Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft
File: Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft (raw, json)
Hash identifier: bBD1Lxdt2/DuNBK6axnDcOjJkp5mTSw/uo7p3JsYlLk=
Subject key identifier: 9E:DE:23:B2:DF:61:2C:97:23:57:00:D0:0E:46:F9:1A:78:CC:A3:0E
Authority key identifier: 43:D5:18:D7:30:77:88:FC:A3:89:18:78:49:0E:4F:32:D9:AA:F6:AF
Certificate issuer: /CN=43d518d7307788fca3891878490e4f32d9aaf6af
Certificate serial: 0194BC04AD9D7C87977E208994F2EC6F90DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft
Manifest number: 0E74
Signing time: Fri 31 Jan 2025 11:00:10 +0000
Manifest this update: Fri 31 Jan 2025 11:00:10 +0000
Manifest next update: Sat 01 Feb 2025 11:00:10 +0000
Files and hashes: 1: Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.crl (hash: pRTOxpOOsngOmRHogn1b4wzUAdH1bILMOAd9O6wng3w=)
2: hOsUXVARCl8NqYdv3cI6OIcfqwU.roa (hash: w1gjvrKQRUt3hmiD9OYkOr05DsegCS6tRj5zStTTlPE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ad:9d:7c:87:97:7e:20:89:94:f2:ec:6f:90:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d518d7307788fca3891878490e4f32d9aaf6af
Validity
Not Before: Jan 31 11:00:10 2025 GMT
Not After : Feb 1 11:00:10 2025 GMT
Subject: CN=9ede23b2df612c97235700d00e46f91a78cca30e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ef:91:09:e9:80:56:87:bd:f9:64:57:26:c2:
91:f0:a0:02:f5:54:cc:19:8e:e4:d2:b8:0d:8a:cb:
56:3d:36:84:a1:bc:c0:f3:93:25:ae:97:35:77:aa:
fd:5e:c9:02:6e:4e:32:7f:21:c3:ea:ec:bd:c3:63:
58:f0:01:9c:32:a8:2b:37:2d:12:c3:01:39:82:95:
64:f2:ea:48:97:2b:65:d0:38:a4:8c:c7:d6:ce:8e:
87:fc:5e:54:2f:b0:6b:bf:e6:73:b6:61:37:35:39:
b0:2f:20:7d:4f:fd:78:2e:eb:78:6f:d5:8b:a2:55:
86:81:b0:11:30:84:bf:a3:ff:94:9f:06:91:7c:bc:
9c:b0:cf:94:97:b9:d0:66:14:0a:6a:12:56:79:8b:
3f:6a:a7:66:66:1d:28:75:ea:78:d8:9a:aa:15:55:
de:ff:63:07:8f:bc:57:8e:02:ff:9a:07:8b:40:08:
0d:93:6e:41:a0:28:43:b9:a5:1d:0c:54:e5:63:69:
80:00:0b:7d:23:90:7b:a9:68:01:c0:de:f8:21:e4:
1b:b7:e1:d3:f6:a5:ac:d8:19:ab:74:2e:94:6a:f1:
05:fe:e9:13:8e:9d:81:23:a2:5e:c9:9b:45:9f:10:
3c:86:c3:f3:b4:43:8b:27:c0:8e:57:b5:57:a8:65:
05:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DE:23:B2:DF:61:2C:97:23:57:00:D0:0E:46:F9:1A:78:CC:A3:0E
X509v3 Authority Key Identifier:
keyid:43:D5:18:D7:30:77:88:FC:A3:89:18:78:49:0E:4F:32:D9:AA:F6:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:6f:46:d2:a6:e0:f2:eb:c1:01:33:b2:03:cc:75:8e:7e:ef:
91:ad:4a:0d:75:4e:05:05:48:ba:af:8e:eb:24:a9:19:b2:0d:
ea:0a:4c:a1:87:d4:60:41:d8:eb:0d:b9:da:f3:71:c8:ec:a9:
60:06:21:63:66:c8:e3:7e:bf:55:22:9a:53:94:04:94:92:ff:
30:56:8f:66:03:a1:62:00:01:cf:da:a4:31:2b:47:01:cb:69:
b1:7d:24:53:20:dc:7a:08:2b:ec:68:da:7d:5c:92:2d:2c:6e:
d4:a4:57:b6:d3:28:17:e3:5e:38:25:92:ac:a3:eb:4a:0a:ea:
ec:56:fe:04:5e:ca:8e:83:de:56:06:d7:93:84:36:e9:11:f6:
fb:4a:ff:0f:d5:67:b6:c9:dd:62:e1:3e:fb:0c:91:d3:62:e8:
0b:d1:b4:64:2c:be:90:a2:af:84:5d:83:e1:e3:81:73:13:a6:
09:1d:1d:7d:f2:84:29:bd:16:07:0c:f0:3c:e2:3d:51:a6:80:
83:61:49:ba:0f:ca:77:8e:b7:1b:59:39:12:c0:0a:ea:e6:a1:
8c:b8:f3:7e:6b:71:5f:1f:db:e3:84:fe:bf:1c:3e:11:4b:44:
e6:39:e4:cf:8a:08:f6:81:54:cf:9a:ba:f2:45:c9:16:88:8e:
b0:e0:68:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BK2dfIeXfiCJlPLsb5DbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZDUxOGQ3MzA3Nzg4ZmNhMzg5MTg3ODQ5MGU0ZjMyZDlh
YWY2YWYwHhcNMjUwMTMxMTEwMDEwWhcNMjUwMjAxMTEwMDEwWjAzMTEwLwYDVQQD
Eyg5ZWRlMjNiMmRmNjEyYzk3MjM1NzAwZDAwZTQ2ZjkxYTc4Y2NhMzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse+RCemAVoe9+WRXJsKR8KAC9VTM
GY7k0rgNistWPTaEobzA85Mlrpc1d6r9XskCbk4yfyHD6uy9w2NY8AGcMqgrNy0S
wwE5gpVk8upIlytl0DikjMfWzo6H/F5UL7Brv+ZztmE3NTmwLyB9T/14Lut4b9WL
olWGgbARMIS/o/+UnwaRfLycsM+Ul7nQZhQKahJWeYs/aqdmZh0odep42JqqFVXe
/2MHj7xXjgL/mgeLQAgNk25BoChDuaUdDFTlY2mAAAt9I5B7qWgBwN74IeQbt+HT
9qWs2BmrdC6UavEF/ukTjp2BI6JeyZtFnxA8hsPztEOLJ8COV7VXqGUF8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ7eI7LfYSyXI1cA0A5G+Rp4zKMOMB8GA1UdIwQY
MBaAFEPVGNcwd4j8o4kYeEkOTzLZqvavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTlVWTF6QjNpUHlqaVJoNFNRNVBNdG1xOXE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9hYjdjYWEtOGJjNS00YmNlLWExMzAt
ZWRkZjMyMGQ1MGUyLzEvUTlVWTF6QjNpUHlqaVJoNFNRNVBNdG1xOXE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9hYjdjYWEtOGJjNS00YmNlLWExMzAtZWRkZjMyMGQ1MGUy
LzEvUTlVWTF6QjNpUHlqaVJoNFNRNVBNdG1xOXE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYW9G0qbg
8uvBATOyA8x1jn7vka1KDXVOBQVIuq+O6ySpGbIN6gpMoYfUYEHY6w252vNxyOyp
YAYhY2bI436/VSKaU5QElJL/MFaPZgOhYgABz9qkMStHActpsX0kUyDceggr7Gja
fVySLSxu1KRXttMoF+NeOCWSrKPrSgrq7Fb+BF7KjoPeVgbXk4Q26RH2+0r/D9Vn
tsndYuE++wyR02LoC9G0ZCy+kKKvhF2D4eOBcxOmCR0dffKEKb0WBwzwPOI9UaaA
g2FJug/Kd463G1k5EsAK6uahjLjzfmtxXx/b44T+vxw+EUtE5jnkz4oI9oFUz5q6
8kXJFoiOsOBo/Q==
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:01:11 2025 by rpki-client