Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
File: Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft (raw, json)
Hash identifier: Ja/LwsDIdzjKGCh/UidBe0/ZPi5duZ8fKMGScE5gNa8=
Subject key identifier: 51:50:F9:E2:58:EB:DA:1B:A6:31:BE:08:7B:12:42:01:C7:63:53:13
Authority key identifier: 43:2E:FE:16:EC:6C:00:FD:45:B5:D9:18:D9:B1:72:AC:D0:A5:8D:96
Certificate issuer: /CN=432efe16ec6c00fd45b5d918d9b172acd0a58d96
Certificate serial: 0194BCAA366FD2CFE07F11A76C264677E662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
Manifest number: 0EAD
Signing time: Fri 31 Jan 2025 14:00:59 +0000
Manifest this update: Fri 31 Jan 2025 14:00:59 +0000
Manifest next update: Sat 01 Feb 2025 14:00:59 +0000
Files and hashes: 1: Qy7-FuxsAP1FtdkY2bFyrNCljZY.crl (hash: WA8Ww2h5oR+7ezAG/PqKtJIQPH5e15c+Ps5PnV+B9fk=)
2: VamyIGwTeApv3br21vu8DRl3PlY.roa (hash: K9RmbYzkfK+s/ge5R78t4ap7tap6ruoWiSMqd2gyOlY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:36:6f:d2:cf:e0:7f:11:a7:6c:26:46:77:e6:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432efe16ec6c00fd45b5d918d9b172acd0a58d96
Validity
Not Before: Jan 31 14:00:59 2025 GMT
Not After : Feb 1 14:00:59 2025 GMT
Subject: CN=5150f9e258ebda1ba631be087b124201c7635313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9e:e2:8c:72:e7:91:03:11:d1:15:f3:d5:14:
e3:c3:d4:aa:55:c4:aa:cd:2d:09:ad:04:65:bf:ee:
b3:c8:71:5f:c1:29:60:b6:24:5d:70:b9:40:b2:e4:
c7:c9:03:74:2b:2e:f5:c2:45:e4:c7:3b:3b:b9:cf:
54:b5:8d:5b:ee:c6:26:e5:cb:43:02:db:1d:d8:96:
46:2a:ca:49:c1:6c:65:d4:14:5f:b8:0f:4a:f1:9f:
91:74:80:ac:91:74:b9:83:3f:8b:3a:a4:38:f1:b4:
70:57:c5:2c:6f:20:c8:9a:0c:54:e3:80:a5:e6:c5:
cd:5d:b1:91:25:2f:9c:b7:7f:36:d9:20:34:ab:ec:
d0:61:f7:bd:27:2f:ac:3f:b9:2c:41:bc:24:90:b7:
7c:0a:f1:43:e9:0d:cb:2f:51:74:f3:4a:09:e4:b3:
f3:3e:eb:fd:3d:48:7f:d4:e9:cb:cd:95:fb:11:ec:
e2:7a:10:2b:e7:a7:17:42:b4:47:30:40:f5:fe:99:
60:27:f1:8a:a0:d1:e1:4b:ca:5d:4c:b0:83:af:4e:
f7:50:c5:f7:da:56:f5:3c:55:71:12:79:ac:b2:f2:
7c:fb:47:7d:20:e5:17:dd:e7:20:4e:4a:a0:b4:b0:
ff:81:e6:69:84:19:ee:b8:30:5b:a8:2a:10:b9:a2:
81:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:50:F9:E2:58:EB:DA:1B:A6:31:BE:08:7B:12:42:01:C7:63:53:13
X509v3 Authority Key Identifier:
keyid:43:2E:FE:16:EC:6C:00:FD:45:B5:D9:18:D9:B1:72:AC:D0:A5:8D:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy7-FuxsAP1FtdkY2bFyrNCljZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/25b47e-4079-4f21-911b-f389a5269fb2/1/Qy7-FuxsAP1FtdkY2bFyrNCljZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:59:90:88:ff:0f:5b:e3:95:ec:a0:30:04:e2:2c:27:35:10:
f4:53:3c:71:bc:f2:2a:56:fc:ea:e3:a5:14:e5:74:64:2f:0e:
16:3f:f5:35:d7:ae:f7:29:36:bc:9d:05:68:0e:dd:2f:94:dd:
07:37:86:74:8f:ed:c2:a7:a4:f9:7a:b9:96:6d:2e:6f:9e:53:
33:1c:c8:50:51:df:96:04:4b:03:dc:e2:37:d2:ee:aa:e7:d1:
35:4a:24:5c:ed:2f:5b:a1:6b:be:69:34:84:df:08:53:79:35:
1d:6f:5e:cb:64:02:8f:f7:ff:95:90:2f:fe:7e:d7:0e:07:1e:
3a:b5:97:48:6c:6b:e9:a8:44:6d:25:80:17:30:81:b6:9d:a4:
8f:a6:6c:6a:96:4b:a7:18:d7:13:62:cf:78:ae:79:ac:75:34:
db:6c:fa:a0:34:7d:f8:62:49:aa:b4:65:c3:db:a2:6f:e9:67:
b3:55:61:ff:55:e5:86:f4:57:be:40:1c:f3:61:e2:54:83:34:
43:1a:e7:7a:88:04:e7:8f:4c:b7:93:78:3f:cc:dd:d6:a3:22:
f1:89:41:0e:d4:e7:49:bc:3f:20:24:19:3d:f2:d8:7b:a9:f5:
a8:c8:0e:2b:ce:09:a9:8c:38:e0:e8:be:2e:fd:60:54:c2:86:
b6:2e:12:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qjZv0s/gfxGnbCZGd+ZiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMmVmZTE2ZWM2YzAwZmQ0NWI1ZDkxOGQ5YjE3MmFjZDBh
NThkOTYwHhcNMjUwMTMxMTQwMDU5WhcNMjUwMjAxMTQwMDU5WjAzMTEwLwYDVQQD
Eyg1MTUwZjllMjU4ZWJkYTFiYTYzMWJlMDg3YjEyNDIwMWM3NjM1MzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Z7ijHLnkQMR0RXz1RTjw9SqVcSq
zS0JrQRlv+6zyHFfwSlgtiRdcLlAsuTHyQN0Ky71wkXkxzs7uc9UtY1b7sYm5ctD
Atsd2JZGKspJwWxl1BRfuA9K8Z+RdICskXS5gz+LOqQ48bRwV8UsbyDImgxU44Cl
5sXNXbGRJS+ct3822SA0q+zQYfe9Jy+sP7ksQbwkkLd8CvFD6Q3LL1F080oJ5LPz
Puv9PUh/1OnLzZX7EeziehAr56cXQrRHMED1/plgJ/GKoNHhS8pdTLCDr073UMX3
2lb1PFVxEnmssvJ8+0d9IOUX3ecgTkqgtLD/geZphBnuuDBbqCoQuaKB4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFQ+eJY69obpjG+CHsSQgHHY1MTMB8GA1UdIwQY
MBaAFEMu/hbsbAD9RbXZGNmxcqzQpY2WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXk3LUZ1eHNBUDFGdGRrWTJiRnlyTkNsalpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8yNWI0N2UtNDA3OS00ZjIxLTkxMWIt
ZjM4OWE1MjY5ZmIyLzEvUXk3LUZ1eHNBUDFGdGRrWTJiRnlyTkNsalpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy8yNWI0N2UtNDA3OS00ZjIxLTkxMWItZjM4OWE1MjY5ZmIy
LzEvUXk3LUZ1eHNBUDFGdGRrWTJiRnlyTkNsalpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVVmQiP8P
W+OV7KAwBOIsJzUQ9FM8cbzyKlb86uOlFOV0ZC8OFj/1Ndeu9yk2vJ0FaA7dL5Td
BzeGdI/twqek+Xq5lm0ub55TMxzIUFHflgRLA9ziN9LuqufRNUokXO0vW6Frvmk0
hN8IU3k1HW9ey2QCj/f/lZAv/n7XDgceOrWXSGxr6ahEbSWAFzCBtp2kj6ZsapZL
pxjXE2LPeK55rHU022z6oDR9+GJJqrRlw9uib+lns1Vh/1XlhvRXvkAc82HiVIM0
QxrneogE549Mt5N4P8zd1qMi8YlBDtTnSbw/ICQZPfLYe6n1qMgOK84JqYw44Oi+
Lv1gVMKGti4SCw==
-----END CERTIFICATE-----
Generated at Thu May 1 09:38:17 2025 by rpki-client