Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
File: SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft (raw, json)
Hash identifier: Bz27Ia68xjGaLET2QAOxCM3RJpMYIAyd+OJ+/1+8cgk=
Subject key identifier: 79:D0:9A:AF:67:BC:18:DF:41:04:C3:02:36:D3:FF:A6:F6:4A:A4:25
Authority key identifier: 49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05
Certificate issuer: /CN=490db999ca4ce287c5c92ab167a500902259bb05
Certificate serial: 0194BCE067583BAD62F02661B1987A0213BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 15:00:10 +0000
Manifest this update: Fri 31 Jan 2025 15:00:10 +0000
Manifest next update: Sat 01 Feb 2025 15:00:10 +0000
Files and hashes: 1: CqiCeQuNX5qYQWUphyM9iUBKOh4.roa (hash: RxNADbHHkDaXqyxPAae3UN8wvqfkoDaWlyxd0mzE4zw=)
2: SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl (hash: y90k00KDS42GznKzHUYBVpdVG00c6gJ54P1ExFXHRk4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:67:58:3b:ad:62:f0:26:61:b1:98:7a:02:13:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490db999ca4ce287c5c92ab167a500902259bb05
Validity
Not Before: Jan 31 15:00:10 2025 GMT
Not After : Feb 1 15:00:10 2025 GMT
Subject: CN=79d09aaf67bc18df4104c30236d3ffa6f64aa425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6c:de:e4:a1:fc:90:93:42:09:de:f8:9a:1a:
9c:cf:c3:6d:62:f6:d1:8a:c5:5a:cc:de:e7:9e:5f:
53:76:2f:68:ea:f4:dc:20:2d:b8:2b:57:4a:a4:c8:
a0:f6:60:72:ba:25:ba:a3:fc:a0:b6:bb:a6:21:cd:
73:40:61:76:6e:44:c2:da:6f:0a:08:1f:74:2c:2b:
a7:3f:69:e6:f9:bc:4e:91:73:de:9e:23:f9:c9:56:
ca:42:a3:92:fe:c0:77:6f:1f:ba:4b:34:5c:39:fe:
e6:4e:3d:70:e6:c0:fc:ba:06:7c:4c:d3:0b:e0:02:
57:5b:3f:a3:92:32:d0:21:87:73:c6:7f:10:74:cc:
f1:57:e1:c2:e7:c8:30:7e:4c:c3:b4:63:ed:0a:17:
b4:48:a1:cb:c5:37:84:29:c6:4c:16:27:cb:09:2b:
d0:76:40:b9:54:0d:0b:ac:f4:6c:77:b5:07:9a:09:
bc:a1:11:e3:6a:82:6d:08:62:28:4c:27:11:3d:bb:
dd:5c:fa:6d:1e:64:bd:78:a6:88:28:fd:fa:3e:7e:
e2:cb:ea:81:4d:8e:9e:a8:93:a0:1a:64:ac:3a:fd:
c1:32:4c:5f:a5:32:3f:50:2d:5c:1a:20:42:8e:98:
39:db:f4:25:10:0b:22:27:7b:80:ef:26:6e:28:10:
14:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D0:9A:AF:67:BC:18:DF:41:04:C3:02:36:D3:FF:A6:F6:4A:A4:25
X509v3 Authority Key Identifier:
keyid:49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:bc:6b:16:8b:06:a9:ab:4e:38:57:24:a1:b8:7c:be:77:66:
db:38:cc:1f:42:90:5f:0d:3a:a9:95:25:a1:09:00:54:bd:e5:
a4:ae:20:2e:c8:ca:67:c6:dd:c5:ff:09:51:98:7e:cd:e3:53:
2b:ac:48:4f:d8:ab:cd:0a:b1:39:18:37:cc:ef:c4:af:d8:95:
b1:b8:fb:9a:e5:56:13:83:b1:7d:34:99:77:6c:5b:71:ce:43:
67:1a:d7:29:a6:c1:78:36:bd:0b:50:ef:71:e3:88:13:ef:64:
d1:78:da:e0:70:27:c6:1f:b4:74:46:b4:50:12:f9:85:b4:62:
99:a5:2a:57:f5:84:30:52:c5:fc:43:67:d9:c7:c2:ad:a7:0e:
f2:b4:d3:77:03:c3:74:ac:e7:ba:1f:b9:5d:16:3c:9e:82:31:
f3:53:cd:5f:04:1b:d6:65:ad:75:cc:21:4c:39:52:86:8d:d6:
c0:cf:c8:87:96:aa:e6:67:b2:57:48:e5:1b:be:79:e3:0c:71:
65:2d:f1:3e:f3:29:ab:5e:23:78:e0:6d:82:47:e9:b1:9f:02:
24:21:c5:6d:80:e6:e0:3e:bb:b8:81:b9:4e:17:9f:8b:9c:f0:
fe:56:6a:08:4c:67:c6:96:2e:8b:c7:07:2c:21:fd:7a:71:99:
d7:1e:d4:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84GdYO61i8CZhsZh6AhO9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MGRiOTk5Y2E0Y2UyODdjNWM5MmFiMTY3YTUwMDkwMjI1
OWJiMDUwHhcNMjUwMTMxMTUwMDEwWhcNMjUwMjAxMTUwMDEwWjAzMTEwLwYDVQQD
Eyg3OWQwOWFhZjY3YmMxOGRmNDEwNGMzMDIzNmQzZmZhNmY2NGFhNDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmze5KH8kJNCCd74mhqcz8NtYvbR
isVazN7nnl9Tdi9o6vTcIC24K1dKpMig9mByuiW6o/ygtrumIc1zQGF2bkTC2m8K
CB90LCunP2nm+bxOkXPeniP5yVbKQqOS/sB3bx+6SzRcOf7mTj1w5sD8ugZ8TNML
4AJXWz+jkjLQIYdzxn8QdMzxV+HC58gwfkzDtGPtChe0SKHLxTeEKcZMFifLCSvQ
dkC5VA0LrPRsd7UHmgm8oRHjaoJtCGIoTCcRPbvdXPptHmS9eKaIKP36Pn7iy+qB
TY6eqJOgGmSsOv3BMkxfpTI/UC1cGiBCjpg52/QlEAsiJ3uA7yZuKBAUgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnQmq9nvBjfQQTDAjbT/6b2SqQlMB8GA1UdIwQY
MBaAFEkNuZnKTOKHxckqsWelAJAiWbsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1EyNW1jcE00b2ZGeVNxeFo2VUFrQ0padXdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni82ZjcxZjMtNjM5OS00OTEzLWI5OGUt
OThlMjVlMDQ2OTA4LzEvU1EyNW1jcE00b2ZGeVNxeFo2VUFrQ0padXdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni82ZjcxZjMtNjM5OS00OTEzLWI5OGUtOThlMjVlMDQ2OTA4
LzEvU1EyNW1jcE00b2ZGeVNxeFo2VUFrQ0padXdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfrxrFosG
qatOOFckobh8vndm2zjMH0KQXw06qZUloQkAVL3lpK4gLsjKZ8bdxf8JUZh+zeNT
K6xIT9irzQqxORg3zO/Er9iVsbj7muVWE4OxfTSZd2xbcc5DZxrXKabBeDa9C1Dv
ceOIE+9k0Xja4HAnxh+0dEa0UBL5hbRimaUqV/WEMFLF/ENn2cfCracO8rTTdwPD
dKznuh+5XRY8noIx81PNXwQb1mWtdcwhTDlSho3WwM/Ih5aq5meyV0jlG7554wxx
ZS3xPvMpq14jeOBtgkfpsZ8CJCHFbYDm4D67uIG5Thefi5zw/lZqCExnxpYui8cH
LCH9enGZ1x7UAg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:41 2025 by rpki-client