Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.mft
File: qnD7s9sihDfWBXmaxPRZjSLhPhs.mft (raw, json)
Hash identifier: bKM2jZ1J0bC4snafz4k8vvSthmvh8ToOPXHM5Z8CuoE=
Subject key identifier: D6:86:B9:33:E5:DA:01:D2:BF:61:EA:11:74:AD:BD:9B:D5:73:7B:8C
Authority key identifier: AA:70:FB:B3:DB:22:84:37:D6:05:79:9A:C4:F4:59:8D:22:E1:3E:1B
Certificate issuer: /CN=aa70fbb3db228437d605799ac4f4598d22e13e1b
Certificate serial: 0194BBCE629D261373D14CBE4A9B87595240
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnD7s9sihDfWBXmaxPRZjSLhPhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:52 +0000
Manifest this update: Fri 31 Jan 2025 10:00:52 +0000
Manifest next update: Sat 01 Feb 2025 10:00:52 +0000
Files and hashes: 1: JDPCHXAUbfBXZ-JAE6cFE-tGXMI.roa (hash: bOxTgT+7J9XF4HocPumdm4M3ak6meIWnJq5cg5Hpmfs=)
2: qnD7s9sihDfWBXmaxPRZjSLhPhs.crl (hash: stslODroGtF6oPY7hWvnA2nvi7PmuymnyvwwB7i+m9Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:62:9d:26:13:73:d1:4c:be:4a:9b:87:59:52:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa70fbb3db228437d605799ac4f4598d22e13e1b
Validity
Not Before: Jan 31 10:00:52 2025 GMT
Not After : Feb 1 10:00:52 2025 GMT
Subject: CN=d686b933e5da01d2bf61ea1174adbd9bd5737b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:66:0f:b9:09:d1:7d:1e:e3:4e:25:25:f2:02:
07:fa:62:bb:89:1d:3b:5a:12:28:d2:46:13:b3:ad:
ea:b8:f7:95:64:5c:28:aa:0a:02:47:d2:06:5a:a4:
31:f4:48:93:31:45:b7:41:e7:3b:1e:7b:2f:f0:b4:
06:dc:b5:4a:ec:7f:83:45:f7:aa:a5:c2:61:ff:a5:
fb:83:ce:01:c8:3d:90:98:85:ba:ac:5d:72:50:4a:
2a:08:d8:2b:5c:2d:bf:20:18:34:2f:5b:8a:45:b9:
62:23:ed:fe:2b:42:17:98:51:26:c3:c5:a3:8a:d8:
f8:e0:0f:b6:55:52:01:ad:f6:28:ef:98:60:b7:3a:
75:30:05:45:e8:53:71:b0:b2:bb:b4:77:f6:8d:ad:
ef:a7:e5:be:88:38:ee:29:0a:b9:d5:9b:0c:8f:5c:
e2:89:f4:ed:9c:c4:2c:c0:16:f5:75:7c:d1:5e:1f:
4f:65:5b:19:87:8f:72:48:4e:c3:3e:20:cf:b9:1d:
e3:55:f9:9c:bc:04:91:6a:90:d1:26:3e:e0:92:cf:
ed:e3:a3:7a:c9:ce:ac:e8:93:97:d7:72:6b:21:ac:
23:6f:9d:7b:c0:71:36:ce:b5:d7:47:38:6c:88:94:
02:c5:7f:7d:36:c1:52:dc:73:25:2f:78:2d:79:83:
6e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:86:B9:33:E5:DA:01:D2:BF:61:EA:11:74:AD:BD:9B:D5:73:7B:8C
X509v3 Authority Key Identifier:
keyid:AA:70:FB:B3:DB:22:84:37:D6:05:79:9A:C4:F4:59:8D:22:E1:3E:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnD7s9sihDfWBXmaxPRZjSLhPhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d8e184-e79b-47fe-96dc-5ba4235ce619/1/qnD7s9sihDfWBXmaxPRZjSLhPhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:5c:11:3e:81:e9:0c:70:b1:0e:ea:1a:e2:d0:5e:8e:51:2c:
51:b2:06:2c:8b:a2:3d:65:b8:93:7c:48:80:66:ac:c1:51:45:
66:2c:e4:8f:6e:6b:60:d9:99:b7:53:64:d7:32:0e:98:97:5d:
68:23:e2:d2:a4:56:7b:b3:6b:9f:a4:6b:a9:fd:fa:48:20:a2:
f6:99:57:5d:d9:c8:d8:4e:93:89:8e:77:6e:d2:54:80:22:9b:
d8:b9:a7:e2:da:22:f7:56:18:18:4f:5e:6f:3e:4f:43:1d:e0:
09:d2:43:37:00:3d:47:8b:54:2a:18:fe:8f:c1:7b:17:ef:e1:
e4:db:4c:7d:28:80:c2:f4:dd:f0:b9:65:71:c4:0f:85:05:ba:
fc:8a:f6:e9:d5:2c:d3:d8:71:5e:90:6a:bd:a2:a2:a2:74:e0:
d4:00:68:90:02:dc:f6:8b:d1:95:25:43:af:0c:5f:b4:9c:89:
1e:8c:39:17:cf:fb:65:4b:97:45:37:c6:28:68:9b:f6:78:5b:
4a:c4:85:74:7d:82:ca:61:a1:0f:8c:df:6c:90:b7:fe:ec:df:
9c:a5:ca:2b:1e:60:0c:d7:cd:4d:a8:0d:78:05:f7:c1:2f:91:
22:61:ec:5a:42:88:21:cf:a6:76:b3:0b:4e:33:f0:87:6f:77:
70:28:76:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zmKdJhNz0Uy+SpuHWVJAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNzBmYmIzZGIyMjg0MzdkNjA1Nzk5YWM0ZjQ1OThkMjJl
MTNlMWIwHhcNMjUwMTMxMTAwMDUyWhcNMjUwMjAxMTAwMDUyWjAzMTEwLwYDVQQD
EyhkNjg2YjkzM2U1ZGEwMWQyYmY2MWVhMTE3NGFkYmQ5YmQ1NzM3YjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWYPuQnRfR7jTiUl8gIH+mK7iR07
WhIo0kYTs63quPeVZFwoqgoCR9IGWqQx9EiTMUW3Qec7Hnsv8LQG3LVK7H+DRfeq
pcJh/6X7g84ByD2QmIW6rF1yUEoqCNgrXC2/IBg0L1uKRbliI+3+K0IXmFEmw8Wj
itj44A+2VVIBrfYo75hgtzp1MAVF6FNxsLK7tHf2ja3vp+W+iDjuKQq51ZsMj1zi
ifTtnMQswBb1dXzRXh9PZVsZh49ySE7DPiDPuR3jVfmcvASRapDRJj7gks/t46N6
yc6s6JOX13JrIawjb517wHE2zrXXRzhsiJQCxX99NsFS3HMlL3gteYNuKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNaGuTPl2gHSv2HqEXStvZvVc3uMMB8GA1UdIwQY
MBaAFKpw+7PbIoQ31gV5msT0WY0i4T4bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW5EN3M5c2loRGZXQlhtYXhQUlpqU0xoUGhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kOGUxODQtZTc5Yi00N2ZlLTk2ZGMt
NWJhNDIzNWNlNjE5LzEvcW5EN3M5c2loRGZXQlhtYXhQUlpqU0xoUGhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9kOGUxODQtZTc5Yi00N2ZlLTk2ZGMtNWJhNDIzNWNlNjE5
LzEvcW5EN3M5c2loRGZXQlhtYXhQUlpqU0xoUGhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH1wRPoHp
DHCxDuoa4tBejlEsUbIGLIuiPWW4k3xIgGaswVFFZizkj25rYNmZt1Nk1zIOmJdd
aCPi0qRWe7Nrn6Rrqf36SCCi9plXXdnI2E6TiY53btJUgCKb2Lmn4toi91YYGE9e
bz5PQx3gCdJDNwA9R4tUKhj+j8F7F+/h5NtMfSiAwvTd8LllccQPhQW6/Ir26dUs
09hxXpBqvaKionTg1ABokALc9ovRlSVDrwxftJyJHow5F8/7ZUuXRTfGKGib9nhb
SsSFdH2CymGhD4zfbJC3/uzfnKXKKx5gDNfNTagNeAX3wS+RImHsWkKIIc+mdrML
TjPwh293cCh2Aw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:03 2025 by rpki-client