Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ee9ddc-acd0-481d-8c0b-788b46e10497/1/qoCTNU5WWsSDilH0fSdpdpxmlE4.mft
File: qoCTNU5WWsSDilH0fSdpdpxmlE4.mft (raw, json)
Hash identifier: //SW9WDpy9uzEp6UzlG0JrbH1WOzScBh7p5SeQ22RpY=
Subject key identifier: 3E:F1:21:1C:2A:63:C3:7F:B1:26:E6:36:B1:61:48:80:2E:B3:15:B7
Authority key identifier: AA:80:93:35:4E:56:5A:C4:83:8A:51:F4:7D:27:69:76:9C:66:94:4E
Certificate issuer: /CN=aa8093354e565ac4838a51f47d2769769c66944e
Certificate serial: 0194BC72B1D7BBFB526B1D022D3EC4D300CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoCTNU5WWsSDilH0fSdpdpxmlE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ee9ddc-acd0-481d-8c0b-788b46e10497/1/qoCTNU5WWsSDilH0fSdpdpxmlE4.mft
Manifest number: 0B53
Signing time: Fri 31 Jan 2025 13:00:20 +0000
Manifest this update: Fri 31 Jan 2025 13:00:20 +0000
Manifest next update: Sat 01 Feb 2025 13:00:20 +0000
Files and hashes: 1: ZLWyuBUCt9zFxazwwbh7yb1QxX8.roa (hash: 3SdpbSxYjCjCYkTQyy2TBjnfRY/eKE3ltVUJz5yw6+M=)
2: qoCTNU5WWsSDilH0fSdpdpxmlE4.crl (hash: 5CR/c5JZ3KUO1EJnDUe1kdfrB/3MiE0pMfUko9az8ss=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b1:d7:bb:fb:52:6b:1d:02:2d:3e:c4:d3:00:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8093354e565ac4838a51f47d2769769c66944e
Validity
Not Before: Jan 31 13:00:20 2025 GMT
Not After : Feb 1 13:00:20 2025 GMT
Subject: CN=3ef1211c2a63c37fb126e636b16148802eb315b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:37:b4:8e:b8:41:6a:7b:7f:b2:6a:6a:25:95:
60:79:1e:b9:85:13:f5:be:fa:24:d4:cf:4d:44:d1:
87:8f:84:6f:48:fc:fb:e3:6e:71:32:e3:80:2b:53:
40:49:db:85:5d:ac:48:f4:35:8c:08:65:e0:a6:ac:
32:d3:ee:a1:10:44:57:33:12:16:4f:51:8f:cf:df:
e5:1b:41:a3:e7:99:dc:87:99:01:46:94:04:e1:a3:
d0:1f:5f:ba:bf:21:7e:9f:28:dd:f9:ed:2f:f8:af:
e6:0d:90:dd:6c:a5:e1:d5:1b:ae:e8:e7:0b:b5:df:
b8:72:5c:5a:e8:bb:54:94:73:25:3d:91:45:5d:8f:
6c:9a:c5:3f:5c:a1:62:81:4b:f7:51:92:76:e6:4a:
97:7e:24:a5:f4:1a:2a:a9:40:a5:13:aa:59:85:37:
83:d2:66:21:0c:65:e5:30:a1:9f:54:45:b9:50:2f:
6a:1f:37:9e:7e:b6:70:88:5e:1c:51:9d:06:cc:0c:
52:21:2c:bb:45:11:22:a3:6a:92:14:8f:5e:7b:84:
69:72:91:0c:03:e8:d7:6b:67:3f:6c:e7:6d:e1:1e:
06:80:59:08:5c:64:63:27:f7:f2:bb:e9:9e:dc:21:
04:a7:79:01:bc:e0:35:a6:d3:66:2d:8f:22:dc:c8:
9a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F1:21:1C:2A:63:C3:7F:B1:26:E6:36:B1:61:48:80:2E:B3:15:B7
X509v3 Authority Key Identifier:
keyid:AA:80:93:35:4E:56:5A:C4:83:8A:51:F4:7D:27:69:76:9C:66:94:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoCTNU5WWsSDilH0fSdpdpxmlE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ee9ddc-acd0-481d-8c0b-788b46e10497/1/qoCTNU5WWsSDilH0fSdpdpxmlE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ee9ddc-acd0-481d-8c0b-788b46e10497/1/qoCTNU5WWsSDilH0fSdpdpxmlE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:e4:bf:d4:27:f0:b2:15:a4:bc:9f:fd:80:6b:55:20:5f:12:
69:4a:18:71:a3:3c:0e:3f:54:42:91:fe:6e:42:f1:48:04:b8:
56:ad:63:54:3a:fb:a8:32:de:2d:bc:eb:96:1b:1a:cb:15:d3:
26:63:52:ef:cd:79:93:99:91:10:ed:1b:9f:88:a8:79:48:01:
6a:e3:79:31:7e:7b:b0:ae:a6:00:20:f6:73:95:4b:d4:d9:36:
b4:0a:51:1a:8a:aa:99:32:79:cb:52:07:6a:4c:59:e5:d5:ed:
43:a3:11:3c:18:ce:4d:4a:c8:31:c2:23:e1:d3:5b:6e:20:21:
00:00:d7:e7:56:bc:f7:50:5d:79:66:ac:65:af:ac:34:22:2e:
30:d1:8c:bb:11:3b:af:b8:38:81:71:0e:05:19:0c:a1:26:12:
4d:a2:43:06:07:6b:94:41:cf:70:47:03:56:49:71:09:23:57:
b1:e9:72:59:fa:cc:95:d9:f3:0d:48:de:cb:5f:f4:36:17:7b:
7c:e2:a7:0f:fa:ae:0b:ee:46:40:a9:f4:f3:2a:f0:1b:41:d9:
91:14:f7:95:71:60:1a:96:82:e3:64:74:04:62:86:e7:dd:67:
5c:e2:3f:29:4a:a9:e8:f7:4e:87:32:67:af:71:bc:96:ef:8b:
f3:7b:3f:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8crHXu/tSax0CLT7E0wDOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhODA5MzM1NGU1NjVhYzQ4MzhhNTFmNDdkMjc2OTc2OWM2
Njk0NGUwHhcNMjUwMTMxMTMwMDIwWhcNMjUwMjAxMTMwMDIwWjAzMTEwLwYDVQQD
EygzZWYxMjExYzJhNjNjMzdmYjEyNmU2MzZiMTYxNDg4MDJlYjMxNWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDe0jrhBant/smpqJZVgeR65hRP1
vvok1M9NRNGHj4RvSPz7425xMuOAK1NASduFXaxI9DWMCGXgpqwy0+6hEERXMxIW
T1GPz9/lG0Gj55nch5kBRpQE4aPQH1+6vyF+nyjd+e0v+K/mDZDdbKXh1Ruu6OcL
td+4clxa6LtUlHMlPZFFXY9smsU/XKFigUv3UZJ25kqXfiSl9BoqqUClE6pZhTeD
0mYhDGXlMKGfVEW5UC9qHzeefrZwiF4cUZ0GzAxSISy7RREio2qSFI9ee4RpcpEM
A+jXa2c/bOdt4R4GgFkIXGRjJ/fyu+me3CEEp3kBvOA1ptNmLY8i3MiazwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7xIRwqY8N/sSbmNrFhSIAusxW3MB8GA1UdIwQY
MBaAFKqAkzVOVlrEg4pR9H0naXacZpROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW9DVE5VNVdXc1NEaWxIMGZTZHBkcHhtbEU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lZTlkZGMtYWNkMC00ODFkLThjMGIt
Nzg4YjQ2ZTEwNDk3LzEvcW9DVE5VNVdXc1NEaWxIMGZTZHBkcHhtbEU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lZTlkZGMtYWNkMC00ODFkLThjMGItNzg4YjQ2ZTEwNDk3
LzEvcW9DVE5VNVdXc1NEaWxIMGZTZHBkcHhtbEU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWeS/1Cfw
shWkvJ/9gGtVIF8SaUoYcaM8Dj9UQpH+bkLxSAS4Vq1jVDr7qDLeLbzrlhsayxXT
JmNS7815k5mREO0bn4ioeUgBauN5MX57sK6mACD2c5VL1Nk2tApRGoqqmTJ5y1IH
akxZ5dXtQ6MRPBjOTUrIMcIj4dNbbiAhAADX51a891BdeWasZa+sNCIuMNGMuxE7
r7g4gXEOBRkMoSYSTaJDBgdrlEHPcEcDVklxCSNXselyWfrMldnzDUjey1/0Nhd7
fOKnD/quC+5GQKn08yrwG0HZkRT3lXFgGpaC42R0BGKG591nXOI/KUqp6PdOhzJn
r3G8lu+L83s/bg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:20:26 2025 by rpki-client