Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft
File: qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft (raw, json)
Hash identifier: qF+JhKJZLY00JU7YLndU8aFhXjsgzDv8xGTNEZi32ng=
Subject key identifier: 76:7D:C5:B3:73:5C:86:9C:3B:7C:B3:14:96:07:3B:77:02:9D:3E:F0
Authority key identifier: A8:45:70:85:4F:E8:86:B9:4A:E6:25:36:3C:62:5D:DA:60:BB:3E:FC
Certificate issuer: /CN=a84570854fe886b94ae625363c625dda60bb3efc
Certificate serial: 0194BD4E4F549E66DC44E2529FDA8A9AAC2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 17:00:13 +0000
Manifest this update: Fri 31 Jan 2025 17:00:13 +0000
Manifest next update: Sat 01 Feb 2025 17:00:13 +0000
Files and hashes: 1: jdn52CanAogysSSsHvxl8oKYqEU.roa (hash: nA6uVwF0uVARnhrLjCGdNBrWcovmnCAcVghKvtj+qwk=)
2: qEVwhU_ohrlK5iU2PGJd2mC7Pvw.crl (hash: JW/P3JBQ7EvWYUpKX0wCTaXZUep8+jYRMdvs4rjuq0g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:4f:54:9e:66:dc:44:e2:52:9f:da:8a:9a:ac:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84570854fe886b94ae625363c625dda60bb3efc
Validity
Not Before: Jan 31 17:00:13 2025 GMT
Not After : Feb 1 17:00:13 2025 GMT
Subject: CN=767dc5b3735c869c3b7cb31496073b77029d3ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:12:5a:66:d9:cc:5b:d4:c7:d7:7e:e7:57:6a:
5e:12:34:f7:2e:8c:03:24:b6:d5:f0:2c:de:53:74:
05:14:7e:91:3d:09:43:7b:d7:3d:be:0f:82:95:cb:
fa:cd:68:17:6c:c3:b7:48:13:c9:1e:31:e9:5f:38:
dd:ac:8b:a3:f8:90:04:16:33:89:39:f4:3e:29:a3:
76:4a:eb:e6:71:17:0a:b5:09:3f:77:fb:fa:83:2b:
b4:af:4a:0d:19:bb:84:72:73:68:98:9f:78:a1:4a:
e9:9a:80:8a:78:99:44:dd:d5:a0:e2:d9:b4:b2:89:
ab:df:cf:c8:0e:56:83:e1:0d:1f:12:b5:c9:b2:07:
c6:10:03:57:20:15:ca:10:19:3e:01:42:db:06:54:
8b:24:3d:60:87:9f:d9:61:5b:21:34:1b:2b:e0:af:
73:f9:3b:06:53:c3:e6:97:c2:6e:10:1d:39:44:43:
9b:e9:77:6d:9c:b6:68:f8:fa:c0:c0:10:4a:7c:db:
15:76:71:00:38:79:c0:77:a8:c7:b5:8b:0a:59:f3:
c0:61:e2:92:31:58:de:a5:06:d5:b5:0a:7b:ab:37:
7f:b7:07:f0:d6:57:cf:a1:a9:1d:0e:28:49:bc:76:
3a:9e:91:6f:87:b7:70:bb:76:a1:2f:69:ce:87:41:
43:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7D:C5:B3:73:5C:86:9C:3B:7C:B3:14:96:07:3B:77:02:9D:3E:F0
X509v3 Authority Key Identifier:
keyid:A8:45:70:85:4F:E8:86:B9:4A:E6:25:36:3C:62:5D:DA:60:BB:3E:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:cc:ef:1f:f5:bf:6a:d8:a5:87:bc:95:5f:e7:7c:60:fc:eb:
27:ff:93:f8:21:78:a9:c5:4c:d0:ef:e0:e3:6a:43:4c:a6:15:
88:5e:aa:00:c0:db:25:e9:27:41:8f:ec:54:96:ba:ef:c0:bf:
b1:ae:7a:94:26:dc:b5:2e:79:c5:de:88:8d:76:17:b1:e6:ba:
97:b0:0d:db:a9:1a:f2:3c:73:3d:c4:96:e9:33:ff:55:3c:b8:
6b:bd:3b:e2:01:eb:3b:a9:ce:38:1b:3c:f7:d2:ce:89:3f:13:
4d:a3:94:53:b8:9c:a6:05:17:26:9e:d0:a4:10:81:9d:c3:f2:
59:ff:d9:c0:95:d1:46:90:57:ae:aa:f8:ee:e4:b2:fa:bd:f6:
4c:31:a0:64:d7:28:b8:6e:eb:82:d6:a4:99:fa:47:fe:aa:0c:
30:26:fd:07:5f:f6:78:be:9b:68:51:b7:77:e2:23:bf:65:3a:
45:4a:32:9e:ee:47:d8:7e:00:c9:ae:06:c6:d4:d0:77:fc:0e:
66:8d:2e:21:db:a1:1d:54:16:82:00:47:92:28:03:10:72:d6:
aa:3a:eb:f8:98:b3:ee:1f:c3:78:91:99:db:a3:40:c3:ef:f9:
21:f4:33:85:b2:29:48:8d:b3:06:a3:b4:c1:93:1c:b7:6f:34:
17:d6:e2:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tk9UnmbcROJSn9qKmqwqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NDU3MDg1NGZlODg2Yjk0YWU2MjUzNjNjNjI1ZGRhNjBi
YjNlZmMwHhcNMjUwMTMxMTcwMDEzWhcNMjUwMjAxMTcwMDEzWjAzMTEwLwYDVQQD
Eyg3NjdkYzViMzczNWM4NjljM2I3Y2IzMTQ5NjA3M2I3NzAyOWQzZWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBJaZtnMW9TH137nV2peEjT3LowD
JLbV8CzeU3QFFH6RPQlDe9c9vg+Clcv6zWgXbMO3SBPJHjHpXzjdrIuj+JAEFjOJ
OfQ+KaN2SuvmcRcKtQk/d/v6gyu0r0oNGbuEcnNomJ94oUrpmoCKeJlE3dWg4tm0
somr38/IDlaD4Q0fErXJsgfGEANXIBXKEBk+AULbBlSLJD1gh5/ZYVshNBsr4K9z
+TsGU8Pml8JuEB05REOb6XdtnLZo+PrAwBBKfNsVdnEAOHnAd6jHtYsKWfPAYeKS
MVjepQbVtQp7qzd/twfw1lfPoakdDihJvHY6npFvh7dwu3ahL2nOh0FDywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZ9xbNzXIacO3yzFJYHO3cCnT7wMB8GA1UdIwQY
MBaAFKhFcIVP6Ia5SuYlNjxiXdpguz78MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUVWd2hVX29ocmxLNWlVMlBHSmQybUM3UHZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9mYWMyYTItNWY2OS00MDQzLThkNjUt
NWJjODc5NWMyY2JhLzEvcUVWd2hVX29ocmxLNWlVMlBHSmQybUM3UHZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9mYWMyYTItNWY2OS00MDQzLThkNjUtNWJjODc5NWMyY2Jh
LzEvcUVWd2hVX29ocmxLNWlVMlBHSmQybUM3UHZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF8zvH/W/
atilh7yVX+d8YPzrJ/+T+CF4qcVM0O/g42pDTKYViF6qAMDbJeknQY/sVJa678C/
sa56lCbctS55xd6IjXYXsea6l7AN26ka8jxzPcSW6TP/VTy4a7074gHrO6nOOBs8
99LOiT8TTaOUU7icpgUXJp7QpBCBncPyWf/ZwJXRRpBXrqr47uSy+r32TDGgZNco
uG7rgtakmfpH/qoMMCb9B1/2eL6baFG3d+Ijv2U6RUoynu5H2H4Aya4GxtTQd/wO
Zo0uIduhHVQWggBHkigDEHLWqjrr+Jiz7h/DeJGZ26NAw+/5IfQzhbIpSI2zBqO0
wZMct280F9biSw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:50 2025 by rpki-client