Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
File: qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft (raw, json)
Hash identifier: 0MRtllvSW5126kOpZNGb63TBS146W6vIO3u54AM0Eyo=
Subject key identifier: FD:72:A2:59:D9:77:2D:45:68:C6:9F:2E:15:09:C4:30:31:69:B0:AF
Authority key identifier: AB:06:90:58:B4:D3:67:61:2B:E4:80:73:72:B5:E5:93:E0:34:77:66
Certificate issuer: /CN=ab069058b4d367612be4807372b5e593e0347766
Certificate serial: 0194BD17BBAE1BA57DC8C920E4BE20E17ADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:36 +0000
Manifest this update: Fri 31 Jan 2025 16:00:36 +0000
Manifest next update: Sat 01 Feb 2025 16:00:36 +0000
Files and hashes: 1: Ttl-1h1-V-nLfHGl50XIPqBaOuw.roa (hash: 4ysW7rFsdP6sSTiTROvgg5H3SFvIB36uqjjGielYpHo=)
2: qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl (hash: 69K8gApxlU260LfRZw0GKJ3shSwAEyXCHeSJhMcIx34=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:bb:ae:1b:a5:7d:c8:c9:20:e4:be:20:e1:7a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab069058b4d367612be4807372b5e593e0347766
Validity
Not Before: Jan 31 16:00:36 2025 GMT
Not After : Feb 1 16:00:36 2025 GMT
Subject: CN=fd72a259d9772d4568c69f2e1509c4303169b0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:eb:c1:67:84:ad:45:6e:51:8d:7f:cf:89:69:
b0:27:2e:a6:59:45:28:71:45:15:c3:e9:08:96:74:
60:9c:db:53:bd:8b:af:f2:0f:c1:73:43:f2:75:4f:
8f:41:f2:00:0e:cd:43:6d:0f:df:46:82:2c:74:38:
f8:3e:dc:75:ec:40:9b:d1:31:59:5d:9c:7a:81:fd:
2c:45:26:1e:90:ed:74:a6:24:03:1e:6c:c7:45:e2:
9f:0e:7a:89:0a:57:69:87:ff:1d:20:6f:5e:97:41:
aa:05:72:9f:44:19:d5:13:e5:00:a2:de:53:e9:f5:
2a:5e:53:d3:d7:6a:b2:fc:b6:64:bf:c6:79:95:cc:
1c:b9:b3:9a:82:98:3d:8c:08:2e:af:89:41:ce:d7:
a6:59:6b:1d:0a:01:1e:72:b3:f9:aa:bd:a3:fb:fd:
da:59:6a:72:bf:e9:c5:e3:8d:58:33:73:b4:c4:55:
03:df:0c:e4:92:87:30:f6:c5:48:b2:ea:5d:3a:05:
a9:6b:5c:e3:3b:5a:da:5f:02:d2:57:68:36:0c:73:
58:97:ec:74:8c:52:8c:6f:62:bd:65:23:61:b2:8b:
4f:00:6a:b6:2b:d3:88:23:69:5c:64:41:02:a5:49:
bd:07:b1:56:ca:e2:cc:ee:0e:5d:af:92:84:fa:99:
e2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:72:A2:59:D9:77:2D:45:68:C6:9F:2E:15:09:C4:30:31:69:B0:AF
X509v3 Authority Key Identifier:
keyid:AB:06:90:58:B4:D3:67:61:2B:E4:80:73:72:B5:E5:93:E0:34:77:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:62:dc:64:30:40:24:76:a8:c5:17:23:d0:a0:94:f0:8d:be:
50:97:aa:e5:75:49:1f:36:29:91:f2:fa:98:27:b4:af:d1:a2:
8f:3e:2f:67:15:3f:4e:0d:44:bc:d0:20:49:f2:df:fe:69:40:
0a:c3:ea:10:da:0f:d0:99:ea:a1:42:bd:e5:ab:76:85:1c:d4:
85:f5:68:98:f4:6b:cf:3c:f2:08:c5:cb:7f:13:69:4c:d8:74:
71:30:17:37:b6:5c:0d:f3:fb:a0:15:fe:e3:44:4c:61:9f:16:
e0:76:b5:cb:ec:ce:35:d1:b0:b4:e3:32:90:81:a4:09:8a:4b:
10:db:1b:97:61:ed:71:a2:93:f2:5a:94:79:f4:27:18:5c:5b:
44:e6:d3:df:ba:bf:e4:46:f8:22:d0:40:00:23:17:16:0a:1b:
9b:e1:ff:44:29:86:bc:cb:13:f9:1a:1e:64:70:b2:01:fa:d1:
48:67:4c:0a:0c:7e:18:7c:8d:1f:db:ca:d8:b7:3c:59:7c:82:
aa:7d:2e:ed:b4:a7:f4:03:a4:f0:1c:cb:f1:95:b6:5f:6b:87:
62:a0:7b:df:fa:f4:7b:72:33:0c:0c:74:c1:c0:96:9a:88:0d:
91:04:f5:7a:10:d0:a9:0d:5f:23:09:d0:c3:a3:2c:68:e8:25:
09:e8:19:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F7uuG6V9yMkg5L4g4XreMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDY5MDU4YjRkMzY3NjEyYmU0ODA3MzcyYjVlNTkzZTAz
NDc3NjYwHhcNMjUwMTMxMTYwMDM2WhcNMjUwMjAxMTYwMDM2WjAzMTEwLwYDVQQD
EyhmZDcyYTI1OWQ5NzcyZDQ1NjhjNjlmMmUxNTA5YzQzMDMxNjliMGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2evBZ4StRW5RjX/PiWmwJy6mWUUo
cUUVw+kIlnRgnNtTvYuv8g/Bc0PydU+PQfIADs1DbQ/fRoIsdDj4Ptx17ECb0TFZ
XZx6gf0sRSYekO10piQDHmzHReKfDnqJCldph/8dIG9el0GqBXKfRBnVE+UAot5T
6fUqXlPT12qy/LZkv8Z5lcwcubOagpg9jAgur4lBztemWWsdCgEecrP5qr2j+/3a
WWpyv+nF441YM3O0xFUD3wzkkocw9sVIsupdOgWpa1zjO1raXwLSV2g2DHNYl+x0
jFKMb2K9ZSNhsotPAGq2K9OII2lcZEECpUm9B7FWyuLM7g5dr5KE+pniZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1yolnZdy1FaMafLhUJxDAxabCvMB8GA1UdIwQY
MBaAFKsGkFi002dhK+SAc3K15ZPgNHdmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdhUVdMVFRaMkVyNUlCemNyWGxrLUEwZDJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84N2IwOWEtY2NmYS00OGVhLWFlYjUt
NTY2NzQxOWY0NGU4LzEvcXdhUVdMVFRaMkVyNUlCemNyWGxrLUEwZDJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84N2IwOWEtY2NmYS00OGVhLWFlYjUtNTY2NzQxOWY0NGU4
LzEvcXdhUVdMVFRaMkVyNUlCemNyWGxrLUEwZDJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmmLcZDBA
JHaoxRcj0KCU8I2+UJeq5XVJHzYpkfL6mCe0r9Gijz4vZxU/Tg1EvNAgSfLf/mlA
CsPqENoP0JnqoUK95at2hRzUhfVomPRrzzzyCMXLfxNpTNh0cTAXN7ZcDfP7oBX+
40RMYZ8W4Ha1y+zONdGwtOMykIGkCYpLENsbl2HtcaKT8lqUefQnGFxbRObT37q/
5Eb4ItBAACMXFgobm+H/RCmGvMsT+RoeZHCyAfrRSGdMCgx+GHyNH9vK2Lc8WXyC
qn0u7bSn9AOk8BzL8ZW2X2uHYqB73/r0e3IzDAx0wcCWmogNkQT1ehDQqQ1fIwnQ
w6MsaOglCegZjg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:42 2025 by rpki-client