Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
File: qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft (raw, json)
Hash identifier: oizwYUlp7gDr5DLs8h5E16e8dMpE+0HSd4xo4+3f/mc=
Subject key identifier: AB:0B:71:55:03:83:9C:84:AC:AD:82:65:94:6E:16:FD:37:64:20:3A
Authority key identifier: AA:00:CA:86:29:56:F1:9D:4D:C9:54:68:AA:61:6F:9B:16:7D:9B:39
Certificate issuer: /CN=aa00ca862956f19d4dc95468aa616f9b167d9b39
Certificate serial: 0194BCAA1D4CBDF885CFDE9245AF3186762D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
Manifest number: 07C3
Signing time: Fri 31 Jan 2025 14:00:52 +0000
Manifest this update: Fri 31 Jan 2025 14:00:52 +0000
Manifest next update: Sat 01 Feb 2025 14:00:52 +0000
Files and hashes: 1: R32ocj-6uY_43O0MYMBgyGscCvA.roa (hash: r9h0VFYvoYX+2ey0h2BkC9X3BYpiR12BEJYPKT358/g=)
2: qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl (hash: bpqF8TmN1Vedl4SNkQAbGndziVHotq7gkAIG2VWpsdQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1d:4c:bd:f8:85:cf:de:92:45:af:31:86:76:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa00ca862956f19d4dc95468aa616f9b167d9b39
Validity
Not Before: Jan 31 14:00:52 2025 GMT
Not After : Feb 1 14:00:52 2025 GMT
Subject: CN=ab0b715503839c84acad8265946e16fd3764203a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:21:ea:6c:8b:9e:66:51:f4:f2:0a:92:45:c0:
f6:fe:da:a8:b0:70:67:cc:0c:22:11:81:60:5f:d1:
3c:c4:5d:fd:4f:8e:2a:c8:b0:04:85:8e:c6:4c:29:
71:bc:04:b2:58:f5:92:37:ad:01:a7:7c:03:f4:00:
62:7c:4c:9b:10:1c:74:25:93:46:84:07:59:82:45:
47:e7:73:d4:91:fb:5b:c4:64:bb:c5:2f:54:c5:84:
13:ea:3f:43:7c:07:3a:2f:70:11:dc:26:f3:d7:d8:
74:1a:c0:9c:e4:06:7d:93:0e:09:d8:19:76:1c:12:
bd:f7:ed:96:f4:17:37:99:15:3b:33:1b:a7:ae:e8:
40:d0:b4:ea:30:b6:46:b6:e4:5a:be:6d:61:a0:6a:
8b:2a:11:6e:08:bc:df:0d:79:d2:5a:42:fe:25:16:
4b:84:95:b1:e7:ad:e1:23:1e:81:b8:5e:ae:f0:ee:
d0:8b:3e:07:1f:c3:2a:7f:bf:b5:cf:ca:7f:cb:ac:
78:c4:cf:dd:a7:f7:b6:a2:a4:ed:78:4d:d3:97:51:
5a:40:7f:c2:1f:07:65:29:9f:11:ad:7c:b6:fe:f4:
49:61:93:e8:a1:7b:32:00:e2:a9:fa:f5:71:13:1b:
c7:b5:3f:33:a7:1d:5e:b1:4b:2e:72:f3:40:36:a0:
74:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:0B:71:55:03:83:9C:84:AC:AD:82:65:94:6E:16:FD:37:64:20:3A
X509v3 Authority Key Identifier:
keyid:AA:00:CA:86:29:56:F1:9D:4D:C9:54:68:AA:61:6F:9B:16:7D:9B:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:1b:ff:4d:b3:ee:9b:32:6e:7f:bc:e3:47:b1:21:95:eb:13:
8f:f4:16:83:3d:d1:24:20:63:70:59:5e:b1:e9:fd:7b:77:c6:
12:40:0d:a2:fa:46:e2:54:4f:e3:dc:c7:56:09:c7:5f:ca:a1:
20:8e:91:eb:a4:f0:b0:c8:9b:47:1b:59:8f:29:d0:b5:33:c4:
3a:c0:a2:45:2f:48:80:c7:c7:bb:7d:28:c0:2d:a8:6e:ac:eb:
9c:a9:8c:e9:46:e2:6e:69:d4:ad:b9:35:dc:3d:2d:ed:d9:6d:
03:e6:6d:12:d8:42:8e:35:0f:31:34:ac:df:d0:45:62:27:d0:
02:da:90:ea:66:fe:d4:78:49:81:b4:1a:89:e7:5f:b1:64:4f:
e1:8c:1f:f4:51:3e:b6:23:76:85:b2:31:52:69:0b:db:f5:ee:
69:32:1b:be:26:32:5d:64:c2:06:dc:c2:b0:0d:66:0e:b7:f9:
9c:08:06:e1:30:bf:34:c6:ed:70:73:c4:d3:89:90:78:b5:7e:
f8:92:cd:c1:29:ee:a2:01:f4:60:3b:af:c8:72:38:f2:ed:ec:
1b:5d:b4:5d:c0:39:4d:62:76:0d:e0:a4:85:e7:d7:5f:7a:78:
9e:4a:de:50:cd:5b:dc:36:4e:73:64:7a:4f:a5:a5:ec:77:fc:
f8:ec:36:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qh1MvfiFz96SRa8xhnYtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMDBjYTg2Mjk1NmYxOWQ0ZGM5NTQ2OGFhNjE2ZjliMTY3
ZDliMzkwHhcNMjUwMTMxMTQwMDUyWhcNMjUwMjAxMTQwMDUyWjAzMTEwLwYDVQQD
EyhhYjBiNzE1NTAzODM5Yzg0YWNhZDgyNjU5NDZlMTZmZDM3NjQyMDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCHqbIueZlH08gqSRcD2/tqosHBn
zAwiEYFgX9E8xF39T44qyLAEhY7GTClxvASyWPWSN60Bp3wD9ABifEybEBx0JZNG
hAdZgkVH53PUkftbxGS7xS9UxYQT6j9DfAc6L3AR3Cbz19h0GsCc5AZ9kw4J2Bl2
HBK99+2W9Bc3mRU7MxunruhA0LTqMLZGtuRavm1hoGqLKhFuCLzfDXnSWkL+JRZL
hJWx563hIx6BuF6u8O7Qiz4HH8Mqf7+1z8p/y6x4xM/dp/e2oqTteE3Tl1FaQH/C
HwdlKZ8RrXy2/vRJYZPooXsyAOKp+vVxExvHtT8zpx1esUsucvNANqB0rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsLcVUDg5yErK2CZZRuFv03ZCA6MB8GA1UdIwQY
MBaAFKoAyoYpVvGdTclUaKphb5sWfZs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWdES2hpbFc4WjFOeVZSb3FtRnZteFo5bXprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kYjBiMGUtOTdmMS00OGJkLWFjMmIt
N2U4OWY0MWIyNjZiLzEvcWdES2hpbFc4WjFOeVZSb3FtRnZteFo5bXprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9kYjBiMGUtOTdmMS00OGJkLWFjMmItN2U4OWY0MWIyNjZi
LzEvcWdES2hpbFc4WjFOeVZSb3FtRnZteFo5bXprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFBv/TbPu
mzJuf7zjR7EhlesTj/QWgz3RJCBjcFlesen9e3fGEkANovpG4lRP49zHVgnHX8qh
II6R66TwsMibRxtZjynQtTPEOsCiRS9IgMfHu30owC2obqzrnKmM6UbibmnUrbk1
3D0t7dltA+ZtEthCjjUPMTSs39BFYifQAtqQ6mb+1HhJgbQaiedfsWRP4Ywf9FE+
tiN2hbIxUmkL2/XuaTIbviYyXWTCBtzCsA1mDrf5nAgG4TC/NMbtcHPE04mQeLV+
+JLNwSnuogH0YDuvyHI48u3sG120XcA5TWJ2DeCkhefXX3p4nkreUM1b3DZOc2R6
T6Wl7Hf8+Ow2Yw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:31:14 2025 by rpki-client