Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.mft
File: qGBXhZ0WYOjYcpee5tamssQzowU.mft (raw, json)
Hash identifier: evT6ptMb6vKGypE+Jldx2OrwLO8d1XWwOo3M6O0EPbs=
Subject key identifier: C0:98:4C:D3:21:8D:6D:5B:5F:D6:E4:34:BA:E8:93:6E:23:C3:D7:02
Authority key identifier: A8:60:57:85:9D:16:60:E8:D8:72:97:9E:E6:D6:A6:B2:C4:33:A3:05
Certificate issuer: /CN=a86057859d1660e8d872979ee6d6a6b2c433a305
Certificate serial: 0194BC051DE356936D7B742A21D5B51A56C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGBXhZ0WYOjYcpee5tamssQzowU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 11:00:39 +0000
Manifest this update: Fri 31 Jan 2025 11:00:39 +0000
Manifest next update: Sat 01 Feb 2025 11:00:39 +0000
Files and hashes: 1: PW17_Y421OHbEdWMpqGOAItDAMQ.roa (hash: L2gpot5aAwJ9/O+fD4LlOhf1tqLhMij+IcuFZyDR7dA=)
2: qGBXhZ0WYOjYcpee5tamssQzowU.crl (hash: 0j9HTtyNP6+3knvF2MUpWNjWXUt0aBu7GU+Rv9ksvQ0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:1d:e3:56:93:6d:7b:74:2a:21:d5:b5:1a:56:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a86057859d1660e8d872979ee6d6a6b2c433a305
Validity
Not Before: Jan 31 11:00:39 2025 GMT
Not After : Feb 1 11:00:39 2025 GMT
Subject: CN=c0984cd3218d6d5b5fd6e434bae8936e23c3d702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:05:9b:6b:6f:cd:3f:a5:80:4a:ea:21:55:82:
ca:af:0e:88:1f:58:ee:1f:d4:00:64:7d:e7:08:8a:
85:36:fa:68:f9:06:e1:e3:86:73:ab:74:64:68:13:
32:4c:04:9a:d0:1e:16:c8:46:77:8e:d0:41:3b:9f:
f7:9d:a8:ad:65:29:e0:8a:f9:6b:7e:a8:21:c0:59:
90:f8:be:57:db:60:5c:92:0d:14:37:f4:c8:ae:da:
3a:67:20:50:09:6c:3e:80:e1:16:64:58:8c:1b:9e:
dd:09:4b:bf:20:77:e8:ce:0b:43:68:f9:b3:d0:63:
5d:fc:46:ac:90:98:1c:8a:61:d1:bf:bd:ae:ad:d8:
e3:39:97:0f:60:a3:0a:11:ad:e1:04:34:78:ca:ef:
a9:da:d8:1f:e3:97:5e:a6:5a:17:e1:6c:83:c1:ee:
4e:fb:8e:e7:86:36:58:2a:e4:cf:56:41:f6:54:73:
77:c3:d9:77:33:18:94:95:64:71:d6:69:68:79:3e:
8d:bc:f2:02:5a:ca:d5:63:ff:a8:f6:d8:8e:70:7d:
20:f9:09:b2:6f:ed:d3:6f:c7:b1:a0:06:74:c3:18:
4a:8a:93:dd:43:7e:a4:d6:7d:19:91:0b:2e:0a:3e:
59:42:31:6c:ad:62:0b:9c:fe:88:6d:38:33:c3:ca:
23:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:98:4C:D3:21:8D:6D:5B:5F:D6:E4:34:BA:E8:93:6E:23:C3:D7:02
X509v3 Authority Key Identifier:
keyid:A8:60:57:85:9D:16:60:E8:D8:72:97:9E:E6:D6:A6:B2:C4:33:A3:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGBXhZ0WYOjYcpee5tamssQzowU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:5e:a5:85:66:fc:17:d4:92:3d:26:ff:f8:00:15:b4:69:ca:
c8:a1:b8:73:21:ce:21:06:65:08:53:76:27:b2:e8:7e:fe:bb:
72:57:d2:3c:e3:46:81:b9:0a:5a:e3:0f:f8:38:e5:b0:b5:19:
47:d4:e4:24:8a:a9:ba:4a:6c:cd:31:22:00:42:f7:12:ca:d0:
be:42:92:4d:b8:63:86:2b:13:63:52:7a:4a:f4:b7:fd:e4:65:
4a:cc:d6:f7:51:6d:4a:b3:93:c3:3a:9d:93:7b:8d:20:fc:ba:
d0:81:95:fa:85:4e:e7:46:43:12:ba:aa:e5:5b:c7:ef:08:e9:
0d:8e:7f:76:1f:34:7a:51:64:0b:32:a0:6d:20:3a:dd:7e:3d:
bc:06:26:61:d3:97:81:85:fc:52:d3:c9:2d:c1:7b:b9:34:9a:
3d:25:81:63:94:8c:49:87:dc:65:f5:86:73:ce:f5:25:b2:77:
33:78:c2:a9:ee:0c:c9:c4:42:d8:62:5e:7e:c2:c7:90:e0:e8:
db:75:d8:25:ab:86:ab:34:09:cd:de:ee:55:dc:92:21:f3:6d:
4d:73:25:6d:b4:1b:a9:67:36:d9:9b:df:bb:fc:1d:32:be:ba:
d7:40:e6:b0:14:9e:33:b7:15:aa:79:53:6e:8a:c0:76:0b:06:
31:e8:29:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BR3jVpNte3QqIdW1GlbGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NjA1Nzg1OWQxNjYwZThkODcyOTc5ZWU2ZDZhNmIyYzQz
M2EzMDUwHhcNMjUwMTMxMTEwMDM5WhcNMjUwMjAxMTEwMDM5WjAzMTEwLwYDVQQD
EyhjMDk4NGNkMzIxOGQ2ZDViNWZkNmU0MzRiYWU4OTM2ZTIzYzNkNzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygWba2/NP6WASuohVYLKrw6IH1ju
H9QAZH3nCIqFNvpo+Qbh44Zzq3RkaBMyTASa0B4WyEZ3jtBBO5/3naitZSngivlr
fqghwFmQ+L5X22Bckg0UN/TIrto6ZyBQCWw+gOEWZFiMG57dCUu/IHfozgtDaPmz
0GNd/EaskJgcimHRv72urdjjOZcPYKMKEa3hBDR4yu+p2tgf45deploX4WyDwe5O
+47nhjZYKuTPVkH2VHN3w9l3MxiUlWRx1mloeT6NvPICWsrVY/+o9tiOcH0g+Qmy
b+3Tb8exoAZ0wxhKipPdQ36k1n0ZkQsuCj5ZQjFsrWILnP6IbTgzw8ojfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCYTNMhjW1bX9bkNLrok24jw9cCMB8GA1UdIwQY
MBaAFKhgV4WdFmDo2HKXnubWprLEM6MFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUdCWGhaMFdZT2pZY3BlZTV0YW1zc1F6b3dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8yMTM0NWItNGRlNy00MDg2LTlhYmYt
ZDRlZGMyMGNjMWFjLzEvcUdCWGhaMFdZT2pZY3BlZTV0YW1zc1F6b3dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8yMTM0NWItNGRlNy00MDg2LTlhYmYtZDRlZGMyMGNjMWFj
LzEvcUdCWGhaMFdZT2pZY3BlZTV0YW1zc1F6b3dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAal6lhWb8
F9SSPSb/+AAVtGnKyKG4cyHOIQZlCFN2J7Lofv67clfSPONGgbkKWuMP+DjlsLUZ
R9TkJIqpukpszTEiAEL3EsrQvkKSTbhjhisTY1J6SvS3/eRlSszW91FtSrOTwzqd
k3uNIPy60IGV+oVO50ZDErqq5VvH7wjpDY5/dh80elFkCzKgbSA63X49vAYmYdOX
gYX8UtPJLcF7uTSaPSWBY5SMSYfcZfWGc871JbJ3M3jCqe4MycRC2GJefsLHkODo
23XYJauGqzQJzd7uVdySIfNtTXMlbbQbqWc22Zvfu/wdMr6610DmsBSeM7cVqnlT
borAdgsGMegpdA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:04:19 2025 by rpki-client