Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.mft
File: QVUIeoGEi_ezf_i-WXUdeUQNgRY.mft (raw, json)
Hash identifier: snxjwA32LwpTw5aIHNe4/f35cViNZAM/jOQ1nZ2rcGM=
Subject key identifier: 18:98:CC:2A:C3:AD:78:3A:86:1E:00:00:12:A3:C0:34:1C:1F:0E:67
Authority key identifier: 41:55:08:7A:81:84:8B:F7:B3:7F:F8:BE:59:75:1D:79:44:0D:81:16
Certificate issuer: /CN=4155087a81848bf7b37ff8be59751d79440d8116
Certificate serial: 0194BD17468761C4C88B2F826226BD6DE1D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVUIeoGEi_ezf_i-WXUdeUQNgRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.mft
Manifest number: 0386
Signing time: Fri 31 Jan 2025 16:00:06 +0000
Manifest this update: Fri 31 Jan 2025 16:00:06 +0000
Manifest next update: Sat 01 Feb 2025 16:00:06 +0000
Files and hashes: 1: KZYzQ7jFzWYYwYRhQ-ZJNAP7g7s.roa (hash: bwXn17r3CjUQeiw9goACwMSayH6c9Rjo8urDQ0LO3DQ=)
2: QVUIeoGEi_ezf_i-WXUdeUQNgRY.crl (hash: yizzmcQAiq3m+6QrZ33PaUSaTROhy6yihZnnTPUZPhw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:46:87:61:c4:c8:8b:2f:82:62:26:bd:6d:e1:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4155087a81848bf7b37ff8be59751d79440d8116
Validity
Not Before: Jan 31 16:00:06 2025 GMT
Not After : Feb 1 16:00:06 2025 GMT
Subject: CN=1898cc2ac3ad783a861e000012a3c0341c1f0e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:19:4d:b2:75:34:43:32:d9:4a:2f:07:47:41:
e8:fd:74:d1:dd:ec:5d:57:9d:ce:2d:59:aa:94:4e:
dc:c4:c8:09:cc:fb:a9:d7:ce:dd:cd:99:23:72:2a:
d4:01:01:e8:b8:03:35:85:03:52:6c:4c:f4:2e:3e:
d1:d6:5f:11:28:3d:71:6a:2c:44:b5:05:c3:90:95:
14:72:c3:1b:0c:3c:15:4e:88:56:e0:cf:18:a7:41:
5a:59:85:00:d5:93:f1:22:a5:9f:76:09:1a:be:e2:
ca:5a:f4:7c:06:58:0c:9c:34:a2:1f:c2:89:bd:b9:
e4:40:85:53:98:d7:90:b9:33:52:64:5d:c1:66:d4:
80:60:87:61:b8:c7:60:e6:dc:d9:ae:42:7b:1a:3a:
c5:97:e5:03:01:ef:b7:39:0d:c8:da:59:1f:d9:bc:
ae:f2:f8:aa:43:7b:51:d4:81:71:b1:60:41:e4:0b:
e2:98:43:f8:0c:77:04:6d:9b:87:1d:2b:71:9c:6b:
23:92:74:99:7a:de:6c:95:49:67:b7:2c:42:0d:ad:
9b:37:26:38:f9:fe:c3:0b:c4:fe:47:c1:93:93:ad:
99:a1:9d:76:95:76:76:1f:aa:09:99:f0:69:f5:2a:
ee:d2:86:45:f6:3a:67:d0:70:8a:1e:52:cd:e5:7c:
f9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:98:CC:2A:C3:AD:78:3A:86:1E:00:00:12:A3:C0:34:1C:1F:0E:67
X509v3 Authority Key Identifier:
keyid:41:55:08:7A:81:84:8B:F7:B3:7F:F8:BE:59:75:1D:79:44:0D:81:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVUIeoGEi_ezf_i-WXUdeUQNgRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/06f515-5f77-48aa-8905-f5a86cbd44ce/1/QVUIeoGEi_ezf_i-WXUdeUQNgRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:0b:9e:16:d2:97:6e:8a:45:23:db:66:5a:21:f7:c4:aa:5f:
d4:9e:5b:44:60:ca:e2:a4:48:88:97:f1:6e:11:38:e6:55:ff:
1e:0a:4d:4a:64:c3:3e:4f:3b:ed:79:b9:56:c5:4e:bb:09:9e:
6a:d6:f2:28:b9:92:9b:6b:0b:f7:7c:26:d7:31:97:2e:bc:3c:
16:74:f9:1f:ee:8a:d6:43:ec:5b:ea:9c:83:9e:d0:f6:d5:c3:
a4:f4:88:61:93:52:54:bc:95:75:ac:9e:29:a6:92:c5:b0:70:
e1:34:1b:af:87:b1:0f:23:18:00:1c:3f:ea:64:e1:b7:30:17:
9f:69:84:37:f3:78:7b:b0:39:73:fd:7b:27:fe:f0:65:8c:f2:
67:d9:88:53:8d:55:35:56:c3:d2:cd:e7:34:b2:bb:be:29:a5:
ac:f0:3b:2d:50:67:77:f9:eb:f0:bc:5a:f0:e9:03:80:ee:cd:
b0:53:21:3b:88:ff:2c:75:22:3b:15:cf:88:12:00:44:af:5e:
d1:63:c0:56:ce:9f:2a:b0:7f:35:e5:00:75:0d:0d:95:2e:02:
d3:6e:13:71:1d:f8:d5:3a:d6:49:49:77:55:00:86:14:15:78:
03:26:8d:97:96:c8:a2:3d:af:12:31:58:d5:73:ec:9b:81:db:
57:ce:32:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F0aHYcTIiy+CYia9beHRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNTUwODdhODE4NDhiZjdiMzdmZjhiZTU5NzUxZDc5NDQw
ZDgxMTYwHhcNMjUwMTMxMTYwMDA2WhcNMjUwMjAxMTYwMDA2WjAzMTEwLwYDVQQD
EygxODk4Y2MyYWMzYWQ3ODNhODYxZTAwMDAxMmEzYzAzNDFjMWYwZTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphlNsnU0QzLZSi8HR0Ho/XTR3exd
V53OLVmqlE7cxMgJzPup187dzZkjcirUAQHouAM1hQNSbEz0Lj7R1l8RKD1xaixE
tQXDkJUUcsMbDDwVTohW4M8Yp0FaWYUA1ZPxIqWfdgkavuLKWvR8BlgMnDSiH8KJ
vbnkQIVTmNeQuTNSZF3BZtSAYIdhuMdg5tzZrkJ7GjrFl+UDAe+3OQ3I2lkf2byu
8viqQ3tR1IFxsWBB5AvimEP4DHcEbZuHHStxnGsjknSZet5slUlntyxCDa2bNyY4
+f7DC8T+R8GTk62ZoZ12lXZ2H6oJmfBp9Sru0oZF9jpn0HCKHlLN5Xz5OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBiYzCrDrXg6hh4AABKjwDQcHw5nMB8GA1UdIwQY
MBaAFEFVCHqBhIv3s3/4vll1HXlEDYEWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVZVSWVvR0VpX2V6Zl9pLVdYVWRlVVFOZ1JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wNmY1MTUtNWY3Ny00OGFhLTg5MDUt
ZjVhODZjYmQ0NGNlLzEvUVZVSWVvR0VpX2V6Zl9pLVdYVWRlVVFOZ1JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8wNmY1MTUtNWY3Ny00OGFhLTg5MDUtZjVhODZjYmQ0NGNl
LzEvUVZVSWVvR0VpX2V6Zl9pLVdYVWRlVVFOZ1JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnQueFtKX
bopFI9tmWiH3xKpf1J5bRGDK4qRIiJfxbhE45lX/HgpNSmTDPk877Xm5VsVOuwme
atbyKLmSm2sL93wm1zGXLrw8FnT5H+6K1kPsW+qcg57Q9tXDpPSIYZNSVLyVdaye
KaaSxbBw4TQbr4exDyMYABw/6mThtzAXn2mEN/N4e7A5c/17J/7wZYzyZ9mIU41V
NVbD0s3nNLK7vimlrPA7LVBnd/nr8Lxa8OkDgO7NsFMhO4j/LHUiOxXPiBIARK9e
0WPAVs6fKrB/NeUAdQ0NlS4C024TcR341TrWSUl3VQCGFBV4AyaNl5bIoj2vEjFY
1XPsm4HbV84yfQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:34 2025 by rpki-client