Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
File: qcd4RK62qrWMRgPKCCvdSngEd58.mft (raw, json)
Hash identifier: zC/38Qo3aWWdgp0k7a6LEgDdoriTqPUKr7uLb+oWrIk=
Subject key identifier: F1:F0:E8:D2:4E:6A:B3:63:65:8D:47:2A:81:99:6A:17:BC:0E:E5:61
Authority key identifier: A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F
Certificate issuer: /CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f
Certificate serial: 0194BD855BEA1E91BC40173C1989B53167D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:21 +0000
Manifest this update: Fri 31 Jan 2025 18:00:21 +0000
Manifest next update: Sat 01 Feb 2025 18:00:21 +0000
Files and hashes: 1: 0rwOYdPXm3SF3mlaMFSkxpfBDj8.roa (hash: ghdXu6w3ahY/kqZH3juDYd4TR5LQuKoojRWncabKdos=)
2: qcd4RK62qrWMRgPKCCvdSngEd58.crl (hash: AqEj+1EuGf6fTYeyduFgLaov/gqgVTkX/8Vc7FWoFzQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:5b:ea:1e:91:bc:40:17:3c:19:89:b5:31:67:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f
Validity
Not Before: Jan 31 18:00:21 2025 GMT
Not After : Feb 1 18:00:21 2025 GMT
Subject: CN=f1f0e8d24e6ab363658d472a81996a17bc0ee561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a2:0d:b9:c9:87:02:59:b6:75:bb:f3:24:ff:
79:6c:35:59:dd:69:17:69:b0:ca:67:3a:62:1a:ec:
3d:7c:fa:b3:6e:a3:1f:93:ca:c0:47:2e:91:0d:1b:
70:9c:8b:b9:ff:d7:0c:93:3a:f9:b1:5c:88:0f:4e:
39:7e:a7:b2:aa:fe:a5:b5:28:99:dd:9c:8d:7a:0e:
20:9b:10:d2:cc:4a:e0:e4:84:c5:a0:27:bc:7a:54:
48:ad:88:fb:82:cf:f6:75:f1:00:49:b9:50:ed:bb:
bc:04:91:06:d6:a5:95:be:f1:a2:e9:58:b7:0b:2d:
94:71:cf:6e:0d:e2:8d:5b:f8:13:a9:30:8b:7d:a1:
9c:82:b0:8d:68:de:50:75:87:da:64:43:1f:11:27:
71:00:26:f2:07:42:a6:79:2f:19:63:1e:8f:06:15:
4b:4d:51:13:1a:3c:c9:a5:16:57:a8:6e:e9:60:e8:
ee:76:06:54:91:41:14:75:f5:17:83:31:03:ff:32:
1a:9f:a2:f1:64:97:60:26:e5:75:1d:88:3e:01:05:
e8:9c:78:0a:fb:5a:4b:f0:b6:a7:07:f2:39:3c:d9:
d4:51:e9:6d:e2:f2:16:d9:a9:92:f8:c4:3a:01:34:
9b:08:18:de:41:92:50:f3:09:e3:ce:03:ed:1b:22:
24:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F0:E8:D2:4E:6A:B3:63:65:8D:47:2A:81:99:6A:17:BC:0E:E5:61
X509v3 Authority Key Identifier:
keyid:A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:e5:5c:bf:c2:22:0e:38:2c:26:00:0c:09:63:60:3e:12:10:
56:a8:77:64:6a:57:c7:c6:19:bd:a1:c7:5e:1c:55:ce:1d:c4:
7f:48:84:11:06:21:e0:6e:2b:16:5a:4b:cb:b4:23:a9:71:13:
ff:3c:2a:f4:13:ec:31:fa:56:1a:97:f3:b3:5b:4a:14:ac:5c:
21:9e:6a:2d:4a:d7:6f:4e:6f:b4:47:47:6d:a0:3c:57:19:94:
8e:a3:46:d8:23:1a:bc:6c:21:8a:e5:81:56:bf:f5:a1:2f:ee:
c2:dd:29:8d:2e:fa:a5:ff:08:57:9d:3e:9d:7a:88:8e:a2:f9:
05:54:99:94:26:3c:fb:27:2a:42:83:79:e5:87:d9:b9:be:cd:
9b:92:83:1c:8d:fe:25:e9:2b:c9:05:b4:08:68:d3:40:81:c2:
7b:fd:d9:df:cc:59:64:a8:d8:70:f2:1c:79:c6:09:25:2e:dd:
d8:2a:7f:c9:c7:d9:04:0e:1e:1f:87:64:ff:43:cf:74:80:c7:
cf:80:48:34:2e:97:71:bf:3d:7f:a0:6d:07:4b:9d:d3:c2:bb:
d8:45:24:06:0a:f1:a2:d7:cf:32:42:17:96:62:8c:94:6b:b0:
0b:92:89:fd:54:3a:73:f5:25:77:48:44:b8:b1:af:1f:3f:41:
ef:7e:3c:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hVvqHpG8QBc8GYm1MWfYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5Yzc3ODQ0YWViNmFhYjU4YzQ2MDNjYTA4MmJkZDRhNzgw
NDc3OWYwHhcNMjUwMTMxMTgwMDIxWhcNMjUwMjAxMTgwMDIxWjAzMTEwLwYDVQQD
EyhmMWYwZThkMjRlNmFiMzYzNjU4ZDQ3MmE4MTk5NmExN2JjMGVlNTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KINucmHAlm2dbvzJP95bDVZ3WkX
abDKZzpiGuw9fPqzbqMfk8rARy6RDRtwnIu5/9cMkzr5sVyID045fqeyqv6ltSiZ
3ZyNeg4gmxDSzErg5ITFoCe8elRIrYj7gs/2dfEASblQ7bu8BJEG1qWVvvGi6Vi3
Cy2Ucc9uDeKNW/gTqTCLfaGcgrCNaN5QdYfaZEMfESdxACbyB0KmeS8ZYx6PBhVL
TVETGjzJpRZXqG7pYOjudgZUkUEUdfUXgzED/zIan6LxZJdgJuV1HYg+AQXonHgK
+1pL8LanB/I5PNnUUelt4vIW2amS+MQ6ATSbCBjeQZJQ8wnjzgPtGyIk6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPHw6NJOarNjZY1HKoGZahe8DuVhMB8GA1UdIwQY
MBaAFKnHeESutqq1jEYDyggr3Up4BHefMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWNkNFJLNjJxcldNUmdQS0NDdmRTbmdFZDU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9jZjk1MzMtMWIzNC00NGFhLTlhNzgt
ZjI2MWZlNTE2OTUxLzEvcWNkNFJLNjJxcldNUmdQS0NDdmRTbmdFZDU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9jZjk1MzMtMWIzNC00NGFhLTlhNzgtZjI2MWZlNTE2OTUx
LzEvcWNkNFJLNjJxcldNUmdQS0NDdmRTbmdFZDU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx+Vcv8Ii
DjgsJgAMCWNgPhIQVqh3ZGpXx8YZvaHHXhxVzh3Ef0iEEQYh4G4rFlpLy7QjqXET
/zwq9BPsMfpWGpfzs1tKFKxcIZ5qLUrXb05vtEdHbaA8VxmUjqNG2CMavGwhiuWB
Vr/1oS/uwt0pjS76pf8IV50+nXqIjqL5BVSZlCY8+ycqQoN55YfZub7Nm5KDHI3+
JekryQW0CGjTQIHCe/3Z38xZZKjYcPIcecYJJS7d2Cp/ycfZBA4eH4dk/0PPdIDH
z4BINC6Xcb89f6BtB0ud08K72EUkBgrxotfPMkIXlmKMlGuwC5KJ/VQ6c/Uld0hE
uLGvHz9B7348ag==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:12 2025 by rpki-client