Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
File: qEkgTKTw605W4I4Jn-N4XOBv_qo.mft (raw, json)
Hash identifier: UEOhaRxTCSN3kFPwHhe9XUEdKqA7i7PLF/+rRpONcHc=
Subject key identifier: B9:2D:C3:0F:5E:53:69:4A:91:97:B2:9B:FE:B0:90:18:AB:51:97:91
Authority key identifier: A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
Certificate issuer: /CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Certificate serial: 0194BC3BEF609C3D5E13A3AD72910BC3549B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
Manifest number: 145B
Signing time: Fri 31 Jan 2025 12:00:31 +0000
Manifest this update: Fri 31 Jan 2025 12:00:31 +0000
Manifest next update: Sat 01 Feb 2025 12:00:31 +0000
Files and hashes: 1: 1-C7o4Sg1w_tMM8v1-Zzbx0qKuw4.roa (hash: 5hM/OQJSa5W9fafk6DZMK61IDj/N7aS0aUIw68dp1I0=)
2: b_NE7DVIfDXKb-MpYj6nT1XXano.roa (hash: p2sDMI4p8wkfemzISoM/DEW8q7cpoFG20Gw6CbldWQQ=)
3: bjYWIiRDJQJHClBhm5lHGbc7p3c.roa (hash: 2CHXRgaX05mE8dTCdvnAxjehUb/UlBCUBvMnngQZ4pY=)
4: e9ro14Q2CkVWo9tx9mS_DRjKoG0.roa (hash: hdEGtzXmNsVqaiQbsKpplmaz4uwwkN9r2YZS335CDho=)
5: eLM1tMA2-Prx-6AJmPfSxPTQ8ws.roa (hash: x3TEJF+lEhYQXreBGO5p/2V/eqc0Q9Afb2MZe1Qg0wg=)
6: qEkgTKTw605W4I4Jn-N4XOBv_qo.crl (hash: b+nJalPN4XzIPk+2meeOJi4TutsNt/QKWSeNPb3oMdM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ef:60:9c:3d:5e:13:a3:ad:72:91:0b:c3:54:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Validity
Not Before: Jan 31 12:00:31 2025 GMT
Not After : Feb 1 12:00:31 2025 GMT
Subject: CN=b92dc30f5e53694a9197b29bfeb09018ab519791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a6:96:7e:5c:a9:95:fa:52:a6:6a:73:65:96:
03:99:8d:46:81:ed:8e:e7:7a:ca:e2:ed:bb:44:79:
dd:e8:68:4f:ed:1a:d5:37:ad:d0:76:8f:86:2c:73:
df:0b:ba:51:c3:18:93:59:e1:50:0a:5f:e2:26:1c:
ee:42:97:ce:6e:b5:c6:ed:d3:89:6c:3c:1c:f8:4a:
c8:b1:50:3a:f3:ed:27:26:9f:8f:06:71:6b:fd:3a:
02:41:94:d8:2f:f7:b6:ca:aa:1d:dd:cf:89:05:9a:
71:e2:cd:8b:d7:25:53:ff:df:58:64:7d:f0:6a:97:
cb:17:f3:a1:33:a2:91:40:13:ab:d9:a2:16:1a:65:
7f:0c:e2:bf:75:a9:d6:0e:0d:84:9e:e2:9b:b5:df:
55:4e:02:5b:3a:70:f8:bc:f1:42:2b:55:51:13:c4:
97:be:f6:06:f4:7a:94:ce:9a:21:ce:4f:a4:33:b9:
2c:21:a1:cc:09:c0:63:61:8b:10:cc:49:cc:f0:1f:
86:d1:c2:c3:c0:33:21:3b:2a:bc:e8:38:e1:55:10:
b4:17:4d:8d:2f:a1:14:b7:7c:0f:12:06:b3:eb:72:
9f:48:fe:45:8a:ad:c4:96:5e:bc:aa:9a:80:5d:18:
02:45:b0:ce:63:cb:6f:19:b1:a2:13:09:1b:35:18:
b7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2D:C3:0F:5E:53:69:4A:91:97:B2:9B:FE:B0:90:18:AB:51:97:91
X509v3 Authority Key Identifier:
keyid:A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:3a:5e:5e:ef:85:10:91:94:49:8f:46:67:41:f7:13:9a:16:
3f:d2:af:bd:d5:71:e4:82:dd:f1:de:34:b8:06:03:20:18:e0:
e7:16:f9:ba:ee:7e:e2:4c:90:bc:62:d3:7c:4d:2f:14:12:c0:
21:ad:f7:94:5e:1c:5e:12:e4:b9:90:dc:14:e3:7c:f7:53:84:
c3:68:9c:b7:05:b6:9d:80:fb:7d:2f:c3:3e:94:3f:0a:38:86:
8d:b9:25:ef:e5:89:a6:2d:70:21:6e:05:1c:8a:f9:8d:77:1f:
6c:63:d9:67:c2:0a:35:cf:43:d9:ad:62:b8:9a:4a:6f:97:74:
da:49:8c:b3:d7:ee:6b:14:2b:aa:f5:4d:22:0e:90:e5:00:c3:
80:03:1b:28:07:bd:c0:49:79:4e:21:73:67:89:91:87:b9:fa:
68:c1:fe:14:74:df:29:10:44:62:a3:e3:fd:48:94:d3:4e:33:
d8:28:fa:53:f8:17:59:54:7b:f6:b9:90:ef:ee:bd:ba:86:51:
bf:f6:64:00:0f:f0:fb:d2:a2:f2:72:52:02:44:9b:81:5d:14:
15:6b:04:c7:d2:b4:78:29:28:1d:8f:59:d1:e3:00:5c:d1:df:
62:72:11:51:8a:0f:e7:a0:06:b0:fe:be:31:5e:4d:ad:cd:c7:
7f:f7:e0:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O+9gnD1eE6OtcpELw1SbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NDkyMDRjYTRmMGViNGU1NmUwOGUwOTlmZTM3ODVjZTA2
ZmZlYWEwHhcNMjUwMTMxMTIwMDMxWhcNMjUwMjAxMTIwMDMxWjAzMTEwLwYDVQQD
EyhiOTJkYzMwZjVlNTM2OTRhOTE5N2IyOWJmZWIwOTAxOGFiNTE5NzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qaWflyplfpSpmpzZZYDmY1Gge2O
53rK4u27RHnd6GhP7RrVN63Qdo+GLHPfC7pRwxiTWeFQCl/iJhzuQpfObrXG7dOJ
bDwc+ErIsVA68+0nJp+PBnFr/ToCQZTYL/e2yqod3c+JBZpx4s2L1yVT/99YZH3w
apfLF/OhM6KRQBOr2aIWGmV/DOK/danWDg2EnuKbtd9VTgJbOnD4vPFCK1VRE8SX
vvYG9HqUzpohzk+kM7ksIaHMCcBjYYsQzEnM8B+G0cLDwDMhOyq86DjhVRC0F02N
L6EUt3wPEgaz63KfSP5Fiq3Ell68qpqAXRgCRbDOY8tvGbGiEwkbNRi38wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLktww9eU2lKkZeym/6wkBirUZeRMB8GA1UdIwQY
MBaAFKhJIEyk8OtOVuCOCZ/jeFzgb/6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUVrZ1RLVHc2MDVXNEk0Sm4tTjRYT0J2X3FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80NWIyM2YtMzAyYi00MWYyLTk0OTYt
OWNjYmIwODQyOGZhLzEvcUVrZ1RLVHc2MDVXNEk0Sm4tTjRYT0J2X3FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80NWIyM2YtMzAyYi00MWYyLTk0OTYtOWNjYmIwODQyOGZh
LzEvcUVrZ1RLVHc2MDVXNEk0Sm4tTjRYT0J2X3FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAjpeXu+F
EJGUSY9GZ0H3E5oWP9KvvdVx5ILd8d40uAYDIBjg5xb5uu5+4kyQvGLTfE0vFBLA
Ia33lF4cXhLkuZDcFON891OEw2ictwW2nYD7fS/DPpQ/CjiGjbkl7+WJpi1wIW4F
HIr5jXcfbGPZZ8IKNc9D2a1iuJpKb5d02kmMs9fuaxQrqvVNIg6Q5QDDgAMbKAe9
wEl5TiFzZ4mRh7n6aMH+FHTfKRBEYqPj/UiU004z2Cj6U/gXWVR79rmQ7+69uoZR
v/ZkAA/w+9Ki8nJSAkSbgV0UFWsEx9K0eCkoHY9Z0eMAXNHfYnIRUYoP56AGsP6+
MV5Nrc3Hf/fgng==
-----END CERTIFICATE-----
Generated at Thu May 1 11:42:48 2025 by rpki-client