Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d40407-5d13-4ed2-90dd-ffb6707c61b3/1/qJ3jcDei8quO2_asHfHCmZfIiMg.mft
File: qJ3jcDei8quO2_asHfHCmZfIiMg.mft (raw, json)
Hash identifier: 9ed7jTpc/2wShDZZiALw7jxkVy3o0TdgEVfQOX0yzpw=
Subject key identifier: CF:4D:93:DC:47:B5:E6:97:48:81:2A:D9:65:3B:5F:B4:31:02:87:A3
Authority key identifier: A8:9D:E3:70:37:A2:F2:AB:8E:DB:F6:AC:1D:F1:C2:99:97:C8:88:C8
Certificate issuer: /CN=a89de37037a2f2ab8edbf6ac1df1c29997c888c8
Certificate serial: 0194BCAA1EC85D42ADBC728E601F6858A32C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJ3jcDei8quO2_asHfHCmZfIiMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/d40407-5d13-4ed2-90dd-ffb6707c61b3/1/qJ3jcDei8quO2_asHfHCmZfIiMg.mft
Manifest number: 012E
Signing time: Fri 31 Jan 2025 14:00:53 +0000
Manifest this update: Fri 31 Jan 2025 14:00:53 +0000
Manifest next update: Sat 01 Feb 2025 14:00:53 +0000
Files and hashes: 1: qJ3jcDei8quO2_asHfHCmZfIiMg.crl (hash: 0y9jpaxES+oTYXBC5lgy2jZbT9jabHG/WB7mEz9KES8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1e:c8:5d:42:ad:bc:72:8e:60:1f:68:58:a3:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a89de37037a2f2ab8edbf6ac1df1c29997c888c8
Validity
Not Before: Jan 31 14:00:53 2025 GMT
Not After : Feb 1 14:00:53 2025 GMT
Subject: CN=cf4d93dc47b5e69748812ad9653b5fb4310287a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:53:af:88:31:41:f1:08:d8:3d:59:0f:5e:75:
e7:b9:7e:29:89:3f:11:0e:ef:04:45:bd:fc:cc:c2:
fe:4c:ad:e3:b9:d2:5d:92:04:ec:d6:76:e3:30:7c:
8e:f0:27:38:a4:26:70:eb:20:60:4d:ab:6d:db:21:
a0:fb:de:22:94:0f:bb:44:e4:d2:95:e0:3d:52:82:
16:e6:0a:8d:c0:ea:ed:ce:15:a3:84:6b:60:f9:a5:
c5:47:f9:41:0f:2b:4c:68:25:56:91:1a:e9:f9:ff:
47:e6:83:e7:8d:f0:87:d3:10:24:5d:9a:88:57:72:
71:df:69:fc:2f:5e:b5:65:da:96:c8:1f:0e:4a:49:
ce:3d:48:a6:60:71:e8:1b:f6:cc:3e:51:c3:e9:e9:
69:e9:8d:cc:ad:a2:cc:0a:72:6a:b1:09:0b:8d:bb:
41:ae:55:86:76:9a:f3:94:58:00:62:70:9c:3a:85:
ac:8a:04:c7:02:8a:0e:25:1b:d0:29:fd:ff:e0:c5:
7f:df:0c:32:ad:1c:40:ab:b7:1b:fc:9b:13:4f:60:
81:6e:45:8b:ad:69:21:9c:81:3e:25:a2:c9:e7:af:
a3:dc:b4:c6:ef:13:64:ae:6d:c6:d9:ed:cc:c1:76:
85:93:f0:cf:c3:ae:be:3f:ab:8c:74:b0:85:07:84:
1b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:4D:93:DC:47:B5:E6:97:48:81:2A:D9:65:3B:5F:B4:31:02:87:A3
X509v3 Authority Key Identifier:
keyid:A8:9D:E3:70:37:A2:F2:AB:8E:DB:F6:AC:1D:F1:C2:99:97:C8:88:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJ3jcDei8quO2_asHfHCmZfIiMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d40407-5d13-4ed2-90dd-ffb6707c61b3/1/qJ3jcDei8quO2_asHfHCmZfIiMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d40407-5d13-4ed2-90dd-ffb6707c61b3/1/qJ3jcDei8quO2_asHfHCmZfIiMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:47:cd:56:61:1c:df:13:bf:97:5f:67:d0:cb:e4:42:c8:02:
54:99:04:df:f0:ce:ea:96:44:f2:1b:be:63:86:3d:7f:6f:6e:
2a:f7:91:4a:4f:38:03:9b:93:28:60:68:36:cd:36:84:a9:28:
92:0b:f3:ac:31:30:cb:52:ee:e1:de:f3:1c:6e:83:79:75:aa:
83:f0:b7:76:78:2a:d0:b7:33:ba:87:d5:f3:dd:f3:1e:16:22:
2a:40:1c:62:fc:3d:ea:a1:b3:4f:a1:dc:39:50:6c:9c:7c:97:
7c:fa:7e:5f:e2:0b:d0:bd:e6:d3:fd:4f:78:9b:4e:13:b5:4f:
1c:da:f3:dc:a4:81:3e:a7:3e:6e:51:a6:c8:1a:59:82:a7:f9:
ca:ff:2c:00:8e:93:a0:9f:ab:01:b5:ea:d4:4c:7b:bf:0f:de:
e2:bb:98:ec:05:0c:34:e8:29:ad:24:62:fe:94:1f:bb:d7:fa:
fd:0d:0c:19:e3:29:09:01:13:7f:2b:f1:c7:ef:01:23:14:f3:
3e:8d:d8:8e:02:ab:6e:2d:ee:b3:25:52:a3:55:00:3f:2a:7e:
b9:23:56:b4:36:ef:53:8f:8c:9d:b8:a3:83:9f:75:01:db:e3:
84:ae:1f:ad:a6:ce:4a:14:f9:c4:c7:a0:13:83:0a:40:97:49:
eb:a8:77:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qh7IXUKtvHKOYB9oWKMsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4OWRlMzcwMzdhMmYyYWI4ZWRiZjZhYzFkZjFjMjk5OTdj
ODg4YzgwHhcNMjUwMTMxMTQwMDUzWhcNMjUwMjAxMTQwMDUzWjAzMTEwLwYDVQQD
EyhjZjRkOTNkYzQ3YjVlNjk3NDg4MTJhZDk2NTNiNWZiNDMxMDI4N2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1OviDFB8QjYPVkPXnXnuX4piT8R
Du8ERb38zML+TK3judJdkgTs1nbjMHyO8Cc4pCZw6yBgTatt2yGg+94ilA+7ROTS
leA9UoIW5gqNwOrtzhWjhGtg+aXFR/lBDytMaCVWkRrp+f9H5oPnjfCH0xAkXZqI
V3Jx32n8L161ZdqWyB8OSknOPUimYHHoG/bMPlHD6elp6Y3MraLMCnJqsQkLjbtB
rlWGdprzlFgAYnCcOoWsigTHAooOJRvQKf3/4MV/3wwyrRxAq7cb/JsTT2CBbkWL
rWkhnIE+JaLJ56+j3LTG7xNkrm3G2e3MwXaFk/DPw66+P6uMdLCFB4QbPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9Nk9xHteaXSIEq2WU7X7QxAoejMB8GA1UdIwQY
MBaAFKid43A3ovKrjtv2rB3xwpmXyIjIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUozamNEZWk4cXVPMl9hc0hmSENtWmZJaU1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kNDA0MDctNWQxMy00ZWQyLTkwZGQt
ZmZiNjcwN2M2MWIzLzEvcUozamNEZWk4cXVPMl9hc0hmSENtWmZJaU1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9kNDA0MDctNWQxMy00ZWQyLTkwZGQtZmZiNjcwN2M2MWIz
LzEvcUozamNEZWk4cXVPMl9hc0hmSENtWmZJaU1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJEfNVmEc
3xO/l19n0MvkQsgCVJkE3/DO6pZE8hu+Y4Y9f29uKveRSk84A5uTKGBoNs02hKko
kgvzrDEwy1Lu4d7zHG6DeXWqg/C3dngq0LczuofV893zHhYiKkAcYvw96qGzT6Hc
OVBsnHyXfPp+X+IL0L3m0/1PeJtOE7VPHNrz3KSBPqc+blGmyBpZgqf5yv8sAI6T
oJ+rAbXq1Ex7vw/e4ruY7AUMNOgprSRi/pQfu9f6/Q0MGeMpCQETfyvxx+8BIxTz
Po3YjgKrbi3usyVSo1UAPyp+uSNWtDbvU4+Mnbijg591AdvjhK4frabOShT5xMeg
E4MKQJdJ66h3eQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:51 2025 by rpki-client