Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft
File: 2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft (raw, json)
Hash identifier: qTpwi1KkUvpGKGA810Q3iFF4BSwCXWEi8WElAl8ftJM=
Subject key identifier: 19:62:0B:7D:8D:31:46:37:92:B3:F5:0C:0A:82:C7:5F:27:29:07:77
Authority key identifier: D9:08:72:2A:75:55:DD:16:21:DD:6A:62:20:9F:A8:DA:52:94:29:99
Certificate issuer: /CN=d908722a7555dd1621dd6a62209fa8da52942999
Certificate serial: 0194BC7286EF6B62E4924DF6A2DAB5BEBD87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft
Manifest number: 12B4
Signing time: Fri 31 Jan 2025 13:00:09 +0000
Manifest this update: Fri 31 Jan 2025 13:00:09 +0000
Manifest next update: Sat 01 Feb 2025 13:00:09 +0000
Files and hashes: 1: 2QhyKnVV3RYh3WpiIJ-o2lKUKZk.crl (hash: afBRGx6TXhcnDQ43LbEuVW2VVIKJx1YoUU5ToxpCOwo=)
2: Y5hh8AgGKAUf_2S15Xwk_892p60.roa (hash: baZuJeVmztFazA/spLlePhpdINyXpI1DJgHdXLAL5/E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:86:ef:6b:62:e4:92:4d:f6:a2:da:b5:be:bd:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d908722a7555dd1621dd6a62209fa8da52942999
Validity
Not Before: Jan 31 13:00:09 2025 GMT
Not After : Feb 1 13:00:09 2025 GMT
Subject: CN=19620b7d8d31463792b3f50c0a82c75f27290777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:23:e4:f7:d7:7b:16:5b:f3:75:7c:0c:1d:2d:
3f:02:e4:74:a0:eb:ef:20:da:fc:aa:57:85:db:1f:
5f:1b:2c:86:9d:f2:df:4f:db:27:dc:9b:b7:30:71:
d4:d8:a4:05:62:da:60:3f:9d:bd:a0:d4:56:76:b9:
f0:b1:0a:87:44:43:36:2d:f3:eb:de:eb:f6:13:11:
cf:66:49:02:29:28:67:ec:94:10:0c:d1:93:51:83:
ba:52:c1:36:f8:2b:83:be:43:a9:e1:66:1b:f1:09:
7a:18:4d:df:ed:31:c1:7d:f3:fc:07:fc:68:86:29:
b0:4e:76:1d:0e:80:3a:65:8b:c3:63:ba:5d:b1:cd:
78:4e:e2:49:48:9f:7e:c1:61:9c:b3:27:fa:66:54:
1b:77:bf:b0:89:fb:70:53:dd:00:c5:77:c6:e6:bc:
38:a6:59:9f:66:b9:cc:ed:c2:60:6b:8a:58:fa:eb:
0b:e2:85:25:42:fb:ab:a5:a5:a6:4e:c4:e1:da:39:
5f:34:80:be:67:70:3b:72:f9:34:b9:88:fc:9c:13:
4f:0e:cd:13:15:58:81:da:ab:a3:dd:8a:6d:e9:6d:
dd:0c:eb:06:87:6c:a9:5c:00:b8:4e:5e:19:3f:a6:
47:ca:14:f3:82:ea:85:79:d6:cc:1b:ae:27:3a:e6:
75:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:62:0B:7D:8D:31:46:37:92:B3:F5:0C:0A:82:C7:5F:27:29:07:77
X509v3 Authority Key Identifier:
keyid:D9:08:72:2A:75:55:DD:16:21:DD:6A:62:20:9F:A8:DA:52:94:29:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f6:9c:b2:ab:10:c5:6a:aa:d8:25:15:20:de:be:32:91:78:
1a:75:17:0a:50:61:52:eb:78:35:71:3b:f4:ce:26:4f:02:a4:
b3:5b:63:13:af:9a:3d:9a:9a:16:3d:25:35:2b:57:1a:75:81:
23:1e:1a:06:da:6f:2d:20:20:16:54:99:8b:e0:85:00:93:4c:
19:8b:af:55:ac:5b:18:00:c8:9b:83:70:1b:f7:e3:87:8d:ad:
d7:83:a8:e1:60:ba:c3:ff:ec:f0:52:25:7f:43:3e:d4:70:fc:
7a:ac:ca:3b:07:ee:4f:7f:9f:a7:80:ae:12:53:c2:fe:72:c8:
1b:a1:ba:85:d6:65:e7:9d:61:1d:ad:b4:c2:db:c6:7e:81:50:
94:0a:71:4a:51:ec:49:43:1c:ac:09:ae:24:46:a3:b4:94:68:
83:7f:00:1d:16:35:79:69:62:77:c8:bc:a4:17:58:af:89:52:
7a:27:34:16:3c:21:7d:80:7b:02:3c:6c:0a:0d:68:0f:0e:02:
77:e5:36:4c:a0:77:ae:73:2f:5f:f4:31:c7:c0:1b:c9:ae:c6:
9e:47:36:8e:09:6a:7d:6a:08:28:c9:3d:d1:28:da:79:0d:51:
a9:72:8f:15:65:6f:70:9c:08:34:67:3d:93:49:07:dd:6b:d3:
8c:04:af:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cobva2Lkkk32otq1vr2HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MDg3MjJhNzU1NWRkMTYyMWRkNmE2MjIwOWZhOGRhNTI5
NDI5OTkwHhcNMjUwMTMxMTMwMDA5WhcNMjUwMjAxMTMwMDA5WjAzMTEwLwYDVQQD
EygxOTYyMGI3ZDhkMzE0NjM3OTJiM2Y1MGMwYTgyYzc1ZjI3MjkwNzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iPk99d7FlvzdXwMHS0/AuR0oOvv
INr8qleF2x9fGyyGnfLfT9sn3Ju3MHHU2KQFYtpgP529oNRWdrnwsQqHREM2LfPr
3uv2ExHPZkkCKShn7JQQDNGTUYO6UsE2+CuDvkOp4WYb8Ql6GE3f7THBffP8B/xo
himwTnYdDoA6ZYvDY7pdsc14TuJJSJ9+wWGcsyf6ZlQbd7+wiftwU90AxXfG5rw4
plmfZrnM7cJga4pY+usL4oUlQvurpaWmTsTh2jlfNIC+Z3A7cvk0uYj8nBNPDs0T
FViB2quj3Ypt6W3dDOsGh2ypXAC4Tl4ZP6ZHyhTzguqFedbMG64nOuZ11QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBliC32NMUY3krP1DAqCx18nKQd3MB8GA1UdIwQY
MBaAFNkIcip1Vd0WId1qYiCfqNpSlCmZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlFoeUtuVlYzUlloM1dwaUlKLW8ybEtVS1prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wODY2YjAtZmU2Yi00NjZmLWJiODYt
MmQ5ZmNhNjYyZTUyLzEvMlFoeUtuVlYzUlloM1dwaUlKLW8ybEtVS1prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8wODY2YjAtZmU2Yi00NjZmLWJiODYtMmQ5ZmNhNjYyZTUy
LzEvMlFoeUtuVlYzUlloM1dwaUlKLW8ybEtVS1prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgPacsqsQ
xWqq2CUVIN6+MpF4GnUXClBhUut4NXE79M4mTwKks1tjE6+aPZqaFj0lNStXGnWB
Ix4aBtpvLSAgFlSZi+CFAJNMGYuvVaxbGADIm4NwG/fjh42t14Oo4WC6w//s8FIl
f0M+1HD8eqzKOwfuT3+fp4CuElPC/nLIG6G6hdZl551hHa20wtvGfoFQlApxSlHs
SUMcrAmuJEajtJRog38AHRY1eWlid8i8pBdYr4lSeic0FjwhfYB7AjxsCg1oDw4C
d+U2TKB3rnMvX/Qxx8Abya7Gnkc2jglqfWoIKMk90SjaeQ1RqXKPFWVvcJwINGc9
k0kH3WvTjASvNQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:29:00 2025 by rpki-client