Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/630e94-6b71-4063-9328-558eea1f5901/1/QzFPMPOkU_9JIh2VStgCijBKAVA.mft
File: QzFPMPOkU_9JIh2VStgCijBKAVA.mft (raw, json)
Hash identifier: Mn+qrgfClbFH8yMJzXkLUUcNEOaTLCub5znnOVSW5g8=
Subject key identifier: B5:A0:F3:33:DB:73:81:44:F6:95:58:51:16:DC:38:16:3C:9D:D1:64
Authority key identifier: 43:31:4F:30:F3:A4:53:FF:49:22:1D:95:4A:D8:02:8A:30:4A:01:50
Certificate issuer: /CN=43314f30f3a453ff49221d954ad8028a304a0150
Certificate serial: 0194BC3C9B4939181BCBFE259D777D9B0642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QzFPMPOkU_9JIh2VStgCijBKAVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/630e94-6b71-4063-9328-558eea1f5901/1/QzFPMPOkU_9JIh2VStgCijBKAVA.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 12:01:15 +0000
Manifest this update: Fri 31 Jan 2025 12:01:15 +0000
Manifest next update: Sat 01 Feb 2025 12:01:15 +0000
Files and hashes: 1: QzFPMPOkU_9JIh2VStgCijBKAVA.crl (hash: BfkQa6L9KxNxCSIydEJgdNwz3pxgxDHr7kBuLz50LFs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:9b:49:39:18:1b:cb:fe:25:9d:77:7d:9b:06:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43314f30f3a453ff49221d954ad8028a304a0150
Validity
Not Before: Jan 31 12:01:15 2025 GMT
Not After : Feb 1 12:01:15 2025 GMT
Subject: CN=b5a0f333db738144f695585116dc38163c9dd164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7d:47:57:e1:9c:cd:80:ed:3d:39:65:21:73:
9e:e9:1c:dd:5e:1c:43:56:d6:f9:74:86:b6:03:b4:
c7:e7:f4:93:14:8d:cf:61:33:f1:bf:eb:b1:b5:8d:
fa:e4:76:a3:00:66:1b:5d:73:ad:59:36:f9:6b:8d:
75:3c:c1:30:fd:44:64:7d:81:b3:27:ae:60:1a:bd:
42:64:8c:45:5b:1d:36:ce:f4:61:ee:22:f6:b4:35:
7c:4a:41:d8:78:ac:24:0c:1c:65:17:cb:22:77:5c:
d9:19:8a:2b:1b:bb:f6:54:9d:dc:54:b0:a6:2d:03:
b5:0c:0b:32:da:89:ea:d5:b2:4c:dc:2f:0e:fd:04:
49:6c:92:e5:e2:a8:3e:1f:9b:fc:39:6b:50:f6:9b:
c3:73:8b:e8:fa:06:c4:45:05:dc:8a:22:96:bc:da:
e4:d7:c3:ba:4f:07:ab:2c:fa:42:f4:47:11:87:6c:
6b:ea:50:42:e9:f9:5c:de:64:58:f6:c0:1e:2d:9f:
d8:8e:6c:75:07:fc:89:33:a4:2a:67:72:61:e1:40:
5f:89:b1:b6:26:52:58:65:8b:f8:65:67:26:3b:30:
94:f6:c2:0f:f0:6a:8c:9a:ee:55:30:cd:10:47:a4:
35:69:35:1b:6e:c9:a1:05:93:a0:3a:ee:d7:5d:5f:
a1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A0:F3:33:DB:73:81:44:F6:95:58:51:16:DC:38:16:3C:9D:D1:64
X509v3 Authority Key Identifier:
keyid:43:31:4F:30:F3:A4:53:FF:49:22:1D:95:4A:D8:02:8A:30:4A:01:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QzFPMPOkU_9JIh2VStgCijBKAVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/630e94-6b71-4063-9328-558eea1f5901/1/QzFPMPOkU_9JIh2VStgCijBKAVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/630e94-6b71-4063-9328-558eea1f5901/1/QzFPMPOkU_9JIh2VStgCijBKAVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:1b:a6:df:7d:5d:6c:78:fb:89:43:cc:cc:e2:35:38:47:91:
81:c2:1f:27:75:76:96:f8:4c:a0:b1:aa:b1:b2:1e:70:c9:51:
22:b4:f1:76:64:78:24:bd:c5:c0:51:00:26:7d:7c:89:12:56:
bd:cf:53:65:cc:30:99:9e:95:e4:07:76:30:e4:ef:cf:85:f2:
cb:aa:dc:e4:f2:97:49:ae:ad:01:1f:8c:33:66:ea:d5:48:f4:
ba:8b:7b:5f:30:9b:cc:20:bf:20:00:e3:a8:ae:20:79:9a:91:
c6:e4:95:83:78:30:d1:00:c3:9a:2a:a1:b3:29:17:de:67:75:
96:76:e4:a5:e2:ab:8f:c5:d2:73:52:25:ae:cb:13:e7:d1:da:
d1:c1:e6:02:80:7c:4f:a3:8d:b9:85:06:51:e2:71:c7:8f:b7:
f0:9f:9a:07:2c:eb:bb:ae:1c:24:09:49:dd:ed:a2:62:b2:28:
39:ff:25:68:44:74:eb:48:7e:ff:76:64:5c:1e:b5:ba:90:aa:
b5:ad:7c:de:ac:68:2e:7c:9b:d5:52:0c:d7:86:16:bf:73:f8:
f2:a5:42:96:02:e4:9f:e1:a0:68:42:c9:ae:9b:6b:49:3f:52:
f5:dd:bf:35:4b:e4:29:94:a3:ba:e4:2b:78:54:0b:43:96:a9:
68:9e:f6:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PJtJORgby/4lnXd9mwZCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMzE0ZjMwZjNhNDUzZmY0OTIyMWQ5NTRhZDgwMjhhMzA0
YTAxNTAwHhcNMjUwMTMxMTIwMTE1WhcNMjUwMjAxMTIwMTE1WjAzMTEwLwYDVQQD
EyhiNWEwZjMzM2RiNzM4MTQ0ZjY5NTU4NTExNmRjMzgxNjNjOWRkMTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxn1HV+GczYDtPTllIXOe6RzdXhxD
Vtb5dIa2A7TH5/STFI3PYTPxv+uxtY365HajAGYbXXOtWTb5a411PMEw/URkfYGz
J65gGr1CZIxFWx02zvRh7iL2tDV8SkHYeKwkDBxlF8sid1zZGYorG7v2VJ3cVLCm
LQO1DAsy2onq1bJM3C8O/QRJbJLl4qg+H5v8OWtQ9pvDc4vo+gbERQXciiKWvNrk
18O6TwerLPpC9EcRh2xr6lBC6flc3mRY9sAeLZ/Yjmx1B/yJM6QqZ3Jh4UBfibG2
JlJYZYv4ZWcmOzCU9sIP8GqMmu5VMM0QR6Q1aTUbbsmhBZOgOu7XXV+h0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWg8zPbc4FE9pVYURbcOBY8ndFkMB8GA1UdIwQY
MBaAFEMxTzDzpFP/SSIdlUrYAoowSgFQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXpGUE1QT2tVXzlKSWgyVlN0Z0NpakJLQVZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC82MzBlOTQtNmI3MS00MDYzLTkzMjgt
NTU4ZWVhMWY1OTAxLzEvUXpGUE1QT2tVXzlKSWgyVlN0Z0NpakJLQVZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC82MzBlOTQtNmI3MS00MDYzLTkzMjgtNTU4ZWVhMWY1OTAx
LzEvUXpGUE1QT2tVXzlKSWgyVlN0Z0NpakJLQVZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZhum331d
bHj7iUPMzOI1OEeRgcIfJ3V2lvhMoLGqsbIecMlRIrTxdmR4JL3FwFEAJn18iRJW
vc9TZcwwmZ6V5Ad2MOTvz4Xyy6rc5PKXSa6tAR+MM2bq1Uj0uot7XzCbzCC/IADj
qK4geZqRxuSVg3gw0QDDmiqhsykX3md1lnbkpeKrj8XSc1IlrssT59Ha0cHmAoB8
T6ONuYUGUeJxx4+38J+aByzru64cJAlJ3e2iYrIoOf8laER060h+/3ZkXB61upCq
ta183qxoLnyb1VIM14YWv3P48qVClgLkn+GgaELJrptrST9S9d2/NUvkKZSjuuQr
eFQLQ5apaJ72sw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:12 2025 by rpki-client