Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft
File: sq-PF3TgWSXyTkHe5p5bYj2axj0.mft (raw, json)
Hash identifier: XKA9YqFw3rUWLz+IwZ0lBfdDWlHf8aQWzV/J/gRQIZY=
Subject key identifier: 82:60:D6:A4:74:93:33:8D:2E:A8:CC:F6:88:11:CD:49:44:F2:60:7E
Authority key identifier: B2:AF:8F:17:74:E0:59:25:F2:4E:41:DE:E6:9E:5B:62:3D:9A:C6:3D
Certificate issuer: /CN=b2af8f1774e05925f24e41dee69e5b623d9ac63d
Certificate serial: 0194BD4E5BF7C05C57675C02D8197F7A8634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sq-PF3TgWSXyTkHe5p5bYj2axj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:16 +0000
Manifest this update: Fri 31 Jan 2025 17:00:16 +0000
Manifest next update: Sat 01 Feb 2025 17:00:16 +0000
Files and hashes: 1: dHmQJZqThrz58J_TSvHl_H-39E8.roa (hash: lBrrDh2GaFmnqywSNW3PsD5utU5WNEXu75PvBG3VZjI=)
2: sq-PF3TgWSXyTkHe5p5bYj2axj0.crl (hash: 2SSnApqyzIzk2PZGmDFc7XWAl940myCY9vvjXNZrRCg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5b:f7:c0:5c:57:67:5c:02:d8:19:7f:7a:86:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2af8f1774e05925f24e41dee69e5b623d9ac63d
Validity
Not Before: Jan 31 17:00:16 2025 GMT
Not After : Feb 1 17:00:16 2025 GMT
Subject: CN=8260d6a47493338d2ea8ccf68811cd4944f2607e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d8:ab:37:fb:f1:da:8d:11:db:5d:de:30:ad:
90:b1:ba:c1:d5:ce:73:a3:bc:cf:1a:51:4d:c3:b9:
0f:31:57:59:5d:a6:c7:c2:2c:38:62:17:2f:9d:4b:
ea:d3:54:5c:15:be:7e:e8:c4:5e:f4:3a:53:a9:35:
06:26:10:cd:23:69:34:ac:f2:d4:39:c3:3c:5f:49:
54:8c:52:3c:41:6e:fb:0a:90:a4:a6:b3:76:6e:d5:
8c:92:13:37:68:2a:65:91:3f:28:df:15:5b:cb:64:
4f:fe:19:36:d8:4d:b0:ba:a5:78:4d:ed:33:47:c9:
1c:a2:00:9c:24:8f:fd:7b:73:26:05:0b:71:f9:e3:
b4:50:ae:18:e5:6b:43:f6:1b:f5:c0:0f:7c:cd:e9:
5d:90:62:f5:89:d0:95:9d:66:ed:c5:cb:92:65:68:
7b:2f:97:8a:21:15:18:49:a1:04:66:33:72:97:6a:
c4:e9:e4:6f:e8:08:6b:1f:0f:4b:f2:eb:c8:01:27:
d1:e8:2f:47:bf:fe:3e:c1:84:6a:8a:55:06:d2:32:
98:5e:58:2b:84:a8:46:cc:36:f1:59:7c:a0:32:0a:
20:e8:86:94:67:75:fb:1c:9f:3f:73:cc:02:ad:3e:
ff:1f:5a:62:fa:c9:b3:5e:5d:f5:d3:64:77:39:6c:
12:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:60:D6:A4:74:93:33:8D:2E:A8:CC:F6:88:11:CD:49:44:F2:60:7E
X509v3 Authority Key Identifier:
keyid:B2:AF:8F:17:74:E0:59:25:F2:4E:41:DE:E6:9E:5B:62:3D:9A:C6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sq-PF3TgWSXyTkHe5p5bYj2axj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:44:ef:96:3b:ca:02:d5:83:38:33:5e:27:f1:95:f1:e0:77:
ca:4f:e0:fa:33:f6:e6:6f:29:b2:9f:f8:2a:c5:83:ad:4f:4d:
be:f9:28:cd:c6:08:05:43:0f:9f:45:1d:62:6d:2e:bc:4b:9c:
f2:a6:51:b0:78:31:ff:0a:93:55:e0:ea:5d:fb:c8:4c:e6:a7:
52:ac:1b:5c:b3:06:23:62:fa:4e:08:b3:b2:ec:5a:0f:07:8c:
6e:c1:11:81:80:97:bd:5a:8a:ad:99:41:73:c7:75:c2:39:4c:
df:a0:e9:2b:3f:04:d9:2b:24:66:5e:93:72:e5:99:72:e8:07:
9a:ec:de:e4:f4:27:62:58:62:b4:f1:08:36:d2:4e:bd:ef:69:
ae:c0:8c:f1:b9:61:41:dd:91:38:55:8b:26:b0:d2:a6:ca:aa:
03:cc:e6:23:9c:c2:74:92:0e:10:ba:40:dc:97:eb:b8:a7:3f:
ad:7e:b1:fc:34:a5:44:62:50:cd:56:a3:76:98:e4:48:f0:63:
c8:96:d4:12:b9:67:d7:ec:dc:dc:e3:af:66:c7:0f:ba:1c:9e:
e1:86:1f:35:8b:fc:b8:f6:b7:ad:08:48:2e:d7:00:f8:a8:7e:
4f:77:9e:f4:8c:03:ff:5f:1e:21:0e:cd:bf:22:22:6b:72:15:
e1:32:3d:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tlv3wFxXZ1wC2Bl/eoY0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYWY4ZjE3NzRlMDU5MjVmMjRlNDFkZWU2OWU1YjYyM2Q5
YWM2M2QwHhcNMjUwMTMxMTcwMDE2WhcNMjUwMjAxMTcwMDE2WjAzMTEwLwYDVQQD
Eyg4MjYwZDZhNDc0OTMzMzhkMmVhOGNjZjY4ODExY2Q0OTQ0ZjI2MDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tirN/vx2o0R213eMK2QsbrB1c5z
o7zPGlFNw7kPMVdZXabHwiw4YhcvnUvq01RcFb5+6MRe9DpTqTUGJhDNI2k0rPLU
OcM8X0lUjFI8QW77CpCkprN2btWMkhM3aCplkT8o3xVby2RP/hk22E2wuqV4Te0z
R8kcogCcJI/9e3MmBQtx+eO0UK4Y5WtD9hv1wA98zeldkGL1idCVnWbtxcuSZWh7
L5eKIRUYSaEEZjNyl2rE6eRv6AhrHw9L8uvIASfR6C9Hv/4+wYRqilUG0jKYXlgr
hKhGzDbxWXygMgog6IaUZ3X7HJ8/c8wCrT7/H1pi+smzXl3102R3OWwSkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJg1qR0kzONLqjM9ogRzUlE8mB+MB8GA1UdIwQY
MBaAFLKvjxd04Fkl8k5B3uaeW2I9msY9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3EtUEYzVGdXU1h5VGtIZTVwNWJZajJheGowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9jMTU2NzEtYmExYi00OGYyLWI2OTEt
ZmE1N2MxMjZiYzJhLzEvc3EtUEYzVGdXU1h5VGtIZTVwNWJZajJheGowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9jMTU2NzEtYmExYi00OGYyLWI2OTEtZmE1N2MxMjZiYzJh
LzEvc3EtUEYzVGdXU1h5VGtIZTVwNWJZajJheGowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgETvljvK
AtWDODNeJ/GV8eB3yk/g+jP25m8psp/4KsWDrU9NvvkozcYIBUMPn0UdYm0uvEuc
8qZRsHgx/wqTVeDqXfvITOanUqwbXLMGI2L6TgizsuxaDweMbsERgYCXvVqKrZlB
c8d1wjlM36DpKz8E2SskZl6TcuWZcugHmuze5PQnYlhitPEINtJOve9prsCM8blh
Qd2ROFWLJrDSpsqqA8zmI5zCdJIOELpA3JfruKc/rX6x/DSlRGJQzVajdpjkSPBj
yJbUErln1+zc3OOvZscPuhye4YYfNYv8uPa3rQhILtcA+Kh+T3ee9IwD/18eIQ7N
vyIia3IV4TI9bQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:20:50 2025 by rpki-client