Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.mft
File: QZ_Gk449XguSdHsy9tcP2vDlChU.mft (raw, json)
Hash identifier: yyDISgTvWwTAvLqnG9e/zt9c0lsRGFjjmYg24YnDWjI=
Subject key identifier: 2C:6C:77:C7:CC:5C:CA:AF:7B:4C:FA:A4:07:07:B2:F4:DC:1B:90:28
Authority key identifier: 41:9F:C6:93:8E:3D:5E:0B:92:74:7B:32:F6:D7:0F:DA:F0:E5:0A:15
Certificate issuer: /CN=419fc6938e3d5e0b92747b32f6d70fdaf0e50a15
Certificate serial: 0194BC3CA91E33035D9A6977C73B41DDCDE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZ_Gk449XguSdHsy9tcP2vDlChU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 12:01:19 +0000
Manifest this update: Fri 31 Jan 2025 12:01:19 +0000
Manifest next update: Sat 01 Feb 2025 12:01:19 +0000
Files and hashes: 1: QZ_Gk449XguSdHsy9tcP2vDlChU.crl (hash: A3q0rfCuqTvQhM/zKph3XQE4MgDDoL4+he6iq4oJI3o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a9:1e:33:03:5d:9a:69:77:c7:3b:41:dd:cd:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=419fc6938e3d5e0b92747b32f6d70fdaf0e50a15
Validity
Not Before: Jan 31 12:01:19 2025 GMT
Not After : Feb 1 12:01:19 2025 GMT
Subject: CN=2c6c77c7cc5ccaaf7b4cfaa40707b2f4dc1b9028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:04:8d:9a:1d:8c:c4:0c:aa:1b:1c:3d:fa:59:
2a:16:45:66:d7:6a:41:1e:69:b2:45:3b:6b:84:1c:
8d:70:53:9f:19:d6:16:3d:97:d9:2a:59:b5:5d:3a:
51:a1:8e:c8:52:31:ce:8b:eb:c1:e8:eb:65:98:14:
1e:d4:ef:17:41:74:a4:c6:7b:49:a4:1e:de:01:ab:
2c:10:08:f7:c9:fc:d3:24:f3:6c:c2:e4:b1:cd:8f:
87:78:50:14:99:df:f3:05:58:cb:87:59:16:02:a6:
c4:a7:12:2a:fc:db:cf:40:55:fe:de:5c:0f:07:b2:
af:54:d9:90:aa:08:6e:51:53:33:7c:2c:b8:3e:71:
c3:20:d2:63:52:76:34:68:ff:e0:ab:83:ad:39:f1:
c6:76:5b:7f:2d:f3:25:1e:4c:27:44:a6:fd:5b:cc:
af:bc:0e:f6:06:3e:28:cd:c1:12:63:df:ed:9d:29:
b9:e0:56:86:8f:82:32:3f:88:ae:87:da:07:0a:43:
bb:8a:b1:58:86:36:2d:0b:fe:8d:51:39:e1:19:23:
5a:9c:de:d8:8f:c3:30:79:0c:8e:b8:13:40:99:54:
ce:fb:d6:5d:57:57:cc:a5:76:ff:ad:aa:ec:fe:2d:
fb:5b:71:5c:40:f4:64:cf:2b:70:c5:d2:f2:bb:0b:
a1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6C:77:C7:CC:5C:CA:AF:7B:4C:FA:A4:07:07:B2:F4:DC:1B:90:28
X509v3 Authority Key Identifier:
keyid:41:9F:C6:93:8E:3D:5E:0B:92:74:7B:32:F6:D7:0F:DA:F0:E5:0A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZ_Gk449XguSdHsy9tcP2vDlChU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4a1aeb-8bd6-4433-97cd-9bceb029d528/1/QZ_Gk449XguSdHsy9tcP2vDlChU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:45:22:aa:04:fd:66:17:6a:38:f0:42:8a:12:b4:a7:ab:dc:
1f:b3:71:0b:3f:b1:a5:87:b8:60:85:db:10:14:e5:3b:27:d9:
f1:0c:6b:1e:c8:10:9d:4d:1a:f8:22:a9:6d:6b:62:2c:a3:ad:
50:f5:3f:42:c2:87:de:d3:e3:fc:65:0f:70:b0:56:d0:5c:7f:
98:03:0f:16:f2:42:5d:02:7a:89:36:c1:c5:3e:30:cc:1a:3d:
0c:1e:fe:a0:b5:0d:ae:38:ac:70:4d:b0:26:bc:9f:e5:7e:0d:
7c:07:13:9e:7b:e7:06:b2:42:72:24:28:55:a5:11:89:2a:38:
6d:c6:1b:28:1d:be:d6:c8:cb:23:60:04:65:70:2a:25:b1:24:
8d:f3:1c:b0:39:ac:0e:8d:2f:b1:2c:ef:e4:71:26:b6:79:d5:
4b:dc:4f:fa:65:ad:34:d8:12:7a:d1:08:dd:de:22:56:1e:5b:
13:f1:1a:fc:ec:c8:73:7e:35:2b:a3:eb:e9:ab:36:2b:d4:43:
b5:18:b1:cd:8b:53:42:3f:28:db:5a:05:c3:6f:af:0e:96:ed:
8d:10:54:70:d2:77:04:19:a5:f0:92:23:7f:c9:c5:28:72:73:
2b:9e:54:d2:6d:64:f5:26:db:6e:7e:42:53:8e:97:3e:b1:2e:
c1:dd:22:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PKkeMwNdmml3xztB3c3gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxOWZjNjkzOGUzZDVlMGI5Mjc0N2IzMmY2ZDcwZmRhZjBl
NTBhMTUwHhcNMjUwMTMxMTIwMTE5WhcNMjUwMjAxMTIwMTE5WjAzMTEwLwYDVQQD
EygyYzZjNzdjN2NjNWNjYWFmN2I0Y2ZhYTQwNzA3YjJmNGRjMWI5MDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuASNmh2MxAyqGxw9+lkqFkVm12pB
HmmyRTtrhByNcFOfGdYWPZfZKlm1XTpRoY7IUjHOi+vB6OtlmBQe1O8XQXSkxntJ
pB7eAassEAj3yfzTJPNswuSxzY+HeFAUmd/zBVjLh1kWAqbEpxIq/NvPQFX+3lwP
B7KvVNmQqghuUVMzfCy4PnHDINJjUnY0aP/gq4OtOfHGdlt/LfMlHkwnRKb9W8yv
vA72Bj4ozcESY9/tnSm54FaGj4IyP4iuh9oHCkO7irFYhjYtC/6NUTnhGSNanN7Y
j8MweQyOuBNAmVTO+9ZdV1fMpXb/rars/i37W3FcQPRkzytwxdLyuwuhvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxsd8fMXMqve0z6pAcHsvTcG5AoMB8GA1UdIwQY
MBaAFEGfxpOOPV4LknR7MvbXD9rw5QoVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVpfR2s0NDlYZ3VTZEhzeTl0Y1AydkRsQ2hVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi80YTFhZWItOGJkNi00NDMzLTk3Y2Qt
OWJjZWIwMjlkNTI4LzEvUVpfR2s0NDlYZ3VTZEhzeTl0Y1AydkRsQ2hVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi80YTFhZWItOGJkNi00NDMzLTk3Y2QtOWJjZWIwMjlkNTI4
LzEvUVpfR2s0NDlYZ3VTZEhzeTl0Y1AydkRsQ2hVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGEUiqgT9
ZhdqOPBCihK0p6vcH7NxCz+xpYe4YIXbEBTlOyfZ8QxrHsgQnU0a+CKpbWtiLKOt
UPU/QsKH3tPj/GUPcLBW0Fx/mAMPFvJCXQJ6iTbBxT4wzBo9DB7+oLUNrjiscE2w
Jryf5X4NfAcTnnvnBrJCciQoVaURiSo4bcYbKB2+1sjLI2AEZXAqJbEkjfMcsDms
Do0vsSzv5HEmtnnVS9xP+mWtNNgSetEI3d4iVh5bE/Ea/OzIc341K6Pr6as2K9RD
tRixzYtTQj8o21oFw2+vDpbtjRBUcNJ3BBml8JIjf8nFKHJzK55U0m1k9Sbbbn5C
U46XPrEuwd0ibQ==
-----END CERTIFICATE-----
Generated at Thu May 1 11:42:44 2025 by rpki-client