Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
File: qcxE1_HQ3Apavyd2SVth3kgZkl8.mft (raw, json)
Hash identifier: dF9xvg9USBfcOh6kiRrx8cr2G923dhIZ/Fb7JWuDyag=
Subject key identifier: AB:CF:28:AA:04:33:64:39:C5:20:FD:00:63:64:9E:7B:01:4C:F8:E5
Authority key identifier: A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F
Certificate issuer: /CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
Certificate serial: 0194BCA98A36B8E29CF73C226DD815CCE14C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
Manifest number: 0FC7
Signing time: Fri 31 Jan 2025 14:00:15 +0000
Manifest this update: Fri 31 Jan 2025 14:00:15 +0000
Manifest next update: Sat 01 Feb 2025 14:00:15 +0000
Files and hashes: 1: Jo7QZBDB32wXW0Iw1K7QdXNowZk.roa (hash: K7AhFGZtd/rNskeYTg//KKyYm9N8IOSqZd1eL/nYFI0=)
2: qcxE1_HQ3Apavyd2SVth3kgZkl8.crl (hash: fZAXOcubd9Msk+ffLWbJGz1GuShYDH2F3aSw61Dve7U=)
3: s7SwYsQxw0lQy1OCUyDcPA5nRsQ.roa (hash: oInMskbU1ysq45NZWBKPFPJeOmbD2WauFvK9W3eBwaY=)
4: vFfYVEKCcc2PyT6NhaZHTqsCyRc.roa (hash: IviSD1XdrOD9s0OcxHYtTVilTBOr8uyUO7SjAFCSO3g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8a:36:b8:e2:9c:f7:3c:22:6d:d8:15:cc:e1:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
Validity
Not Before: Jan 31 14:00:15 2025 GMT
Not After : Feb 1 14:00:15 2025 GMT
Subject: CN=abcf28aa04336439c520fd0063649e7b014cf8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:27:0b:9c:9f:9b:a6:d1:2f:59:30:31:1d:32:
34:b0:82:6a:10:f7:1e:c8:d5:1a:71:de:ff:9f:c4:
20:47:49:ba:ea:5b:dd:ef:6a:d9:1b:99:7a:38:c3:
3c:b1:70:e6:96:53:33:a6:5d:bc:33:b3:62:8a:4e:
c9:e9:35:81:75:5b:53:b0:70:52:cf:0e:f8:e0:23:
51:53:4a:ae:97:60:94:be:f7:c5:85:a8:1e:6b:7b:
ec:81:fc:f6:2d:7a:b2:5f:30:d9:f3:7e:71:b3:80:
a5:ce:11:d8:c1:93:ff:60:7d:45:da:b6:ed:9c:ef:
ac:79:33:54:45:4c:87:e4:1a:1e:e9:b2:d8:d7:2e:
6e:e3:cf:62:33:fa:f7:af:e4:d6:56:cc:59:f5:31:
1f:da:18:1e:2f:61:e2:be:80:b3:16:bd:fc:38:96:
97:3f:0a:55:99:92:b3:c3:fd:1b:3f:8b:7b:c8:99:
e3:39:ff:c6:73:81:27:34:36:04:95:b6:57:c9:f5:
f6:d6:b3:ff:bb:47:3d:e8:67:af:05:02:88:9a:3a:
b2:39:e1:10:22:3b:57:c6:bb:2d:f1:7c:ba:32:3e:
c8:b0:91:db:03:72:9f:fb:c4:8e:38:53:84:6b:1b:
d8:96:81:4b:e1:70:0e:59:a5:42:8b:dc:a4:3d:32:
a7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CF:28:AA:04:33:64:39:C5:20:FD:00:63:64:9E:7B:01:4C:F8:E5
X509v3 Authority Key Identifier:
keyid:A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:83:28:53:8f:db:75:d4:ab:7a:e7:0b:ec:cd:d4:83:c9:27:
5e:3d:09:8c:49:01:d0:3a:b9:ae:b3:a8:12:54:06:f9:fb:b0:
a5:7a:14:97:c1:b6:31:44:40:7f:93:9b:b6:9f:cd:2e:0e:88:
3b:59:af:7f:69:c1:bb:94:e5:9b:2e:ab:21:d0:83:47:44:62:
2d:2c:f0:bc:eb:64:d0:42:be:7a:c3:7f:b4:92:6d:e4:08:2c:
4a:f0:31:ba:ac:99:8e:5a:e8:77:99:a8:9a:25:c5:6c:56:67:
79:65:4b:8b:9a:cc:54:49:a5:a9:9d:5a:0a:a8:78:01:2e:0f:
01:f3:a0:2e:3c:9b:7e:ec:eb:e1:ab:c7:f0:26:24:c8:fb:e7:
44:1e:a6:d4:64:b0:92:f7:e2:ee:cf:8a:53:09:04:75:3e:f6:
12:3e:4e:ab:99:cb:e3:7e:b7:b5:cd:55:ca:69:fb:21:c2:11:
5d:8d:49:5c:11:9b:d8:36:13:ba:dd:46:95:e6:d4:b6:09:83:
7a:aa:a1:4e:c0:e3:95:f0:6c:2a:60:01:e7:f7:4f:b7:17:49:
2e:f8:62:5b:75:ff:83:4a:ce:61:15:05:e2:f1:3e:a0:04:f6:
72:db:3b:54:ce:92:ab:09:d1:23:f7:42:22:93:fd:b1:a8:b1:
50:ff:9b:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qYo2uOKc9zwibdgVzOFMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5Y2M0NGQ3ZjFkMGRjMGE1YWJmMjc3NjQ5NWI2MWRlNDgx
OTkyNWYwHhcNMjUwMTMxMTQwMDE1WhcNMjUwMjAxMTQwMDE1WjAzMTEwLwYDVQQD
EyhhYmNmMjhhYTA0MzM2NDM5YzUyMGZkMDA2MzY0OWU3YjAxNGNmOGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqycLnJ+bptEvWTAxHTI0sIJqEPce
yNUacd7/n8QgR0m66lvd72rZG5l6OMM8sXDmllMzpl28M7Niik7J6TWBdVtTsHBS
zw744CNRU0qul2CUvvfFhagea3vsgfz2LXqyXzDZ835xs4ClzhHYwZP/YH1F2rbt
nO+seTNURUyH5Boe6bLY1y5u489iM/r3r+TWVsxZ9TEf2hgeL2HivoCzFr38OJaX
PwpVmZKzw/0bP4t7yJnjOf/Gc4EnNDYElbZXyfX21rP/u0c96GevBQKImjqyOeEQ
IjtXxrst8Xy6Mj7IsJHbA3Kf+8SOOFOEaxvYloFL4XAOWaVCi9ykPTKn8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvPKKoEM2Q5xSD9AGNknnsBTPjlMB8GA1UdIwQY
MBaAFKnMRNfx0NwKWr8ndklbYd5IGZJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWN4RTFfSFEzQXBhdnlkMlNWdGgza2daa2w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9kYWI4NjctYTU3OS00YTk1LWFlZjct
MTYxN2YzOGE2ZGZjLzEvcWN4RTFfSFEzQXBhdnlkMlNWdGgza2daa2w4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9kYWI4NjctYTU3OS00YTk1LWFlZjctMTYxN2YzOGE2ZGZj
LzEvcWN4RTFfSFEzQXBhdnlkMlNWdGgza2daa2w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYoMoU4/b
ddSreucL7M3Ug8knXj0JjEkB0Dq5rrOoElQG+fuwpXoUl8G2MURAf5Obtp/NLg6I
O1mvf2nBu5Tlmy6rIdCDR0RiLSzwvOtk0EK+esN/tJJt5AgsSvAxuqyZjlrod5mo
miXFbFZneWVLi5rMVEmlqZ1aCqh4AS4PAfOgLjybfuzr4avH8CYkyPvnRB6m1GSw
kvfi7s+KUwkEdT72Ej5Oq5nL4363tc1Vymn7IcIRXY1JXBGb2DYTut1GlebUtgmD
eqqhTsDjlfBsKmAB5/dPtxdJLvhiW3X/g0rOYRUF4vE+oAT2cts7VM6SqwnRI/dC
IpP9saixUP+b1A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:50 2025 by rpki-client