Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
File: qCoCPr2xLpceeocp2Cankkz36DI.mft (raw, json)
Hash identifier: II3O9ZRc0euirKAr6MTCDEDk7FUe/SHi+AacCnAaxE8=
Subject key identifier: C6:10:AB:B4:77:CE:4C:06:1A:F5:99:3A:E0:1F:A8:7C:E1:CC:BA:A9
Authority key identifier: A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32
Certificate issuer: /CN=a82a023ebdb12e971e7a8729d826a7924cf7e832
Certificate serial: 0194BCAA29C5E2544FF384720D7D7B519A62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
Manifest number: 0947
Signing time: Fri 31 Jan 2025 14:00:55 +0000
Manifest this update: Fri 31 Jan 2025 14:00:55 +0000
Manifest next update: Sat 01 Feb 2025 14:00:55 +0000
Files and hashes: 1: Rb-9REf4Ku4-CgLC6REjl5LjwmQ.roa (hash: cTHupzsbPAMMKa56v6BN9R2pDgzgt3AMXO4LKaMqhQw=)
2: qCoCPr2xLpceeocp2Cankkz36DI.crl (hash: Gb2x+O87Gq4uQkusTCj+y0Og5bj/CiyaoPXix4r1YD8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:29:c5:e2:54:4f:f3:84:72:0d:7d:7b:51:9a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82a023ebdb12e971e7a8729d826a7924cf7e832
Validity
Not Before: Jan 31 14:00:55 2025 GMT
Not After : Feb 1 14:00:55 2025 GMT
Subject: CN=c610abb477ce4c061af5993ae01fa87ce1ccbaa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ed:6e:04:5f:88:b0:fb:95:95:03:56:3f:11:
3e:d8:bc:ec:b2:12:87:95:5f:95:cc:9f:32:a9:e2:
9b:e8:ff:c4:2e:da:98:e5:57:c0:51:06:01:10:98:
44:75:b2:8c:9b:0f:51:58:ff:94:3a:ff:57:ea:a2:
28:c3:35:1c:5e:db:8e:32:a3:1d:8c:3b:71:04:b2:
2e:8e:fa:5d:9e:75:43:90:7b:1c:20:6b:c4:4b:a3:
95:e0:f8:17:38:39:91:7d:b7:2b:f0:7a:c5:e0:d3:
93:8e:3f:e2:ca:22:a3:7c:e9:02:48:25:9c:4e:5c:
c8:58:f1:80:a9:72:1a:ee:fd:51:19:7b:49:b0:e9:
3c:06:0e:c5:69:e6:7b:85:8f:0f:e7:61:66:76:9d:
b3:63:cd:51:4e:3b:68:86:e0:e1:d5:05:f3:6e:9e:
2d:d8:55:8f:e6:b6:ca:7b:d1:5f:f0:41:43:9f:e8:
b0:63:7c:14:e3:f2:04:8d:22:37:fb:af:7d:f7:a7:
d4:96:29:97:3d:7c:36:78:b6:b1:02:2e:18:b4:61:
c4:fe:92:4a:31:25:09:5a:4f:b8:60:47:30:ad:c0:
26:1b:93:e0:aa:35:45:35:eb:29:55:7a:39:51:30:
ec:0f:48:0c:53:a2:03:8e:b2:0b:e7:8e:a9:71:73:
36:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:10:AB:B4:77:CE:4C:06:1A:F5:99:3A:E0:1F:A8:7C:E1:CC:BA:A9
X509v3 Authority Key Identifier:
keyid:A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a0:8f:cf:b3:e1:13:19:12:b0:bf:fe:a7:32:21:9e:92:5b:
d0:ee:7f:59:fc:73:de:83:6e:98:75:d2:50:71:46:f8:f6:39:
b0:3b:44:be:89:90:8e:da:22:0f:a2:fb:f7:e2:79:14:5d:d0:
af:04:df:fd:4e:f8:61:c6:13:33:64:34:8a:08:de:d2:5e:30:
2b:65:e7:2a:2b:0a:b9:4d:48:2c:4c:d6:44:21:0a:ec:32:0a:
1b:b2:ee:e7:23:a3:5d:07:7f:60:8a:a4:51:b7:3c:2d:a9:01:
df:8e:fb:3d:d1:97:be:0b:21:62:e4:eb:54:5e:4b:2c:bc:d7:
ef:b4:79:74:a7:36:d6:bd:d7:02:51:5e:95:fd:b3:f6:4e:b0:
6a:53:ed:0c:cb:55:f3:ce:77:da:00:a9:cf:91:d5:ce:83:27:
5d:f8:4c:a6:3e:ea:fd:7e:09:58:46:2c:05:27:45:9a:a4:61:
a3:d8:4c:fc:86:55:62:e3:98:44:f4:8c:0f:ef:00:b9:d0:88:
c4:d5:e5:15:99:fe:e7:4b:18:b3:5d:45:95:14:ab:2c:a1:4c:
a8:8d:eb:07:2b:2f:4d:a6:80:96:1e:ec:a3:ff:3d:5c:a2:e6:
7c:90:f1:2f:50:ef:35:ec:e0:ce:e3:c8:8c:f7:7e:1c:98:0e:
83:76:4d:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qinF4lRP84RyDX17UZpiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MmEwMjNlYmRiMTJlOTcxZTdhODcyOWQ4MjZhNzkyNGNm
N2U4MzIwHhcNMjUwMTMxMTQwMDU1WhcNMjUwMjAxMTQwMDU1WjAzMTEwLwYDVQQD
EyhjNjEwYWJiNDc3Y2U0YzA2MWFmNTk5M2FlMDFmYTg3Y2UxY2NiYWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7O1uBF+IsPuVlQNWPxE+2LzsshKH
lV+VzJ8yqeKb6P/ELtqY5VfAUQYBEJhEdbKMmw9RWP+UOv9X6qIowzUcXtuOMqMd
jDtxBLIujvpdnnVDkHscIGvES6OV4PgXODmRfbcr8HrF4NOTjj/iyiKjfOkCSCWc
TlzIWPGAqXIa7v1RGXtJsOk8Bg7FaeZ7hY8P52Fmdp2zY81RTjtohuDh1QXzbp4t
2FWP5rbKe9Ff8EFDn+iwY3wU4/IEjSI3+69996fUlimXPXw2eLaxAi4YtGHE/pJK
MSUJWk+4YEcwrcAmG5PgqjVFNespVXo5UTDsD0gMU6IDjrIL546pcXM2LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMYQq7R3zkwGGvWZOuAfqHzhzLqpMB8GA1UdIwQY
MBaAFKgqAj69sS6XHnqHKdgmp5JM9+gyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUNvQ1ByMnhMcGNlZW9jcDJDYW5ra3ozNkRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8zMTdkZGQtNjg3ZC00NThhLTlmZjUt
MjJmYzU4OGJjNjZmLzEvcUNvQ1ByMnhMcGNlZW9jcDJDYW5ra3ozNkRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8zMTdkZGQtNjg3ZC00NThhLTlmZjUtMjJmYzU4OGJjNjZm
LzEvcUNvQ1ByMnhMcGNlZW9jcDJDYW5ra3ozNkRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJKCPz7Ph
ExkSsL/+pzIhnpJb0O5/Wfxz3oNumHXSUHFG+PY5sDtEvomQjtoiD6L79+J5FF3Q
rwTf/U74YcYTM2Q0igje0l4wK2XnKisKuU1ILEzWRCEK7DIKG7Lu5yOjXQd/YIqk
Ubc8LakB3477PdGXvgshYuTrVF5LLLzX77R5dKc21r3XAlFelf2z9k6walPtDMtV
88532gCpz5HVzoMnXfhMpj7q/X4JWEYsBSdFmqRho9hM/IZVYuOYRPSMD+8AudCI
xNXlFZn+50sYs11FlRSrLKFMqI3rBysvTaaAlh7so/89XKLmfJDxL1DvNezgzuPI
jPd+HJgOg3ZNqg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:51 2025 by rpki-client