Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft
File: QnzFUqtX26-kYh-13Fk6RWB8-wo.mft (raw, json)
Hash identifier: 6SNBu9G7Gk2ioiqC5ICOGf/3nAUFo/TQ9KLm7Y3duE0=
Subject key identifier: 45:2C:51:D0:69:6E:12:5D:2D:50:D3:84:C6:00:11:63:3B:EB:EA:1B
Authority key identifier: 42:7C:C5:52:AB:57:DB:AF:A4:62:1F:B5:DC:59:3A:45:60:7C:FB:0A
Certificate issuer: /CN=427cc552ab57dbafa4621fb5dc593a45607cfb0a
Certificate serial: 0194BCE0B3F2CDF4CA47888A5C5B3C60219F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnzFUqtX26-kYh-13Fk6RWB8-wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft
Manifest number: 0D2E
Signing time: Fri 31 Jan 2025 15:00:30 +0000
Manifest this update: Fri 31 Jan 2025 15:00:30 +0000
Manifest next update: Sat 01 Feb 2025 15:00:30 +0000
Files and hashes: 1: 1-TZK_G6hwE-t-fU2NYP8ZvugDnw.roa (hash: qg8DBlQriKARcHCeDE8QZVuHoTokdR4kMT39E92MHFQ=)
2: QnzFUqtX26-kYh-13Fk6RWB8-wo.crl (hash: b1CFN+37WFkLHqm6HZ5myn4f1QtLpPLY+WAHacXyNBc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b3:f2:cd:f4:ca:47:88:8a:5c:5b:3c:60:21:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427cc552ab57dbafa4621fb5dc593a45607cfb0a
Validity
Not Before: Jan 31 15:00:30 2025 GMT
Not After : Feb 1 15:00:30 2025 GMT
Subject: CN=452c51d0696e125d2d50d384c60011633bebea1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:35:b9:55:7a:26:d2:fb:11:90:84:93:6a:29:
24:1f:14:09:ce:fc:2f:5c:3f:d7:43:18:c7:01:5e:
f0:22:61:9c:1b:d3:f7:aa:51:76:d2:9d:a2:8d:49:
11:f1:ec:91:0c:73:34:13:fa:3f:75:5e:4e:8c:d1:
56:5b:57:0a:1f:e3:a5:c7:0d:23:37:88:b0:8a:f6:
9c:5f:ee:a2:09:6c:14:44:9d:07:c5:2c:a1:b4:27:
5e:67:32:6b:e3:89:12:09:80:7c:01:2b:96:51:c9:
20:f9:99:79:1b:00:73:0b:3e:15:c7:6d:a6:2b:2e:
1b:8f:ca:48:75:95:cd:90:81:61:03:f2:e5:0b:a5:
d9:5c:2a:26:e9:57:70:a7:e6:6d:e3:30:cd:54:96:
f2:96:af:36:88:7a:10:5c:b3:79:6f:c3:6f:55:f7:
b9:f6:74:e2:37:97:a3:3c:c6:80:59:3c:7a:58:a8:
7c:89:af:b1:f5:45:13:57:b8:a4:61:d3:2a:e7:1d:
b4:f2:50:ed:d0:89:35:9b:43:5c:50:ef:94:d5:7a:
b4:6b:59:d2:d5:0a:68:5d:0c:42:a9:98:99:04:b8:
af:45:29:0c:25:43:98:20:7e:e6:34:f8:56:e7:2f:
26:af:cb:b1:9d:be:a8:96:94:4b:b0:71:6d:99:12:
ef:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2C:51:D0:69:6E:12:5D:2D:50:D3:84:C6:00:11:63:3B:EB:EA:1B
X509v3 Authority Key Identifier:
keyid:42:7C:C5:52:AB:57:DB:AF:A4:62:1F:B5:DC:59:3A:45:60:7C:FB:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnzFUqtX26-kYh-13Fk6RWB8-wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/621180-30c3-42c3-8f47-85a5b4cfc84f/1/QnzFUqtX26-kYh-13Fk6RWB8-wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:51:31:07:e3:84:bf:46:8e:b2:fd:ba:a4:ae:dc:f9:58:ab:
b0:1e:f2:65:e2:95:21:ad:b6:fd:d9:3f:31:f2:be:dc:9b:69:
ec:06:d4:6b:0d:ec:dd:ab:78:fa:cc:20:2d:bf:f7:ff:15:e5:
d8:64:42:a5:34:8a:e3:b3:01:30:c6:6f:9b:1c:be:6a:bb:8b:
e5:d4:2a:0d:a0:38:04:9f:1e:0e:cc:c8:f7:aa:1d:0b:02:ad:
b5:aa:f9:ac:a6:60:e5:4f:c4:86:18:9b:0f:19:e0:e8:1f:33:
13:0b:28:34:89:1a:9d:4a:5a:2b:8f:3f:91:e3:dc:ca:13:d3:
bd:2b:4c:3e:31:ce:69:1a:f5:43:5b:e3:68:77:29:e7:de:4a:
14:c2:ec:0d:bb:6a:56:fe:de:7e:1d:b1:b9:0b:1f:3e:6b:bd:
bd:5d:2b:7f:45:79:13:c6:64:f0:21:58:81:6d:94:5d:60:fc:
5d:7a:a4:39:37:a5:a2:02:3a:28:b0:47:44:74:70:5d:d8:bb:
c8:b5:b7:49:dc:f0:d3:a3:d4:cf:d7:1f:7d:88:a1:18:86:bb:
4a:42:43:8e:9d:eb:37:4f:8e:5c:4d:e3:50:de:6f:a9:86:48:
8b:64:36:30:1b:83:3f:f9:07:25:30:5a:a6:16:f1:d5:3b:7b:
8a:cd:a4:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84LPyzfTKR4iKXFs8YCGfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyN2NjNTUyYWI1N2RiYWZhNDYyMWZiNWRjNTkzYTQ1NjA3
Y2ZiMGEwHhcNMjUwMTMxMTUwMDMwWhcNMjUwMjAxMTUwMDMwWjAzMTEwLwYDVQQD
Eyg0NTJjNTFkMDY5NmUxMjVkMmQ1MGQzODRjNjAwMTE2MzNiZWJlYTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjW5VXom0vsRkISTaikkHxQJzvwv
XD/XQxjHAV7wImGcG9P3qlF20p2ijUkR8eyRDHM0E/o/dV5OjNFWW1cKH+Olxw0j
N4iwivacX+6iCWwURJ0HxSyhtCdeZzJr44kSCYB8ASuWUckg+Zl5GwBzCz4Vx22m
Ky4bj8pIdZXNkIFhA/LlC6XZXCom6Vdwp+Zt4zDNVJbylq82iHoQXLN5b8NvVfe5
9nTiN5ejPMaAWTx6WKh8ia+x9UUTV7ikYdMq5x208lDt0Ik1m0NcUO+U1Xq0a1nS
1QpoXQxCqZiZBLivRSkMJUOYIH7mNPhW5y8mr8uxnb6olpRLsHFtmRLv/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEUsUdBpbhJdLVDThMYAEWM76+obMB8GA1UdIwQY
MBaAFEJ8xVKrV9uvpGIftdxZOkVgfPsKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW56RlVxdFgyNi1rWWgtMTNGazZSV0I4LXdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi82MjExODAtMzBjMy00MmMzLThmNDct
ODVhNWI0Y2ZjODRmLzEvUW56RlVxdFgyNi1rWWgtMTNGazZSV0I4LXdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi82MjExODAtMzBjMy00MmMzLThmNDctODVhNWI0Y2ZjODRm
LzEvUW56RlVxdFgyNi1rWWgtMTNGazZSV0I4LXdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArVExB+OE
v0aOsv26pK7c+VirsB7yZeKVIa22/dk/MfK+3Jtp7AbUaw3s3at4+swgLb/3/xXl
2GRCpTSK47MBMMZvmxy+aruL5dQqDaA4BJ8eDszI96odCwKttar5rKZg5U/Ehhib
Dxng6B8zEwsoNIkanUpaK48/kePcyhPTvStMPjHOaRr1Q1vjaHcp595KFMLsDbtq
Vv7efh2xuQsfPmu9vV0rf0V5E8Zk8CFYgW2UXWD8XXqkOTelogI6KLBHRHRwXdi7
yLW3Sdzw06PUz9cffYihGIa7SkJDjp3rN0+OXE3jUN5vqYZIi2Q2MBuDP/kHJTBa
phbx1Tt7is2kjw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:35:14 2025 by rpki-client