Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.mft
File: qI1YyAfJSdssH18nPx78TfGlxVM.mft (raw, json)
Hash identifier: LIOSFvEy2gD3H2M4LvnyNw4vpeZcG3cNceqlKVyk0V8=
Subject key identifier: 18:D1:9B:6C:65:1B:3B:CA:DF:E7:59:20:7A:31:9B:43:D9:D4:D9:14
Authority key identifier: A8:8D:58:C8:07:C9:49:DB:2C:1F:5F:27:3F:1E:FC:4D:F1:A5:C5:53
Certificate issuer: /CN=a88d58c807c949db2c1f5f273f1efc4df1a5c553
Certificate serial: 0194BD177A1999FBEDC12C9E0EA867C11367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qI1YyAfJSdssH18nPx78TfGlxVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.mft
Manifest number: 058F
Signing time: Fri 31 Jan 2025 16:00:19 +0000
Manifest this update: Fri 31 Jan 2025 16:00:19 +0000
Manifest next update: Sat 01 Feb 2025 16:00:19 +0000
Files and hashes: 1: qI1YyAfJSdssH18nPx78TfGlxVM.crl (hash: RzcKqkr2q/Seuqu18FcoqsaOXimeLzcqiKweblAnMzY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:7a:19:99:fb:ed:c1:2c:9e:0e:a8:67:c1:13:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a88d58c807c949db2c1f5f273f1efc4df1a5c553
Validity
Not Before: Jan 31 16:00:19 2025 GMT
Not After : Feb 1 16:00:19 2025 GMT
Subject: CN=18d19b6c651b3bcadfe759207a319b43d9d4d914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:22:1c:c5:d8:d5:f7:6b:0c:1c:bb:5e:5a:f7:
fc:87:bc:59:c2:ea:2f:01:91:43:e2:6b:41:70:b5:
c8:fa:f8:9d:87:2a:cf:0a:5a:73:3b:7a:be:f6:92:
03:d7:59:df:18:5e:7a:08:c3:03:6e:96:37:ad:55:
0c:67:e7:23:15:d0:03:76:40:13:8c:98:28:37:1a:
3d:6d:0b:22:f0:28:c5:e3:51:c3:e7:40:c8:b6:1a:
c5:33:b1:5e:a5:ad:a6:4a:68:78:5f:8b:8e:65:19:
32:68:1c:03:6e:dd:ff:70:57:76:e5:3b:35:79:81:
65:8d:7e:50:bd:91:d3:85:18:b1:f9:18:c5:0b:2c:
6f:80:24:84:5c:a3:25:7e:ad:f8:1e:f8:c0:26:44:
e9:ad:eb:11:75:42:95:da:54:b9:77:93:1d:41:d3:
49:b3:96:93:c9:c2:62:fd:c4:07:81:9f:c5:44:6a:
2b:3a:98:3b:97:fa:fb:b3:f2:a5:e6:d4:67:69:aa:
47:b9:05:6d:9c:e0:d5:51:91:a9:9f:e6:11:e0:71:
3d:14:2d:bc:03:80:48:a1:60:9b:e1:02:15:c5:57:
1f:80:cf:1c:22:91:97:02:73:d9:4a:7e:48:b9:e0:
ad:31:70:97:b9:4f:7e:95:01:be:86:86:16:be:e5:
4a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D1:9B:6C:65:1B:3B:CA:DF:E7:59:20:7A:31:9B:43:D9:D4:D9:14
X509v3 Authority Key Identifier:
keyid:A8:8D:58:C8:07:C9:49:DB:2C:1F:5F:27:3F:1E:FC:4D:F1:A5:C5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qI1YyAfJSdssH18nPx78TfGlxVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4d283b-15f9-4497-9066-6c24b02a022d/1/qI1YyAfJSdssH18nPx78TfGlxVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:48:f5:4d:fc:af:da:78:4d:c1:b3:63:e6:5c:21:5b:f1:11:
3d:4a:f0:02:d6:69:cf:6f:7b:83:09:ab:63:05:c0:a2:d5:dc:
49:89:71:71:62:2f:09:e6:96:87:79:4b:c5:be:be:6d:2d:b0:
cb:93:61:cf:bb:00:fb:a4:5c:d5:ba:02:1f:4d:5c:58:8a:83:
db:81:60:c3:03:c0:b1:14:a8:59:14:21:a6:c8:00:40:a6:3b:
5a:25:12:61:aa:21:53:6f:75:25:11:ab:dd:51:0c:79:08:4f:
9a:3e:b8:81:93:38:7d:39:56:1d:f8:7b:ad:41:49:2f:55:24:
f5:73:6a:e5:a4:c2:64:11:f8:f5:5f:f7:9b:89:b5:37:b6:c4:
39:9a:5c:8f:ac:48:a0:d7:bb:88:a0:92:5f:56:3b:2d:d1:76:
19:dc:aa:75:f7:0f:f3:78:36:d3:1e:cb:bc:12:be:cd:7d:4c:
20:68:5e:20:a1:a7:23:9c:30:11:57:3e:49:95:bd:31:a1:65:
02:7d:09:f1:44:95:70:c7:d0:ee:6f:ed:9d:c6:10:a2:55:40:
75:89:e9:79:98:a9:70:85:d9:36:7d:ca:79:de:cb:b8:6c:97:
ec:8a:c5:8d:a0:c1:55:d4:d3:de:56:fa:d3:c4:03:2d:1b:34:
b7:ec:c6:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F3oZmfvtwSyeDqhnwRNnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4OGQ1OGM4MDdjOTQ5ZGIyYzFmNWYyNzNmMWVmYzRkZjFh
NWM1NTMwHhcNMjUwMTMxMTYwMDE5WhcNMjUwMjAxMTYwMDE5WjAzMTEwLwYDVQQD
EygxOGQxOWI2YzY1MWIzYmNhZGZlNzU5MjA3YTMxOWI0M2Q5ZDRkOTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSIcxdjV92sMHLteWvf8h7xZwuov
AZFD4mtBcLXI+vidhyrPClpzO3q+9pID11nfGF56CMMDbpY3rVUMZ+cjFdADdkAT
jJgoNxo9bQsi8CjF41HD50DIthrFM7Fepa2mSmh4X4uOZRkyaBwDbt3/cFd25Ts1
eYFljX5QvZHThRix+RjFCyxvgCSEXKMlfq34HvjAJkTpresRdUKV2lS5d5MdQdNJ
s5aTycJi/cQHgZ/FRGorOpg7l/r7s/Kl5tRnaapHuQVtnODVUZGpn+YR4HE9FC28
A4BIoWCb4QIVxVcfgM8cIpGXAnPZSn5IueCtMXCXuU9+lQG+hoYWvuVKWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBjRm2xlGzvK3+dZIHoxm0PZ1NkUMB8GA1UdIwQY
MBaAFKiNWMgHyUnbLB9fJz8e/E3xpcVTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUkxWXlBZkpTZHNzSDE4blB4NzhUZkdseFZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS80ZDI4M2ItMTVmOS00NDk3LTkwNjYt
NmMyNGIwMmEwMjJkLzEvcUkxWXlBZkpTZHNzSDE4blB4NzhUZkdseFZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS80ZDI4M2ItMTVmOS00NDk3LTkwNjYtNmMyNGIwMmEwMjJk
LzEvcUkxWXlBZkpTZHNzSDE4blB4NzhUZkdseFZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW0j1Tfyv
2nhNwbNj5lwhW/ERPUrwAtZpz297gwmrYwXAotXcSYlxcWIvCeaWh3lLxb6+bS2w
y5Nhz7sA+6Rc1boCH01cWIqD24FgwwPAsRSoWRQhpsgAQKY7WiUSYaohU291JRGr
3VEMeQhPmj64gZM4fTlWHfh7rUFJL1Uk9XNq5aTCZBH49V/3m4m1N7bEOZpcj6xI
oNe7iKCSX1Y7LdF2GdyqdfcP83g20x7LvBK+zX1MIGheIKGnI5wwEVc+SZW9MaFl
An0J8USVcMfQ7m/tncYQolVAdYnpeZipcIXZNn3Ked7LuGyX7IrFjaDBVdTT3lb6
08QDLRs0t+zGcw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:03:39 2025 by rpki-client