Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft
File: q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft (raw, json)
Hash identifier: 7Ig0coaom8s0kjvcLObh8OnVytd1q3fpxwe6qWO2Skw=
Subject key identifier: B6:83:43:13:28:3A:B1:E1:D7:EA:CA:AF:AB:50:CD:BB:1C:1E:4E:55
Authority key identifier: AB:E4:43:F9:AE:98:AC:AF:DD:D6:16:2D:5C:8E:B0:F9:41:9A:05:F7
Certificate issuer: /CN=abe443f9ae98acafddd6162d5c8eb0f9419a05f7
Certificate serial: 0194BC04CE05B81C288AC1B51F2A8817EC28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-RD-a6YrK_d1hYtXI6w-UGaBfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft
Manifest number: 10D6
Signing time: Fri 31 Jan 2025 11:00:18 +0000
Manifest this update: Fri 31 Jan 2025 11:00:18 +0000
Manifest next update: Sat 01 Feb 2025 11:00:18 +0000
Files and hashes: 1: OQ-BUjiM-4ZYICksoUde6ONei7U.roa (hash: nuZwAEc9XGaRcjHMhQRLcOzGazeKsZ0/3EUvFc3DPLU=)
2: q-RD-a6YrK_d1hYtXI6w-UGaBfc.crl (hash: 6riGgLycgKgj0j5vOpyu/wRiyxcMEpxVnKxLasKVZaA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ce:05:b8:1c:28:8a:c1:b5:1f:2a:88:17:ec:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe443f9ae98acafddd6162d5c8eb0f9419a05f7
Validity
Not Before: Jan 31 11:00:18 2025 GMT
Not After : Feb 1 11:00:18 2025 GMT
Subject: CN=b6834313283ab1e1d7eacaafab50cdbb1c1e4e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cd:d2:24:fa:7e:9b:e5:56:4d:b3:e7:f2:ee:
bf:ba:7e:56:1b:8f:c7:c8:22:ea:c1:27:53:6e:36:
ca:41:17:81:fb:f5:15:37:d6:0a:d5:d1:79:b5:51:
89:e6:38:b1:28:97:03:81:53:ca:75:27:59:c0:e3:
a4:e8:2d:cd:c8:31:bf:6e:02:fa:5e:84:cd:68:e9:
27:b4:66:26:17:0f:6e:6e:23:63:e5:b1:7b:d0:9a:
51:c1:18:db:27:8d:45:c8:03:ba:1d:7c:56:59:09:
05:27:f9:5f:5b:0b:1c:90:0f:07:cf:98:e6:b4:58:
42:d2:d7:a5:18:3a:32:f3:be:26:3e:82:de:8c:0b:
93:90:ac:47:b4:0f:54:17:6f:0a:c8:c8:19:75:88:
fb:69:59:b1:06:2f:25:20:7f:d4:ca:e1:0e:90:24:
81:ba:66:a0:18:34:03:76:cc:11:34:82:a7:69:0a:
a1:1e:fb:47:4d:a5:54:4a:39:4f:fb:90:68:f1:0d:
4c:cb:cd:b9:95:b3:5a:53:79:9b:60:76:53:f8:d6:
cc:3b:26:95:12:92:b9:bf:1e:37:92:f8:9f:1f:8e:
c4:ad:91:21:14:b1:59:27:92:65:dd:d8:52:5b:1a:
47:e6:17:97:cb:bf:9f:7a:5b:79:3d:4d:a7:0a:7c:
fe:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:83:43:13:28:3A:B1:E1:D7:EA:CA:AF:AB:50:CD:BB:1C:1E:4E:55
X509v3 Authority Key Identifier:
keyid:AB:E4:43:F9:AE:98:AC:AF:DD:D6:16:2D:5C:8E:B0:F9:41:9A:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-RD-a6YrK_d1hYtXI6w-UGaBfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:d0:6a:6b:aa:7c:ac:54:bf:2f:e4:b4:ca:eb:10:21:25:89:
f5:91:36:c3:07:50:37:43:65:df:bc:81:75:86:2d:24:fb:91:
0c:f9:c7:f3:ca:9c:ec:16:d5:4e:eb:0a:57:86:7e:13:72:3d:
11:63:cb:b4:80:06:c1:eb:7b:2f:9c:18:61:14:38:1c:4c:88:
58:96:a8:90:24:7d:b1:12:82:06:29:d9:4b:f9:64:26:ce:7c:
e2:91:eb:95:95:25:47:39:8c:f8:3f:e6:80:d0:b2:12:30:16:
cf:ff:bc:45:77:41:f0:27:c7:5d:b9:6b:03:72:d7:59:bd:ac:
62:5a:38:b0:1c:20:b6:f1:47:62:db:77:79:1f:ea:04:03:55:
1d:8b:64:0c:02:7c:aa:4a:57:93:bf:da:7d:b3:38:73:11:e3:
15:db:32:ac:fe:e6:bf:53:e9:9e:91:cf:73:c7:c9:b2:f7:d6:
15:a5:51:29:04:34:df:b1:d4:62:ec:c7:cb:be:53:22:0a:49:
4c:6b:42:3c:fa:c3:e8:e8:81:f1:1c:a0:da:0e:87:b2:1c:a3:
1c:19:d5:5f:66:e9:88:62:3f:9e:9f:1b:52:b2:50:85:8d:24:
11:6f:51:d3:9e:4d:ab:a5:dc:94:95:3e:48:2b:32:55:f8:63:
e9:42:d4:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BM4FuBwoisG1HyqIF+woMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiZTQ0M2Y5YWU5OGFjYWZkZGQ2MTYyZDVjOGViMGY5NDE5
YTA1ZjcwHhcNMjUwMTMxMTEwMDE4WhcNMjUwMjAxMTEwMDE4WjAzMTEwLwYDVQQD
EyhiNjgzNDMxMzI4M2FiMWUxZDdlYWNhYWZhYjUwY2RiYjFjMWU0ZTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqM3SJPp+m+VWTbPn8u6/un5WG4/H
yCLqwSdTbjbKQReB+/UVN9YK1dF5tVGJ5jixKJcDgVPKdSdZwOOk6C3NyDG/bgL6
XoTNaOkntGYmFw9ubiNj5bF70JpRwRjbJ41FyAO6HXxWWQkFJ/lfWwsckA8Hz5jm
tFhC0telGDoy874mPoLejAuTkKxHtA9UF28KyMgZdYj7aVmxBi8lIH/UyuEOkCSB
umagGDQDdswRNIKnaQqhHvtHTaVUSjlP+5Bo8Q1My825lbNaU3mbYHZT+NbMOyaV
EpK5vx43kvifH47ErZEhFLFZJ5Jl3dhSWxpH5heXy7+felt5PU2nCnz+2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLaDQxMoOrHh1+rKr6tQzbscHk5VMB8GA1UdIwQY
MBaAFKvkQ/mumKyv3dYWLVyOsPlBmgX3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcS1SRC1hNllyS19kMWhZdFhJNnctVUdhQmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi85MDBiMjQtZjI4Ni00YmM3LTk2MWUt
MDQ0YjY4NmJjOTdmLzEvcS1SRC1hNllyS19kMWhZdFhJNnctVUdhQmZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi85MDBiMjQtZjI4Ni00YmM3LTk2MWUtMDQ0YjY4NmJjOTdm
LzEvcS1SRC1hNllyS19kMWhZdFhJNnctVUdhQmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeNBqa6p8
rFS/L+S0yusQISWJ9ZE2wwdQN0Nl37yBdYYtJPuRDPnH88qc7BbVTusKV4Z+E3I9
EWPLtIAGwet7L5wYYRQ4HEyIWJaokCR9sRKCBinZS/lkJs584pHrlZUlRzmM+D/m
gNCyEjAWz/+8RXdB8CfHXblrA3LXWb2sYlo4sBwgtvFHYtt3eR/qBANVHYtkDAJ8
qkpXk7/afbM4cxHjFdsyrP7mv1PpnpHPc8fJsvfWFaVRKQQ037HUYuzHy75TIgpJ
TGtCPPrD6OiB8Ryg2g6HshyjHBnVX2bpiGI/np8bUrJQhY0kEW9R055Nq6XclJU+
SCsyVfhj6ULUyg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:18 2025 by rpki-client