Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
File: Q57sdw36ZitOpkoCLus46D2q4ig.mft (raw, json)
Hash identifier: cC/HAD3GTLQ60MFDuTWwkLemKaUYhOVG4IgTYCe0pjs=
Subject key identifier: 4D:DB:58:78:47:F2:31:75:48:62:A5:94:C5:D0:C3:70:39:CE:08:FB
Authority key identifier: 43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
Certificate issuer: /CN=439eec770dfa662b4ea64a022eeb38e83daae228
Certificate serial: 0194BC04DF92239A787B05E2A352624E8239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
Manifest number: 05C0
Signing time: Fri 31 Jan 2025 11:00:23 +0000
Manifest this update: Fri 31 Jan 2025 11:00:23 +0000
Manifest next update: Sat 01 Feb 2025 11:00:23 +0000
Files and hashes: 1: Q57sdw36ZitOpkoCLus46D2q4ig.crl (hash: qAWrVBmN8Zf96s5NtU/tV6aMyyD4SBSnMJP90iVDHGs=)
2: s-6iu0euq8mwctWc84gynbP4Gz8.roa (hash: ix817uYIHKTbd4XoAS5Yf6A1NltjL0SfzgZQTYUowKc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:df:92:23:9a:78:7b:05:e2:a3:52:62:4e:82:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439eec770dfa662b4ea64a022eeb38e83daae228
Validity
Not Before: Jan 31 11:00:23 2025 GMT
Not After : Feb 1 11:00:23 2025 GMT
Subject: CN=4ddb587847f231754862a594c5d0c37039ce08fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:41:60:73:ef:72:8b:78:d4:a4:a5:08:90:61:
75:cc:e0:44:c1:77:06:de:0f:0d:ed:16:5f:8c:3c:
4e:3c:dc:e5:1a:d5:23:3e:52:f9:fb:c6:93:56:09:
c0:b1:c6:5c:9a:cc:f9:d2:5e:3d:1f:14:47:0f:b3:
52:6b:c3:bf:6d:71:8a:77:fa:84:98:45:68:d4:3e:
f9:e8:19:82:2e:36:fb:9f:0b:b3:81:95:bb:9a:46:
06:5b:dc:da:3c:6e:ea:fa:c9:2f:d9:3c:8e:07:06:
e6:17:82:89:5c:14:1a:37:2a:5b:33:7b:54:6e:cc:
4a:61:59:0b:65:91:0c:f1:a5:c5:0e:2f:8d:44:09:
3e:97:14:00:aa:eb:b6:95:de:6b:3c:e4:79:f4:ad:
0e:df:88:06:73:98:04:b2:c9:5a:e9:88:a7:77:33:
ae:e8:6d:90:ff:d9:34:e9:2c:a7:37:bd:e8:2c:4f:
79:aa:1b:f0:e7:3d:ca:30:87:42:5e:b2:0b:dd:44:
74:41:4b:c3:85:73:70:69:c7:25:e0:c4:d0:b7:4a:
18:87:de:31:41:f0:fc:b9:c6:23:fd:ea:94:54:1a:
f5:33:0d:2c:a9:2e:0a:84:a6:90:49:bc:0e:a8:de:
e1:c9:e7:7c:3d:3c:62:79:b2:46:21:3d:52:49:cb:
98:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:DB:58:78:47:F2:31:75:48:62:A5:94:C5:D0:C3:70:39:CE:08:FB
X509v3 Authority Key Identifier:
keyid:43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:9c:4c:87:69:4d:d5:af:53:ab:a2:7e:de:26:5b:ad:68:6b:
e5:9a:3f:ad:73:88:2b:80:6c:45:a2:0a:cc:4f:65:45:a7:1a:
d0:f5:3a:4a:3b:98:95:d2:91:ff:88:3c:87:00:27:9d:25:53:
de:9c:20:50:a4:98:f3:1d:26:d9:33:7b:a7:0a:a0:62:fa:7f:
97:f1:7e:cc:87:a5:b8:49:8f:63:d1:6a:a5:c4:4b:67:65:56:
35:b9:30:1f:cf:6b:86:2c:cc:ed:f3:34:6d:b4:36:7f:3c:d7:
f3:95:8e:d1:ad:2e:b5:8d:5a:c6:71:21:e9:1b:71:5b:e7:de:
43:2c:e6:83:95:9c:1d:a1:eb:c5:ef:25:bc:a1:d8:17:40:1f:
c0:ce:42:6e:c2:14:aa:b4:26:fe:3f:b8:4c:be:62:53:ac:78:
83:e8:ab:9f:05:62:30:27:af:a4:19:30:ef:f1:83:49:b1:e6:
46:dc:1c:3c:d1:a7:f3:ac:f6:cc:1d:3b:ea:fb:05:ee:88:d3:
d6:02:58:37:fb:41:e0:af:6d:49:37:d3:20:c7:06:0b:43:a8:
2b:39:bc:8f:ee:81:03:6e:b8:0d:f5:d3:09:f0:50:39:b7:d0:
f0:67:c3:7d:f5:08:7b:ca:d7:03:4e:58:7f:23:08:fb:82:9d:
67:2a:84:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BN+SI5p4ewXio1JiToI5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzOWVlYzc3MGRmYTY2MmI0ZWE2NGEwMjJlZWIzOGU4M2Rh
YWUyMjgwHhcNMjUwMTMxMTEwMDIzWhcNMjUwMjAxMTEwMDIzWjAzMTEwLwYDVQQD
Eyg0ZGRiNTg3ODQ3ZjIzMTc1NDg2MmE1OTRjNWQwYzM3MDM5Y2UwOGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUFgc+9yi3jUpKUIkGF1zOBEwXcG
3g8N7RZfjDxOPNzlGtUjPlL5+8aTVgnAscZcmsz50l49HxRHD7NSa8O/bXGKd/qE
mEVo1D756BmCLjb7nwuzgZW7mkYGW9zaPG7q+skv2TyOBwbmF4KJXBQaNypbM3tU
bsxKYVkLZZEM8aXFDi+NRAk+lxQAquu2ld5rPOR59K0O34gGc5gEssla6YindzOu
6G2Q/9k06SynN73oLE95qhvw5z3KMIdCXrIL3UR0QUvDhXNwaccl4MTQt0oYh94x
QfD8ucYj/eqUVBr1Mw0sqS4KhKaQSbwOqN7hyed8PTxiebJGIT1SScuYuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3bWHhH8jF1SGKllMXQw3A5zgj7MB8GA1UdIwQY
MBaAFEOe7HcN+mYrTqZKAi7rOOg9quIoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTU3c2R3MzZaaXRPcGtvQ0x1czQ2RDJxNGlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi82Yjg0MzQtZjQ1NC00MWM3LTkyYjkt
MzUyZjdjYTAxMWFlLzEvUTU3c2R3MzZaaXRPcGtvQ0x1czQ2RDJxNGlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi82Yjg0MzQtZjQ1NC00MWM3LTkyYjktMzUyZjdjYTAxMWFl
LzEvUTU3c2R3MzZaaXRPcGtvQ0x1czQ2RDJxNGlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVZxMh2lN
1a9Tq6J+3iZbrWhr5Zo/rXOIK4BsRaIKzE9lRaca0PU6SjuYldKR/4g8hwAnnSVT
3pwgUKSY8x0m2TN7pwqgYvp/l/F+zIeluEmPY9FqpcRLZ2VWNbkwH89rhizM7fM0
bbQ2fzzX85WO0a0utY1axnEh6RtxW+feQyzmg5WcHaHrxe8lvKHYF0AfwM5CbsIU
qrQm/j+4TL5iU6x4g+irnwViMCevpBkw7/GDSbHmRtwcPNGn86z2zB076vsF7ojT
1gJYN/tB4K9tSTfTIMcGC0OoKzm8j+6BA264DfXTCfBQObfQ8GfDffUIe8rXA05Y
fyMI+4KdZyqEGg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:34:19 2025 by rpki-client