Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
File: qFOfk1XT63eLG7juJyMyYBGhIps.mft (raw, json)
Hash identifier: JrtNh1FwHjIKfrqcQ2O9NzaCxQCxdSw/5Wieuo3boRk=
Subject key identifier: 93:C4:9E:64:86:6D:69:AD:00:59:A7:3C:B0:00:83:66:E9:8F:63:1D
Authority key identifier: A8:53:9F:93:55:D3:EB:77:8B:1B:B8:EE:27:23:32:60:11:A1:22:9B
Certificate issuer: /CN=a8539f9355d3eb778b1bb8ee2723326011a1229b
Certificate serial: 0194BC72E0786A09D4D59CE044E84F1DF5E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 13:00:32 +0000
Manifest this update: Fri 31 Jan 2025 13:00:32 +0000
Manifest next update: Sat 01 Feb 2025 13:00:32 +0000
Files and hashes: 1: ShowtNM2m2UKeBL8F3fZYKX41FQ.roa (hash: fLdZxXolLRuOUGV4tUzHHqmQm+iuYEtRLW2OEHSE+Js=)
2: qFOfk1XT63eLG7juJyMyYBGhIps.crl (hash: Yx4E3ZTXr0rDwNKT8yvwLfeBG6tbO8HHctU5whD/Uek=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e0:78:6a:09:d4:d5:9c:e0:44:e8:4f:1d:f5:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8539f9355d3eb778b1bb8ee2723326011a1229b
Validity
Not Before: Jan 31 13:00:32 2025 GMT
Not After : Feb 1 13:00:32 2025 GMT
Subject: CN=93c49e64866d69ad0059a73cb0008366e98f631d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:91:b0:a6:a8:e9:fd:82:7b:14:cc:41:19:5e:
eb:ed:2d:13:88:26:0e:da:36:a5:f2:2f:25:65:cf:
e2:4f:f0:25:fc:56:fc:d6:87:99:75:5f:1c:f5:9e:
69:90:f7:42:c9:2f:61:09:c5:07:a8:fb:cc:0f:88:
25:32:ee:53:29:08:77:f1:5f:d5:13:8f:f5:69:91:
b6:9c:b9:56:ab:61:a9:f8:24:c3:d8:8e:09:6b:f4:
5c:32:4f:99:79:36:71:1b:27:00:e3:92:61:f5:ce:
ae:76:90:65:a9:64:37:b7:c8:a1:54:81:44:94:d9:
e9:00:89:b6:ca:b2:a4:9e:96:5b:ec:14:eb:b3:79:
0c:9f:7b:de:94:38:51:6c:4c:44:4c:05:66:8b:9b:
9d:7f:d4:d9:9a:ea:a8:aa:a5:8e:f3:d9:9c:6c:8f:
3e:a2:be:06:58:96:a3:80:3a:62:e2:ab:78:62:3c:
92:1a:64:06:ec:fe:b5:18:75:6c:da:a2:e8:c5:08:
0c:96:73:91:16:02:ef:60:91:20:11:ac:c8:2f:08:
c2:60:08:01:00:ff:d3:3d:21:e1:65:ee:ef:8c:c6:
09:b3:ac:60:8b:cd:02:db:99:64:76:7d:5f:1f:31:
56:0b:9b:ea:a8:6e:9a:2b:c0:cd:67:5e:93:5e:f7:
67:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C4:9E:64:86:6D:69:AD:00:59:A7:3C:B0:00:83:66:E9:8F:63:1D
X509v3 Authority Key Identifier:
keyid:A8:53:9F:93:55:D3:EB:77:8B:1B:B8:EE:27:23:32:60:11:A1:22:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:73:cd:cf:be:61:8d:ae:03:6f:cc:26:26:39:2e:81:db:4f:
bf:69:9b:b7:8b:40:56:8b:32:30:f3:1f:74:5b:76:2b:8e:93:
d3:20:31:9f:f2:0a:e9:92:1e:7c:fd:5b:4a:38:72:93:fd:c2:
ce:71:8a:8f:f6:73:45:c7:0f:85:65:d0:dc:b3:c5:f8:3a:d7:
dd:2b:a1:b2:88:1e:2e:75:19:9e:07:ab:63:d8:4f:30:44:74:
39:d4:f0:e8:db:a9:f7:75:b4:ea:c5:61:31:34:70:a4:63:e7:
32:4a:b3:46:d9:6c:1a:b1:ad:ce:e8:45:5a:e2:66:d6:ca:be:
88:a4:7b:22:fe:91:0a:36:0f:f6:c5:e7:b6:e4:59:22:42:ad:
0d:6d:28:eb:89:49:75:5d:31:4d:f4:b8:e0:fb:c0:df:30:cc:
fd:5a:35:2a:7c:27:04:a2:ff:40:50:bb:3f:ae:38:37:f7:9e:
b5:98:20:c0:3f:6a:d9:6a:55:1d:1e:1d:c1:e6:de:09:03:c8:
b8:d9:68:91:a5:e9:e9:6e:d1:98:b6:d4:fd:6a:8c:bc:27:12:
f7:ec:2e:61:67:37:0c:7b:5e:23:df:8b:18:ca:47:d3:35:c3:
7d:19:d1:63:70:42:5b:2b:84:97:f0:da:31:7b:7e:65:22:db:
51:4f:15:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cuB4agnU1ZzgROhPHfXpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NTM5ZjkzNTVkM2ViNzc4YjFiYjhlZTI3MjMzMjYwMTFh
MTIyOWIwHhcNMjUwMTMxMTMwMDMyWhcNMjUwMjAxMTMwMDMyWjAzMTEwLwYDVQQD
Eyg5M2M0OWU2NDg2NmQ2OWFkMDA1OWE3M2NiMDAwODM2NmU5OGY2MzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJGwpqjp/YJ7FMxBGV7r7S0TiCYO
2jal8i8lZc/iT/Al/Fb81oeZdV8c9Z5pkPdCyS9hCcUHqPvMD4glMu5TKQh38V/V
E4/1aZG2nLlWq2Gp+CTD2I4Ja/RcMk+ZeTZxGycA45Jh9c6udpBlqWQ3t8ihVIFE
lNnpAIm2yrKknpZb7BTrs3kMn3velDhRbExETAVmi5udf9TZmuqoqqWO89mcbI8+
or4GWJajgDpi4qt4YjySGmQG7P61GHVs2qLoxQgMlnORFgLvYJEgEazILwjCYAgB
AP/TPSHhZe7vjMYJs6xgi80C25lkdn1fHzFWC5vqqG6aK8DNZ16TXvdnjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJPEnmSGbWmtAFmnPLAAg2bpj2MdMB8GA1UdIwQY
MBaAFKhTn5NV0+t3ixu47icjMmARoSKbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUZPZmsxWFQ2M2VMRzdqdUp5TXlZQkdoSXBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80ZjhlNzYtNTllNS00MGQxLWExM2Ut
NzFmNGM0N2Y1MDZlLzEvcUZPZmsxWFQ2M2VMRzdqdUp5TXlZQkdoSXBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS80ZjhlNzYtNTllNS00MGQxLWExM2UtNzFmNGM0N2Y1MDZl
LzEvcUZPZmsxWFQ2M2VMRzdqdUp5TXlZQkdoSXBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT3PNz75h
ja4Db8wmJjkugdtPv2mbt4tAVosyMPMfdFt2K46T0yAxn/IK6ZIefP1bSjhyk/3C
znGKj/ZzRccPhWXQ3LPF+DrX3SuhsogeLnUZngerY9hPMER0OdTw6Nup93W06sVh
MTRwpGPnMkqzRtlsGrGtzuhFWuJm1sq+iKR7Iv6RCjYP9sXntuRZIkKtDW0o64lJ
dV0xTfS44PvA3zDM/Vo1KnwnBKL/QFC7P644N/eetZggwD9q2WpVHR4dwebeCQPI
uNlokaXp6W7RmLbU/WqMvCcS9+wuYWc3DHteI9+LGMpH0zXDfRnRY3BCWyuEl/Da
MXt+ZSLbUU8V/Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:39 2025 by rpki-client