Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
File: QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft (raw, json)
Hash identifier: oUwSJ58Y8F23reKAjtwWISZqEH/R1zztjuRuw+0ToaY=
Subject key identifier: 29:65:DD:23:41:34:B2:9F:ED:96:FD:4B:16:06:3B:4C:B7:84:EB:EC
Authority key identifier: 41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
Certificate issuer: /CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Certificate serial: 0194BC04F7AC84C0ADE75FBA19C27597083D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
Manifest number: 1448
Signing time: Fri 31 Jan 2025 11:00:29 +0000
Manifest this update: Fri 31 Jan 2025 11:00:29 +0000
Manifest next update: Sat 01 Feb 2025 11:00:29 +0000
Files and hashes: 1: L_WXJvTQqUgr8plOuOusHDFGnRk.roa (hash: imWt/yiEXRF4fkI/lhzHWWMhTs9rvwW94ATOTBlI/Rw=)
2: QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl (hash: /YeIsAqI8sNF59s2+WPvDioN0mgUcA5/NK7fFnxAjcg=)
3: b-B7y1Nd1HVvZkmn-kM4P3d8FaE.roa (hash: AHR8mewkf4xod42msa+0GjmXSgqvWtSfc06AC+CNV+8=)
4: e6TuiSL7JhObXsq3z3tQHZsYZTc.roa (hash: mEOpHjtrN4MUP50b066uo1tm1EvgSudFmu/oK01JASo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f7:ac:84:c0:ad:e7:5f:ba:19:c2:75:97:08:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4173eeb8d02f5f64788b3fdc78d6bab8a55fd16a
Validity
Not Before: Jan 31 11:00:29 2025 GMT
Not After : Feb 1 11:00:29 2025 GMT
Subject: CN=2965dd234134b29fed96fd4b16063b4cb784ebec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:33:49:e8:f8:58:bb:4e:0f:43:05:1d:49:bf:
0b:71:d0:72:94:0b:df:41:dc:96:17:2d:aa:08:83:
54:8f:8e:17:56:c2:0f:84:88:f4:4b:e0:7c:0e:d1:
6e:d4:0f:08:6e:c3:ed:5c:3b:5c:ad:38:dd:3a:b8:
db:dd:76:ac:d2:b1:0f:af:41:c0:38:0e:a7:d3:6c:
e9:f2:7f:18:9e:59:ca:d2:67:6b:f7:9d:07:0a:ce:
7c:4c:b8:b6:6f:d7:07:91:6e:0b:5f:54:cc:9e:1a:
aa:b0:82:4b:3a:5d:32:3c:eb:c6:e1:b8:54:eb:ad:
a4:55:73:59:9c:b9:40:21:d3:8b:9a:ce:86:c7:7d:
12:f8:49:dc:8a:ad:ea:9d:5c:91:9f:5c:89:88:f1:
31:57:de:c8:c3:d3:67:80:56:9d:87:c8:5e:c7:25:
ac:45:d9:f3:c9:c8:42:5f:9f:8a:77:16:5d:79:40:
e3:0b:0b:d8:89:e1:8e:0a:21:3b:34:bf:50:06:58:
19:90:ea:9a:ae:99:05:36:f2:46:ad:9b:b9:1c:90:
fe:b8:e8:46:39:97:60:72:41:20:4a:1f:3d:dc:28:
1d:96:8e:61:aa:11:fc:1d:b7:dc:6a:d6:56:3f:63:
63:41:97:b4:2c:ac:0c:a9:9b:56:b5:62:c0:35:2f:
ad:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:65:DD:23:41:34:B2:9F:ED:96:FD:4B:16:06:3B:4C:B7:84:EB:EC
X509v3 Authority Key Identifier:
keyid:41:73:EE:B8:D0:2F:5F:64:78:8B:3F:DC:78:D6:BA:B8:A5:5F:D1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4892a9-3b37-4d39-9c2b-d83ed140d28d/1/QXPuuNAvX2R4iz_ceNa6uKVf0Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:94:3f:98:eb:cb:67:2b:e7:ed:8a:bc:9f:1d:c5:9d:5b:ef:
7b:a5:97:f8:8f:99:fb:7f:73:23:65:6f:71:05:4f:dc:71:92:
72:66:e6:9b:6c:3d:0c:ae:93:32:2a:e0:1f:6e:8b:b1:9f:8b:
f5:19:24:34:c5:24:39:83:6f:33:1a:55:3e:d3:84:ad:86:06:
bd:b5:bd:2e:35:28:6e:12:7a:3f:99:35:81:63:87:c2:66:05:
dc:84:fd:65:49:e8:97:d1:93:ad:7c:db:d2:89:c8:7b:25:6a:
23:e8:21:4c:8f:1e:f4:11:51:95:6a:d6:47:24:f6:a5:84:35:
6e:6e:c4:88:e7:9c:0b:4b:a8:08:fe:b3:5d:ea:04:d5:9e:c1:
6b:20:a4:b4:36:b7:9e:65:62:64:9d:a8:95:1c:2b:24:0f:e0:
71:8a:59:9b:82:d4:35:54:05:b9:63:ac:5c:c3:51:61:96:50:
48:57:bc:a5:47:cf:e0:90:54:1f:19:fb:33:cc:82:9e:7d:89:
23:b6:a5:a4:d3:39:9e:0e:8d:b7:c8:76:11:16:b5:25:da:b2:
b2:0c:ed:58:23:29:a1:a9:2a:61:92:83:81:3b:b7:c8:60:6c:
18:50:94:bd:09:73:a0:b8:4b:5f:11:49:38:ad:62:e5:fa:d9:
d0:62:ac:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BPeshMCt51+6GcJ1lwg9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNzNlZWI4ZDAyZjVmNjQ3ODhiM2ZkYzc4ZDZiYWI4YTU1
ZmQxNmEwHhcNMjUwMTMxMTEwMDI5WhcNMjUwMjAxMTEwMDI5WjAzMTEwLwYDVQQD
EygyOTY1ZGQyMzQxMzRiMjlmZWQ5NmZkNGIxNjA2M2I0Y2I3ODRlYmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjNJ6PhYu04PQwUdSb8LcdBylAvf
QdyWFy2qCINUj44XVsIPhIj0S+B8DtFu1A8IbsPtXDtcrTjdOrjb3Xas0rEPr0HA
OA6n02zp8n8YnlnK0mdr950HCs58TLi2b9cHkW4LX1TMnhqqsIJLOl0yPOvG4bhU
662kVXNZnLlAIdOLms6Gx30S+Enciq3qnVyRn1yJiPExV97Iw9NngFadh8hexyWs
RdnzychCX5+KdxZdeUDjCwvYieGOCiE7NL9QBlgZkOqarpkFNvJGrZu5HJD+uOhG
OZdgckEgSh893Cgdlo5hqhH8HbfcatZWP2NjQZe0LKwMqZtWtWLANS+t7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCll3SNBNLKf7Zb9SxYGO0y3hOvsMB8GA1UdIwQY
MBaAFEFz7rjQL19keIs/3HjWurilX9FqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80ODkyYTktM2IzNy00ZDM5LTljMmIt
ZDgzZWQxNDBkMjhkLzEvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80ODkyYTktM2IzNy00ZDM5LTljMmItZDgzZWQxNDBkMjhk
LzEvUVhQdXVOQXZYMlI0aXpfY2VOYTZ1S1ZmMFdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOpQ/mOvL
Zyvn7Yq8nx3FnVvve6WX+I+Z+39zI2VvcQVP3HGScmbmm2w9DK6TMirgH26LsZ+L
9RkkNMUkOYNvMxpVPtOErYYGvbW9LjUobhJ6P5k1gWOHwmYF3IT9ZUnol9GTrXzb
0onIeyVqI+ghTI8e9BFRlWrWRyT2pYQ1bm7EiOecC0uoCP6zXeoE1Z7BayCktDa3
nmViZJ2olRwrJA/gcYpZm4LUNVQFuWOsXMNRYZZQSFe8pUfP4JBUHxn7M8yCnn2J
I7alpNM5ng6Nt8h2ERa1JdqysgztWCMpoakqYZKDgTu3yGBsGFCUvQlzoLhLXxFJ
OK1i5frZ0GKsBg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:28:06 2025 by rpki-client