Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft
File: _q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft (raw, json)
Hash identifier: CW2NyMiccXtt1uPbye7I6lkxhlJsvq8UIjXm7nA2qk8=
Subject key identifier: 55:17:72:96:AF:9D:C2:A4:E5:AE:C7:4D:EC:0E:AE:34:5A:55:89:F0
Authority key identifier: FE:AD:E6:CD:9E:01:AA:A2:E3:9D:FF:48:4E:4E:DC:E6:F5:09:90:AF
Certificate issuer: /CN=feade6cd9e01aaa2e39dff484e4edce6f50990af
Certificate serial: 0194BBCE82846BF988CB820B7E23B5373734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:01:00 +0000
Manifest this update: Fri 31 Jan 2025 10:01:00 +0000
Manifest next update: Sat 01 Feb 2025 10:01:00 +0000
Files and hashes: 1: _q3mzZ4BqqLjnf9ITk7c5vUJkK8.crl (hash: h7/E6BD5XodswjBRe55W1o4ojtAMSWvKaMvGf2Y/SVk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:82:84:6b:f9:88:cb:82:0b:7e:23:b5:37:37:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feade6cd9e01aaa2e39dff484e4edce6f50990af
Validity
Not Before: Jan 31 10:01:00 2025 GMT
Not After : Feb 1 10:01:00 2025 GMT
Subject: CN=55177296af9dc2a4e5aec74dec0eae345a5589f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f6:83:11:bd:d8:0f:fc:05:15:92:62:94:ed:
a2:f6:bc:af:38:fd:5f:9e:fd:82:07:ce:8a:40:b7:
1a:7b:f7:cc:11:65:94:89:f3:18:7c:f5:e9:f9:e2:
c8:ab:59:8d:18:8b:ea:33:10:64:15:28:e8:c7:f3:
d4:34:ff:5c:90:d0:15:17:85:bb:2f:63:6c:0c:0c:
0d:a7:62:63:17:d7:dc:61:6c:a2:fd:b0:07:e8:02:
6b:8b:25:95:98:fc:77:4c:6b:b7:4d:69:0b:cf:71:
b1:16:f0:8d:05:7a:18:75:b2:28:29:1d:fe:93:38:
d9:15:47:6e:e9:6d:fb:a2:9c:6e:30:1e:72:45:9e:
73:97:30:22:82:d2:94:a7:dc:21:ca:5f:c8:63:b6:
4c:9a:8d:18:a3:9b:ea:b2:99:72:fd:18:3d:38:3f:
03:09:fc:39:4e:0b:e0:c8:04:1e:84:4f:c9:75:77:
9d:08:be:fb:97:14:f0:ab:97:7e:aa:08:20:08:e0:
e0:64:c7:28:0c:aa:bf:ac:b1:4f:43:f9:81:5a:75:
2b:17:36:8b:3b:87:ba:55:69:9e:02:af:df:7a:1e:
76:52:4e:1c:6b:f8:18:bc:77:ad:bd:f1:81:4b:85:
a7:dc:6c:a7:60:b7:eb:7b:1d:c7:39:d7:05:36:53:
ce:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:17:72:96:AF:9D:C2:A4:E5:AE:C7:4D:EC:0E:AE:34:5A:55:89:F0
X509v3 Authority Key Identifier:
keyid:FE:AD:E6:CD:9E:01:AA:A2:E3:9D:FF:48:4E:4E:DC:E6:F5:09:90:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:3d:15:0d:ef:1f:16:23:45:b7:cd:7f:bb:ac:64:81:fb:e6:
e0:14:5b:fd:a9:e1:bc:b8:63:ce:fc:10:69:03:77:81:76:0f:
c7:a6:aa:b9:87:d4:4a:7a:4f:6a:59:d4:7f:41:8d:30:53:f5:
b9:33:57:3e:ce:ac:97:88:cc:ed:53:5f:01:46:b2:cb:95:0a:
a6:eb:7b:b4:51:67:f3:98:a5:19:54:cf:5d:f5:6a:05:d5:b7:
f6:a7:72:69:a7:bc:b5:a0:c0:ae:53:69:89:f8:13:5f:13:6e:
cc:6d:3a:e4:60:e0:be:42:13:d8:73:37:20:b1:df:68:a3:fb:
82:e8:d0:bf:67:81:f2:73:b2:29:81:47:50:5d:ca:c8:19:6b:
3f:6b:5d:7d:de:f6:dc:62:07:dd:00:38:e3:b6:52:56:2f:a3:
55:9b:d0:f7:9b:8c:a9:d2:11:92:fa:d5:7a:2f:75:ea:9b:90:
1f:ff:d6:f9:85:19:eb:93:bf:c7:67:c6:9f:76:62:75:80:23:
6d:77:00:30:52:24:46:d1:77:90:74:07:56:60:e1:4c:e4:d4:
66:0c:2a:0d:6a:ae:b0:ea:2c:98:43:fe:76:e5:57:d9:c9:ce:
4e:90:24:a7:90:ad:6f:32:db:78:9c:9f:3d:7c:40:4c:ee:17:
66:b9:8b:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zoKEa/mIy4ILfiO1Nzc0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYWRlNmNkOWUwMWFhYTJlMzlkZmY0ODRlNGVkY2U2ZjUw
OTkwYWYwHhcNMjUwMTMxMTAwMTAwWhcNMjUwMjAxMTAwMTAwWjAzMTEwLwYDVQQD
Eyg1NTE3NzI5NmFmOWRjMmE0ZTVhZWM3NGRlYzBlYWUzNDVhNTU4OWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/aDEb3YD/wFFZJilO2i9ryvOP1f
nv2CB86KQLcae/fMEWWUifMYfPXp+eLIq1mNGIvqMxBkFSjox/PUNP9ckNAVF4W7
L2NsDAwNp2JjF9fcYWyi/bAH6AJriyWVmPx3TGu3TWkLz3GxFvCNBXoYdbIoKR3+
kzjZFUdu6W37opxuMB5yRZ5zlzAigtKUp9whyl/IY7ZMmo0Yo5vqsply/Rg9OD8D
Cfw5TgvgyAQehE/JdXedCL77lxTwq5d+qgggCODgZMcoDKq/rLFPQ/mBWnUrFzaL
O4e6VWmeAq/feh52Uk4ca/gYvHetvfGBS4Wn3GynYLfrex3HOdcFNlPOqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFUXcpavncKk5a7HTewOrjRaVYnwMB8GA1UdIwQY
MBaAFP6t5s2eAaqi453/SE5O3Ob1CZCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3EzbXpaNEJxcUxqbmY5SVRrN2M1dlVKa0s4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9mNmViOTItZWQ2Yi00MzEzLWJlZmYt
OTI3ZWNlNjZmODJiLzEvX3EzbXpaNEJxcUxqbmY5SVRrN2M1dlVKa0s4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9mNmViOTItZWQ2Yi00MzEzLWJlZmYtOTI3ZWNlNjZmODJi
LzEvX3EzbXpaNEJxcUxqbmY5SVRrN2M1dlVKa0s4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACz0VDe8f
FiNFt81/u6xkgfvm4BRb/anhvLhjzvwQaQN3gXYPx6aquYfUSnpPalnUf0GNMFP1
uTNXPs6sl4jM7VNfAUayy5UKput7tFFn85ilGVTPXfVqBdW39qdyaae8taDArlNp
ifgTXxNuzG065GDgvkIT2HM3ILHfaKP7gujQv2eB8nOyKYFHUF3KyBlrP2tdfd72
3GIH3QA447ZSVi+jVZvQ95uMqdIRkvrVei916puQH//W+YUZ65O/x2fGn3ZidYAj
bXcAMFIkRtF3kHQHVmDhTOTUZgwqDWqusOosmEP+duVX2cnOTpAkp5CtbzLbeJyf
PXxATO4XZrmL6A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:31 2025 by rpki-client