Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
File: Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft (raw, json)
Hash identifier: dSBneTwsOX5qEl6emj0g2DxCX+7gzbULhglrajSYSnA=
Subject key identifier: E8:FF:B2:61:10:7F:D3:DD:8D:DF:F1:A9:CC:FD:60:A8:56:BA:C6:E1
Authority key identifier: 43:E0:A3:64:13:18:41:05:6D:48:B2:D7:88:EA:00:CA:4B:91:DB:56
Certificate issuer: /CN=43e0a364131841056d48b2d788ea00ca4b91db56
Certificate serial: 0194BCE096A50C74B563372A741C33FDF14B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 15:00:22 +0000
Manifest this update: Fri 31 Jan 2025 15:00:22 +0000
Manifest next update: Sat 01 Feb 2025 15:00:22 +0000
Files and hashes: 1: Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl (hash: q24JQjgu7xReTtEGjCsTGcUp/xjpxLYho5D3fHrD0HM=)
2: _hUSVwhR2AzTAQ2XfzdiOZjBm8w.roa (hash: QKR3oa2M9EI3ncjck89yXzV0N57ZeZLJb3UZ6dMHc2c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:96:a5:0c:74:b5:63:37:2a:74:1c:33:fd:f1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43e0a364131841056d48b2d788ea00ca4b91db56
Validity
Not Before: Jan 31 15:00:22 2025 GMT
Not After : Feb 1 15:00:22 2025 GMT
Subject: CN=e8ffb261107fd3dd8ddff1a9ccfd60a856bac6e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:83:fa:e1:c3:6a:b7:69:34:c2:43:f2:fb:99:
eb:75:d4:57:77:5a:a1:f7:ac:d0:fd:22:10:ac:d1:
b5:84:e6:24:70:60:b4:be:36:7d:2c:b4:97:eb:c3:
4f:7e:e7:09:14:b5:41:54:34:94:4f:14:cf:d1:bd:
51:80:c4:8a:fa:f6:53:3c:88:52:59:c0:38:ff:3d:
7f:08:a3:9d:39:bf:de:b8:86:c1:19:a5:65:77:ba:
7a:08:d1:4f:b3:4b:e6:fe:ce:ec:2e:ff:69:3c:8f:
6c:35:fb:82:12:04:21:6b:d3:c8:a8:08:a2:74:3a:
1e:f9:72:e4:57:a5:cc:ce:72:56:9a:7c:04:45:42:
8e:39:88:a1:a2:96:58:c6:0f:1b:2b:a8:36:76:e7:
0e:f5:5a:4c:75:e0:dd:0e:01:bc:05:87:b2:f8:74:
cc:c6:bb:b9:bf:a5:7e:33:b0:7c:eb:77:93:13:b8:
d1:d2:49:32:66:21:c0:dc:4a:9c:a5:53:62:9b:a5:
90:6f:38:51:44:65:91:af:d3:5f:50:f2:6d:5f:be:
ce:49:c2:46:ae:eb:40:2a:4b:56:07:dd:86:b0:ef:
20:73:8a:c1:95:a0:08:7c:cf:42:66:9e:09:1a:26:
4b:b8:01:39:9c:d5:65:d6:1c:f6:76:cb:41:7a:eb:
28:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FF:B2:61:10:7F:D3:DD:8D:DF:F1:A9:CC:FD:60:A8:56:BA:C6:E1
X509v3 Authority Key Identifier:
keyid:43:E0:A3:64:13:18:41:05:6D:48:B2:D7:88:EA:00:CA:4B:91:DB:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:74:f9:fb:d4:1e:c2:39:ab:79:75:17:fc:92:94:b7:99:b3:
81:cc:28:1d:e8:c4:b4:80:2a:77:49:13:ae:1b:8d:7f:37:32:
5a:e8:db:82:95:30:91:7d:a4:c4:10:f0:75:d8:ad:02:9b:76:
42:0c:1c:61:ca:65:81:85:24:f3:84:21:5a:bb:e7:b7:6d:0d:
4e:e4:40:9b:1f:b6:cb:e7:9a:ad:44:ac:bc:27:a9:63:d8:8b:
e5:75:16:47:9e:50:c8:0f:ec:a5:fd:bf:03:d2:76:fc:29:3d:
2b:73:98:85:f2:f2:28:b2:c6:e4:eb:9d:be:a1:41:6c:18:2c:
8e:2a:f7:80:f4:30:22:a5:80:38:83:4d:02:b7:14:57:bb:ad:
13:d2:8f:e0:18:7f:f9:e8:f5:a0:28:ac:b6:5c:b3:81:25:6d:
b7:ff:be:83:86:c2:89:15:e2:eb:af:88:ad:fe:bf:93:d9:1e:
c4:a8:10:6f:67:ad:75:59:52:9b:8b:ad:6d:2b:8f:30:05:f0:
23:5d:4c:54:7d:af:d2:5a:39:2e:e8:66:4f:30:c2:fd:e1:d3:
5e:bc:48:2a:cc:08:a7:95:6c:97:af:44:ab:70:ec:ed:5c:2b:
3e:64:35:fe:9a:5d:6f:a4:47:89:b4:6a:bd:bc:fe:da:99:f8:
74:7b:7b:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84JalDHS1YzcqdBwz/fFLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZTBhMzY0MTMxODQxMDU2ZDQ4YjJkNzg4ZWEwMGNhNGI5
MWRiNTYwHhcNMjUwMTMxMTUwMDIyWhcNMjUwMjAxMTUwMDIyWjAzMTEwLwYDVQQD
EyhlOGZmYjI2MTEwN2ZkM2RkOGRkZmYxYTljY2ZkNjBhODU2YmFjNmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14P64cNqt2k0wkPy+5nrddRXd1qh
96zQ/SIQrNG1hOYkcGC0vjZ9LLSX68NPfucJFLVBVDSUTxTP0b1RgMSK+vZTPIhS
WcA4/z1/CKOdOb/euIbBGaVld7p6CNFPs0vm/s7sLv9pPI9sNfuCEgQha9PIqAii
dDoe+XLkV6XMznJWmnwERUKOOYihopZYxg8bK6g2ducO9VpMdeDdDgG8BYey+HTM
xru5v6V+M7B863eTE7jR0kkyZiHA3EqcpVNim6WQbzhRRGWRr9NfUPJtX77OScJG
rutAKktWB92GsO8gc4rBlaAIfM9CZp4JGiZLuAE5nNVl1hz2dstBeusoPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOj/smEQf9Pdjd/xqcz9YKhWusbhMB8GA1UdIwQY
MBaAFEPgo2QTGEEFbUiy14jqAMpLkdtWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUS1DalpCTVlRUVZ0U0xMWGlPb0F5a3VSMjFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi85Y2JiMDYtYjRkYS00Yzk0LWI0MTgt
NGIwODFjYzJiMzlhLzEvUS1DalpCTVlRUVZ0U0xMWGlPb0F5a3VSMjFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi85Y2JiMDYtYjRkYS00Yzk0LWI0MTgtNGIwODFjYzJiMzlh
LzEvUS1DalpCTVlRUVZ0U0xMWGlPb0F5a3VSMjFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk3T5+9Qe
wjmreXUX/JKUt5mzgcwoHejEtIAqd0kTrhuNfzcyWujbgpUwkX2kxBDwdditApt2
QgwcYcplgYUk84QhWrvnt20NTuRAmx+2y+earUSsvCepY9iL5XUWR55QyA/spf2/
A9J2/Ck9K3OYhfLyKLLG5OudvqFBbBgsjir3gPQwIqWAOINNArcUV7utE9KP4Bh/
+ej1oCistlyzgSVtt/++g4bCiRXi66+Irf6/k9kexKgQb2etdVlSm4utbSuPMAXw
I11MVH2v0lo5LuhmTzDC/eHTXrxIKswIp5Vsl69Eq3Ds7VwrPmQ1/ppdb6RHibRq
vbz+2pn4dHt7yQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:02 2025 by rpki-client