Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c34c99-18c8-41a2-874b-390b85394beb/1/QiW1cPRt5cbosrZO0JCtE4XatzE.mft
File: QiW1cPRt5cbosrZO0JCtE4XatzE.mft (raw, json)
Hash identifier: mAd/tAcY8WyhWi762z9S+sR/5aCSSLb3UPS1BAAYlok=
Subject key identifier: 6C:55:12:15:D6:07:E1:85:F9:A9:48:3B:2C:99:36:4E:8C:55:C5:71
Authority key identifier: 42:25:B5:70:F4:6D:E5:C6:E8:B2:B6:4E:D0:90:AD:13:85:DA:B7:31
Certificate issuer: /CN=4225b570f46de5c6e8b2b64ed090ad1385dab731
Certificate serial: 0194BCA9CD17C50E72B6394B539629D1034B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiW1cPRt5cbosrZO0JCtE4XatzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c34c99-18c8-41a2-874b-390b85394beb/1/QiW1cPRt5cbosrZO0JCtE4XatzE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:32 +0000
Manifest this update: Fri 31 Jan 2025 14:00:32 +0000
Manifest next update: Sat 01 Feb 2025 14:00:32 +0000
Files and hashes: 1: Ad__4Mw9qH40aKjCCd6U7wn1LE8.roa (hash: XmUspE3wSTnFZCF/0+RPTjtSL/Xtm1GMKSxL+nI/8po=)
2: QiW1cPRt5cbosrZO0JCtE4XatzE.crl (hash: WpU8CADcywJaNjzsrSO3Yp94Dtcc9IbSWVOYS+4F5EQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:cd:17:c5:0e:72:b6:39:4b:53:96:29:d1:03:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4225b570f46de5c6e8b2b64ed090ad1385dab731
Validity
Not Before: Jan 31 14:00:32 2025 GMT
Not After : Feb 1 14:00:32 2025 GMT
Subject: CN=6c551215d607e185f9a9483b2c99364e8c55c571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4a:fa:f9:57:ed:e7:a5:40:ee:2c:b6:8c:45:
dd:49:a2:65:00:72:f1:f1:2e:60:87:23:a1:b8:1f:
b5:73:8e:1d:c4:1e:35:5c:24:28:0a:6d:41:80:74:
b4:b4:99:d7:17:fc:21:dd:0d:e9:55:1b:23:dd:68:
c3:81:ee:28:1d:d7:fd:10:b1:47:1e:64:11:03:d7:
bf:4b:0f:54:d0:83:43:62:5c:48:37:d1:40:f7:d8:
42:2a:2f:1c:e0:6d:75:96:6f:7c:89:95:75:24:6b:
36:04:8d:d7:78:b9:56:9f:07:41:fd:29:76:82:0f:
50:d5:3a:e7:63:df:f4:30:b2:1c:d2:82:6b:0e:d6:
5a:2b:ca:5b:d4:47:f4:d3:cd:bf:9b:f4:fa:09:e6:
a9:4f:72:aa:49:77:cc:28:85:ec:27:e1:be:c9:99:
8a:3f:64:76:2f:9c:1c:08:03:3a:c5:93:f7:be:c6:
81:59:e6:84:be:f4:dc:35:db:e9:9b:fd:59:a3:1a:
50:33:96:94:bd:cc:5f:11:fb:60:94:0a:6c:3a:96:
20:29:f2:77:ec:14:cb:ce:ce:87:4e:74:f4:13:70:
be:d4:67:4f:cb:20:36:38:db:95:5d:09:26:2e:b4:
a9:5c:9e:32:8e:b7:45:d3:c0:1b:d2:b3:b4:79:81:
9c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:55:12:15:D6:07:E1:85:F9:A9:48:3B:2C:99:36:4E:8C:55:C5:71
X509v3 Authority Key Identifier:
keyid:42:25:B5:70:F4:6D:E5:C6:E8:B2:B6:4E:D0:90:AD:13:85:DA:B7:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiW1cPRt5cbosrZO0JCtE4XatzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c34c99-18c8-41a2-874b-390b85394beb/1/QiW1cPRt5cbosrZO0JCtE4XatzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c34c99-18c8-41a2-874b-390b85394beb/1/QiW1cPRt5cbosrZO0JCtE4XatzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:6b:4b:b0:ac:de:e0:2c:39:44:24:a7:4f:a5:01:e2:d8:24:
6c:5a:33:11:98:03:15:af:da:32:11:c0:81:61:65:92:54:4f:
9e:3b:7f:ce:b5:ce:9a:11:45:40:75:2c:88:73:76:09:c8:fe:
8c:2e:72:f6:23:ba:ad:eb:99:2d:1a:04:88:95:61:d2:a1:21:
80:ef:69:3c:08:29:a8:e5:58:19:18:84:a8:bc:ae:9e:09:40:
ff:66:e6:a2:e2:37:11:9a:f2:0e:c3:64:4a:a4:73:b6:44:1f:
55:83:80:ef:3a:05:b7:db:e7:30:2e:74:79:de:64:72:40:fa:
96:4e:be:c0:9f:71:f6:23:aa:d7:c0:02:f1:0b:40:ce:92:21:
dd:86:b5:bb:55:5a:04:95:37:3f:ff:0c:3b:2b:ab:04:60:28:
46:56:cd:d8:4b:4d:69:ba:11:f6:bb:d1:7d:ef:70:1d:f2:89:
e0:4c:c0:a9:6c:bc:3b:96:8a:4b:29:e5:fa:e6:1b:80:7d:17:
53:b8:b9:0d:a8:2d:47:5b:58:3a:87:79:c4:66:c7:20:06:5f:
14:5f:9a:4b:f6:9d:53:a8:7f:eb:c9:bd:34:42:1e:76:d0:7f:
b1:e9:85:e1:aa:b8:a5:5a:85:dc:b0:b1:f2:0c:31:94:95:a4:
65:67:a8:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qc0XxQ5ytjlLU5Yp0QNLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMjViNTcwZjQ2ZGU1YzZlOGIyYjY0ZWQwOTBhZDEzODVk
YWI3MzEwHhcNMjUwMTMxMTQwMDMyWhcNMjUwMjAxMTQwMDMyWjAzMTEwLwYDVQQD
Eyg2YzU1MTIxNWQ2MDdlMTg1ZjlhOTQ4M2IyYzk5MzY0ZThjNTVjNTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEr6+Vft56VA7iy2jEXdSaJlAHLx
8S5ghyOhuB+1c44dxB41XCQoCm1BgHS0tJnXF/wh3Q3pVRsj3WjDge4oHdf9ELFH
HmQRA9e/Sw9U0INDYlxIN9FA99hCKi8c4G11lm98iZV1JGs2BI3XeLlWnwdB/Sl2
gg9Q1TrnY9/0MLIc0oJrDtZaK8pb1Ef0082/m/T6CeapT3KqSXfMKIXsJ+G+yZmK
P2R2L5wcCAM6xZP3vsaBWeaEvvTcNdvpm/1ZoxpQM5aUvcxfEftglApsOpYgKfJ3
7BTLzs6HTnT0E3C+1GdPyyA2ONuVXQkmLrSpXJ4yjrdF08Ab0rO0eYGcQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxVEhXWB+GF+alIOyyZNk6MVcVxMB8GA1UdIwQY
MBaAFEIltXD0beXG6LK2TtCQrROF2rcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWlXMWNQUnQ1Y2Jvc3JaTzBKQ3RFNFhhdHpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9jMzRjOTktMThjOC00MWEyLTg3NGIt
MzkwYjg1Mzk0YmViLzEvUWlXMWNQUnQ1Y2Jvc3JaTzBKQ3RFNFhhdHpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9jMzRjOTktMThjOC00MWEyLTg3NGItMzkwYjg1Mzk0YmVi
LzEvUWlXMWNQUnQ1Y2Jvc3JaTzBKQ3RFNFhhdHpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW2tLsKze
4Cw5RCSnT6UB4tgkbFozEZgDFa/aMhHAgWFlklRPnjt/zrXOmhFFQHUsiHN2Ccj+
jC5y9iO6reuZLRoEiJVh0qEhgO9pPAgpqOVYGRiEqLyunglA/2bmouI3EZryDsNk
SqRztkQfVYOA7zoFt9vnMC50ed5kckD6lk6+wJ9x9iOq18AC8QtAzpIh3Ya1u1Va
BJU3P/8MOyurBGAoRlbN2EtNaboR9rvRfe9wHfKJ4EzAqWy8O5aKSynl+uYbgH0X
U7i5DagtR1tYOod5xGbHIAZfFF+aS/adU6h/68m9NEIedtB/semF4aq4pVqF3LCx
8gwxlJWkZWeoNg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:51:09 2025 by rpki-client