Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
File: QIH4VgKxFokl2D6zymFgnzV5VqY.mft (raw, json)
Hash identifier: IjPxGZPLjys0tvgW9fHb6PDuBwxDz3LrmmgjE4rFFyY=
Subject key identifier: F8:58:93:18:A3:17:A3:8B:D6:47:FF:1F:F4:92:86:F3:FA:DC:BA:0D
Authority key identifier: 40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
Certificate issuer: /CN=4081f85602b1168925d83eb3ca61609f357956a6
Certificate serial: 0194BC7305AF91CC53B46DAA5CF7A45CDBA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
Manifest number: 0CBD
Signing time: Fri 31 Jan 2025 13:00:42 +0000
Manifest this update: Fri 31 Jan 2025 13:00:42 +0000
Manifest next update: Sat 01 Feb 2025 13:00:42 +0000
Files and hashes: 1: 8IFZpZ86opCdpmgkqJgHN-W1re4.roa (hash: 2uDs1c4kKRZDToaQqxvPuujfL7SplKZzwB6MfGoNq+Q=)
2: KQrJVFxp_miWrVFWhfilwJLOQWM.roa (hash: XnqtTw6gU0AhGfCZyLkMd0LfNy3C7LDUEbW2ts6AyWM=)
3: QIH4VgKxFokl2D6zymFgnzV5VqY.crl (hash: SZD+eVYprGjEN8+OzJp75jcKu+y6EDKoGzOrQYmw5/w=)
4: YKKcDm-eQ9x7_tj7nhslTRGDBAw.roa (hash: cZeLr8L6HY0jPfH21K3AzsneCnrf8It3Wnq1vtSyd8I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:05:af:91:cc:53:b4:6d:aa:5c:f7:a4:5c:db:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4081f85602b1168925d83eb3ca61609f357956a6
Validity
Not Before: Jan 31 13:00:42 2025 GMT
Not After : Feb 1 13:00:42 2025 GMT
Subject: CN=f8589318a317a38bd647ff1ff49286f3fadcba0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9f:5c:9e:ae:5a:73:72:8c:88:2b:23:e7:1a:
9a:4f:98:f4:dc:00:74:e8:c1:59:47:af:57:bb:83:
cb:c4:ff:37:6a:5b:e1:8c:54:3c:40:24:13:d5:fe:
3b:f8:f5:ee:07:08:d1:96:8c:8b:05:64:8d:aa:95:
a1:00:5e:25:f9:a4:40:8b:db:ec:b9:77:8c:4d:44:
33:05:a8:fb:ff:3a:57:ee:85:37:ba:2a:9d:9d:72:
52:95:e8:0e:63:98:4e:b3:d5:0a:7a:f7:03:3f:8a:
c6:00:e8:b1:40:10:b5:d8:5f:46:e6:cc:d8:50:22:
76:6a:6f:69:e4:66:b5:b0:a8:0c:a2:31:ee:0d:21:
d0:26:d3:50:f9:40:22:ed:c5:45:27:24:e5:84:c5:
7e:ed:14:37:de:13:48:de:4e:d2:e6:f9:00:85:02:
04:77:33:5f:c6:90:55:79:25:06:49:71:76:66:f4:
13:e0:18:73:7f:2a:b2:45:b2:4f:e8:a6:de:80:7c:
e1:2f:32:0e:d9:e7:b4:89:14:47:c1:21:d8:b1:6a:
37:9b:a4:ba:4b:05:96:dc:e7:31:ef:c8:90:b9:6d:
de:86:fa:de:2c:56:72:5c:3f:58:34:d1:79:b4:b3:
46:da:1a:23:89:17:11:c3:1d:81:3b:10:14:12:4f:
8c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:58:93:18:A3:17:A3:8B:D6:47:FF:1F:F4:92:86:F3:FA:DC:BA:0D
X509v3 Authority Key Identifier:
keyid:40:81:F8:56:02:B1:16:89:25:D8:3E:B3:CA:61:60:9F:35:79:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIH4VgKxFokl2D6zymFgnzV5VqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/22c93c-9000-4e73-a1c5-c03f3fddd4ac/1/QIH4VgKxFokl2D6zymFgnzV5VqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:64:5c:21:10:97:98:dc:5a:d5:12:f9:a3:57:1f:77:95:96:
a7:e2:bb:7d:1a:5a:5e:fb:90:ee:c0:f9:c1:8c:da:57:d0:a1:
b1:f6:bf:c2:8a:09:62:f2:53:66:e2:1f:37:1f:eb:b6:1d:58:
fe:69:f6:06:e7:58:5a:5f:2f:77:77:ad:82:66:5b:0e:91:b8:
ab:81:22:4b:b2:e0:a2:61:db:2e:c8:0e:29:f3:59:5f:a9:42:
a7:dd:c7:98:07:b4:06:65:d8:2c:32:7e:87:61:8a:4b:45:e5:
20:ec:9c:75:27:76:1e:9a:ac:82:c0:cd:e6:fc:42:13:ec:fc:
e5:a6:ce:5f:bb:3b:49:7c:a4:51:da:31:e0:dd:f6:2c:b8:70:
7c:47:c6:79:ab:83:ec:64:44:41:05:93:4e:5b:89:17:36:5f:
e4:41:7c:e9:ab:33:69:ec:d3:15:e8:a0:04:36:36:6a:60:ca:
94:6a:da:39:da:43:e4:f8:6b:9c:94:72:6c:d8:8d:92:ab:59:
e8:90:d0:2e:17:92:8b:c8:3a:6b:6c:5d:b3:50:90:2d:cc:7d:
ba:8f:bb:61:ed:ab:fe:c1:90:7a:bc:c7:1b:ca:0d:54:e9:2c:
ba:87:1e:e3:62:d9:4c:95:04:28:37:b2:5a:aa:d7:b5:42:3f:
d8:a0:c1:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cwWvkcxTtG2qXPekXNumMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwODFmODU2MDJiMTE2ODkyNWQ4M2ViM2NhNjE2MDlmMzU3
OTU2YTYwHhcNMjUwMTMxMTMwMDQyWhcNMjUwMjAxMTMwMDQyWjAzMTEwLwYDVQQD
EyhmODU4OTMxOGEzMTdhMzhiZDY0N2ZmMWZmNDkyODZmM2ZhZGNiYTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZ9cnq5ac3KMiCsj5xqaT5j03AB0
6MFZR69Xu4PLxP83alvhjFQ8QCQT1f47+PXuBwjRloyLBWSNqpWhAF4l+aRAi9vs
uXeMTUQzBaj7/zpX7oU3uiqdnXJSlegOY5hOs9UKevcDP4rGAOixQBC12F9G5szY
UCJ2am9p5Ga1sKgMojHuDSHQJtNQ+UAi7cVFJyTlhMV+7RQ33hNI3k7S5vkAhQIE
dzNfxpBVeSUGSXF2ZvQT4BhzfyqyRbJP6KbegHzhLzIO2ee0iRRHwSHYsWo3m6S6
SwWW3Ocx78iQuW3ehvreLFZyXD9YNNF5tLNG2hojiRcRwx2BOxAUEk+MqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhYkxijF6OL1kf/H/SShvP63LoNMB8GA1UdIwQY
MBaAFECB+FYCsRaJJdg+s8phYJ81eVamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUlINFZnS3hGb2tsMkQ2enltRmduelY1VnFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yMmM5M2MtOTAwMC00ZTczLWExYzUt
YzAzZjNmZGRkNGFjLzEvUUlINFZnS3hGb2tsMkQ2enltRmduelY1VnFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yMmM5M2MtOTAwMC00ZTczLWExYzUtYzAzZjNmZGRkNGFj
LzEvUUlINFZnS3hGb2tsMkQ2enltRmduelY1VnFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD2RcIRCX
mNxa1RL5o1cfd5WWp+K7fRpaXvuQ7sD5wYzaV9Chsfa/wooJYvJTZuIfNx/rth1Y
/mn2BudYWl8vd3etgmZbDpG4q4EiS7LgomHbLsgOKfNZX6lCp93HmAe0BmXYLDJ+
h2GKS0XlIOycdSd2HpqsgsDN5vxCE+z85abOX7s7SXykUdox4N32LLhwfEfGeauD
7GREQQWTTluJFzZf5EF86aszaezTFeigBDY2amDKlGraOdpD5PhrnJRybNiNkqtZ
6JDQLheSi8g6a2xds1CQLcx9uo+7Ye2r/sGQerzHG8oNVOksuoce42LZTJUEKDey
WqrXtUI/2KDBIA==
-----END CERTIFICATE-----
Generated at Thu May 1 11:03:25 2025 by rpki-client