Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.mft
File: qmdFUZMj2MLZPBsQe_hfYZM8cco.mft (raw, json)
Hash identifier: VX8BTAXrR4ojqf6xwiMkS5iZK0XewAMayNd5fQQE8qs=
Subject key identifier: DC:45:AD:7E:50:E3:FC:25:8E:01:4A:3E:51:04:FD:B1:52:94:E2:17
Authority key identifier: AA:67:45:51:93:23:D8:C2:D9:3C:1B:10:7B:F8:5F:61:93:3C:71:CA
Certificate issuer: /CN=aa6745519323d8c2d93c1b107bf85f61933c71ca
Certificate serial: 0194BCA99697A820CB5E9A82E480B21C0411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmdFUZMj2MLZPBsQe_hfYZM8cco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.mft
Manifest number: 039C
Signing time: Fri 31 Jan 2025 14:00:18 +0000
Manifest this update: Fri 31 Jan 2025 14:00:18 +0000
Manifest next update: Sat 01 Feb 2025 14:00:18 +0000
Files and hashes: 1: 7ASNkD6Hgbsnqd8_wWp-_aAYGqE.roa (hash: LJjg55n4xVGP9vBgMbP2ScHffsmfqIcNY661vZ01XEY=)
2: qmdFUZMj2MLZPBsQe_hfYZM8cco.crl (hash: zNAk8SGM6RWz9UL2SBh8jAA8uuoUUgK/xDsbcfA8ZX4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:96:97:a8:20:cb:5e:9a:82:e4:80:b2:1c:04:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6745519323d8c2d93c1b107bf85f61933c71ca
Validity
Not Before: Jan 31 14:00:18 2025 GMT
Not After : Feb 1 14:00:18 2025 GMT
Subject: CN=dc45ad7e50e3fc258e014a3e5104fdb15294e217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3b:81:9e:6d:f9:b3:7d:ae:ee:f0:b1:64:95:
5f:ae:3c:18:96:e6:74:a7:4f:a0:40:6e:27:73:55:
88:fa:f9:d5:0e:0f:2c:5f:da:0c:ef:5f:36:44:61:
16:08:ec:04:e4:4c:db:d4:21:75:02:32:ed:9b:a6:
4f:e5:3b:74:38:82:8f:55:e4:98:58:64:ea:e4:5f:
82:1b:9e:19:9d:6a:59:49:cd:09:c7:e6:b1:cf:18:
3b:f6:08:56:16:a3:98:fc:2c:9b:5f:aa:cc:0d:4e:
89:b4:ea:c9:a7:e9:5e:99:84:92:8e:54:69:12:37:
64:a0:77:a6:c2:60:6f:07:cb:67:73:c1:81:af:be:
08:68:44:8b:57:5a:5e:c2:90:7e:0c:e3:ac:15:64:
a9:71:d5:46:ec:57:5e:f3:f9:90:6f:36:76:b2:ac:
1c:76:33:18:49:50:78:c5:26:ba:27:c5:07:53:ef:
82:23:3e:c7:4e:3f:95:7f:48:36:ff:24:57:6a:e5:
55:22:c3:05:69:91:75:ea:c1:5a:b3:d8:7b:f3:dc:
95:bf:ae:d2:1a:7d:72:f6:85:a2:1b:31:4b:c7:8f:
f4:cf:e4:b8:b7:0d:04:f6:9c:6a:72:41:9d:ed:d1:
ec:54:f0:a4:dd:60:49:12:c8:a2:4d:0d:9c:bf:36:
6d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:45:AD:7E:50:E3:FC:25:8E:01:4A:3E:51:04:FD:B1:52:94:E2:17
X509v3 Authority Key Identifier:
keyid:AA:67:45:51:93:23:D8:C2:D9:3C:1B:10:7B:F8:5F:61:93:3C:71:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmdFUZMj2MLZPBsQe_hfYZM8cco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f4:39:2d:42:15:8d:8b:21:a4:a7:bc:3d:e0:5d:ec:09:06:
65:57:ef:f4:9b:1e:b8:68:35:f9:cf:58:97:25:be:27:94:e8:
94:11:3a:4b:44:7b:b5:0d:3c:f4:f9:18:16:ac:b0:e8:b9:b6:
12:ca:c1:b9:66:b2:da:9d:82:27:69:57:7a:31:4d:e9:20:a3:
20:8e:be:19:8f:57:a9:ca:54:fc:d3:d3:55:f5:d3:98:c3:92:
95:c8:ef:cb:b2:32:d6:ca:12:ca:b0:7d:92:4c:7e:1e:49:9a:
92:96:93:b6:c8:00:41:34:90:44:58:3e:8a:4a:3a:ea:6d:f4:
03:b7:4f:8a:47:03:fd:2f:fa:15:7b:db:db:9c:ed:b7:2c:af:
47:90:a8:d2:3a:5b:4c:ec:a2:df:9e:ef:4b:c9:14:70:c6:2c:
32:2c:0f:4c:6e:52:d5:da:ec:42:7f:2a:62:36:f4:fe:3a:f9:
c3:dc:79:3e:56:8f:26:cb:e5:61:fe:a2:00:59:3b:2d:2d:2e:
46:0b:06:9e:b7:d3:5b:4f:8c:f6:e5:c4:4b:b7:11:6c:49:34:
33:b6:ef:69:07:80:28:74:37:1d:bf:13:dd:b9:dc:ac:f9:4c:
b6:65:5a:4b:1d:d3:b5:a9:e2:2a:b4:6f:4a:8b:7f:1e:5c:f4:
d4:02:34:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qZaXqCDLXpqC5ICyHAQRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNjc0NTUxOTMyM2Q4YzJkOTNjMWIxMDdiZjg1ZjYxOTMz
YzcxY2EwHhcNMjUwMTMxMTQwMDE4WhcNMjUwMjAxMTQwMDE4WjAzMTEwLwYDVQQD
EyhkYzQ1YWQ3ZTUwZTNmYzI1OGUwMTRhM2U1MTA0ZmRiMTUyOTRlMjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzuBnm35s32u7vCxZJVfrjwYluZ0
p0+gQG4nc1WI+vnVDg8sX9oM7182RGEWCOwE5Ezb1CF1AjLtm6ZP5Tt0OIKPVeSY
WGTq5F+CG54ZnWpZSc0Jx+axzxg79ghWFqOY/CybX6rMDU6JtOrJp+lemYSSjlRp
EjdkoHemwmBvB8tnc8GBr74IaESLV1pewpB+DOOsFWSpcdVG7Fde8/mQbzZ2sqwc
djMYSVB4xSa6J8UHU++CIz7HTj+Vf0g2/yRXauVVIsMFaZF16sFas9h789yVv67S
Gn1y9oWiGzFLx4/0z+S4tw0E9pxqckGd7dHsVPCk3WBJEsiiTQ2cvzZtJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxFrX5Q4/wljgFKPlEE/bFSlOIXMB8GA1UdIwQY
MBaAFKpnRVGTI9jC2TwbEHv4X2GTPHHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW1kRlVaTWoyTUxaUEJzUWVfaGZZWk04Y2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9hZjE4YzQtYzA0NC00NDg1LThlZjAt
ZDc4MTJhMzM4MTgzLzEvcW1kRlVaTWoyTUxaUEJzUWVfaGZZWk04Y2NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9hZjE4YzQtYzA0NC00NDg1LThlZjAtZDc4MTJhMzM4MTgz
LzEvcW1kRlVaTWoyTUxaUEJzUWVfaGZZWk04Y2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYvQ5LUIV
jYshpKe8PeBd7AkGZVfv9JseuGg1+c9YlyW+J5TolBE6S0R7tQ089PkYFqyw6Lm2
EsrBuWay2p2CJ2lXejFN6SCjII6+GY9XqcpU/NPTVfXTmMOSlcjvy7Iy1soSyrB9
kkx+HkmakpaTtsgAQTSQRFg+iko66m30A7dPikcD/S/6FXvb25zttyyvR5Co0jpb
TOyi357vS8kUcMYsMiwPTG5S1drsQn8qYjb0/jr5w9x5PlaPJsvlYf6iAFk7LS0u
RgsGnrfTW0+M9uXES7cRbEk0M7bvaQeAKHQ3Hb8T3bncrPlMtmVaSx3TtaniKrRv
Sot/Hlz01AI0Pg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:57:35 2025 by rpki-client