Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.mft
File: qklDGDthG-Ogd1OCUJSQBIsK1zg.mft (raw, json)
Hash identifier: +NiraU5UE2pfSNmi+uKK5+YH8pJ+TFhUlP0eMq2q8+I=
Subject key identifier: AC:29:EA:17:CC:95:6C:54:60:1F:CD:EC:A5:BF:72:B5:92:9F:DC:62
Authority key identifier: AA:49:43:18:3B:61:1B:E3:A0:77:53:82:50:94:90:04:8B:0A:D7:38
Certificate issuer: /CN=aa4943183b611be3a0775382509490048b0ad738
Certificate serial: 0194BCE0B5786073004A5CB566D8B3B4B532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qklDGDthG-Ogd1OCUJSQBIsK1zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 15:00:30 +0000
Manifest this update: Fri 31 Jan 2025 15:00:30 +0000
Manifest next update: Sat 01 Feb 2025 15:00:30 +0000
Files and hashes: 1: _b9uzDBnaBhrr4RiKYd-HrjhIyY.roa (hash: zuVo5YCjE6oxIWEPlMV6dA4fTWapSfHiFlgPsUG/qhk=)
2: qklDGDthG-Ogd1OCUJSQBIsK1zg.crl (hash: orpOIKE0OrKQLSMlZJmbMqEn2da189n+Hp+x1OIsccg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b5:78:60:73:00:4a:5c:b5:66:d8:b3:b4:b5:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa4943183b611be3a0775382509490048b0ad738
Validity
Not Before: Jan 31 15:00:30 2025 GMT
Not After : Feb 1 15:00:30 2025 GMT
Subject: CN=ac29ea17cc956c54601fcdeca5bf72b5929fdc62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e3:af:17:17:5a:6c:a8:1c:10:8b:ca:32:43:
6c:e4:7b:d6:bf:41:a7:ce:6b:37:53:50:50:78:3f:
d1:58:bf:3a:b0:65:0f:45:4c:5b:54:b2:26:e4:a7:
ee:05:5a:3e:c6:80:3f:67:2c:61:b6:a0:35:3c:ee:
31:c2:c5:93:51:83:4b:d0:d6:ff:ee:e2:0b:20:92:
48:b6:12:4e:60:f8:8f:56:0c:5d:4f:9d:9d:3e:2d:
c9:66:2c:d0:b9:32:2c:c1:aa:a7:bf:33:e8:06:d6:
37:98:b1:9e:36:3f:90:b6:b0:de:9f:af:e2:c0:81:
17:0f:24:b4:09:af:ae:25:ba:92:ca:25:f2:b3:27:
cc:a5:0f:c4:77:00:94:f7:e4:6a:4f:7d:5f:55:ae:
53:45:79:8e:7a:29:55:14:7c:ac:dd:21:0c:86:5e:
d7:08:31:66:76:34:d3:9e:f3:48:3c:87:05:90:f7:
4e:9d:0a:df:59:f0:7b:88:66:12:9d:d3:28:7a:2c:
62:71:0c:8a:d4:6d:be:f2:a7:dc:cf:5d:31:c8:4f:
00:a4:55:4b:35:77:3d:1e:65:89:07:26:bd:99:c9:
1b:2e:b7:c8:73:34:1a:64:d2:a6:fe:8b:20:72:fb:
06:6b:7e:a5:5e:27:86:e0:4a:95:4f:1b:b8:f0:21:
8b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:29:EA:17:CC:95:6C:54:60:1F:CD:EC:A5:BF:72:B5:92:9F:DC:62
X509v3 Authority Key Identifier:
keyid:AA:49:43:18:3B:61:1B:E3:A0:77:53:82:50:94:90:04:8B:0A:D7:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qklDGDthG-Ogd1OCUJSQBIsK1zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7bb038-01bc-4d85-9f04-d22274bba713/1/qklDGDthG-Ogd1OCUJSQBIsK1zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:4f:2f:ac:ae:bc:eb:e1:ce:b5:a8:96:06:d8:98:d7:44:86:
9d:74:ef:95:9e:84:b7:7e:03:d5:9c:95:e7:94:02:e2:c5:81:
af:f8:5a:cc:50:cb:09:6f:48:6b:48:ea:06:c9:78:5e:f5:0e:
a9:df:2d:55:00:ac:e0:c2:06:72:7a:99:e1:23:0f:85:55:51:
6c:7a:25:7d:a4:0e:06:47:4e:04:7c:3a:6f:fe:b5:89:a0:32:
90:c2:db:d6:93:57:40:5e:ae:78:76:05:be:e6:ea:64:87:83:
7e:88:e0:2b:eb:f1:eb:0c:d1:9c:a8:4f:94:6b:2e:dc:a5:90:
d1:6f:95:41:2d:1d:2c:a2:85:2f:17:16:d6:bb:09:c3:8d:69:
d9:f4:9f:cc:d2:3d:ce:a7:bf:21:f2:66:b7:f1:b2:ea:4b:fb:
7f:1b:3f:96:72:79:8a:b7:b6:23:9d:b0:5c:95:7b:1c:89:12:
df:a3:a2:11:e6:34:3b:07:53:a5:8d:39:f7:88:96:f9:b5:3b:
1c:6e:ef:99:2f:23:69:cc:8a:87:68:d8:7c:77:6b:81:a3:57:
ab:91:89:94:0b:69:2b:32:4b:b9:c5:ac:40:09:ed:6d:50:d9:
67:a4:19:b2:75:f4:27:5c:7c:8a:a2:d3:9e:5b:e0:5d:27:b4:
15:1e:84:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84LV4YHMASly1ZtiztLUyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNDk0MzE4M2I2MTFiZTNhMDc3NTM4MjUwOTQ5MDA0OGIw
YWQ3MzgwHhcNMjUwMTMxMTUwMDMwWhcNMjUwMjAxMTUwMDMwWjAzMTEwLwYDVQQD
EyhhYzI5ZWExN2NjOTU2YzU0NjAxZmNkZWNhNWJmNzJiNTkyOWZkYzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+OvFxdabKgcEIvKMkNs5HvWv0Gn
zms3U1BQeD/RWL86sGUPRUxbVLIm5KfuBVo+xoA/ZyxhtqA1PO4xwsWTUYNL0Nb/
7uILIJJIthJOYPiPVgxdT52dPi3JZizQuTIswaqnvzPoBtY3mLGeNj+QtrDen6/i
wIEXDyS0Ca+uJbqSyiXysyfMpQ/EdwCU9+RqT31fVa5TRXmOeilVFHys3SEMhl7X
CDFmdjTTnvNIPIcFkPdOnQrfWfB7iGYSndMoeixicQyK1G2+8qfcz10xyE8ApFVL
NXc9HmWJBya9mckbLrfIczQaZNKm/osgcvsGa36lXieG4EqVTxu48CGL3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKwp6hfMlWxUYB/N7KW/crWSn9xiMB8GA1UdIwQY
MBaAFKpJQxg7YRvjoHdTglCUkASLCtc4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWtsREdEdGhHLU9nZDFPQ1VKU1FCSXNLMXpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS83YmIwMzgtMDFiYy00ZDg1LTlmMDQt
ZDIyMjc0YmJhNzEzLzEvcWtsREdEdGhHLU9nZDFPQ1VKU1FCSXNLMXpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS83YmIwMzgtMDFiYy00ZDg1LTlmMDQtZDIyMjc0YmJhNzEz
LzEvcWtsREdEdGhHLU9nZDFPQ1VKU1FCSXNLMXpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeE8vrK68
6+HOtaiWBtiY10SGnXTvlZ6Et34D1ZyV55QC4sWBr/hazFDLCW9Ia0jqBsl4XvUO
qd8tVQCs4MIGcnqZ4SMPhVVRbHolfaQOBkdOBHw6b/61iaAykMLb1pNXQF6ueHYF
vubqZIeDfojgK+vx6wzRnKhPlGsu3KWQ0W+VQS0dLKKFLxcW1rsJw41p2fSfzNI9
zqe/IfJmt/Gy6kv7fxs/lnJ5ire2I52wXJV7HIkS36OiEeY0OwdTpY0594iW+bU7
HG7vmS8jacyKh2jYfHdrgaNXq5GJlAtpKzJLucWsQAntbVDZZ6QZsnX0J1x8iqLT
nlvgXSe0FR6Eeg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:41 2025 by rpki-client