Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
File: uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft (raw, json)
Hash identifier: jy7iEBFahQqavCXFoLQNSLoOR2wYZ91OmTah6DlmWJw=
Subject key identifier: 3A:44:EE:6D:04:73:59:81:33:1A:A3:02:B7:6F:AA:31:82:64:A0:30
Authority key identifier: B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80
Certificate issuer: /CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80
Certificate serial: 0194BC72FD76329FEB54EF356E513094D724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:40 +0000
Manifest this update: Fri 31 Jan 2025 13:00:40 +0000
Manifest next update: Sat 01 Feb 2025 13:00:40 +0000
Files and hashes: 1: 6KXLkC_cgd5ILMccrhh-m3RCwS8.roa (hash: Az+UEZWLV4uod4atp3pTmM4QksD0MTVrJp8g22f4T2Y=)
2: uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl (hash: 8mX9fkNdxcKrBQ/a0pSajyfhikitosOGjzxe6HyQcpc=)
3: wCMVD4s-MzexAEYCNnm0u-lWVks.roa (hash: 1CzqXOjbHH5Z0NSEWz+9Qkw44w+rWwhDlrc+ZZXhbB0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:fd:76:32:9f:eb:54:ef:35:6e:51:30:94:d7:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80
Validity
Not Before: Jan 31 13:00:40 2025 GMT
Not After : Feb 1 13:00:40 2025 GMT
Subject: CN=3a44ee6d04735981331aa302b76faa318264a030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cd:77:21:c0:69:0b:8f:46:c4:cc:74:3f:5d:
d3:d7:90:a7:db:43:a3:da:c8:f8:de:8f:d0:21:0b:
ba:2e:60:44:41:52:bb:3f:e8:23:81:dd:dc:8b:9c:
6a:fa:87:77:16:64:d9:4c:3b:d2:da:22:3e:83:35:
7c:72:a5:4d:18:ee:67:d3:3c:be:7c:32:e7:f3:9c:
90:37:f8:4a:80:a3:68:e0:62:6a:a8:70:67:e1:da:
0f:76:87:af:98:1f:b7:90:b5:38:1e:09:c5:c9:39:
da:57:9c:10:66:0a:e0:80:63:45:cc:99:71:5c:45:
30:d7:25:ec:1e:30:21:e3:7e:ec:f7:b4:2e:b8:cb:
9f:b0:b3:45:f7:38:73:72:94:59:c3:65:83:37:07:
bd:c9:f6:d4:9d:e9:fb:79:e2:80:67:29:8e:45:8f:
ce:ca:ae:2c:60:d1:e0:4d:40:cd:76:a9:17:b2:30:
b0:96:6b:ac:42:16:f9:e1:3b:05:0c:b1:95:d4:20:
2b:f2:24:bc:33:cb:34:64:68:94:77:3c:3b:db:17:
98:57:f7:e4:4e:7b:5f:a7:9b:ec:cc:a6:bf:62:35:
8d:74:ee:3d:6d:ad:15:77:aa:f3:b9:5c:67:30:c4:
90:90:0c:38:3a:25:69:d0:5e:cb:67:8c:86:a4:8d:
93:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:44:EE:6D:04:73:59:81:33:1A:A3:02:B7:6F:AA:31:82:64:A0:30
X509v3 Authority Key Identifier:
keyid:B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:39:7a:49:ed:84:82:f6:36:37:df:4e:46:36:c2:96:e1:3f:
f2:3f:9d:ec:f6:1a:1f:a6:31:8f:f4:81:ba:b6:a7:8d:98:d4:
67:d7:5a:ef:3a:c2:bc:11:f4:11:65:b4:45:42:c5:98:0d:c8:
b5:d1:c1:0f:ac:4e:84:d4:3a:bd:73:19:ff:8d:8e:d1:d3:10:
24:03:ef:fc:e5:11:81:6b:7f:96:0c:51:99:16:21:e4:75:34:
05:b8:89:fd:83:50:02:9c:b1:66:0f:24:d8:9a:34:e6:cc:8a:
d1:4d:17:4d:7a:a6:16:3a:48:b1:51:0c:62:f4:d8:4c:b4:4c:
fe:25:bf:d4:f6:b4:f7:fe:e1:3c:0c:22:07:7d:7c:56:b9:8a:
31:e3:87:ed:dd:86:39:c4:e4:4f:3a:21:d1:da:a2:95:be:f5:
de:17:9c:87:ce:d5:f0:a4:f9:e6:c7:0e:36:35:35:50:70:a8:
c4:f3:c5:e7:6f:98:01:4f:f7:55:c5:76:98:64:62:4c:b8:11:
89:13:2f:a0:75:6f:3d:63:ea:1f:b0:a9:da:0f:77:6a:4a:48:
27:df:8f:ee:79:ab:c6:3f:c4:80:93:1e:3c:ef:53:a6:e2:69:
67:85:6d:ac:a0:bd:55:e7:96:b2:34:90:cd:0b:ee:b0:1c:61:
a9:64:b5:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cv12Mp/rVO81blEwlNckMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4ZjRiZTQxMDU0ZWFmNzg3ZWFhMzgzM2ZmY2FlOGYxZWQ3
ZmFhODAwHhcNMjUwMTMxMTMwMDQwWhcNMjUwMjAxMTMwMDQwWjAzMTEwLwYDVQQD
EygzYTQ0ZWU2ZDA0NzM1OTgxMzMxYWEzMDJiNzZmYWEzMTgyNjRhMDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz813IcBpC49GxMx0P13T15Cn20Oj
2sj43o/QIQu6LmBEQVK7P+gjgd3ci5xq+od3FmTZTDvS2iI+gzV8cqVNGO5n0zy+
fDLn85yQN/hKgKNo4GJqqHBn4doPdoevmB+3kLU4HgnFyTnaV5wQZgrggGNFzJlx
XEUw1yXsHjAh437s97QuuMufsLNF9zhzcpRZw2WDNwe9yfbUnen7eeKAZymORY/O
yq4sYNHgTUDNdqkXsjCwlmusQhb54TsFDLGV1CAr8iS8M8s0ZGiUdzw72xeYV/fk
Tntfp5vszKa/YjWNdO49ba0Vd6rzuVxnMMSQkAw4OiVp0F7LZ4yGpI2TlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDpE7m0Ec1mBMxqjArdvqjGCZKAwMB8GA1UdIwQY
MBaAFLj0vkEFTq94fqo4M//K6PHtf6qAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVBTLVFRVk9yM2gtcWpnel84cm84ZTFfcW9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8xNmExMmUtOGI1YS00NjQ5LWEwM2Mt
NzFjZDZhZjA3MmE1LzEvdVBTLVFRVk9yM2gtcWpnel84cm84ZTFfcW9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni8xNmExMmUtOGI1YS00NjQ5LWEwM2MtNzFjZDZhZjA3MmE1
LzEvdVBTLVFRVk9yM2gtcWpnel84cm84ZTFfcW9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmTl6Se2E
gvY2N99ORjbCluE/8j+d7PYaH6Yxj/SBuranjZjUZ9da7zrCvBH0EWW0RULFmA3I
tdHBD6xOhNQ6vXMZ/42O0dMQJAPv/OURgWt/lgxRmRYh5HU0BbiJ/YNQApyxZg8k
2Jo05syK0U0XTXqmFjpIsVEMYvTYTLRM/iW/1Pa09/7hPAwiB318VrmKMeOH7d2G
OcTkTzoh0dqilb713hech87V8KT55scONjU1UHCoxPPF52+YAU/3VcV2mGRiTLgR
iRMvoHVvPWPqH7Cp2g93akpIJ9+P7nmrxj/EgJMePO9TpuJpZ4VtrKC9VeeWsjSQ
zQvusBxhqWS1WA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:11 2025 by rpki-client