Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft
File: QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft (raw, json)
Hash identifier: fsJm97/LinX/VPFAhYGPR8NVVnraQWv22l1xpKogoRg=
Subject key identifier: 30:A8:74:23:69:7D:D2:46:06:D2:95:B5:1B:DF:FF:F5:96:0F:4A:27
Authority key identifier: 41:5B:FC:B0:55:8C:86:F8:13:D0:11:04:5F:D1:7D:16:AE:2E:BE:8E
Certificate issuer: /CN=415bfcb0558c86f813d011045fd17d16ae2ebe8e
Certificate serial: 0194BCA9863C9E61BEA1E80B1A19B841D59F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft
Manifest number: 02CA
Signing time: Fri 31 Jan 2025 14:00:14 +0000
Manifest this update: Fri 31 Jan 2025 14:00:14 +0000
Manifest next update: Sat 01 Feb 2025 14:00:14 +0000
Files and hashes: 1: QVv8sFWMhvgT0BEEX9F9Fq4uvo4.crl (hash: N1vVbilhiXJdCw0mqoumdAhRoLg1oALbVnkG4pO3T9I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:86:3c:9e:61:be:a1:e8:0b:1a:19:b8:41:d5:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=415bfcb0558c86f813d011045fd17d16ae2ebe8e
Validity
Not Before: Jan 31 14:00:14 2025 GMT
Not After : Feb 1 14:00:14 2025 GMT
Subject: CN=30a87423697dd24606d295b51bdffff5960f4a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:40:17:3c:06:94:ac:d2:ea:d3:46:bb:67:76:
97:d1:be:11:2a:1d:dc:c5:95:0c:21:6b:b7:c6:8d:
55:7a:bc:56:ad:b5:c5:3e:bb:fb:f3:fd:db:64:f1:
13:43:3f:f8:a0:44:aa:41:61:72:b5:e5:d5:ba:a9:
d2:a2:91:7b:2f:18:78:be:b1:8f:84:78:82:57:20:
5d:76:d3:7c:a1:fd:cc:93:eb:71:ec:8f:12:2c:7a:
b2:d3:7d:dc:de:7e:af:fd:44:a9:d0:60:7e:e2:96:
4b:79:42:56:8c:0f:82:d0:1f:f7:3b:af:2d:81:79:
74:56:9b:b5:12:b8:63:e4:6e:43:08:b6:86:b4:73:
b4:27:b6:cf:07:c2:a5:02:2b:31:4a:d0:f7:35:0f:
66:9c:2e:02:26:a8:f8:18:70:24:12:4e:17:af:32:
e5:cd:d0:b6:34:d1:50:9f:77:25:1a:b9:47:c4:55:
8d:43:ab:9c:80:ed:c8:d7:2b:1c:5d:89:b3:0e:30:
8a:f4:ca:c6:da:43:28:63:3e:04:d3:b4:de:03:fb:
50:ca:11:bc:14:a6:0f:9d:bd:69:14:b4:fe:40:58:
0d:41:ed:a6:14:b0:8e:88:d5:b2:a0:54:74:26:6f:
b3:c3:be:3e:54:28:e0:4b:2a:7c:86:c2:aa:68:53:
74:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A8:74:23:69:7D:D2:46:06:D2:95:B5:1B:DF:FF:F5:96:0F:4A:27
X509v3 Authority Key Identifier:
keyid:41:5B:FC:B0:55:8C:86:F8:13:D0:11:04:5F:D1:7D:16:AE:2E:BE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/970484-4132-4f71-838a-871ede9014e4/1/QVv8sFWMhvgT0BEEX9F9Fq4uvo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ff:06:4c:a1:5a:78:30:cf:31:e6:19:c6:1d:51:72:09:77:
2f:fb:de:c9:0e:7b:fa:1e:f1:e6:b5:df:6c:56:9d:99:1b:f2:
cf:0d:6f:ee:10:46:92:9f:70:e5:b6:75:1e:e2:53:0c:99:2b:
dd:a3:42:6d:8a:c6:a0:5a:5d:bf:20:6c:e8:d5:ab:59:f8:92:
5a:75:0d:81:0e:0c:b1:fc:80:62:f3:54:fb:70:14:15:32:76:
61:0f:b5:19:b5:42:d6:70:ff:21:c5:c6:e6:ec:c2:23:52:c2:
32:1e:3c:89:76:88:c6:ee:26:06:90:93:f1:97:a1:38:c7:92:
12:a7:ed:68:f1:8e:f3:59:37:79:7d:fc:45:d5:96:28:e0:31:
3d:95:c6:6b:81:5b:bd:1d:36:54:77:26:e2:31:ff:0c:42:ae:
84:88:57:97:0f:ac:e6:49:fe:f3:b4:43:9d:b3:e8:a9:19:49:
45:a9:bf:07:e6:76:81:0f:ae:46:0c:80:ae:8d:9f:d5:10:57:
27:15:75:a6:c3:b9:b6:c9:9c:f7:0e:12:fa:66:4a:7e:c6:74:
e7:0d:46:f4:94:cd:bd:b4:30:1e:65:4e:b0:82:2f:11:f4:b9:
42:be:98:bc:58:a1:e7:79:af:db:6c:84:70:80:34:22:3c:a1:
87:92:e7:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qYY8nmG+oegLGhm4QdWfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNWJmY2IwNTU4Yzg2ZjgxM2QwMTEwNDVmZDE3ZDE2YWUy
ZWJlOGUwHhcNMjUwMTMxMTQwMDE0WhcNMjUwMjAxMTQwMDE0WjAzMTEwLwYDVQQD
EygzMGE4NzQyMzY5N2RkMjQ2MDZkMjk1YjUxYmRmZmZmNTk2MGY0YTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EAXPAaUrNLq00a7Z3aX0b4RKh3c
xZUMIWu3xo1VerxWrbXFPrv78/3bZPETQz/4oESqQWFyteXVuqnSopF7Lxh4vrGP
hHiCVyBddtN8of3Mk+tx7I8SLHqy033c3n6v/USp0GB+4pZLeUJWjA+C0B/3O68t
gXl0Vpu1Erhj5G5DCLaGtHO0J7bPB8KlAisxStD3NQ9mnC4CJqj4GHAkEk4XrzLl
zdC2NNFQn3clGrlHxFWNQ6ucgO3I1yscXYmzDjCK9MrG2kMoYz4E07TeA/tQyhG8
FKYPnb1pFLT+QFgNQe2mFLCOiNWyoFR0Jm+zw74+VCjgSyp8hsKqaFN0xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCodCNpfdJGBtKVtRvf//WWD0onMB8GA1UdIwQY
MBaAFEFb/LBVjIb4E9ARBF/RfRauLr6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVZ2OHNGV01odmdUMEJFRVg5RjlGcTR1dm80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85NzA0ODQtNDEzMi00ZjcxLTgzOGEt
ODcxZWRlOTAxNGU0LzEvUVZ2OHNGV01odmdUMEJFRVg5RjlGcTR1dm80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi85NzA0ODQtNDEzMi00ZjcxLTgzOGEtODcxZWRlOTAxNGU0
LzEvUVZ2OHNGV01odmdUMEJFRVg5RjlGcTR1dm80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYf8GTKFa
eDDPMeYZxh1Rcgl3L/veyQ57+h7x5rXfbFadmRvyzw1v7hBGkp9w5bZ1HuJTDJkr
3aNCbYrGoFpdvyBs6NWrWfiSWnUNgQ4MsfyAYvNU+3AUFTJ2YQ+1GbVC1nD/IcXG
5uzCI1LCMh48iXaIxu4mBpCT8ZehOMeSEqftaPGO81k3eX38RdWWKOAxPZXGa4Fb
vR02VHcm4jH/DEKuhIhXlw+s5kn+87RDnbPoqRlJRam/B+Z2gQ+uRgyAro2f1RBX
JxV1psO5tsmc9w4S+mZKfsZ05w1G9JTNvbQwHmVOsIIvEfS5Qr6YvFih53mv22yE
cIA0Ijyhh5LnhQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:19 2025 by rpki-client