Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
File: Qkq4x890A7ViChuBPmrR2g2stE0.mft (raw, json)
Hash identifier: kYlYrARnvqFPuGirnIjdFZM2XXh9E40EZvxZP6qQht4=
Subject key identifier: 2E:9F:E2:79:47:A7:17:56:B6:2D:B6:BF:59:17:9F:74:6D:BD:8A:B3
Authority key identifier: 42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D
Certificate issuer: /CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d
Certificate serial: 0194BD8555E9BFC62439F054BF381E638800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 18:00:19 +0000
Manifest this update: Fri 31 Jan 2025 18:00:19 +0000
Manifest next update: Sat 01 Feb 2025 18:00:19 +0000
Files and hashes: 1: MCPNj8vuGzZknoWdqGIIivLkJGU.roa (hash: 4hhwQet2SGHC4RmJ2ByvcZIanR2/yV/AqfOhLRjbUPM=)
2: Qkq4x890A7ViChuBPmrR2g2stE0.crl (hash: m9YaJLO6aNnpRq10QweZ0D/sfxVBeGXyXo7g2H4ufZo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:55:e9:bf:c6:24:39:f0:54:bf:38:1e:63:88:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d
Validity
Not Before: Jan 31 18:00:19 2025 GMT
Not After : Feb 1 18:00:19 2025 GMT
Subject: CN=2e9fe27947a71756b62db6bf59179f746dbd8ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bb:92:a7:a5:47:72:d0:17:01:f5:ce:e6:da:
e4:19:7f:31:45:d5:ef:f2:ef:5e:56:07:b6:f8:ec:
3b:a1:9c:b6:a5:1b:a8:a2:d7:ea:35:75:fc:43:0b:
5c:96:48:e9:f5:ba:86:79:a2:ca:90:9a:63:f8:e8:
36:d9:7d:00:59:1c:be:2f:cb:63:86:12:1f:8a:44:
99:50:d1:f6:b0:35:07:70:2f:3f:ef:b9:a0:08:96:
e8:b7:8d:f6:28:62:86:49:01:60:c4:de:7b:1e:f9:
b5:e1:af:ee:c9:66:b9:eb:3f:d6:67:b2:5d:14:6a:
c7:c4:e1:19:5e:c2:a3:a3:2a:37:41:80:fb:01:1c:
8e:86:cc:6f:9c:4c:e2:96:f5:5a:25:82:5a:c7:36:
f4:8a:59:23:fe:c5:d5:14:84:9c:73:06:1f:4e:99:
e7:c1:35:52:d4:1e:4c:54:50:a2:c5:9c:9c:19:b0:
b3:3f:40:a3:bc:e9:ec:1e:f9:aa:3f:e4:c9:29:b1:
ab:b8:49:f2:79:60:c0:98:b5:48:d7:25:0c:5a:bf:
2a:67:2c:e9:ae:03:6a:e7:bb:ca:f8:96:60:f4:26:
71:9d:04:36:e6:cf:7e:c3:05:a3:ad:2b:8e:37:c8:
7f:de:ad:51:c8:68:14:8c:94:98:70:18:1e:3b:1f:
45:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9F:E2:79:47:A7:17:56:B6:2D:B6:BF:59:17:9F:74:6D:BD:8A:B3
X509v3 Authority Key Identifier:
keyid:42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:a5:b5:f9:3d:b8:98:67:e8:f5:e2:52:5d:08:e5:d5:43:02:
6c:82:94:ca:21:0a:14:a1:54:77:f0:a6:96:d4:79:3a:77:5d:
3a:46:bb:37:4c:a2:1b:50:04:b9:8f:f1:f3:ce:33:46:bc:02:
e7:e0:d9:5d:e2:23:51:0b:13:89:fa:d9:09:7d:bf:b4:60:cd:
08:69:32:ae:12:8d:a1:b2:6a:98:e9:a1:4e:69:6b:41:b9:23:
01:cb:24:a2:10:a3:e5:2e:80:49:39:dc:fb:f2:cf:1c:cb:e8:
18:b2:a7:b2:bf:16:63:ad:c8:c7:96:13:a6:71:3e:93:51:c5:
ba:66:3c:d3:e4:9b:1b:19:dd:ee:6a:db:cb:55:94:76:e7:46:
3d:a0:94:4b:1e:67:bb:a7:97:33:8e:80:7d:e0:ca:c1:85:88:
82:2b:e6:51:21:4f:f4:97:d7:56:96:f0:cc:f9:65:e9:ff:e3:
23:88:c2:97:59:39:25:bd:f9:d0:a4:84:90:8e:4d:09:66:5e:
68:28:5d:08:d5:ef:d4:37:4f:4a:ba:dd:ef:20:6f:0c:28:33:
7e:4e:cc:aa:b6:2c:35:fa:79:b8:22:3a:7a:73:ce:a4:40:a4:
24:90:8a:1d:4d:d2:b6:7f:fb:e9:ec:19:c5:46:bb:e3:0d:30:
ae:29:3d:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hVXpv8YkOfBUvzgeY4gAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNGFiOGM3Y2Y3NDAzYjU2MjBhMWI4MTNlNmFkMWRhMGRh
Y2I0NGQwHhcNMjUwMTMxMTgwMDE5WhcNMjUwMjAxMTgwMDE5WjAzMTEwLwYDVQQD
EygyZTlmZTI3OTQ3YTcxNzU2YjYyZGI2YmY1OTE3OWY3NDZkYmQ4YWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbuSp6VHctAXAfXO5trkGX8xRdXv
8u9eVge2+Ow7oZy2pRuootfqNXX8Qwtclkjp9bqGeaLKkJpj+Og22X0AWRy+L8tj
hhIfikSZUNH2sDUHcC8/77mgCJbot432KGKGSQFgxN57Hvm14a/uyWa56z/WZ7Jd
FGrHxOEZXsKjoyo3QYD7ARyOhsxvnEzilvVaJYJaxzb0ilkj/sXVFISccwYfTpnn
wTVS1B5MVFCixZycGbCzP0CjvOnsHvmqP+TJKbGruEnyeWDAmLVI1yUMWr8qZyzp
rgNq57vK+JZg9CZxnQQ25s9+wwWjrSuON8h/3q1RyGgUjJSYcBgeOx9FvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC6f4nlHpxdWti22v1kXn3RtvYqzMB8GA1UdIwQY
MBaAFEJKuMfPdAO1YgobgT5q0doNrLRNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWtxNHg4OTBBN1ZpQ2h1QlBtclIyZzJzdEUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zYjMyMTUtNTcyMS00MzQ1LTg0MWIt
MmFkOTMwOGYxZjZjLzEvUWtxNHg4OTBBN1ZpQ2h1QlBtclIyZzJzdEUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8zYjMyMTUtNTcyMS00MzQ1LTg0MWItMmFkOTMwOGYxZjZj
LzEvUWtxNHg4OTBBN1ZpQ2h1QlBtclIyZzJzdEUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJaW1+T24
mGfo9eJSXQjl1UMCbIKUyiEKFKFUd/CmltR5OnddOka7N0yiG1AEuY/x884zRrwC
5+DZXeIjUQsTifrZCX2/tGDNCGkyrhKNobJqmOmhTmlrQbkjAcskohCj5S6ASTnc
+/LPHMvoGLKnsr8WY63Ix5YTpnE+k1HFumY80+SbGxnd7mrby1WUdudGPaCUSx5n
u6eXM46AfeDKwYWIgivmUSFP9JfXVpbwzPll6f/jI4jCl1k5Jb350KSEkI5NCWZe
aChdCNXv1DdPSrrd7yBvDCgzfk7MqrYsNfp5uCI6enPOpECkJJCKHU3Stn/76ewZ
xUa74w0wrik9gQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:43:00 2025 by rpki-client