Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
File: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft (raw, json)
Hash identifier: 80tYyOQXSc3BZD3oatTU87d9hVnKxeTUCK6mX4C5LpU=
Subject key identifier: 69:97:33:5F:73:19:86:17:40:15:65:D9:D7:02:4C:04:78:13:F1:DC
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial: 0194BC04C1245BFDE1291F7743DE39C7D444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
Manifest number: 109B
Signing time: Fri 31 Jan 2025 11:00:15 +0000
Manifest this update: Fri 31 Jan 2025 11:00:15 +0000
Manifest next update: Sat 01 Feb 2025 11:00:15 +0000
Files and hashes: 1: G3gmpYNNP9JYrhaqiMsAU_EbEhU.roa (hash: JYCLWmpn2x1tQh9BdgAPsoxEsKAREWa0Chd9mMo9Jyk=)
2: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl (hash: pWkIRqUyfcu5stK06U3DLI24Y4Gq0OhUcoauJ2iXm1w=)
3: UEolp0R-hRHKGcTNGe0AoFHIQN0.roa (hash: MIhc/4dE+vXix8ModKbHmu/83XSuv98iPqMBE/1dwmU=)
4: VXa8-lEUtJcQ4aMtPiAwVckzue8.roa (hash: fIDgyPOY0ZcwWsR/YXb8gKNwWwlgsysF03KdynH/dbU=)
5: bNTthk-6VNC8BPqO0CXb0wpv7Ko.roa (hash: U+k7jHV+TEaRK88+v5GTKPK+suUq7iPi4AwDl7BFsh0=)
6: qyD4qnaTsXkSQ8PXrtPsaJ0X-pE.roa (hash: QxE42ChiZ03ZNPzS84F7yU1kLZoDWQAiFNL/cp1/Xvk=)
7: zMd7m5mxh6U6DbEOt4OgQ4iJ1U0.roa (hash: bhC49t061SBKpaBxLjJKGavc/n4xCA6rE46xrsPt5jk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c1:24:5b:fd:e1:29:1f:77:43:de:39:c7:d4:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Validity
Not Before: Jan 31 11:00:15 2025 GMT
Not After : Feb 1 11:00:15 2025 GMT
Subject: CN=6997335f73198617401565d9d7024c047813f1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:aa:72:80:1b:3b:1b:04:99:89:6a:e0:67:4f:
6d:10:40:4a:e5:56:e0:4a:16:f7:90:c8:5b:d2:9f:
8e:5e:82:5c:15:8a:9a:d6:d8:29:34:3f:8e:75:b2:
82:d7:ce:aa:c3:21:79:8a:72:4a:91:c4:64:16:7d:
52:41:fe:a8:c9:d1:57:bb:0e:58:3d:5e:11:0e:9f:
4f:1d:72:88:e2:ed:cb:47:4e:c2:a4:93:52:88:57:
31:be:5b:ef:71:e8:97:ae:4a:75:74:b6:5e:58:cb:
c2:66:1e:9b:27:e6:a2:fa:5c:1a:2f:24:88:c1:4c:
2d:87:b9:1d:7f:bb:50:09:f3:28:c1:01:5d:94:01:
b9:11:41:39:46:28:21:21:fd:e0:69:e6:7c:19:e5:
64:00:fb:c2:2d:d7:72:5a:26:aa:84:40:c5:6c:a2:
60:7c:d1:5b:b9:30:5a:3d:db:87:6e:81:c5:9c:7e:
be:c9:8d:d3:91:1f:f4:2a:1b:af:c4:51:87:95:69:
39:3b:ce:27:d1:f4:51:41:32:8f:e5:79:54:32:74:
23:f4:d4:3f:24:ed:38:64:42:50:91:3d:77:e1:58:
14:f1:e4:b5:06:41:b0:2e:38:77:e8:52:6f:9f:cf:
0b:7f:b0:ce:08:6a:e1:8d:64:29:04:a4:5b:51:62:
39:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:97:33:5F:73:19:86:17:40:15:65:D9:D7:02:4C:04:78:13:F1:DC
X509v3 Authority Key Identifier:
keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b5:11:b8:2e:4d:5b:00:07:7b:70:03:94:f2:0c:3c:19:4c:
98:df:82:1d:67:26:d1:9c:f7:95:4f:f6:ab:53:b4:cd:0a:1d:
01:1e:81:a6:9e:1b:ee:be:77:8d:de:1c:cf:6b:a3:60:a4:33:
ef:b8:f0:18:d5:47:c6:7f:98:cd:92:77:fd:2f:dc:71:fb:6b:
cf:8b:9e:7f:24:f9:7e:ea:f6:24:61:c3:05:9b:7f:4f:6f:c5:
04:f9:f6:6b:15:e3:d8:a1:8c:0d:05:92:fc:d5:76:db:10:39:
ee:96:eb:8d:bd:fe:2c:ee:ab:9d:d0:93:0f:89:4d:73:8e:d5:
36:a1:6c:ac:e3:75:fb:c2:ca:11:81:d6:1e:01:1e:81:57:91:
db:79:c2:a3:05:d0:15:e3:a3:cf:80:45:28:50:6f:45:68:f5:
cf:9a:1e:22:4b:49:71:59:76:a9:d7:e4:e6:f1:83:e8:39:35:
1f:f7:7d:8c:87:81:ad:3e:98:1a:62:98:b9:0c:00:c1:2f:23:
0c:bc:62:2c:a9:21:e0:0f:11:15:96:0d:6f:af:ff:54:39:2b:
1b:5b:b6:97:c9:41:74:b9:28:af:08:d6:dd:0f:e0:aa:99:f9:
24:e5:20:df:cb:d0:c4:57:53:51:31:d5:44:20:e6:b9:a4:09:
52:18:dc:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BMEkW/3hKR93Q945x9REMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwOGFmNDg1YjRmZDBmMDM3MTdjZDRhNzA5ZWYxMWM2MWQz
ZWY0NmUwHhcNMjUwMTMxMTEwMDE1WhcNMjUwMjAxMTEwMDE1WjAzMTEwLwYDVQQD
Eyg2OTk3MzM1ZjczMTk4NjE3NDAxNTY1ZDlkNzAyNGMwNDc4MTNmMWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqpygBs7GwSZiWrgZ09tEEBK5Vbg
Shb3kMhb0p+OXoJcFYqa1tgpND+OdbKC186qwyF5inJKkcRkFn1SQf6oydFXuw5Y
PV4RDp9PHXKI4u3LR07CpJNSiFcxvlvvceiXrkp1dLZeWMvCZh6bJ+ai+lwaLySI
wUwth7kdf7tQCfMowQFdlAG5EUE5RighIf3gaeZ8GeVkAPvCLddyWiaqhEDFbKJg
fNFbuTBaPduHboHFnH6+yY3TkR/0KhuvxFGHlWk5O84n0fRRQTKP5XlUMnQj9NQ/
JO04ZEJQkT134VgU8eS1BkGwLjh36FJvn88Lf7DOCGrhjWQpBKRbUWI5YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmXM19zGYYXQBVl2dcCTAR4E/HcMB8GA1UdIwQY
MBaAFECK9IW0/Q8DcXzUpwnvEcYdPvRuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lMTE3MWMtNTI3MC00OWNkLTkzNzkt
Yjk1YjA4YTIzYWUxLzEvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9lMTE3MWMtNTI3MC00OWNkLTkzNzktYjk1YjA4YTIzYWUx
LzEvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbLURuC5N
WwAHe3ADlPIMPBlMmN+CHWcm0Zz3lU/2q1O0zQodAR6Bpp4b7r53jd4cz2ujYKQz
77jwGNVHxn+YzZJ3/S/ccftrz4uefyT5fur2JGHDBZt/T2/FBPn2axXj2KGMDQWS
/NV22xA57pbrjb3+LO6rndCTD4lNc47VNqFsrON1+8LKEYHWHgEegVeR23nCowXQ
FeOjz4BFKFBvRWj1z5oeIktJcVl2qdfk5vGD6Dk1H/d9jIeBrT6YGmKYuQwAwS8j
DLxiLKkh4A8RFZYNb6//VDkrG1u2l8lBdLkorwjW3Q/gqpn5JOUg38vQxFdTUTHV
RCDmuaQJUhjcyA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:41:01 2025 by rpki-client