Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
File: qHxnPzWntwWmtCTTORT6OS07li4.mft (raw, json)
Hash identifier: eixRM2BpbCN1BRoFpJZRybClBJ0ESXzAypSINxh/FrY=
Subject key identifier: 3E:EE:21:25:AD:72:47:19:DC:C8:EA:A9:D2:C6:58:D1:1A:89:84:05
Authority key identifier: A8:7C:67:3F:35:A7:B7:05:A6:B4:24:D3:39:14:FA:39:2D:3B:96:2E
Certificate issuer: /CN=a87c673f35a7b705a6b424d33914fa392d3b962e
Certificate serial: 0194BC04B4D8396522630691408A7E07CBB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHxnPzWntwWmtCTTORT6OS07li4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
Manifest number: 06A5
Signing time: Fri 31 Jan 2025 11:00:12 +0000
Manifest this update: Fri 31 Jan 2025 11:00:12 +0000
Manifest next update: Sat 01 Feb 2025 11:00:12 +0000
Files and hashes: 1: Eax-YG047Te5n0m45RUjhbrR1oI.roa (hash: iDlk1T+vVuMTMOmIBdx2Kl0rk1EldiQCxibfcQYd5i0=)
2: qHxnPzWntwWmtCTTORT6OS07li4.crl (hash: 94KuvbUbb7HZrMIVdCbu5tqmBNaanD/GMnYmji20XcI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b4:d8:39:65:22:63:06:91:40:8a:7e:07:cb:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87c673f35a7b705a6b424d33914fa392d3b962e
Validity
Not Before: Jan 31 11:00:12 2025 GMT
Not After : Feb 1 11:00:12 2025 GMT
Subject: CN=3eee2125ad724719dcc8eaa9d2c658d11a898405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b8:8a:42:fd:61:ee:12:84:51:c4:e0:7a:8c:
71:db:f6:ba:2d:4c:dd:fb:05:20:e6:88:77:0b:76:
ca:5a:86:45:93:3b:a2:01:67:c2:f7:6b:52:c2:88:
8d:a4:31:4e:ee:52:c6:27:aa:2a:12:60:49:7a:1a:
5a:fa:0e:07:c4:08:77:f6:bf:a2:e3:a9:e2:41:6e:
f2:66:34:bb:82:3d:ae:14:35:56:38:3b:41:03:e7:
01:1b:a9:6f:95:e2:6c:e5:78:97:53:e4:8f:32:55:
75:97:23:9f:d9:b8:59:21:04:91:e6:ca:e3:6a:c1:
06:cf:31:b5:45:31:86:21:75:ac:3d:72:a5:e9:62:
1f:60:88:dd:cc:8d:d7:6c:b6:79:4a:be:fa:26:45:
09:f3:2b:df:2f:f9:a7:14:83:70:da:cb:5c:a5:9d:
31:fc:6d:d4:e3:ec:f1:d9:a2:40:9b:7a:46:97:b6:
0c:ff:ba:bb:12:e8:b6:2e:9e:e9:bf:e3:da:d3:c3:
37:06:ca:2a:43:ba:fb:b4:b8:30:b2:d9:2c:27:94:
08:fb:77:95:8c:0a:f4:a3:e2:6c:21:86:5b:e8:3f:
29:3c:bd:88:c2:92:dc:d1:ac:bb:81:f6:60:85:31:
3c:be:17:62:ed:05:d0:81:36:c3:bc:37:7e:c7:06:
10:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EE:21:25:AD:72:47:19:DC:C8:EA:A9:D2:C6:58:D1:1A:89:84:05
X509v3 Authority Key Identifier:
keyid:A8:7C:67:3F:35:A7:B7:05:A6:B4:24:D3:39:14:FA:39:2D:3B:96:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHxnPzWntwWmtCTTORT6OS07li4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:41:6e:fd:84:9f:05:86:6d:e0:06:c6:5a:d4:c5:18:40:8c:
54:07:f9:c0:e1:71:78:88:c1:ea:2a:dd:61:6e:af:1b:9f:10:
24:b1:cc:f8:8c:fd:ef:8c:76:bc:bb:44:02:65:61:38:d4:92:
73:7c:bf:b8:cb:83:17:5f:fd:a4:05:04:9b:08:36:08:8a:e2:
48:7b:9b:cf:47:69:e1:5a:fd:95:0e:d4:22:af:e6:d1:bf:22:
21:a9:bd:31:23:b6:45:1b:2f:60:ce:07:39:b3:0d:29:76:3e:
3e:6e:c4:ba:ae:05:0b:3d:ec:db:f8:56:3a:38:4b:77:e9:b1:
94:4e:e3:ef:d6:30:d9:44:8a:6f:de:7a:03:a2:4a:ad:fa:65:
7f:a2:46:a5:d3:3c:2a:a7:40:f6:0f:da:33:11:98:a7:7e:08:
86:e0:14:ce:4b:02:59:c9:9b:dd:bb:0c:af:62:15:91:61:a1:
84:72:27:69:ae:8b:f0:b5:43:c6:bd:ff:7a:4e:21:44:75:e1:
db:0e:a6:ea:ff:5f:c8:f2:3b:65:c9:5f:ac:c9:57:7e:20:0f:
84:d0:89:c1:52:70:ab:e9:a6:68:c1:70:d4:3f:90:1e:d5:66:
4c:19:89:4c:a8:57:fe:c9:dd:7a:34:18:d4:78:7c:ef:1d:29:
51:3d:e7:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BLTYOWUiYwaRQIp+B8u4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4N2M2NzNmMzVhN2I3MDVhNmI0MjRkMzM5MTRmYTM5MmQz
Yjk2MmUwHhcNMjUwMTMxMTEwMDEyWhcNMjUwMjAxMTEwMDEyWjAzMTEwLwYDVQQD
EygzZWVlMjEyNWFkNzI0NzE5ZGNjOGVhYTlkMmM2NThkMTFhODk4NDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbiKQv1h7hKEUcTgeoxx2/a6LUzd
+wUg5oh3C3bKWoZFkzuiAWfC92tSwoiNpDFO7lLGJ6oqEmBJehpa+g4HxAh39r+i
46niQW7yZjS7gj2uFDVWODtBA+cBG6lvleJs5XiXU+SPMlV1lyOf2bhZIQSR5srj
asEGzzG1RTGGIXWsPXKl6WIfYIjdzI3XbLZ5Sr76JkUJ8yvfL/mnFINw2stcpZ0x
/G3U4+zx2aJAm3pGl7YM/7q7Eui2Lp7pv+Pa08M3BsoqQ7r7tLgwstksJ5QI+3eV
jAr0o+JsIYZb6D8pPL2IwpLc0ay7gfZghTE8vhdi7QXQgTbDvDd+xwYQZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7uISWtckcZ3MjqqdLGWNEaiYQFMB8GA1UdIwQY
MBaAFKh8Zz81p7cFprQk0zkU+jktO5YuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUh4blB6V250d1dtdENUVE9SVDZPUzA3bGk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9hYTFhZjQtOTI1Ni00NmM4LWFiMDIt
OTRlNjQ3MjYyMTYwLzEvcUh4blB6V250d1dtdENUVE9SVDZPUzA3bGk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9hYTFhZjQtOTI1Ni00NmM4LWFiMDItOTRlNjQ3MjYyMTYw
LzEvcUh4blB6V250d1dtdENUVE9SVDZPUzA3bGk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAckFu/YSf
BYZt4AbGWtTFGECMVAf5wOFxeIjB6irdYW6vG58QJLHM+Iz974x2vLtEAmVhONSS
c3y/uMuDF1/9pAUEmwg2CIriSHubz0dp4Vr9lQ7UIq/m0b8iIam9MSO2RRsvYM4H
ObMNKXY+Pm7Euq4FCz3s2/hWOjhLd+mxlE7j79Yw2USKb956A6JKrfplf6JGpdM8
KqdA9g/aMxGYp34IhuAUzksCWcmb3bsMr2IVkWGhhHInaa6L8LVDxr3/ek4hRHXh
2w6m6v9fyPI7ZclfrMlXfiAPhNCJwVJwq+mmaMFw1D+QHtVmTBmJTKhX/sndejQY
1Hh87x0pUT3nzg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:09 2025 by rpki-client