Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
File: QTe22qILXgYYYrb7meI2rCwuNPg.mft (raw, json)
Hash identifier: EmfaJTF5CEzN5/qQpXWGPLZXN44pzBEpK7p3gVLlxVM=
Subject key identifier: E6:3B:42:36:40:B0:FD:74:56:1C:F0:71:36:C3:16:B5:7A:CD:2C:5F
Authority key identifier: 41:37:B6:DA:A2:0B:5E:06:18:62:B6:FB:99:E2:36:AC:2C:2E:34:F8
Certificate issuer: /CN=4137b6daa20b5e061862b6fb99e236ac2c2e34f8
Certificate serial: 0194BC7339ED6491A9D39CA816AE5FA2F52F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
Manifest number: 03F7
Signing time: Fri 31 Jan 2025 13:00:55 +0000
Manifest this update: Fri 31 Jan 2025 13:00:55 +0000
Manifest next update: Sat 01 Feb 2025 13:00:55 +0000
Files and hashes: 1: 4aDro6K4uBzQDwqf0WWWDv-WEKk.roa (hash: KqqgAJBLDDctP248xFMqsm3yeCd/FvEIq/xYuv9Vp94=)
2: QTe22qILXgYYYrb7meI2rCwuNPg.crl (hash: RXGt0V3EzvILLWV86htIYsT+49wlLbX12ApsT6HEeyg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:39:ed:64:91:a9:d3:9c:a8:16:ae:5f:a2:f5:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4137b6daa20b5e061862b6fb99e236ac2c2e34f8
Validity
Not Before: Jan 31 13:00:55 2025 GMT
Not After : Feb 1 13:00:55 2025 GMT
Subject: CN=e63b423640b0fd74561cf07136c316b57acd2c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1e:d8:8a:24:2f:5b:4e:fc:f9:f8:12:26:84:
bf:47:f4:e7:17:5c:57:f1:25:49:c6:4b:e5:16:48:
73:ea:68:09:8e:bb:57:8e:08:f2:13:4b:2e:ff:6d:
6a:ca:43:a3:e0:b5:68:42:4e:ec:01:88:8b:e9:ff:
b2:20:16:c4:f3:b8:f0:45:f0:8a:70:3f:85:9e:cf:
ae:3e:a0:f2:b0:0a:f7:0d:4d:b8:94:07:29:e8:8c:
d4:08:83:1d:72:da:bc:9e:3a:51:ec:10:a1:66:59:
8a:e8:d0:b8:2c:6d:1f:b0:64:a0:45:09:70:14:5f:
f2:fd:28:86:ff:fd:7f:47:36:8d:31:9a:a8:f6:8e:
8a:50:98:4b:ca:2b:f6:ee:f8:b0:20:80:8f:a0:9d:
42:ac:ef:ae:61:ff:29:a4:1a:9c:f6:0e:68:35:68:
dc:e6:95:a9:04:2c:d9:49:95:2a:20:89:35:23:03:
fb:25:d1:76:83:b3:e9:96:9a:e5:01:8e:79:eb:45:
10:b7:56:e0:95:98:a9:56:e1:68:dd:ab:5e:52:25:
c0:31:a7:09:3c:38:51:ca:bb:e0:c6:0c:fc:67:53:
0d:8a:26:22:e9:2b:b5:3c:49:4b:2e:d5:04:3f:c4:
16:6c:d1:5a:5d:a9:69:36:87:2a:f1:82:d5:ec:ec:
ef:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:3B:42:36:40:B0:FD:74:56:1C:F0:71:36:C3:16:B5:7A:CD:2C:5F
X509v3 Authority Key Identifier:
keyid:41:37:B6:DA:A2:0B:5E:06:18:62:B6:FB:99:E2:36:AC:2C:2E:34:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:72:ac:95:c8:e9:54:ee:9b:fe:eb:8f:ee:68:30:b2:fa:5e:
de:67:89:a5:89:0e:b9:ad:57:02:c3:26:2c:05:52:28:98:78:
37:d4:7d:7d:8a:b4:18:46:16:28:f0:5d:3f:e9:67:a5:2a:ef:
8c:de:4b:6f:2c:d6:61:fc:96:33:e0:29:82:02:fb:40:cc:98:
84:19:14:71:5b:7a:51:a0:6e:9e:2a:b0:28:34:ad:7b:ef:91:
f4:e9:09:d1:e7:36:75:50:4f:75:28:c6:2f:00:19:fa:6e:db:
4c:ec:76:fb:a1:84:9f:70:ed:73:a8:f4:2f:c2:3b:e0:f5:99:
63:80:a1:fb:58:79:e1:be:ee:87:8c:a8:ee:7a:25:01:69:66:
11:75:e3:db:5e:d4:8f:df:f4:fb:24:cc:23:3c:e8:cb:f0:a4:
53:9a:a4:ae:92:f9:f2:d7:f2:79:f7:27:0c:77:d3:ac:d1:2a:
29:56:ae:76:34:ec:82:25:b8:7a:d4:26:4d:1d:40:85:ee:84:
b6:68:69:05:24:63:bf:b1:4a:a2:71:a1:fc:37:be:7e:24:55:
64:5b:1b:34:ef:1c:8c:f1:46:89:0a:68:fb:ec:c4:8d:b1:46:
56:7c:96:ca:c3:50:00:12:7c:26:02:e7:e0:1d:9f:ec:17:bd:
7d:6e:d5:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8czntZJGp05yoFq5fovUvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMzdiNmRhYTIwYjVlMDYxODYyYjZmYjk5ZTIzNmFjMmMy
ZTM0ZjgwHhcNMjUwMTMxMTMwMDU1WhcNMjUwMjAxMTMwMDU1WjAzMTEwLwYDVQQD
EyhlNjNiNDIzNjQwYjBmZDc0NTYxY2YwNzEzNmMzMTZiNTdhY2QyYzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtB7YiiQvW078+fgSJoS/R/TnF1xX
8SVJxkvlFkhz6mgJjrtXjgjyE0su/21qykOj4LVoQk7sAYiL6f+yIBbE87jwRfCK
cD+Fns+uPqDysAr3DU24lAcp6IzUCIMdctq8njpR7BChZlmK6NC4LG0fsGSgRQlw
FF/y/SiG//1/RzaNMZqo9o6KUJhLyiv27viwIICPoJ1CrO+uYf8ppBqc9g5oNWjc
5pWpBCzZSZUqIIk1IwP7JdF2g7PplprlAY5560UQt1bglZipVuFo3ateUiXAMacJ
PDhRyrvgxgz8Z1MNiiYi6Su1PElLLtUEP8QWbNFaXalpNocq8YLV7OzvhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOY7QjZAsP10VhzwcTbDFrV6zSxfMB8GA1UdIwQY
MBaAFEE3ttqiC14GGGK2+5niNqwsLjT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVRlMjJxSUxYZ1lZWXJiN21lSTJyQ3d1TlBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8wM2ZkNDItNjU4OS00NmJhLWE2NzMt
MGIwMmE0NzMyNDc5LzEvUVRlMjJxSUxYZ1lZWXJiN21lSTJyQ3d1TlBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS8wM2ZkNDItNjU4OS00NmJhLWE2NzMtMGIwMmE0NzMyNDc5
LzEvUVRlMjJxSUxYZ1lZWXJiN21lSTJyQ3d1TlBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPHKslcjp
VO6b/uuP7mgwsvpe3meJpYkOua1XAsMmLAVSKJh4N9R9fYq0GEYWKPBdP+lnpSrv
jN5LbyzWYfyWM+ApggL7QMyYhBkUcVt6UaBuniqwKDSte++R9OkJ0ec2dVBPdSjG
LwAZ+m7bTOx2+6GEn3Dtc6j0L8I74PWZY4Ch+1h54b7uh4yo7nolAWlmEXXj217U
j9/0+yTMIzzoy/CkU5qkrpL58tfyefcnDHfTrNEqKVaudjTsgiW4etQmTR1Ahe6E
tmhpBSRjv7FKonGh/De+fiRVZFsbNO8cjPFGiQpo++zEjbFGVnyWysNQABJ8JgLn
4B2f7Be9fW7VJA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:43:03 2025 by rpki-client