Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
File: Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft (raw, json)
Hash identifier: 34d/8T+dg81UW1y3jVFFSbaTyQhanqFxo8ShRznAAC0=
Subject key identifier: 50:34:93:57:6A:AB:21:C4:93:D6:AB:5C:C6:B0:39:8C:A5:45:84:E5
Authority key identifier: 43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5
Certificate issuer: /CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5
Certificate serial: 0194BCA9917208E69F2A3FA9C3245EC5449A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
Manifest number: 0360
Signing time: Fri 31 Jan 2025 14:00:16 +0000
Manifest this update: Fri 31 Jan 2025 14:00:16 +0000
Manifest next update: Sat 01 Feb 2025 14:00:16 +0000
Files and hashes: 1: Ku3HRyioj0ql8ozTbPCiAHlL8-E.roa (hash: gtf9gLEz02KrYfoccfEAryEzPGbpHsjqTO4FxJ768C8=)
2: Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl (hash: NqFKE73wT8ieksbR6Qz27zaUElA0ditEX/j4OETHgSM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:91:72:08:e6:9f:2a:3f:a9:c3:24:5e:c5:44:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439ced9805a3c5d934e2c521a17a8ab94f11aec5
Validity
Not Before: Jan 31 14:00:16 2025 GMT
Not After : Feb 1 14:00:16 2025 GMT
Subject: CN=503493576aab21c493d6ab5cc6b0398ca54584e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:df:f1:1b:7c:52:97:f2:a0:3e:48:26:e6:fa:
5d:f3:48:54:04:14:72:58:7b:d8:96:2e:dd:b0:2c:
f0:b3:3c:0c:85:96:31:74:f3:72:b7:d4:e9:13:18:
b9:01:0b:14:2a:13:ac:a1:fb:43:31:9d:93:06:e7:
0f:55:76:bb:7e:22:07:32:ee:e6:7b:24:b2:e8:7e:
9d:fd:e2:74:41:a4:5f:ea:2f:0b:40:4c:82:26:ec:
97:19:47:86:60:6f:b4:d0:5d:b2:65:90:46:20:41:
c1:e3:43:14:28:2c:a7:62:d2:de:64:77:69:67:b8:
b3:db:1f:4d:c6:60:8e:df:c2:91:3e:b2:e9:f8:0d:
25:23:89:5e:b3:68:38:53:73:ca:84:65:ec:48:1c:
96:e5:51:82:68:4f:ed:d3:0c:ec:88:39:7c:88:42:
e6:91:51:6b:42:17:b7:31:e4:63:2d:83:69:9e:71:
fc:bf:e8:09:79:ae:c2:ba:4f:aa:aa:be:0d:17:61:
fd:8e:93:c4:a0:ed:c6:6d:85:63:41:cd:c4:81:38:
4a:99:01:e0:d8:4f:99:c7:3c:39:0b:81:a8:e6:c7:
f2:f7:24:c4:20:e2:0c:ba:5b:d4:6e:47:83:3e:f9:
13:92:7e:a0:11:9b:d4:17:58:f5:1c:f6:0f:db:2b:
29:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:34:93:57:6A:AB:21:C4:93:D6:AB:5C:C6:B0:39:8C:A5:45:84:E5
X509v3 Authority Key Identifier:
keyid:43:9C:ED:98:05:A3:C5:D9:34:E2:C5:21:A1:7A:8A:B9:4F:11:AE:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5ztmAWjxdk04sUhoXqKuU8RrsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7b507a-fecd-4ae3-805d-a778345aed88/1/Q5ztmAWjxdk04sUhoXqKuU8RrsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:4b:1b:64:46:c5:23:a2:6f:16:12:2f:a6:a6:24:1d:42:65:
3f:61:12:23:90:83:36:d8:51:d8:38:be:70:6e:77:8b:db:fc:
14:9e:c3:70:4c:a5:d0:bf:0f:e0:ef:eb:53:9e:0e:0d:89:a6:
ba:06:ca:0e:a1:66:2d:ad:2a:0b:90:73:16:6d:ba:9e:24:14:
05:25:d1:a1:a1:25:3c:f0:39:b0:d0:aa:9d:8a:a6:6b:46:36:
b3:27:0c:de:38:b8:5c:f1:32:e4:61:51:c8:60:53:c8:9a:4b:
89:92:56:40:8b:d8:5b:05:08:99:25:92:72:8a:39:d1:a7:f1:
b9:19:64:78:b3:30:8c:d6:69:96:3c:69:75:bf:93:8f:65:5b:
3c:8a:8b:58:fd:8a:0b:d1:10:d5:c4:e9:e6:f2:51:de:b3:16:
a1:ff:24:c2:ae:85:4e:f0:0d:c1:b0:2a:b2:bd:3a:23:c9:f2:
c4:77:f9:95:b4:f3:3c:ac:d7:fe:b5:e2:ab:64:48:08:6f:7c:
b4:f9:51:45:fa:ed:ee:af:fe:99:16:1c:43:57:78:0e:56:a8:
dc:0e:db:44:85:f2:2d:99:7d:77:8e:97:b0:dc:f8:c3:41:c8:
35:4e:3d:0a:d6:ef:b9:01:6b:dc:df:07:2f:66:42:ba:e0:64:
74:03:91:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qZFyCOafKj+pwyRexUSaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzOWNlZDk4MDVhM2M1ZDkzNGUyYzUyMWExN2E4YWI5NGYx
MWFlYzUwHhcNMjUwMTMxMTQwMDE2WhcNMjUwMjAxMTQwMDE2WjAzMTEwLwYDVQQD
Eyg1MDM0OTM1NzZhYWIyMWM0OTNkNmFiNWNjNmIwMzk4Y2E1NDU4NGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN/xG3xSl/KgPkgm5vpd80hUBBRy
WHvYli7dsCzwszwMhZYxdPNyt9TpExi5AQsUKhOsoftDMZ2TBucPVXa7fiIHMu7m
eySy6H6d/eJ0QaRf6i8LQEyCJuyXGUeGYG+00F2yZZBGIEHB40MUKCynYtLeZHdp
Z7iz2x9NxmCO38KRPrLp+A0lI4les2g4U3PKhGXsSByW5VGCaE/t0wzsiDl8iELm
kVFrQhe3MeRjLYNpnnH8v+gJea7Cuk+qqr4NF2H9jpPEoO3GbYVjQc3EgThKmQHg
2E+Zxzw5C4Go5sfy9yTEIOIMulvUbkeDPvkTkn6gEZvUF1j1HPYP2ysp2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFA0k1dqqyHEk9arXMawOYylRYTlMB8GA1UdIwQY
MBaAFEOc7ZgFo8XZNOLFIaF6irlPEa7FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTV6dG1BV2p4ZGswNHNVaG9YcUt1VThScnNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83YjUwN2EtZmVjZC00YWUzLTgwNWQt
YTc3ODM0NWFlZDg4LzEvUTV6dG1BV2p4ZGswNHNVaG9YcUt1VThScnNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC83YjUwN2EtZmVjZC00YWUzLTgwNWQtYTc3ODM0NWFlZDg4
LzEvUTV6dG1BV2p4ZGswNHNVaG9YcUt1VThScnNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhEsbZEbF
I6JvFhIvpqYkHUJlP2ESI5CDNthR2Di+cG53i9v8FJ7DcEyl0L8P4O/rU54ODYmm
ugbKDqFmLa0qC5BzFm26niQUBSXRoaElPPA5sNCqnYqma0Y2sycM3ji4XPEy5GFR
yGBTyJpLiZJWQIvYWwUImSWScoo50afxuRlkeLMwjNZpljxpdb+Tj2VbPIqLWP2K
C9EQ1cTp5vJR3rMWof8kwq6FTvANwbAqsr06I8nyxHf5lbTzPKzX/rXiq2RICG98
tPlRRfrt7q/+mRYcQ1d4Dlao3A7bRIXyLZl9d46XsNz4w0HINU49CtbvuQFr3N8H
L2ZCuuBkdAORIQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:17:34 2025 by rpki-client