
File: qBaZpbxkh70vF0nRM_yi43_U2og.mft (raw, json)
Hash identifier: jqGC66QYsr+Ex7+/CToxx+oibt8qZ1Mcg6jrVl7BVlk=
Subject key identifier: EC:BD:86:5C:82:16:D8:06:E4:21:CB:1D:16:1E:67:98:E6:B2:0E:07
Authority key identifier: A8:16:99:A5:BC:64:87:BD:2F:17:49:D1:33:FC:A2:E3:7F:D4:DA:88
Certificate issuer: /CN=a81699a5bc6487bd2f1749d133fca2e37fd4da88
Certificate serial: 0194BC04BD393BED9430F6FA9677D3D0A900
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
Manifest number: 0B10
Signing time: Fri 31 Jan 2025 11:00:14 +0000
Manifest this update: Fri 31 Jan 2025 11:00:14 +0000
Manifest next update: Sat 01 Feb 2025 11:00:14 +0000
Files and hashes: 1: OjQvRP3Qk-EfOjLrBZFcCGXmqW8.roa (hash: tuPCcx5ju8FKUrcPlz2PFkmuFSo/tuFb+mEuY/BILEc=)
2: qBaZpbxkh70vF0nRM_yi43_U2og.crl (hash: vmHt64eTeR7Mz24aaLLAqzIDVbhghfSA96D9bCxWU18=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:bd:39:3b:ed:94:30:f6:fa:96:77:d3:d0:a9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81699a5bc6487bd2f1749d133fca2e37fd4da88
Validity
Not Before: Jan 31 11:00:14 2025 GMT
Not After : Feb 1 11:00:14 2025 GMT
Subject: CN=ecbd865c8216d806e421cb1d161e6798e6b20e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:19:ae:92:90:ca:20:96:e4:c2:a0:43:ba:6a:
38:48:58:34:c3:1c:db:ef:4f:39:c2:f5:df:85:7c:
d5:b2:f7:4f:6f:27:b9:90:bc:f7:2e:6f:ad:08:61:
29:70:a8:a3:27:ca:70:29:1a:a9:9c:ee:6f:86:ba:
6d:d1:64:2e:b9:0d:9c:c9:1f:fc:8b:db:03:3f:15:
e3:4a:71:d6:93:85:0c:1d:79:34:dd:83:16:45:85:
9c:d6:6a:b3:8f:18:33:cb:b4:e8:74:68:d2:51:09:
20:84:4b:07:b9:ad:78:15:ab:07:36:f7:17:72:84:
ac:b7:cd:62:8e:3b:0d:f7:48:81:0a:69:ab:5b:b7:
78:68:35:6f:ba:ff:a0:1b:7b:14:05:0e:0c:bc:ff:
9d:c3:c5:89:d5:61:b4:25:af:c4:43:4d:ce:1c:76:
48:36:fc:e7:12:38:3b:b2:14:58:39:65:d4:5b:3d:
a0:4b:99:0c:91:ca:25:75:79:45:dc:c1:83:73:7a:
da:f4:ff:78:68:0c:5b:40:d9:fd:e5:0c:41:cd:4b:
d2:ac:25:89:99:81:1c:37:e5:4a:ef:e2:15:0c:2e:
80:b1:a4:26:f6:ab:6c:d1:bf:43:44:07:b9:ad:c6:
0a:08:6e:69:22:83:52:51:76:d4:7b:46:4d:6a:f2:
1f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BD:86:5C:82:16:D8:06:E4:21:CB:1D:16:1E:67:98:E6:B2:0E:07
X509v3 Authority Key Identifier:
keyid:A8:16:99:A5:BC:64:87:BD:2F:17:49:D1:33:FC:A2:E3:7F:D4:DA:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBaZpbxkh70vF0nRM_yi43_U2og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fd7493-7599-43b6-8559-787c0632cfea/1/qBaZpbxkh70vF0nRM_yi43_U2og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e4:cc:a6:13:00:93:6d:70:05:4f:5c:c4:55:88:a3:30:67:
bc:4c:f5:8f:83:a1:60:ff:c0:70:87:62:3d:6f:c0:44:84:62:
8f:82:36:fc:87:7b:08:68:fb:c8:0f:05:40:0f:5e:87:20:dc:
24:c2:3b:ce:6f:ec:04:dd:0c:84:6b:cc:1a:57:7f:18:98:34:
ea:8b:a7:c7:0d:e5:36:52:91:84:20:b2:24:d5:40:c2:9e:1f:
cb:dd:05:0c:f7:ac:05:9a:d4:79:4a:df:a1:e0:1d:df:2a:fe:
4a:e1:68:48:29:e5:41:69:5a:bd:c8:55:89:04:d6:ed:39:e4:
3d:01:b7:7f:b6:31:87:86:34:3e:50:66:33:8d:27:50:11:5e:
fd:ba:6a:4c:a0:34:1d:69:fe:39:60:b5:21:b1:b3:bc:aa:44:
4a:32:a6:5e:9b:31:59:fb:17:5c:ac:bb:7e:4a:bf:0a:42:bc:
89:04:0e:ac:25:ef:17:7f:c2:56:43:93:22:34:3b:50:c4:a7:
9f:2e:01:c6:5d:47:19:c2:a9:bb:a3:92:05:9d:18:a5:06:45:
d6:54:00:0f:33:f9:73:02:a6:9c:cb:d7:49:9d:2f:87:b3:99:
8a:ce:a7:74:1f:d5:ae:a5:de:16:93:49:bd:b1:a1:53:67:d2:
0b:52:8e:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BL05O+2UMPb6lnfT0KkAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MTY5OWE1YmM2NDg3YmQyZjE3NDlkMTMzZmNhMmUzN2Zk
NGRhODgwHhcNMjUwMTMxMTEwMDE0WhcNMjUwMjAxMTEwMDE0WjAzMTEwLwYDVQQD
EyhlY2JkODY1YzgyMTZkODA2ZTQyMWNiMWQxNjFlNjc5OGU2YjIwZTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRmukpDKIJbkwqBDumo4SFg0wxzb
7085wvXfhXzVsvdPbye5kLz3Lm+tCGEpcKijJ8pwKRqpnO5vhrpt0WQuuQ2cyR/8
i9sDPxXjSnHWk4UMHXk03YMWRYWc1mqzjxgzy7TodGjSUQkghEsHua14FasHNvcX
coSst81ijjsN90iBCmmrW7d4aDVvuv+gG3sUBQ4MvP+dw8WJ1WG0Ja/EQ03OHHZI
NvznEjg7shRYOWXUWz2gS5kMkcoldXlF3MGDc3ra9P94aAxbQNn95QxBzUvSrCWJ
mYEcN+VK7+IVDC6AsaQm9qts0b9DRAe5rcYKCG5pIoNSUXbUe0ZNavIfCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOy9hlyCFtgG5CHLHRYeZ5jmsg4HMB8GA1UdIwQY
MBaAFKgWmaW8ZIe9LxdJ0TP8ouN/1NqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUJhWnBieGtoNzB2RjBuUk1feWk0M19VMm9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9mZDc0OTMtNzU5OS00M2I2LTg1NTkt
Nzg3YzA2MzJjZmVhLzEvcUJhWnBieGtoNzB2RjBuUk1feWk0M19VMm9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9mZDc0OTMtNzU5OS00M2I2LTg1NTktNzg3YzA2MzJjZmVh
LzEvcUJhWnBieGtoNzB2RjBuUk1feWk0M19VMm9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALuTMphMA
k21wBU9cxFWIozBnvEz1j4OhYP/AcIdiPW/ARIRij4I2/Id7CGj7yA8FQA9ehyDc
JMI7zm/sBN0MhGvMGld/GJg06ounxw3lNlKRhCCyJNVAwp4fy90FDPesBZrUeUrf
oeAd3yr+SuFoSCnlQWlavchViQTW7TnkPQG3f7Yxh4Y0PlBmM40nUBFe/bpqTKA0
HWn+OWC1IbGzvKpESjKmXpsxWfsXXKy7fkq/CkK8iQQOrCXvF3/CVkOTIjQ7UMSn
ny4Bxl1HGcKpu6OSBZ0YpQZF1lQADzP5cwKmnMvXSZ0vh7OZis6ndB/VrqXeFpNJ
vbGhU2fSC1KOGQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:28:27 2025 by rpki-client