Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
File: QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft (raw, json)
Hash identifier: xEGRJlMV0DmbkbTD0v3MuO4Sx0KUNPpPp/Elz2y+1qg=
Subject key identifier: 5D:1C:21:93:74:5B:B2:1B:BF:D2:C8:41:12:64:5B:0D:88:95:0C:21
Authority key identifier: 42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
Certificate issuer: /CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Certificate serial: 0194BCE08F5FAE0CB94B4053CBFAA72C1AE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 15:00:20 +0000
Manifest this update: Fri 31 Jan 2025 15:00:20 +0000
Manifest next update: Sat 01 Feb 2025 15:00:20 +0000
Files and hashes: 1: QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl (hash: xbQR6wxwD7cafpTxMhBxpo5StUPWBspGcHGYkCd8+Qc=)
2: c1mJTzKq1m2EBAr92I-nges1Di4.roa (hash: i1n9Y7VZ80hK4Lc1aErif8j8W+hz5/EhhxzfXPDeEMQ=)
3: rvgAs6WmoB_QmrlMgSgm7khV-4U.roa (hash: ByaVeRT7BxyoGgwxavoqH/EHW9rBtmtZSrveuw0KL1c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:8f:5f:ae:0c:b9:4b:40:53:cb:fa:a7:2c:1a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Validity
Not Before: Jan 31 15:00:20 2025 GMT
Not After : Feb 1 15:00:20 2025 GMT
Subject: CN=5d1c2193745bb21bbfd2c84112645b0d88950c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:67:ad:56:bf:48:18:f5:c2:70:92:a6:a0:1d:
6f:63:f6:78:8a:ae:05:13:c9:c0:83:e6:35:26:65:
24:88:12:40:16:be:ef:87:6f:14:14:ac:5a:ae:26:
ae:6c:60:9f:17:63:99:a1:d2:54:9f:b4:60:26:21:
bc:3b:8b:6f:f6:eb:59:ce:f4:ea:58:a4:44:18:24:
4f:cc:cd:0d:cb:a8:6a:48:20:b6:6c:45:90:88:a0:
da:08:7f:e1:e2:84:43:81:be:cf:96:98:b0:a1:32:
2a:a1:c3:ce:5b:2a:15:91:00:a1:c6:ca:c4:52:c3:
09:1b:92:98:40:fd:b3:d1:2b:19:56:4d:f4:d6:d9:
05:f2:01:68:b2:c2:ef:a4:d3:a5:4f:df:38:43:b1:
bb:78:b3:8b:a1:99:ee:66:a0:9c:c6:be:c6:11:bd:
98:a4:b2:b5:38:0e:24:f2:58:fb:be:66:51:03:16:
ba:48:4a:7c:1b:a5:bd:a2:b4:d7:7c:f6:4b:8e:d1:
c3:1d:f3:e8:67:f0:0b:ce:c6:a0:6e:2e:6e:b8:b6:
43:9a:dc:c0:aa:4c:6a:81:24:d0:aa:af:c5:f4:d6:
88:39:83:b0:cc:1d:e1:e4:d9:6c:da:4a:12:89:0d:
8d:ce:3e:37:17:6e:20:b7:1b:5d:ac:18:a1:e1:d8:
84:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:1C:21:93:74:5B:B2:1B:BF:D2:C8:41:12:64:5B:0D:88:95:0C:21
X509v3 Authority Key Identifier:
keyid:42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:88:32:9f:05:96:21:0f:8c:21:ff:7f:d9:63:b5:f3:ca:e2:
13:5a:b3:d9:ce:6c:97:2e:0b:f2:f2:76:79:36:f1:14:d1:72:
f2:7e:03:10:d0:d1:74:29:6b:e2:ef:f5:70:d6:e1:a2:81:0b:
9f:6a:ff:cc:4a:6d:22:6b:c2:ae:3f:9f:c7:35:d8:a1:a9:f6:
1d:6c:79:75:66:c7:98:26:ab:a7:c4:3a:91:6a:9c:51:67:38:
36:5b:a3:b2:c8:0a:03:38:ec:56:5e:ee:79:0d:26:c4:ba:08:
30:74:25:4f:24:c1:14:13:57:96:e7:f5:b2:c8:bf:02:e3:7d:
39:a8:42:81:17:b3:b2:d9:21:77:ed:50:a7:ae:dc:ca:39:33:
bd:e4:ff:f2:b5:11:19:c7:04:c1:63:3b:6a:b8:ff:27:7b:8d:
c7:d9:b7:46:80:4b:68:a8:85:64:32:34:60:9f:cc:83:5c:03:
92:7a:fb:25:62:21:ca:e4:6a:bd:c0:32:6c:28:7b:36:65:f6:
76:18:33:ee:b0:15:48:18:1a:91:f1:43:3c:20:e5:2f:ef:2a:
c5:2b:bd:bd:27:cd:54:4a:6f:79:e8:86:f1:03:9c:90:50:d8:
b5:e7:83:82:b4:cd:c9:3e:90:7f:37:fe:6e:e4:cc:f3:23:a3:
55:81:96:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84I9frgy5S0BTy/qnLBriMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyYzQyNzIzYzFmNzViYTBiZTg5MzVjNzJmNjFiZmU1YzVm
NGNlM2MwHhcNMjUwMTMxMTUwMDIwWhcNMjUwMjAxMTUwMDIwWjAzMTEwLwYDVQQD
Eyg1ZDFjMjE5Mzc0NWJiMjFiYmZkMmM4NDExMjY0NWIwZDg4OTUwYzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmetVr9IGPXCcJKmoB1vY/Z4iq4F
E8nAg+Y1JmUkiBJAFr7vh28UFKxariaubGCfF2OZodJUn7RgJiG8O4tv9utZzvTq
WKREGCRPzM0Ny6hqSCC2bEWQiKDaCH/h4oRDgb7PlpiwoTIqocPOWyoVkQChxsrE
UsMJG5KYQP2z0SsZVk301tkF8gFossLvpNOlT984Q7G7eLOLoZnuZqCcxr7GEb2Y
pLK1OA4k8lj7vmZRAxa6SEp8G6W9orTXfPZLjtHDHfPoZ/ALzsagbi5uuLZDmtzA
qkxqgSTQqq/F9NaIOYOwzB3h5Nls2koSiQ2Nzj43F24gtxtdrBih4diEcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF0cIZN0W7Ibv9LIQRJkWw2IlQwhMB8GA1UdIwQY
MBaAFELEJyPB91ugvok1xy9hv+XF9M48MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXNRbkk4SDNXNkMtaVRYSEwyR181Y1gwemp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jNTY0MTgtZDFkNi00YjQzLWFlYzAt
Yjk4YTY5MDFlYTEwLzEvUXNRbkk4SDNXNkMtaVRYSEwyR181Y1gwemp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9jNTY0MTgtZDFkNi00YjQzLWFlYzAtYjk4YTY5MDFlYTEw
LzEvUXNRbkk4SDNXNkMtaVRYSEwyR181Y1gwemp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUIgynwWW
IQ+MIf9/2WO188riE1qz2c5sly4L8vJ2eTbxFNFy8n4DENDRdClr4u/1cNbhooEL
n2r/zEptImvCrj+fxzXYoan2HWx5dWbHmCarp8Q6kWqcUWc4NlujssgKAzjsVl7u
eQ0mxLoIMHQlTyTBFBNXluf1ssi/AuN9OahCgRezstkhd+1Qp67cyjkzveT/8rUR
GccEwWM7arj/J3uNx9m3RoBLaKiFZDI0YJ/Mg1wDknr7JWIhyuRqvcAybCh7NmX2
dhgz7rAVSBgakfFDPCDlL+8qxSu9vSfNVEpveeiG8QOckFDYteeDgrTNyT6Qfzf+
buTM8yOjVYGW9g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:24 2025 by rpki-client