Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
File: QXYebRbr8X5XHGv3fsBr33q2ivg.mft (raw, json)
Hash identifier: Db3mY5i2UPXR3Puu/3GpNByu9VhoORYE55kggp40fq0=
Subject key identifier: 6F:69:3A:EE:AA:97:43:42:30:C3:E0:13:E2:F5:44:5D:C9:B1:45:86
Authority key identifier: 41:76:1E:6D:16:EB:F1:7E:57:1C:6B:F7:7E:C0:6B:DF:7A:B6:8A:F8
Certificate issuer: /CN=41761e6d16ebf17e571c6bf77ec06bdf7ab68af8
Certificate serial: 0194BD8558244D288FFCE5A5238121B8534B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:20 +0000
Manifest this update: Fri 31 Jan 2025 18:00:20 +0000
Manifest next update: Sat 01 Feb 2025 18:00:20 +0000
Files and hashes: 1: QXYebRbr8X5XHGv3fsBr33q2ivg.crl (hash: fbrhrQbkzUvqQY6FQs+SrTpu8kMlAN3wTgLVJIorI0o=)
2: kDp8o5lwoauyIIWuMVQKzWrOZfg.roa (hash: k1SzOsCV3pSTvUNttrz3FSSmM4yVZTra60XB+dEnFds=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:58:24:4d:28:8f:fc:e5:a5:23:81:21:b8:53:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41761e6d16ebf17e571c6bf77ec06bdf7ab68af8
Validity
Not Before: Jan 31 18:00:20 2025 GMT
Not After : Feb 1 18:00:20 2025 GMT
Subject: CN=6f693aeeaa97434230c3e013e2f5445dc9b14586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bd:27:ba:36:28:5f:66:40:c6:db:3e:d8:e6:
6a:4e:a7:70:9c:f9:ed:75:7d:eb:03:b8:e6:14:4b:
71:24:b4:7a:bc:9e:a2:30:a7:6e:c0:cb:54:57:3c:
54:f1:50:c4:b6:de:0f:5a:aa:e3:f2:d2:99:94:1d:
11:32:04:68:01:66:2a:cc:36:2a:2e:d4:ba:be:56:
42:e3:5c:f5:0a:c2:40:c1:cc:9b:29:db:33:db:73:
a9:e6:07:69:23:62:35:59:74:ea:36:86:e6:7d:40:
95:50:bd:18:a7:2e:ae:4d:58:cb:7e:ca:b6:c1:f5:
62:4e:a1:3b:d5:44:49:25:73:3f:f7:c5:37:14:41:
ef:88:d3:73:82:5a:ea:89:fb:43:e1:cf:46:71:19:
01:35:5c:14:74:16:6d:36:0d:60:1e:f8:33:5d:ef:
4a:9c:22:eb:2f:af:82:ee:eb:1e:8d:be:f1:0f:18:
79:1b:0b:4f:ee:2a:6c:58:21:38:6f:83:0d:72:74:
e9:6c:6d:4b:7c:9e:df:47:1d:32:45:7d:da:e1:06:
f3:9f:9a:6a:65:61:5b:db:bb:2c:2d:32:38:86:d4:
76:ac:22:9c:33:7a:da:ca:6d:32:6b:88:81:36:7c:
6c:06:d1:30:2d:cc:ba:f3:e9:0f:2e:91:4a:63:20:
c3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:69:3A:EE:AA:97:43:42:30:C3:E0:13:E2:F5:44:5D:C9:B1:45:86
X509v3 Authority Key Identifier:
keyid:41:76:1E:6D:16:EB:F1:7E:57:1C:6B:F7:7E:C0:6B:DF:7A:B6:8A:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:b2:a5:a7:d2:37:1e:8d:57:65:0f:d2:f6:67:05:25:87:66:
88:32:5e:46:eb:0f:b1:ea:49:84:cc:e0:95:0d:86:8a:d4:35:
c0:c2:9b:47:02:07:ed:bc:f6:f6:6b:b1:d4:d5:87:a4:ff:0d:
e2:00:b0:18:c2:e3:88:89:6a:56:f9:da:31:74:e8:f3:cd:b1:
9a:c1:f9:04:17:86:93:83:29:0d:30:8f:56:f1:7c:e0:ad:0d:
2f:a3:dc:ef:31:39:29:48:75:10:af:d6:25:27:60:07:7e:81:
62:83:14:1b:5a:b4:32:4f:c5:40:02:b8:5d:d8:81:38:dd:ec:
e5:26:8a:4d:25:d0:23:2f:fc:c0:0a:a6:20:0c:1a:e2:b9:b5:
9d:06:4e:b1:58:09:60:0c:73:95:fb:70:d1:e6:c5:88:db:59:
89:f4:14:7d:74:aa:a7:cd:49:8f:9d:43:7c:f6:bc:36:bc:97:
ef:4a:f6:72:51:91:52:90:0c:9a:5e:cc:ad:08:1f:97:a2:16:
a9:8d:0d:5b:02:86:b7:9b:b0:93:7b:9e:84:f8:cb:af:c1:ad:
9e:9b:6c:a6:30:6a:9c:31:d3:f5:a1:c7:2b:14:3f:fd:5f:ec:
4f:d5:ab:3b:f1:33:e0:3a:4c:4c:47:ff:e4:f5:3f:77:48:22:
f3:4d:63:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hVgkTSiP/OWlI4EhuFNLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNzYxZTZkMTZlYmYxN2U1NzFjNmJmNzdlYzA2YmRmN2Fi
NjhhZjgwHhcNMjUwMTMxMTgwMDIwWhcNMjUwMjAxMTgwMDIwWjAzMTEwLwYDVQQD
Eyg2ZjY5M2FlZWFhOTc0MzQyMzBjM2UwMTNlMmY1NDQ1ZGM5YjE0NTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA270nujYoX2ZAxts+2OZqTqdwnPnt
dX3rA7jmFEtxJLR6vJ6iMKduwMtUVzxU8VDEtt4PWqrj8tKZlB0RMgRoAWYqzDYq
LtS6vlZC41z1CsJAwcybKdsz23Op5gdpI2I1WXTqNobmfUCVUL0Ypy6uTVjLfsq2
wfViTqE71URJJXM/98U3FEHviNNzglrqiftD4c9GcRkBNVwUdBZtNg1gHvgzXe9K
nCLrL6+C7usejb7xDxh5GwtP7ipsWCE4b4MNcnTpbG1LfJ7fRx0yRX3a4Qbzn5pq
ZWFb27ssLTI4htR2rCKcM3raym0ya4iBNnxsBtEwLcy68+kPLpFKYyDDkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9pOu6ql0NCMMPgE+L1RF3JsUWGMB8GA1UdIwQY
MBaAFEF2Hm0W6/F+Vxxr937Aa996tor4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVhZZWJSYnI4WDVYSEd2M2ZzQnIzM3EyaXZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZWIyODktNjI3MC00ZGIyLWFjZGUt
YTg3OWRmNDZlYjk5LzEvUVhZZWJSYnI4WDVYSEd2M2ZzQnIzM3EyaXZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni81ZWIyODktNjI3MC00ZGIyLWFjZGUtYTg3OWRmNDZlYjk5
LzEvUVhZZWJSYnI4WDVYSEd2M2ZzQnIzM3EyaXZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARrKlp9I3
Ho1XZQ/S9mcFJYdmiDJeRusPsepJhMzglQ2GitQ1wMKbRwIH7bz29mux1NWHpP8N
4gCwGMLjiIlqVvnaMXTo882xmsH5BBeGk4MpDTCPVvF84K0NL6Pc7zE5KUh1EK/W
JSdgB36BYoMUG1q0Mk/FQAK4XdiBON3s5SaKTSXQIy/8wAqmIAwa4rm1nQZOsVgJ
YAxzlftw0ebFiNtZifQUfXSqp81Jj51DfPa8NryX70r2clGRUpAMml7MrQgfl6IW
qY0NWwKGt5uwk3uehPjLr8GtnptspjBqnDHT9aHHKxQ//V/sT9WrO/Ez4DpMTEf/
5PU/d0gi801j+g==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:04:21 2025 by rpki-client