Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft
File: DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft (raw, json)
Hash identifier: nHwNViFBran03PRMpzy7SERvzuW858UePldplDlo96Y=
Subject key identifier: A1:64:2B:EE:8A:17:87:9A:8E:EF:7B:17:F8:1A:0F:F9:5C:E9:B0:C2
Authority key identifier: 0D:02:6A:51:89:47:DD:5B:D3:98:1E:D0:66:9C:11:C5:62:1D:04:75
Certificate issuer: /CN=0d026a518947dd5bd3981ed0669c11c5621d0475
Certificate serial: 0194BBCF03935E0222051E96DC2D4A7C5D57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft
Manifest number: 06F1
Signing time: Fri 31 Jan 2025 10:01:33 +0000
Manifest this update: Fri 31 Jan 2025 10:01:33 +0000
Manifest next update: Sat 01 Feb 2025 10:01:33 +0000
Files and hashes: 1: DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl (hash: 3IEOWTUZQur7oEh5WDNp7f/4uEZlGXglgaBgC/0fJlw=)
2: RmJWhAxRco_E7xVjUFT03f6Xzf4.roa (hash: fQ9hdhF3VEd9Q8e/aZRy085yRuISqh5rUOV7wWDjEP0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:03:93:5e:02:22:05:1e:96:dc:2d:4a:7c:5d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d026a518947dd5bd3981ed0669c11c5621d0475
Validity
Not Before: Jan 31 10:01:33 2025 GMT
Not After : Feb 1 10:01:33 2025 GMT
Subject: CN=a1642bee8a17879a8eef7b17f81a0ff95ce9b0c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:75:20:6f:23:c9:c8:c1:f9:60:37:fb:55:e0:
e7:91:ba:dc:c8:2b:d0:b4:4a:6d:bb:43:99:4a:33:
a2:c9:91:a2:5d:10:30:83:d4:f7:3c:84:37:ac:ec:
50:ab:dd:34:3c:5a:4a:34:52:0c:04:00:60:6e:1b:
90:86:58:06:77:80:cf:af:2c:ee:14:c2:1b:27:f3:
8c:79:37:d9:23:16:e3:02:a0:0f:ac:dc:8e:1f:84:
dd:3d:38:1d:88:48:49:6c:26:2b:b8:b7:9f:42:bd:
58:98:ea:73:55:75:d8:46:a7:17:0d:bb:d8:d3:79:
c0:ba:59:e2:8e:21:8b:4a:63:af:5b:74:7f:be:aa:
b2:36:7b:75:7c:6c:29:af:95:20:6e:c5:85:15:dd:
30:6e:1e:49:36:f4:a0:dd:81:fb:d4:b1:f1:57:44:
0f:07:a0:9a:c4:ad:14:a1:b6:4a:48:66:ef:72:3a:
65:e7:42:76:80:3b:9e:c3:02:96:4c:09:e5:ef:19:
2b:64:4b:a4:d8:22:58:9b:4c:2e:7f:18:f6:f4:a0:
bb:8e:50:b4:66:b3:41:76:59:0e:2c:a3:e0:3f:c0:
38:65:be:c6:3f:04:de:cc:af:e0:88:25:61:74:50:
e7:98:07:e9:2b:87:e3:97:97:3d:a2:b5:4d:bf:09:
2b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:64:2B:EE:8A:17:87:9A:8E:EF:7B:17:F8:1A:0F:F9:5C:E9:B0:C2
X509v3 Authority Key Identifier:
keyid:0D:02:6A:51:89:47:DD:5B:D3:98:1E:D0:66:9C:11:C5:62:1D:04:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:27:7d:a0:de:ab:1f:d7:0b:d8:ab:24:40:7a:09:8a:4c:52:
78:d7:69:77:a0:f6:9b:98:8e:66:b6:ad:a4:17:34:d2:6d:8f:
76:34:28:87:d4:87:49:51:89:8f:93:92:af:2a:e6:f6:23:2d:
fa:7e:6c:69:f7:10:92:67:65:3c:ef:b2:f8:3b:7a:77:4c:18:
6a:3a:48:52:97:d6:07:12:df:da:e6:59:28:c9:14:71:e4:60:
16:9f:06:4c:82:6c:bb:ef:68:3a:21:e6:f7:48:dd:88:a1:0e:
03:21:b5:78:37:af:0c:d9:be:5d:bd:3e:f6:4c:a4:81:73:d6:
63:51:2e:3d:0d:dc:70:3a:4e:1f:e4:e4:9c:7e:45:c2:62:9b:
f7:ac:53:a2:55:a1:a2:16:7e:6b:93:9a:50:1b:fc:a4:57:bf:
b6:ed:bd:12:59:e1:82:82:fb:98:a6:bf:d9:bf:2e:1e:da:42:
0e:af:54:b3:62:03:51:65:4d:e5:bf:3d:6c:73:63:78:d4:8c:
54:8c:9a:7c:a7:a8:69:6d:84:b3:94:0b:ae:67:e7:af:db:64:
62:de:7d:7b:a3:54:2d:a6:0c:eb:31:b0:4d:2e:15:32:fc:df:
ba:15:bd:60:11:8d:46:f9:91:1d:02:e6:c8:20:97:6a:ad:83:
d4:ca:09:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zwOTXgIiBR6W3C1KfF1XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMDI2YTUxODk0N2RkNWJkMzk4MWVkMDY2OWMxMWM1NjIx
ZDA0NzUwHhcNMjUwMTMxMTAwMTMzWhcNMjUwMjAxMTAwMTMzWjAzMTEwLwYDVQQD
EyhhMTY0MmJlZThhMTc4NzlhOGVlZjdiMTdmODFhMGZmOTVjZTliMGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnUgbyPJyMH5YDf7VeDnkbrcyCvQ
tEptu0OZSjOiyZGiXRAwg9T3PIQ3rOxQq900PFpKNFIMBABgbhuQhlgGd4DPryzu
FMIbJ/OMeTfZIxbjAqAPrNyOH4TdPTgdiEhJbCYruLefQr1YmOpzVXXYRqcXDbvY
03nAulnijiGLSmOvW3R/vqqyNnt1fGwpr5UgbsWFFd0wbh5JNvSg3YH71LHxV0QP
B6CaxK0UobZKSGbvcjpl50J2gDuewwKWTAnl7xkrZEuk2CJYm0wufxj29KC7jlC0
ZrNBdlkOLKPgP8A4Zb7GPwTezK/giCVhdFDnmAfpK4fjl5c9orVNvwkrwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKFkK+6KF4eaju97F/gaD/lc6bDCMB8GA1UdIwQY
MBaAFA0CalGJR91b05ge0GacEcViHQR1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFFKcVVZbEgzVnZUbUI3UVpwd1J4V0lkQkhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My80MTdhNDMtNTVlOS00NjI2LTk5YzUt
MjVjYjA5MmY1Y2FjLzEvRFFKcVVZbEgzVnZUbUI3UVpwd1J4V0lkQkhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My80MTdhNDMtNTVlOS00NjI2LTk5YzUtMjVjYjA5MmY1Y2Fj
LzEvRFFKcVVZbEgzVnZUbUI3UVpwd1J4V0lkQkhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPSd9oN6r
H9cL2KskQHoJikxSeNdpd6D2m5iOZratpBc00m2PdjQoh9SHSVGJj5OSryrm9iMt
+n5safcQkmdlPO+y+Dt6d0wYajpIUpfWBxLf2uZZKMkUceRgFp8GTIJsu+9oOiHm
90jdiKEOAyG1eDevDNm+Xb0+9kykgXPWY1EuPQ3ccDpOH+TknH5FwmKb96xTolWh
ohZ+a5OaUBv8pFe/tu29ElnhgoL7mKa/2b8uHtpCDq9Us2IDUWVN5b89bHNjeNSM
VIyafKeoaW2Es5QLrmfnr9tkYt59e6NULaYM6zGwTS4VMvzfuhW9YBGNRvmRHQLm
yCCXaq2D1MoJRA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 02:07:38 2025 by rpki-client