Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
File: zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft (raw, json)
Hash identifier: yDQmPaqSiDKCLyQkzDuQpqvAq51Z+GR0pctHfl+0h9M=
Subject key identifier: 1A:69:70:25:1C:35:56:F9:6E:16:27:73:44:48:76:EE:F9:89:AE:FF
Authority key identifier: CD:02:D0:77:48:5A:15:E8:A2:54:A4:9E:DD:99:4D:4F:C2:A9:08:A6
Certificate issuer: /CN=cd02d077485a15e8a254a49edd994d4fc2a908a6
Certificate serial: 0194BCAA35661719D92995AC5B5A1454D5A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 14:00:58 +0000
Manifest this update: Fri 31 Jan 2025 14:00:58 +0000
Manifest next update: Sat 01 Feb 2025 14:00:58 +0000
Files and hashes: 1: OcgJ9gd4XPf2cH1vwOSDk8wsWCY.roa (hash: mqfa0ZehsylIV/d7nzWZG94iCnmV9oQHVVnGpSyC+og=)
2: pdwDWOzc3QzXOsiEO7HIgZ0hQdQ.roa (hash: m/RIMhJds2RFVXbpbtSSU1vxyz5pEJiQgY8y39qh5vk=)
3: zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl (hash: 9SMCaNlO0pxLxJtFAl7L9Tjo+rE2xamjOEFyJXq3o/U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:35:66:17:19:d9:29:95:ac:5b:5a:14:54:d5:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd02d077485a15e8a254a49edd994d4fc2a908a6
Validity
Not Before: Jan 31 14:00:58 2025 GMT
Not After : Feb 1 14:00:58 2025 GMT
Subject: CN=1a6970251c3556f96e162773444876eef989aeff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dc:4c:c8:28:99:ae:c8:70:23:e6:1e:a8:ed:
68:4f:36:62:92:1a:7d:fd:96:5a:47:29:62:16:71:
eb:12:5f:ab:70:6b:08:43:23:84:e6:fa:0d:19:96:
9a:19:bb:67:7a:5a:43:47:12:19:a9:83:34:f5:64:
e2:b3:71:73:3e:b5:fb:13:60:36:ae:e9:17:4d:65:
98:13:81:af:6f:3c:7a:53:c7:e8:f3:62:2a:d3:70:
b7:d9:16:eb:62:40:e4:8b:10:33:2f:8e:42:92:94:
a1:f7:9b:55:ee:7d:a0:25:80:96:1c:d9:8a:79:25:
50:84:e1:78:d5:9e:fe:12:49:6b:0e:bc:46:f3:b3:
1d:be:54:fd:0d:25:31:89:da:3b:11:62:f9:e9:cf:
aa:69:71:e5:5a:4b:eb:01:a3:63:15:43:49:26:73:
c4:01:23:64:01:90:cc:ec:57:5e:38:1c:94:83:bf:
08:5e:6d:ca:84:c9:2a:6a:07:61:43:0f:f1:47:61:
92:47:0c:57:99:6b:38:89:61:e0:1d:16:37:9a:db:
18:bc:42:9f:00:0c:b8:79:8e:5d:aa:e1:6b:e7:4b:
25:5d:c8:5d:bd:c2:51:76:e2:58:ac:95:b3:64:c0:
69:79:f7:d6:a1:d2:da:cd:b4:fc:bc:a0:0e:27:27:
d5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:69:70:25:1C:35:56:F9:6E:16:27:73:44:48:76:EE:F9:89:AE:FF
X509v3 Authority Key Identifier:
keyid:CD:02:D0:77:48:5A:15:E8:A2:54:A4:9E:DD:99:4D:4F:C2:A9:08:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:61:ef:a6:43:8a:a1:f6:c6:1f:9d:f1:9d:d7:ae:b2:f7:2c:
e4:7b:69:59:93:ea:67:e6:39:5f:7f:ff:ff:34:36:98:a9:0c:
82:9f:a0:73:e7:0e:32:09:af:be:91:fc:5e:6d:dd:6a:ef:23:
6f:46:43:e0:a4:72:a8:aa:14:07:dc:11:6c:9b:09:d8:d2:60:
6f:4b:34:72:89:56:5a:76:34:70:b5:9c:09:bd:3b:de:7b:f4:
1f:67:e9:0d:4d:5a:33:20:1f:ce:1d:5d:f8:e4:d5:21:02:60:
48:ef:41:46:4b:4c:4a:01:00:a5:37:4e:1f:d4:59:15:51:c7:
92:41:ed:94:ba:bc:01:c6:1b:6e:eb:8c:e3:84:57:17:d3:c8:
aa:fb:6d:47:c9:f9:5c:55:cc:36:d9:48:f0:9e:23:f4:55:5b:
34:b0:26:2c:37:7c:75:75:55:cd:e6:fb:97:ee:a0:65:14:05:
7d:24:c1:a6:fe:c1:58:ae:18:9c:05:b0:e5:de:1d:f7:92:58:
65:d1:e1:68:17:7a:5d:ca:1f:53:c2:f0:8c:f7:05:68:77:3a:
ab:e7:d5:64:93:fa:0e:de:33:63:6c:b5:17:f9:2a:e4:72:f2:
21:0d:df:17:13:48:f2:e2:ef:16:ed:a0:4d:49:a1:d6:7a:02:
19:8f:37:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qjVmFxnZKZWsW1oUVNWkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMDJkMDc3NDg1YTE1ZThhMjU0YTQ5ZWRkOTk0ZDRmYzJh
OTA4YTYwHhcNMjUwMTMxMTQwMDU4WhcNMjUwMjAxMTQwMDU4WjAzMTEwLwYDVQQD
EygxYTY5NzAyNTFjMzU1NmY5NmUxNjI3NzM0NDQ4NzZlZWY5ODlhZWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9xMyCiZrshwI+YeqO1oTzZikhp9
/ZZaRyliFnHrEl+rcGsIQyOE5voNGZaaGbtnelpDRxIZqYM09WTis3FzPrX7E2A2
rukXTWWYE4Gvbzx6U8fo82Iq03C32RbrYkDkixAzL45CkpSh95tV7n2gJYCWHNmK
eSVQhOF41Z7+EklrDrxG87MdvlT9DSUxido7EWL56c+qaXHlWkvrAaNjFUNJJnPE
ASNkAZDM7FdeOByUg78IXm3KhMkqagdhQw/xR2GSRwxXmWs4iWHgHRY3mtsYvEKf
AAy4eY5dquFr50slXchdvcJRduJYrJWzZMBpeffWodLazbT8vKAOJyfVPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBppcCUcNVb5bhYnc0RIdu75ia7/MB8GA1UdIwQY
MBaAFM0C0HdIWhXoolSknt2ZTU/CqQimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelFMUWQwaGFGZWlpVktTZTNabE5UOEtwQ0tZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS82NzE0ZjEtYzNkNi00ODc1LWEzNmEt
MzdlODBkYWI5MzAyLzEvelFMUWQwaGFGZWlpVktTZTNabE5UOEtwQ0tZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS82NzE0ZjEtYzNkNi00ODc1LWEzNmEtMzdlODBkYWI5MzAy
LzEvelFMUWQwaGFGZWlpVktTZTNabE5UOEtwQ0tZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmWHvpkOK
ofbGH53xndeusvcs5HtpWZPqZ+Y5X3///zQ2mKkMgp+gc+cOMgmvvpH8Xm3dau8j
b0ZD4KRyqKoUB9wRbJsJ2NJgb0s0colWWnY0cLWcCb073nv0H2fpDU1aMyAfzh1d
+OTVIQJgSO9BRktMSgEApTdOH9RZFVHHkkHtlLq8AcYbbuuM44RXF9PIqvttR8n5
XFXMNtlI8J4j9FVbNLAmLDd8dXVVzeb7l+6gZRQFfSTBpv7BWK4YnAWw5d4d95JY
ZdHhaBd6XcofU8LwjPcFaHc6q+fVZJP6Dt4zY2y1F/kq5HLyIQ3fFxNI8uLvFu2g
TUmh1noCGY83tQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:27 2025 by rpki-client