Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
File: qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft (raw, json)
Hash identifier: glmSR+f5uOMwufUZ5jbQjkeeqEgRq3mT3Vm2qvcMqrs=
Subject key identifier: BC:D9:C8:BE:93:4D:9B:C4:3B:B8:BC:AF:05:DB:22:26:19:7F:86:BF
Authority key identifier: A8:EF:61:BD:C0:34:FB:56:38:BC:F1:9E:07:EC:21:D9:00:19:D4:2C
Certificate issuer: /CN=a8ef61bdc034fb5638bcf19e07ec21d90019d42c
Certificate serial: 0194BCE0942B9ACE18F587B2BFD8B7754C8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 15:00:21 +0000
Manifest this update: Fri 31 Jan 2025 15:00:21 +0000
Manifest next update: Sat 01 Feb 2025 15:00:21 +0000
Files and hashes: 1: qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl (hash: 8aXzsgM0VPmCQeWjvlGj4KrNZaesU5WSA3Yn+M/D6tU=)
2: uE_fVUsQj_lty3I3lYpDSAIBXSQ.roa (hash: RZlwhFI1FuSzwxiwupmztd/WqpFc9LHBsKw5C8YM+Cc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:94:2b:9a:ce:18:f5:87:b2:bf:d8:b7:75:4c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8ef61bdc034fb5638bcf19e07ec21d90019d42c
Validity
Not Before: Jan 31 15:00:21 2025 GMT
Not After : Feb 1 15:00:21 2025 GMT
Subject: CN=bcd9c8be934d9bc43bb8bcaf05db2226197f86bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a4:e0:34:89:c2:a2:c1:eb:8f:44:47:5f:2f:
11:af:85:c6:ec:28:b1:61:a6:43:aa:80:5c:4b:db:
0d:46:c1:82:1c:c3:ec:60:47:67:61:74:d2:c3:a5:
1f:f9:75:e7:79:dd:bf:b5:56:5e:f3:97:94:da:ee:
3a:bf:fb:a9:f8:e8:b2:01:12:15:e1:46:94:e8:14:
e1:ab:6a:86:ae:23:33:27:a7:94:fd:00:c6:9d:9d:
e1:87:5e:bd:84:0a:bf:35:30:6b:41:f4:a3:94:52:
86:f8:df:32:f0:f4:69:1a:4a:95:88:92:f1:c2:67:
fd:1f:ea:7b:f7:a2:d9:5c:91:bb:ea:0b:c2:e0:71:
04:f6:45:c9:31:38:b3:80:a7:bf:16:4c:07:2d:43:
44:12:fc:9e:8d:8b:3b:5e:82:6e:4b:27:4a:8b:68:
e3:32:b4:c4:55:53:bb:88:ea:04:e4:58:55:83:29:
c6:26:d8:54:06:24:88:f6:19:dd:f2:da:06:ed:ef:
af:a7:11:47:28:99:e2:c9:63:5d:e8:86:8e:11:3c:
63:ed:11:ba:3b:8d:53:85:75:2f:d1:91:52:b5:6f:
e2:9b:ee:d5:38:f8:f4:95:98:68:0a:f0:e3:29:14:
9c:f6:03:5d:45:86:b6:1f:5e:81:74:58:85:b6:6f:
02:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D9:C8:BE:93:4D:9B:C4:3B:B8:BC:AF:05:DB:22:26:19:7F:86:BF
X509v3 Authority Key Identifier:
keyid:A8:EF:61:BD:C0:34:FB:56:38:BC:F1:9E:07:EC:21:D9:00:19:D4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:f6:1f:4f:8e:56:e8:bb:63:d6:0c:41:a4:6e:2a:e8:ae:b5:
55:f8:79:c7:55:f0:65:51:2c:a7:65:7b:26:8f:00:3c:d7:c8:
8b:ef:95:0a:8e:af:20:0c:42:3c:4b:f8:b3:2e:e9:30:fc:01:
e9:8f:ef:37:53:89:77:c9:7f:a4:53:22:d7:46:2e:42:c6:1b:
e6:04:12:61:09:20:ca:ae:c7:58:17:a0:2c:ec:f9:34:ba:ad:
b6:02:da:7b:2d:4a:b8:6d:43:03:c7:32:31:df:1a:2c:37:ed:
3f:d1:6b:00:66:68:46:a5:31:38:bc:fb:19:fd:46:59:1b:43:
b8:f2:26:31:5d:c1:fa:f6:23:c9:13:09:84:5f:01:04:fd:08:
b8:8e:04:42:28:5f:16:ac:0c:71:bf:85:22:91:ec:04:9d:59:
9a:da:39:16:59:f5:b6:fc:9d:07:b5:c5:44:d3:a2:6e:de:4c:
ca:2d:0c:37:10:70:01:41:91:ee:b3:5f:68:64:67:59:83:16:
1e:2d:91:c4:2d:e5:7a:cb:e3:e6:56:c4:97:10:3b:ce:50:ca:
68:30:60:61:10:e1:de:ce:3f:4a:c0:cb:f4:e0:23:bc:a7:10:
7e:84:24:78:4e:49:bd:33:2a:98:55:58:5b:fc:2b:ea:63:73:
8f:1e:d7:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84JQrms4Y9Yeyv9i3dUyNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZWY2MWJkYzAzNGZiNTYzOGJjZjE5ZTA3ZWMyMWQ5MDAx
OWQ0MmMwHhcNMjUwMTMxMTUwMDIxWhcNMjUwMjAxMTUwMDIxWjAzMTEwLwYDVQQD
EyhiY2Q5YzhiZTkzNGQ5YmM0M2JiOGJjYWYwNWRiMjIyNjE5N2Y4NmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6TgNInCosHrj0RHXy8Rr4XG7Cix
YaZDqoBcS9sNRsGCHMPsYEdnYXTSw6Uf+XXned2/tVZe85eU2u46v/up+OiyARIV
4UaU6BThq2qGriMzJ6eU/QDGnZ3hh169hAq/NTBrQfSjlFKG+N8y8PRpGkqViJLx
wmf9H+p796LZXJG76gvC4HEE9kXJMTizgKe/FkwHLUNEEvyejYs7XoJuSydKi2jj
MrTEVVO7iOoE5FhVgynGJthUBiSI9hnd8toG7e+vpxFHKJniyWNd6IaOETxj7RG6
O41ThXUv0ZFStW/im+7VOPj0lZhoCvDjKRSc9gNdRYa2H16BdFiFtm8CAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLzZyL6TTZvEO7i8rwXbIiYZf4a/MB8GA1UdIwQY
MBaAFKjvYb3ANPtWOLzxngfsIdkAGdQsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU85aHZjQTAtMVk0dlBHZUItd2gyUUFaMUN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8zMDAxNjUtMjVjNi00MDFiLTljYmYt
MWY0OWJjN2ZkM2JkLzEvcU85aHZjQTAtMVk0dlBHZUItd2gyUUFaMUN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8zMDAxNjUtMjVjNi00MDFiLTljYmYtMWY0OWJjN2ZkM2Jk
LzEvcU85aHZjQTAtMVk0dlBHZUItd2gyUUFaMUN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASPYfT45W
6Ltj1gxBpG4q6K61Vfh5x1XwZVEsp2V7Jo8APNfIi++VCo6vIAxCPEv4sy7pMPwB
6Y/vN1OJd8l/pFMi10YuQsYb5gQSYQkgyq7HWBegLOz5NLqttgLaey1KuG1DA8cy
Md8aLDftP9FrAGZoRqUxOLz7Gf1GWRtDuPImMV3B+vYjyRMJhF8BBP0IuI4EQihf
FqwMcb+FIpHsBJ1Zmto5Fln1tvydB7XFRNOibt5Myi0MNxBwAUGR7rNfaGRnWYMW
Hi2RxC3lesvj5lbElxA7zlDKaDBgYRDh3s4/SsDL9OAjvKcQfoQkeE5JvTMqmFVY
W/wr6mNzjx7X2g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:33:15 2025 by rpki-client