Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.mft
File: bqGhD32UTazB3sBBqqVZ1SK_uus.mft (raw, json)
Hash identifier: jaQdJo0TsniYlr6zQCQg8sDjmexwy8Ls8pWyF1O9S7c=
Subject key identifier: EE:C9:2F:48:02:60:FC:7D:E6:56:86:87:34:8F:4F:C9:E3:89:04:7F
Authority key identifier: 6E:A1:A1:0F:7D:94:4D:AC:C1:DE:C0:41:AA:A5:59:D5:22:BF:BA:EB
Certificate issuer: /CN=6ea1a10f7d944dacc1dec041aaa559d522bfbaeb
Certificate serial: 0194BBCEAF36363C10C2144602CB7D4DE7BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqGhD32UTazB3sBBqqVZ1SK_uus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.mft
Manifest number: 11A0
Signing time: Fri 31 Jan 2025 10:01:12 +0000
Manifest this update: Fri 31 Jan 2025 10:01:12 +0000
Manifest next update: Sat 01 Feb 2025 10:01:12 +0000
Files and hashes: 1: M9NbgULzUbUgy5QfFA80DfDkYIo.roa (hash: 9jvwTaiwGzjoN6t2OLikrXjXwIhCTFgXlEI2alktc+E=)
2: bqGhD32UTazB3sBBqqVZ1SK_uus.crl (hash: unfyCFMZytsV8raS9vymXyO3AG9l116EiaE8DFvmDNA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:af:36:36:3c:10:c2:14:46:02:cb:7d:4d:e7:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ea1a10f7d944dacc1dec041aaa559d522bfbaeb
Validity
Not Before: Jan 31 10:01:12 2025 GMT
Not After : Feb 1 10:01:12 2025 GMT
Subject: CN=eec92f480260fc7de6568687348f4fc9e389047f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1a:45:05:b9:ab:5c:88:1f:06:5c:00:6b:9f:
88:3b:60:57:a0:c2:f4:91:f6:7a:e1:09:05:2b:74:
55:f6:50:43:dd:75:25:bd:96:62:e1:46:43:ef:81:
af:02:aa:0f:53:78:26:97:99:38:4a:c7:4a:25:e1:
56:47:d3:05:2a:4a:8d:26:1d:3a:0e:38:85:68:a2:
97:1c:51:8b:9c:b6:de:c7:52:77:b0:e1:2c:c4:f1:
8d:3c:2a:b7:cf:47:6d:94:43:ed:3e:b7:a3:5f:9d:
89:23:5d:99:f9:a4:dc:cc:f0:3c:90:74:f5:97:8f:
55:c9:fc:24:ab:6d:39:4b:52:14:08:a8:fc:ef:12:
55:ef:65:fd:7d:20:4a:b3:03:2a:56:61:ca:d5:6f:
14:88:63:ec:6b:6e:84:c5:36:6f:35:55:7e:dc:c8:
cf:ba:86:79:79:a1:e4:08:a4:61:5f:53:dd:e7:f3:
04:46:53:aa:af:3f:e2:e4:dd:8a:a7:4b:b7:0b:f4:
a8:ee:82:40:a8:fc:83:57:f4:18:a7:f1:6c:0b:6c:
22:dd:1e:fc:c8:fc:6b:f8:94:bd:6b:5f:60:17:73:
07:06:6a:73:97:ae:04:80:90:b8:49:5d:b3:3b:77:
e3:ff:21:c0:69:60:8d:c7:fa:94:88:ef:2e:c6:b4:
a1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C9:2F:48:02:60:FC:7D:E6:56:86:87:34:8F:4F:C9:E3:89:04:7F
X509v3 Authority Key Identifier:
keyid:6E:A1:A1:0F:7D:94:4D:AC:C1:DE:C0:41:AA:A5:59:D5:22:BF:BA:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqGhD32UTazB3sBBqqVZ1SK_uus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:3e:55:3c:1e:ee:e1:75:30:83:f2:47:a5:19:12:8a:6a:3b:
5c:b8:65:f8:74:08:39:fa:66:8c:2d:91:96:72:48:f6:7a:e4:
e5:64:5f:06:ad:cd:36:12:ba:65:d6:bb:3f:c0:c6:0c:c2:33:
35:20:2d:5d:d7:fe:cb:ea:bd:aa:79:09:da:fb:af:31:69:92:
be:31:a9:b1:87:ef:f0:c6:a5:72:61:81:71:70:4e:3a:45:78:
c2:84:51:41:83:af:5b:04:1e:24:51:c5:85:69:56:11:23:1e:
b4:89:76:9e:f9:8f:f2:c5:da:e7:04:a5:04:45:bb:dc:ef:cf:
6a:ba:af:ca:ed:c5:de:b0:cc:48:85:bc:9f:97:0d:99:18:09:
e0:b6:fe:de:5a:f2:d5:1e:9c:d3:96:4e:d3:22:20:77:ca:64:
d9:e0:3e:4f:7d:61:92:39:19:23:d0:36:7e:2e:74:5f:02:9b:
6a:74:8d:9a:d3:9f:f4:91:d0:2f:a7:ee:f9:e7:11:df:d3:24:
43:c8:1e:5f:ca:0f:23:a5:bc:46:6a:50:29:9d:f9:7f:d7:0b:
e7:e9:56:28:d7:65:98:5c:37:5e:a3:91:0c:46:b5:ce:3f:08:
fa:af:46:97:1f:4f:1d:a5:46:1c:e4:a3:05:2b:6a:1f:26:3b:
fa:55:82:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zq82NjwQwhRGAst9Tee/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYTFhMTBmN2Q5NDRkYWNjMWRlYzA0MWFhYTU1OWQ1MjJi
ZmJhZWIwHhcNMjUwMTMxMTAwMTEyWhcNMjUwMjAxMTAwMTEyWjAzMTEwLwYDVQQD
EyhlZWM5MmY0ODAyNjBmYzdkZTY1Njg2ODczNDhmNGZjOWUzODkwNDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hpFBbmrXIgfBlwAa5+IO2BXoML0
kfZ64QkFK3RV9lBD3XUlvZZi4UZD74GvAqoPU3gml5k4SsdKJeFWR9MFKkqNJh06
DjiFaKKXHFGLnLbex1J3sOEsxPGNPCq3z0dtlEPtPrejX52JI12Z+aTczPA8kHT1
l49Vyfwkq205S1IUCKj87xJV72X9fSBKswMqVmHK1W8UiGPsa26ExTZvNVV+3MjP
uoZ5eaHkCKRhX1Pd5/MERlOqrz/i5N2Kp0u3C/So7oJAqPyDV/QYp/FsC2wi3R78
yPxr+JS9a19gF3MHBmpzl64EgJC4SV2zO3fj/yHAaWCNx/qUiO8uxrShyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7JL0gCYPx95laGhzSPT8njiQR/MB8GA1UdIwQY
MBaAFG6hoQ99lE2swd7AQaqlWdUiv7rrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnFHaEQzMlVUYXpCM3NCQnFxVloxU0tfdXVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC84NWUxMDQtNWU1Mi00MDQ4LWIxYjEt
YzUwOTY4Y2RhODZmLzEvYnFHaEQzMlVUYXpCM3NCQnFxVloxU0tfdXVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC84NWUxMDQtNWU1Mi00MDQ4LWIxYjEtYzUwOTY4Y2RhODZm
LzEvYnFHaEQzMlVUYXpCM3NCQnFxVloxU0tfdXVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoz5VPB7u
4XUwg/JHpRkSimo7XLhl+HQIOfpmjC2RlnJI9nrk5WRfBq3NNhK6Zda7P8DGDMIz
NSAtXdf+y+q9qnkJ2vuvMWmSvjGpsYfv8MalcmGBcXBOOkV4woRRQYOvWwQeJFHF
hWlWESMetIl2nvmP8sXa5wSlBEW73O/Parqvyu3F3rDMSIW8n5cNmRgJ4Lb+3lry
1R6c05ZO0yIgd8pk2eA+T31hkjkZI9A2fi50XwKbanSNmtOf9JHQL6fu+ecR39Mk
Q8geX8oPI6W8RmpQKZ35f9cL5+lWKNdlmFw3XqORDEa1zj8I+q9Glx9PHaVGHOSj
BStqHyY7+lWCvg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:02 2025 by rpki-client