Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
File: _QxrK9KdMWhIfJ7F_eTD_ELZz74.mft (raw, json)
Hash identifier: /V8VzCqhNKkwAH+7xmwMc3Vf6iSXQbNeuBxkuNo0P88=
Subject key identifier: 27:C0:78:9E:EA:93:88:D9:0E:AF:1C:37:90:A2:89:99:04:28:FC:0F
Authority key identifier: FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
Certificate issuer: /CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Certificate serial: 0194BCAA35F4B7034E6BB868EDE46D0485AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
Manifest number: 0F59
Signing time: Fri 31 Jan 2025 14:00:58 +0000
Manifest this update: Fri 31 Jan 2025 14:00:58 +0000
Manifest next update: Sat 01 Feb 2025 14:00:58 +0000
Files and hashes: 1: 1-Ofv8tDBMWs_4Hbhr7lMN_HF2TI.roa (hash: uH/td80fED56QPX1k1oOVphRVZ11UL29yzqyURnsYnc=)
2: _QxrK9KdMWhIfJ7F_eTD_ELZz74.crl (hash: j9hElGYvNIvAVOcO3ZMiSog54MqyvzXoYVTvMZ9HE78=)
3: ptc21Pv_RMZdbmNfwt1t43MswfA.roa (hash: mrzhJeNsIe6my5EK8oo2DkozZxDWWdzOh94g4W2m17U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:35:f4:b7:03:4e:6b:b8:68:ed:e4:6d:04:85:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Validity
Not Before: Jan 31 14:00:58 2025 GMT
Not After : Feb 1 14:00:58 2025 GMT
Subject: CN=27c0789eea9388d90eaf1c3790a289990428fc0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0c:46:b1:e0:f5:6c:ea:f1:7c:ab:f2:eb:85:
ba:86:0a:36:df:c2:85:db:99:7c:92:d2:c1:09:a2:
d3:aa:20:a8:19:78:b3:c2:c3:36:d9:ba:21:eb:f3:
54:33:dc:a7:4c:85:60:b1:49:f6:e1:a4:8f:b2:3f:
dd:d7:0a:38:9e:e8:21:e8:5e:92:fe:db:d4:a0:a7:
16:aa:30:cf:75:fb:5c:0b:f6:9b:03:bb:1c:11:3b:
58:4b:a8:b8:f1:b0:d4:5d:4f:87:15:e8:4d:eb:53:
ff:aa:86:60:5f:9f:ad:60:e4:5c:d7:26:2c:17:3b:
31:75:af:7e:5b:bc:d5:50:5d:05:ce:a0:03:d2:26:
88:92:63:d1:1f:73:38:a5:70:2d:d1:a2:8c:08:32:
79:f2:98:07:34:04:75:ba:9c:3d:2e:72:a5:54:ab:
4b:24:19:05:e9:74:ab:05:88:02:66:b9:d0:7c:8d:
cb:22:92:b9:02:38:d0:8d:00:25:97:54:47:f8:bf:
e0:22:f0:0a:a5:9f:4c:3f:0b:a1:ce:5d:3d:28:ff:
4a:98:28:4a:e1:92:5e:64:2b:d0:51:ac:24:f3:5f:
0c:3d:b0:3e:c8:8f:ce:29:c0:5d:df:e8:3d:2f:4d:
40:cc:15:ca:84:19:9b:98:3f:94:1d:5f:c5:03:e1:
9b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C0:78:9E:EA:93:88:D9:0E:AF:1C:37:90:A2:89:99:04:28:FC:0F
X509v3 Authority Key Identifier:
keyid:FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:82:a0:c6:e2:44:6c:a7:9d:18:46:2b:dd:dc:70:0e:5d:fa:
e1:f8:9d:53:f7:c5:b7:b2:c6:10:64:9d:ed:b3:c3:da:dc:b9:
0a:27:c5:5e:e6:d2:6b:e9:07:26:0c:f1:16:54:e6:7b:83:d7:
79:56:fb:91:79:98:b5:a0:79:07:78:85:d2:41:d2:d9:02:fa:
0a:f6:66:5b:b8:94:92:41:28:59:63:74:19:81:25:48:f6:30:
6a:57:4e:f4:f8:aa:3b:23:7b:44:c0:e0:fa:67:94:b2:a7:58:
4e:4b:3d:35:68:77:5f:97:42:29:0a:92:19:69:47:26:6c:81:
50:9d:ea:ea:6c:ef:99:c5:ba:93:00:cf:8c:12:83:f1:f6:2f:
d8:f3:a3:f3:88:a7:ea:0c:8d:02:03:14:f2:36:f8:90:0d:db:
23:ac:36:40:b3:fb:b0:df:73:1f:56:f5:5f:7d:ac:b0:28:c0:
66:ae:22:78:8e:9c:a2:94:0c:77:93:83:bb:b8:54:68:12:c6:
48:7a:26:eb:8e:02:10:89:bc:f4:82:d0:9f:4b:83:e0:e8:9c:
9d:4f:a1:45:3f:5e:93:d5:62:32:bb:f9:5a:a0:d8:18:70:10:
c8:a2:bb:32:8f:ba:18:a5:a8:64:32:b6:26:14:92:c0:7c:7d:
a2:40:78:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qjX0twNOa7ho7eRtBIWsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMGM2YjJiZDI5ZDMxNjg0ODdjOWVjNWZkZTRjM2ZjNDJk
OWNmYmUwHhcNMjUwMTMxMTQwMDU4WhcNMjUwMjAxMTQwMDU4WjAzMTEwLwYDVQQD
EygyN2MwNzg5ZWVhOTM4OGQ5MGVhZjFjMzc5MGEyODk5OTA0MjhmYzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QxGseD1bOrxfKvy64W6hgo238KF
25l8ktLBCaLTqiCoGXizwsM22boh6/NUM9ynTIVgsUn24aSPsj/d1wo4nugh6F6S
/tvUoKcWqjDPdftcC/abA7scETtYS6i48bDUXU+HFehN61P/qoZgX5+tYORc1yYs
Fzsxda9+W7zVUF0FzqAD0iaIkmPRH3M4pXAt0aKMCDJ58pgHNAR1upw9LnKlVKtL
JBkF6XSrBYgCZrnQfI3LIpK5AjjQjQAll1RH+L/gIvAKpZ9MPwuhzl09KP9KmChK
4ZJeZCvQUawk818MPbA+yI/OKcBd3+g9L01AzBXKhBmbmD+UHV/FA+GbDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfAeJ7qk4jZDq8cN5CiiZkEKPwPMB8GA1UdIwQY
MBaAFP0MayvSnTFoSHyexf3kw/xC2c++MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1F4cks5S2RNV2hJZko3Rl9lVERfRUxaejc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80MzVkODgtMzcxZS00Zjg2LWE5MGEt
Y2ZiYmMxNDY3MWEzLzEvX1F4cks5S2RNV2hJZko3Rl9lVERfRUxaejc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80MzVkODgtMzcxZS00Zjg2LWE5MGEtY2ZiYmMxNDY3MWEz
LzEvX1F4cks5S2RNV2hJZko3Rl9lVERfRUxaejc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATYKgxuJE
bKedGEYr3dxwDl364fidU/fFt7LGEGSd7bPD2ty5CifFXubSa+kHJgzxFlTme4PX
eVb7kXmYtaB5B3iF0kHS2QL6CvZmW7iUkkEoWWN0GYElSPYwaldO9PiqOyN7RMDg
+meUsqdYTks9NWh3X5dCKQqSGWlHJmyBUJ3q6mzvmcW6kwDPjBKD8fYv2POj84in
6gyNAgMU8jb4kA3bI6w2QLP7sN9zH1b1X32ssCjAZq4ieI6copQMd5ODu7hUaBLG
SHom644CEIm89ILQn0uD4OicnU+hRT9ek9ViMrv5WqDYGHAQyKK7Mo+6GKWoZDK2
JhSSwHx9okB4Lw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:04 2025 by rpki-client