Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
File: QM1aUDjV4S_hydn1yGZAdMPdCsc.mft (raw, json)
Hash identifier: MMvlrdghEUSRT4j+8d7y0h78rBoaozFl2Gh2JqM0AsU=
Subject key identifier: 33:C8:3B:9C:88:74:B3:1B:B1:D9:C7:A1:B7:DB:11:74:9D:E9:55:C7
Authority key identifier: 40:CD:5A:50:38:D5:E1:2F:E1:C9:D9:F5:C8:66:40:74:C3:DD:0A:C7
Certificate issuer: /CN=40cd5a5038d5e12fe1c9d9f5c8664074c3dd0ac7
Certificate serial: 0194BC72CDBBF42EF722470136A17D17E687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
Manifest number: 05D4
Signing time: Fri 31 Jan 2025 13:00:27 +0000
Manifest this update: Fri 31 Jan 2025 13:00:27 +0000
Manifest next update: Sat 01 Feb 2025 13:00:27 +0000
Files and hashes: 1: O1UMqFY4UYla6Wia0-cx5UTbNYo.roa (hash: yk9XmbWdQVbHd1Fk+ePRsax442yqoQX1eANsND8ceoU=)
2: QM1aUDjV4S_hydn1yGZAdMPdCsc.crl (hash: ps2O0ms4Brc9CG/IwYBk/QkpuBdwIkIV8EGtDH1U1nM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:cd:bb:f4:2e:f7:22:47:01:36:a1:7d:17:e6:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cd5a5038d5e12fe1c9d9f5c8664074c3dd0ac7
Validity
Not Before: Jan 31 13:00:27 2025 GMT
Not After : Feb 1 13:00:27 2025 GMT
Subject: CN=33c83b9c8874b31bb1d9c7a1b7db11749de955c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:97:cf:de:0c:b1:b0:e6:ef:d8:1d:7d:62:e3:
be:9e:89:7f:a4:2d:ca:c7:90:50:d8:e8:a4:15:ea:
a7:20:79:6c:de:e2:47:a4:d0:65:d4:0b:c6:9a:63:
a2:ef:7a:29:b5:69:2b:d7:b1:76:d6:45:08:29:4a:
df:ae:51:c2:d6:bb:d5:85:40:06:9f:14:f7:b0:5e:
c0:5b:ae:d1:69:d3:f0:7e:03:24:2d:0a:5d:e5:30:
68:06:5f:c1:f8:dd:7d:63:28:da:69:80:a8:78:3b:
fe:35:68:f3:89:7e:79:f1:a0:96:b5:af:3b:1d:9d:
21:fc:c1:d1:c3:1a:32:11:54:cf:40:c3:c6:2f:61:
36:21:52:c4:b4:1b:0e:11:14:84:aa:25:08:e9:d7:
2d:f7:1e:17:92:2d:37:0c:72:21:71:37:ac:aa:58:
48:5d:31:d7:2f:c3:0a:96:1f:07:27:86:64:97:7b:
d2:d8:f8:63:8c:9c:a1:40:5f:60:a3:a3:4f:3d:86:
46:46:90:22:01:d6:65:cd:be:1d:ce:da:e7:63:4a:
73:aa:20:0b:a8:96:a8:ca:ae:03:9c:cb:c3:01:04:
7f:c3:5c:82:2a:51:c7:03:b6:6c:d2:95:2e:66:91:
db:6e:c7:fc:29:4b:9e:48:f7:2f:43:71:f3:d8:29:
06:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C8:3B:9C:88:74:B3:1B:B1:D9:C7:A1:B7:DB:11:74:9D:E9:55:C7
X509v3 Authority Key Identifier:
keyid:40:CD:5A:50:38:D5:E1:2F:E1:C9:D9:F5:C8:66:40:74:C3:DD:0A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM1aUDjV4S_hydn1yGZAdMPdCsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cec119-4c99-4158-99f1-659c671911f1/1/QM1aUDjV4S_hydn1yGZAdMPdCsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:91:ae:38:cc:6c:57:87:0f:76:79:b5:55:88:86:97:d4:25:
d4:a3:df:1a:36:47:1f:82:7a:45:3e:83:9a:00:33:76:63:f1:
79:19:b7:81:ab:69:5a:3f:11:0e:35:bd:15:25:6c:e7:a5:53:
cb:9f:46:8a:19:22:75:bd:ce:3c:2e:12:5d:b5:05:42:99:c1:
cc:19:ca:83:2b:7b:39:9a:2b:76:1b:5a:30:74:95:24:5f:8c:
9d:1f:89:dd:80:27:87:eb:b1:a9:0a:3e:d8:16:02:a0:5d:ab:
12:f4:94:d9:7e:ce:18:84:8a:01:ec:6f:d7:54:c0:fe:6e:e6:
4d:ca:de:b3:fd:a9:2d:87:0e:78:8e:69:de:38:4a:a1:7d:d9:
99:ce:7d:8c:df:18:8f:6c:8d:53:c4:1b:af:aa:8b:7b:5a:26:
4e:1e:e3:7c:63:25:25:3a:cf:80:18:87:65:6f:15:77:98:06:
28:52:0c:f9:9b:cf:65:08:e3:11:f2:ff:eb:84:f1:a4:a1:bf:
06:70:5d:ee:54:02:ed:b7:ad:e3:9d:58:10:f1:40:3e:d9:07:
2e:dc:74:0c:35:40:ea:22:9a:5a:6f:a7:1c:ad:b7:be:cf:2b:
07:04:2d:6e:d7:46:92:54:b1:a5:a1:ad:c7:ed:19:e9:51:49:
ca:3d:87:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cs279C73IkcBNqF9F+aHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwY2Q1YTUwMzhkNWUxMmZlMWM5ZDlmNWM4NjY0MDc0YzNk
ZDBhYzcwHhcNMjUwMTMxMTMwMDI3WhcNMjUwMjAxMTMwMDI3WjAzMTEwLwYDVQQD
EygzM2M4M2I5Yzg4NzRiMzFiYjFkOWM3YTFiN2RiMTE3NDlkZTk1NWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5fP3gyxsObv2B19YuO+nol/pC3K
x5BQ2OikFeqnIHls3uJHpNBl1AvGmmOi73optWkr17F21kUIKUrfrlHC1rvVhUAG
nxT3sF7AW67RadPwfgMkLQpd5TBoBl/B+N19YyjaaYCoeDv+NWjziX558aCWta87
HZ0h/MHRwxoyEVTPQMPGL2E2IVLEtBsOERSEqiUI6dct9x4Xki03DHIhcTesqlhI
XTHXL8MKlh8HJ4Zkl3vS2PhjjJyhQF9go6NPPYZGRpAiAdZlzb4dztrnY0pzqiAL
qJaoyq4DnMvDAQR/w1yCKlHHA7Zs0pUuZpHbbsf8KUueSPcvQ3Hz2CkGVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPIO5yIdLMbsdnHobfbEXSd6VXHMB8GA1UdIwQY
MBaAFEDNWlA41eEv4cnZ9chmQHTD3QrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU0xYVVEalY0U19oeWRuMXlHWkFkTVBkQ3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9jZWMxMTktNGM5OS00MTU4LTk5ZjEt
NjU5YzY3MTkxMWYxLzEvUU0xYVVEalY0U19oeWRuMXlHWkFkTVBkQ3NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9jZWMxMTktNGM5OS00MTU4LTk5ZjEtNjU5YzY3MTkxMWYx
LzEvUU0xYVVEalY0U19oeWRuMXlHWkFkTVBkQ3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABpGuOMxs
V4cPdnm1VYiGl9Ql1KPfGjZHH4J6RT6DmgAzdmPxeRm3gatpWj8RDjW9FSVs56VT
y59Gihkidb3OPC4SXbUFQpnBzBnKgyt7OZordhtaMHSVJF+MnR+J3YAnh+uxqQo+
2BYCoF2rEvSU2X7OGISKAexv11TA/m7mTcres/2pLYcOeI5p3jhKoX3Zmc59jN8Y
j2yNU8Qbr6qLe1omTh7jfGMlJTrPgBiHZW8Vd5gGKFIM+ZvPZQjjEfL/64TxpKG/
BnBd7lQC7bet451YEPFAPtkHLtx0DDVA6iKaWm+nHK23vs8rBwQtbtdGklSxpaGt
x+0Z6VFJyj2H4Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:52:27 2025 by rpki-client