Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft
File: QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft (raw, json)
Hash identifier: crtgtT5JHFB+wbLWdzMQ7Rr4vAJkgW5b9MwG5H5VzJo=
Subject key identifier: 36:1D:00:33:48:D7:C0:4E:81:12:DC:69:E9:64:C0:FA:4A:42:31:74
Authority key identifier: 41:F2:82:CC:1C:07:69:7F:F5:B5:19:0C:71:43:93:D5:42:40:6D:43
Certificate issuer: /CN=41f282cc1c07697ff5b5190c714393d542406d43
Certificate serial: 0194BBCDC9B0C4D5032A89B25D85D38F8DB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:13 +0000
Manifest this update: Fri 31 Jan 2025 10:00:13 +0000
Manifest next update: Sat 01 Feb 2025 10:00:13 +0000
Files and hashes: 1: PbpHI1ZC_qh6Iqt-kTdMP4W_DEg.roa (hash: K3Udc58xv21OmQH+u7wn/kXbZhJ9O+Rk784GDSjalf0=)
2: QfKCzBwHaX_1tRkMcUOT1UJAbUM.crl (hash: 8FnHAKCWEMU2yKKLBQZXYiZDckWbGFXDl6cbiMEulkQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c9:b0:c4:d5:03:2a:89:b2:5d:85:d3:8f:8d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f282cc1c07697ff5b5190c714393d542406d43
Validity
Not Before: Jan 31 10:00:13 2025 GMT
Not After : Feb 1 10:00:13 2025 GMT
Subject: CN=361d003348d7c04e8112dc69e964c0fa4a423174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:65:eb:57:02:c0:6e:0f:57:7b:2f:f2:4e:50:
43:1c:0f:d9:c3:a6:a0:fb:2e:82:97:1e:3b:9e:ba:
fd:e9:9d:48:ee:14:0c:9c:1b:f4:61:ea:8d:6a:09:
d5:9f:50:4e:48:f5:2c:4c:53:63:a2:fb:22:07:1c:
df:a2:e4:26:cf:5b:db:93:ba:cc:84:ef:23:81:d0:
24:c0:26:f3:81:48:31:b9:89:ea:25:9e:50:ef:90:
8f:91:e1:f1:55:d6:5f:e5:71:e4:c2:e9:3b:d1:23:
e3:38:1b:35:1d:3f:54:0c:b5:3f:d8:8b:f1:f4:00:
3b:06:6e:8f:48:15:68:4a:fc:b0:7c:68:b1:9b:7f:
14:ea:34:1f:b9:aa:35:53:4d:3d:f2:d9:60:b5:b0:
42:3b:95:cd:c0:3a:c7:70:5a:a1:19:09:7e:03:d9:
22:e4:5e:41:53:75:7b:f2:5a:da:08:9e:c3:c8:85:
d2:29:b2:dd:7a:4f:ea:5e:aa:e1:38:d6:fc:df:37:
3b:96:0a:45:93:1a:a0:74:c9:b4:28:00:0f:68:60:
c7:a8:9c:32:3b:27:30:89:1c:66:59:09:3a:84:70:
38:3a:b4:d2:2b:bb:55:d3:63:bb:60:64:ed:44:16:
30:26:07:92:2c:cc:90:61:1e:45:cd:56:61:b7:ef:
1f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1D:00:33:48:D7:C0:4E:81:12:DC:69:E9:64:C0:FA:4A:42:31:74
X509v3 Authority Key Identifier:
keyid:41:F2:82:CC:1C:07:69:7F:F5:B5:19:0C:71:43:93:D5:42:40:6D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:78:79:05:a3:ac:5e:e5:7f:4b:89:df:93:44:ce:43:a0:fb:
45:9a:29:0c:db:06:41:af:eb:06:4b:33:7c:bf:57:20:a9:c1:
05:d9:49:a1:60:0a:09:ba:82:7a:3b:23:08:95:db:24:8b:7e:
07:0c:b0:30:22:b3:b7:ff:10:2d:e7:cb:17:a6:4b:fc:27:41:
4f:64:c3:2c:77:76:74:c6:8c:a0:23:33:48:44:98:bd:83:cd:
4d:89:0f:98:3d:e9:98:3a:51:0b:43:62:90:88:35:f7:96:7a:
e9:e2:7b:26:be:c7:87:00:c3:f2:aa:b7:63:0d:77:32:a6:14:
c9:b0:0e:cb:5e:4d:33:45:d5:de:c8:00:4c:41:65:72:0c:56:
c8:5f:62:b8:07:02:6d:c5:47:a5:34:73:e1:93:9c:e5:15:29:
98:e4:25:7d:84:e5:78:41:ac:5f:e2:c6:2e:29:70:64:1e:36:
8c:cd:30:b8:c0:d7:69:f8:d6:db:69:f8:09:04:7b:bb:1a:bc:
02:db:52:44:14:77:36:fa:07:79:97:7b:bf:1b:e5:fc:2e:7a:
2c:e0:58:64:c8:89:ff:d2:9b:39:1c:34:5e:cc:8a:dc:34:d0:
4e:3e:03:eb:bf:7d:bd:53:a0:f3:4f:eb:02:fd:c4:e6:6d:18:
73:83:92:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zcmwxNUDKomyXYXTj424MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZjI4MmNjMWMwNzY5N2ZmNWI1MTkwYzcxNDM5M2Q1NDI0
MDZkNDMwHhcNMjUwMTMxMTAwMDEzWhcNMjUwMjAxMTAwMDEzWjAzMTEwLwYDVQQD
EygzNjFkMDAzMzQ4ZDdjMDRlODExMmRjNjllOTY0YzBmYTRhNDIzMTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGXrVwLAbg9Xey/yTlBDHA/Zw6ag
+y6Clx47nrr96Z1I7hQMnBv0YeqNagnVn1BOSPUsTFNjovsiBxzfouQmz1vbk7rM
hO8jgdAkwCbzgUgxuYnqJZ5Q75CPkeHxVdZf5XHkwuk70SPjOBs1HT9UDLU/2Ivx
9AA7Bm6PSBVoSvywfGixm38U6jQfuao1U0098tlgtbBCO5XNwDrHcFqhGQl+A9ki
5F5BU3V78lraCJ7DyIXSKbLdek/qXqrhONb83zc7lgpFkxqgdMm0KAAPaGDHqJwy
OycwiRxmWQk6hHA4OrTSK7tV02O7YGTtRBYwJgeSLMyQYR5FzVZht+8fwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDYdADNI18BOgRLcaelkwPpKQjF0MB8GA1UdIwQY
MBaAFEHygswcB2l/9bUZDHFDk9VCQG1DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWZLQ3pCd0hhWF8xdFJrTWNVT1QxVUpBYlVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9hZWFlOTUtNDBiZC00YWFkLWFiMTQt
ZTNlZWNmOWRmYWFkLzEvUWZLQ3pCd0hhWF8xdFJrTWNVT1QxVUpBYlVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9hZWFlOTUtNDBiZC00YWFkLWFiMTQtZTNlZWNmOWRmYWFk
LzEvUWZLQ3pCd0hhWF8xdFJrTWNVT1QxVUpBYlVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbXh5BaOs
XuV/S4nfk0TOQ6D7RZopDNsGQa/rBkszfL9XIKnBBdlJoWAKCbqCejsjCJXbJIt+
BwywMCKzt/8QLefLF6ZL/CdBT2TDLHd2dMaMoCMzSESYvYPNTYkPmD3pmDpRC0Ni
kIg195Z66eJ7Jr7HhwDD8qq3Yw13MqYUybAOy15NM0XV3sgATEFlcgxWyF9iuAcC
bcVHpTRz4ZOc5RUpmOQlfYTleEGsX+LGLilwZB42jM0wuMDXafjW22n4CQR7uxq8
AttSRBR3NvoHeZd7vxvl/C56LOBYZMiJ/9KbORw0XsyK3DTQTj4D6799vVOg80/r
Av3E5m0Yc4OS1A==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:05:37 2025 by rpki-client