Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft
File: qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft (raw, json)
Hash identifier: M11qR7clZeLsmhg68Wu0M7tJHzqRxlF/fLTn+OQRZcs=
Subject key identifier: E2:D4:52:F6:CB:D5:9B:AE:E2:52:1A:77:64:64:9A:9B:97:23:B4:D9
Authority key identifier: AB:3A:9D:1F:C9:9F:25:2F:22:58:F6:82:AB:3F:C5:83:5B:D2:F7:25
Certificate issuer: /CN=ab3a9d1fc99f252f2258f682ab3fc5835bd2f725
Certificate serial: 0194BC72FB4CE8CB9BD86418FDD11B8A607F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft
Manifest number: 139A
Signing time: Fri 31 Jan 2025 13:00:39 +0000
Manifest this update: Fri 31 Jan 2025 13:00:39 +0000
Manifest next update: Sat 01 Feb 2025 13:00:39 +0000
Files and hashes: 1: qzqdH8mfJS8iWPaCqz_Fg1vS9yU.crl (hash: pOQK2J3VlmNs3hK09zzhTzFrEq+XpEKKmvD5yteIUZg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:fb:4c:e8:cb:9b:d8:64:18:fd:d1:1b:8a:60:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab3a9d1fc99f252f2258f682ab3fc5835bd2f725
Validity
Not Before: Jan 31 13:00:39 2025 GMT
Not After : Feb 1 13:00:39 2025 GMT
Subject: CN=e2d452f6cbd59baee2521a7764649a9b9723b4d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:26:93:d4:26:59:16:7b:03:5c:50:db:50:8f:
8e:7d:0d:d0:4d:fa:5b:69:5c:81:53:30:03:8b:0d:
0d:0a:b5:6a:20:ea:30:17:e6:a5:cd:43:cb:a2:53:
2c:80:37:6a:d3:37:7e:73:c9:b1:51:73:30:20:83:
c5:da:44:1b:aa:bd:19:d8:d1:f8:8d:b4:33:0c:a9:
32:9b:5a:13:24:c3:21:63:df:f5:8e:ad:34:51:bf:
05:42:8a:cf:80:b7:60:3f:96:ec:24:92:f0:10:56:
05:1f:46:2d:46:11:87:04:6c:4a:2a:f8:b8:1d:eb:
ed:e6:3b:69:18:f8:28:72:4a:fd:6b:95:c5:7d:15:
95:72:35:04:14:cc:d0:98:2f:91:70:3f:7d:58:72:
32:23:14:5d:34:5c:2a:d4:1a:81:76:8b:75:d0:82:
ea:6e:8e:63:fb:d1:77:a5:05:12:52:1b:8b:5b:41:
fd:52:28:28:af:9c:e9:4d:6c:cc:6a:d1:d4:2f:05:
46:23:4d:06:99:c9:54:37:4c:ac:c8:bf:11:7d:b0:
71:49:99:21:ab:98:c7:7c:e9:1c:1d:01:ee:2c:e0:
4d:d0:19:54:ab:7a:35:ce:a2:db:59:71:81:71:c8:
15:37:f0:c9:ef:05:2f:90:b7:2b:c4:1d:4f:26:af:
b4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D4:52:F6:CB:D5:9B:AE:E2:52:1A:77:64:64:9A:9B:97:23:B4:D9
X509v3 Authority Key Identifier:
keyid:AB:3A:9D:1F:C9:9F:25:2F:22:58:F6:82:AB:3F:C5:83:5B:D2:F7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:77:3d:40:0f:25:9f:07:d8:aa:dc:57:02:70:01:ac:a4:0b:
6d:2f:cf:da:fe:55:93:2c:3d:73:51:58:87:5c:ab:01:72:2f:
27:12:de:6a:64:97:a7:b9:fe:fa:3a:60:41:f7:b4:2c:83:8b:
20:13:38:6c:4d:37:05:df:7b:1b:9f:31:28:80:00:61:3d:d9:
6e:43:01:c1:80:39:c9:dd:cc:f0:7e:69:14:d5:e4:17:d0:9b:
cc:fa:05:bb:ac:b4:a5:81:69:57:b5:f5:5c:81:1f:df:89:37:
63:b7:17:b4:11:06:2c:f7:9f:1a:99:9c:77:0a:28:51:c2:08:
ef:d1:16:70:67:90:58:fa:d4:a9:11:ee:db:7e:f8:25:e6:6e:
a6:12:e5:d7:66:99:be:19:88:5a:1e:0f:03:77:ba:43:49:27:
16:24:24:bc:f5:c0:7b:70:04:02:59:4f:9c:7e:0e:75:f5:d3:
87:0e:44:16:7a:18:09:5a:2f:34:b4:c8:5a:1f:c4:39:79:7c:
a3:74:3c:f5:1a:da:8b:86:33:52:52:7e:4a:d1:4f:64:5a:54:
49:ad:b5:56:3b:04:b2:e3:3f:3e:ef:b8:4a:2d:e9:37:29:3d:
79:50:78:ce:a3:28:b5:d2:f6:7b:40:a1:3d:b9:0b:d9:46:07:
fc:2c:a7:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cvtM6Mub2GQY/dEbimB/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiM2E5ZDFmYzk5ZjI1MmYyMjU4ZjY4MmFiM2ZjNTgzNWJk
MmY3MjUwHhcNMjUwMTMxMTMwMDM5WhcNMjUwMjAxMTMwMDM5WjAzMTEwLwYDVQQD
EyhlMmQ0NTJmNmNiZDU5YmFlZTI1MjFhNzc2NDY0OWE5Yjk3MjNiNGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCaT1CZZFnsDXFDbUI+OfQ3QTfpb
aVyBUzADiw0NCrVqIOowF+alzUPLolMsgDdq0zd+c8mxUXMwIIPF2kQbqr0Z2NH4
jbQzDKkym1oTJMMhY9/1jq00Ub8FQorPgLdgP5bsJJLwEFYFH0YtRhGHBGxKKvi4
Hevt5jtpGPgockr9a5XFfRWVcjUEFMzQmC+RcD99WHIyIxRdNFwq1BqBdot10ILq
bo5j+9F3pQUSUhuLW0H9Uigor5zpTWzMatHULwVGI00GmclUN0ysyL8RfbBxSZkh
q5jHfOkcHQHuLOBN0BlUq3o1zqLbWXGBccgVN/DJ7wUvkLcrxB1PJq+0WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOLUUvbL1Zuu4lIad2RkmpuXI7TZMB8GA1UdIwQY
MBaAFKs6nR/JnyUvIlj2gqs/xYNb0vclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXpxZEg4bWZKUzhpV1BhQ3F6X0ZnMXZTOXlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zNmI5MmYtNjVkYi00YzBhLTkzNTYt
ZTMxNmFhMWYxNmIzLzEvcXpxZEg4bWZKUzhpV1BhQ3F6X0ZnMXZTOXlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8zNmI5MmYtNjVkYi00YzBhLTkzNTYtZTMxNmFhMWYxNmIz
LzEvcXpxZEg4bWZKUzhpV1BhQ3F6X0ZnMXZTOXlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf3c9QA8l
nwfYqtxXAnABrKQLbS/P2v5Vkyw9c1FYh1yrAXIvJxLeamSXp7n++jpgQfe0LIOL
IBM4bE03Bd97G58xKIAAYT3ZbkMBwYA5yd3M8H5pFNXkF9CbzPoFu6y0pYFpV7X1
XIEf34k3Y7cXtBEGLPefGpmcdwooUcII79EWcGeQWPrUqRHu2374JeZuphLl12aZ
vhmIWh4PA3e6Q0knFiQkvPXAe3AEAllPnH4OdfXThw5EFnoYCVovNLTIWh/EOXl8
o3Q89Rrai4YzUlJ+StFPZFpUSa21VjsEsuM/Pu+4Si3pNyk9eVB4zqMotdL2e0Ch
PbkL2UYH/Cyn9A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:14:37 2025 by rpki-client