Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft
File: QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft (raw, json)
Hash identifier: MaLUi2Pe1gGzRomxO9jVsHSMW+170+e6LDOJfDtfr9g=
Subject key identifier: 7B:D2:21:D9:BD:CB:68:2D:E1:03:D8:60:28:34:9E:48:60:BF:B1:49
Authority key identifier: 43:09:59:93:80:C5:C5:9D:C0:66:84:92:0B:69:4C:3E:A6:D3:08:A6
Certificate issuer: /CN=4309599380c5c59dc06684920b694c3ea6d308a6
Certificate serial: 0194BC3C3D7ACC403EC73E14F206FA9E9110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft
Manifest number: 03AB
Signing time: Fri 31 Jan 2025 12:00:51 +0000
Manifest this update: Fri 31 Jan 2025 12:00:51 +0000
Manifest next update: Sat 01 Feb 2025 12:00:51 +0000
Files and hashes: 1: QwlZk4DFxZ3AZoSSC2lMPqbTCKY.crl (hash: +t4ohPtMU9CI6nXzLmK3Nv1+BgSFubvLffZiUdYspfQ=)
2: Xk73csD_xLVUcYgv4YpJ9At08iI.roa (hash: cX+hicqcoCtr+jhHeUumSC0JdyUUV0oM4tv+MAaRrss=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3d:7a:cc:40:3e:c7:3e:14:f2:06:fa:9e:91:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4309599380c5c59dc06684920b694c3ea6d308a6
Validity
Not Before: Jan 31 12:00:51 2025 GMT
Not After : Feb 1 12:00:51 2025 GMT
Subject: CN=7bd221d9bdcb682de103d86028349e4860bfb149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a3:e4:f2:db:e7:ae:78:db:85:d1:f3:46:e7:
7a:60:fa:da:76:9e:cf:aa:a0:a3:46:74:07:09:a4:
2e:ab:09:de:f2:31:60:04:83:94:df:53:f7:8c:75:
7c:6a:81:5e:80:47:25:14:ea:d4:0b:57:ee:04:67:
cb:b0:7b:6c:09:de:08:6f:3b:03:85:97:47:73:91:
fe:ee:34:ab:28:a0:6a:aa:bc:fb:d8:fe:74:55:a5:
8b:ff:f6:34:1b:1f:17:0d:ad:ba:79:9b:c1:ee:82:
c0:b8:6b:58:b8:57:1a:96:72:54:4d:4b:5b:1d:83:
e6:7c:2c:5d:8a:63:e5:bb:dc:4a:e3:ad:6e:10:5d:
28:a1:ab:be:89:72:01:3c:15:c7:61:ff:a5:53:d5:
12:2a:fa:cf:b4:e9:52:c6:12:6c:f7:4a:59:29:9e:
a1:09:a1:40:3d:61:82:6b:48:ad:9c:2e:ec:e3:ad:
0a:8f:e6:b1:51:42:fc:74:68:92:09:59:76:bf:b0:
9c:12:11:5a:73:f9:d3:3f:77:82:f9:a8:b1:ad:07:
23:a4:fb:c2:d8:f8:ed:8e:47:23:6a:e6:8c:77:69:
e7:3b:4c:be:37:36:30:87:e3:0a:ee:3a:0b:63:17:
14:41:10:96:f7:91:4f:42:24:54:a9:fa:bc:04:8f:
29:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D2:21:D9:BD:CB:68:2D:E1:03:D8:60:28:34:9E:48:60:BF:B1:49
X509v3 Authority Key Identifier:
keyid:43:09:59:93:80:C5:C5:9D:C0:66:84:92:0B:69:4C:3E:A6:D3:08:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9ab37d-5a99-4448-8ef5-7b5f98155fe6/1/QwlZk4DFxZ3AZoSSC2lMPqbTCKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:41:08:04:e7:87:d0:60:45:0d:08:6e:21:4d:cc:04:5a:d0:
fd:d4:75:5a:b3:98:e5:17:8c:f9:0d:27:6e:07:04:15:c0:4b:
84:8b:14:85:2d:3b:2b:5a:9b:f5:4a:b9:09:78:4d:3f:60:fd:
ec:f6:91:48:4b:0b:15:50:2c:2e:64:f8:56:91:9e:62:a2:da:
3b:07:3d:4d:fe:e4:9b:85:02:9f:3d:5b:60:00:6e:bd:2e:a8:
0f:88:37:ef:5f:88:ff:c9:72:80:9d:77:85:7b:06:6f:bd:ed:
16:af:88:16:6b:19:a6:0c:bc:fe:50:3a:98:91:02:d6:6d:d6:
35:8a:35:e8:ba:52:65:c8:55:f9:2a:ee:9d:f6:f1:fd:79:4a:
2c:d0:81:02:7b:54:ed:80:28:63:3a:10:14:aa:10:04:71:97:
03:d6:18:19:7e:85:81:a5:1a:d7:5b:24:24:d2:6d:b7:30:0a:
fc:aa:0f:bc:e5:72:51:7d:bd:fc:f9:34:92:53:8b:61:27:f9:
8b:01:7f:93:40:89:d9:d7:1d:78:f2:c3:1e:d1:7e:b2:64:52:
c7:53:a3:fc:b1:ab:f7:7d:38:44:42:a0:f0:3b:3d:67:bc:81:
72:3a:85:06:21:4c:61:93:cc:61:b3:69:26:a2:26:7c:c3:82:
a6:04:66:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PD16zEA+xz4U8gb6npEQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDk1OTkzODBjNWM1OWRjMDY2ODQ5MjBiNjk0YzNlYTZk
MzA4YTYwHhcNMjUwMTMxMTIwMDUxWhcNMjUwMjAxMTIwMDUxWjAzMTEwLwYDVQQD
Eyg3YmQyMjFkOWJkY2I2ODJkZTEwM2Q4NjAyODM0OWU0ODYwYmZiMTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKPk8tvnrnjbhdHzRud6YPradp7P
qqCjRnQHCaQuqwne8jFgBIOU31P3jHV8aoFegEclFOrUC1fuBGfLsHtsCd4IbzsD
hZdHc5H+7jSrKKBqqrz72P50VaWL//Y0Gx8XDa26eZvB7oLAuGtYuFcalnJUTUtb
HYPmfCxdimPlu9xK461uEF0ooau+iXIBPBXHYf+lU9USKvrPtOlSxhJs90pZKZ6h
CaFAPWGCa0itnC7s460Kj+axUUL8dGiSCVl2v7CcEhFac/nTP3eC+aixrQcjpPvC
2PjtjkcjauaMd2nnO0y+NzYwh+MK7joLYxcUQRCW95FPQiRUqfq8BI8pUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvSIdm9y2gt4QPYYCg0nkhgv7FJMB8GA1UdIwQY
MBaAFEMJWZOAxcWdwGaEkgtpTD6m0wimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdsWms0REZ4WjNBWm9TU0MybE1QcWJUQ0tZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85YWIzN2QtNWE5OS00NDQ4LThlZjUt
N2I1Zjk4MTU1ZmU2LzEvUXdsWms0REZ4WjNBWm9TU0MybE1QcWJUQ0tZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni85YWIzN2QtNWE5OS00NDQ4LThlZjUtN2I1Zjk4MTU1ZmU2
LzEvUXdsWms0REZ4WjNBWm9TU0MybE1QcWJUQ0tZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvUEIBOeH
0GBFDQhuIU3MBFrQ/dR1WrOY5ReM+Q0nbgcEFcBLhIsUhS07K1qb9Uq5CXhNP2D9
7PaRSEsLFVAsLmT4VpGeYqLaOwc9Tf7km4UCnz1bYABuvS6oD4g371+I/8lygJ13
hXsGb73tFq+IFmsZpgy8/lA6mJEC1m3WNYo16LpSZchV+Srunfbx/XlKLNCBAntU
7YAoYzoQFKoQBHGXA9YYGX6FgaUa11skJNJttzAK/KoPvOVyUX29/Pk0klOLYSf5
iwF/k0CJ2dcdePLDHtF+smRSx1Oj/LGr9304REKg8Ds9Z7yBcjqFBiFMYZPMYbNp
JqImfMOCpgRmjQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:35 2025 by rpki-client