Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft
File: QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft (raw, json)
Hash identifier: OrCWV5ehsz2wEiuhJrB1zbHf2xnGfPGf4zx8jGSeodA=
Subject key identifier: EF:DB:67:95:95:2C:30:D3:7D:A7:E2:4F:50:8F:4B:25:69:67:31:67
Authority key identifier: 40:D5:59:1A:75:BD:69:3E:9D:3B:76:68:34:BF:07:4F:7B:1E:EE:3A
Certificate issuer: /CN=40d5591a75bd693e9d3b766834bf074f7b1eee3a
Certificate serial: 0194BBCDB3DB2B32019376781D182604DA84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNVZGnW9aT6dO3ZoNL8HT3se7jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft
Manifest number: 0837
Signing time: Fri 31 Jan 2025 10:00:07 +0000
Manifest this update: Fri 31 Jan 2025 10:00:07 +0000
Manifest next update: Sat 01 Feb 2025 10:00:07 +0000
Files and hashes: 1: QNVZGnW9aT6dO3ZoNL8HT3se7jo.crl (hash: +9epRYRxCWyLliAI7nxCY3yjulsyzaPIyn4MigQGHQo=)
2: dmWwMKmVtBjrQ943YS9mH5Wi3ME.roa (hash: prLT1d+yXEMIyzM51qGGgQHR5qaRcSsmNt9aZioq8kg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b3:db:2b:32:01:93:76:78:1d:18:26:04:da:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d5591a75bd693e9d3b766834bf074f7b1eee3a
Validity
Not Before: Jan 31 10:00:07 2025 GMT
Not After : Feb 1 10:00:07 2025 GMT
Subject: CN=efdb6795952c30d37da7e24f508f4b2569673167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:28:85:37:38:25:a9:67:1e:78:f1:b6:46:80:
bd:e4:5f:ca:09:2b:71:7e:2c:af:b2:3c:63:f6:22:
a9:3d:67:96:2b:c4:70:f9:23:0d:2d:99:7c:dd:ad:
8a:89:66:3b:c1:2a:13:ff:a8:71:71:30:63:c6:b2:
2d:31:e3:60:87:0d:fc:bd:c2:95:1c:da:77:40:dd:
67:ca:e8:1f:7e:e3:85:3f:a4:b8:6e:6a:3e:bf:39:
48:80:46:0a:0d:03:d7:60:f5:92:1a:f9:5b:36:99:
0a:29:a8:4a:75:37:c6:90:de:f8:11:1d:93:34:f1:
b3:ae:70:d9:ec:53:d7:23:5c:ea:d7:e9:71:1a:82:
eb:c4:16:d8:c3:99:1f:7d:ab:da:8e:aa:4d:74:37:
81:1c:1d:11:f4:45:b2:b1:e5:2b:e4:86:9e:b8:9c:
c7:f2:c4:9a:ff:50:55:a2:16:77:77:50:bb:82:0e:
73:1f:e2:67:94:47:a5:81:03:f4:91:86:98:19:5b:
8a:0d:b8:50:06:12:73:2d:24:2c:72:03:01:b8:c6:
d7:70:a4:ef:33:67:8e:55:03:b6:d9:fc:6a:bd:bb:
61:88:09:76:81:e5:cb:96:92:85:c4:43:f4:b4:90:
bc:00:b6:b2:ba:59:e0:fe:3b:65:3b:ee:b0:eb:43:
47:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:DB:67:95:95:2C:30:D3:7D:A7:E2:4F:50:8F:4B:25:69:67:31:67
X509v3 Authority Key Identifier:
keyid:40:D5:59:1A:75:BD:69:3E:9D:3B:76:68:34:BF:07:4F:7B:1E:EE:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVZGnW9aT6dO3ZoNL8HT3se7jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:d0:49:df:f6:97:3f:36:07:70:4e:5e:9a:c6:9f:52:3e:f1:
c2:8c:63:77:00:5c:c8:82:01:48:92:db:42:84:7e:66:12:12:
e9:88:42:42:97:72:97:1b:ce:6e:c2:1e:52:c8:c6:20:af:3b:
0b:68:9a:bc:4c:24:11:09:c8:58:d4:d5:b5:83:2f:79:82:87:
17:6b:71:5a:71:78:29:ed:5a:3b:70:fd:ae:50:48:15:5f:a3:
97:a8:45:de:a9:60:8c:b3:3b:f6:d3:b0:31:d3:10:35:6b:bf:
19:be:d7:e8:13:a3:6f:13:f6:20:0a:e0:b5:cd:78:ff:24:d8:
10:fa:eb:d7:37:3b:26:c5:1b:06:84:c3:f0:e8:05:5a:6e:e3:
cc:24:78:99:94:ef:10:48:64:8a:99:93:87:fb:ee:b3:b0:73:
06:83:a0:b5:e7:14:26:6b:95:0d:5c:f8:4a:2a:23:a1:74:7e:
82:e9:fa:74:ef:0d:85:a7:31:21:39:1a:0f:f5:85:57:8d:d2:
0b:c5:35:ba:ad:31:6c:73:6d:5b:7a:6b:5d:d7:7f:46:23:e5:
48:49:9e:d9:88:f8:fa:4d:fc:e7:33:7f:09:79:92:c8:b9:0d:
af:bf:a7:71:f9:ec:4d:99:a4:dd:f9:8d:76:65:c3:a7:0b:e8:
cb:1d:3e:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zbPbKzIBk3Z4HRgmBNqEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZDU1OTFhNzViZDY5M2U5ZDNiNzY2ODM0YmYwNzRmN2Ix
ZWVlM2EwHhcNMjUwMTMxMTAwMDA3WhcNMjUwMjAxMTAwMDA3WjAzMTEwLwYDVQQD
EyhlZmRiNjc5NTk1MmMzMGQzN2RhN2UyNGY1MDhmNGIyNTY5NjczMTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCiFNzglqWceePG2RoC95F/KCStx
fiyvsjxj9iKpPWeWK8Rw+SMNLZl83a2KiWY7wSoT/6hxcTBjxrItMeNghw38vcKV
HNp3QN1nyugffuOFP6S4bmo+vzlIgEYKDQPXYPWSGvlbNpkKKahKdTfGkN74ER2T
NPGzrnDZ7FPXI1zq1+lxGoLrxBbYw5kffavajqpNdDeBHB0R9EWyseUr5IaeuJzH
8sSa/1BVohZ3d1C7gg5zH+JnlEelgQP0kYaYGVuKDbhQBhJzLSQscgMBuMbXcKTv
M2eOVQO22fxqvbthiAl2geXLlpKFxEP0tJC8ALayulng/jtlO+6w60NHJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/bZ5WVLDDTfafiT1CPSyVpZzFnMB8GA1UdIwQY
MBaAFEDVWRp1vWk+nTt2aDS/B097Hu46MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU5WWkduVzlhVDZkTzNab05MOEhUM3NlN2pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy85YzlmMjgtNGY0MS00NzJkLWE2M2Ut
YTEwYTNhNDk2M2ZiLzEvUU5WWkduVzlhVDZkTzNab05MOEhUM3NlN2pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy85YzlmMjgtNGY0MS00NzJkLWE2M2UtYTEwYTNhNDk2M2Zi
LzEvUU5WWkduVzlhVDZkTzNab05MOEhUM3NlN2pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGdBJ3/aX
PzYHcE5emsafUj7xwoxjdwBcyIIBSJLbQoR+ZhIS6YhCQpdylxvObsIeUsjGIK87
C2iavEwkEQnIWNTVtYMveYKHF2txWnF4Ke1aO3D9rlBIFV+jl6hF3qlgjLM79tOw
MdMQNWu/Gb7X6BOjbxP2IArgtc14/yTYEPrr1zc7JsUbBoTD8OgFWm7jzCR4mZTv
EEhkipmTh/vus7BzBoOgtecUJmuVDVz4SiojoXR+gun6dO8NhacxITkaD/WFV43S
C8U1uq0xbHNtW3prXdd/RiPlSEme2Yj4+k385zN/CXmSyLkNr7+ncfnsTZmk3fmN
dmXDpwvoyx0+bg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:39:56 2025 by rpki-client