Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
File: q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft (raw, json)
Hash identifier: /O8REvor81s5RaDrEA3msVpIuEVlcmgVOuw0bBYHSPw=
Subject key identifier: EC:E4:D6:0C:66:9C:8E:94:9C:52:F9:34:54:64:96:7F:59:30:43:FC
Authority key identifier: AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
Certificate issuer: /CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Certificate serial: 0194BD1799DC6C44A4966E93522D2F0F2EDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:27 +0000
Manifest this update: Fri 31 Jan 2025 16:00:27 +0000
Manifest next update: Sat 01 Feb 2025 16:00:27 +0000
Files and hashes: 1: S0sJgeFKsSQM_Y24-bMbEEazWOE.roa (hash: y7ujKOOyPaVjZL4Z2dl77e4qeqFzdcjNTXADyZzs44w=)
2: q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl (hash: ih1tJEsWMex1kqO07Empq59f0Lq7tFE5U9xUJ4hdfG8=)
3: r-ygRbjtxxgO3t3aGjdEJ1nnCcw.roa (hash: WR2yF8mNXvC7JDBK3ZnnxThACZnLlRj8L9WEQd6jnY4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:99:dc:6c:44:a4:96:6e:93:52:2d:2f:0f:2e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Validity
Not Before: Jan 31 16:00:27 2025 GMT
Not After : Feb 1 16:00:27 2025 GMT
Subject: CN=ece4d60c669c8e949c52f9345464967f593043fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e4:39:d2:c5:5e:54:34:37:97:ac:7d:85:89:
c8:5e:06:dd:ef:fa:5d:9c:52:81:eb:37:d5:4e:3b:
26:3d:7c:4a:62:6c:d1:3c:b5:a8:98:d1:68:fb:3c:
6d:a2:a7:4d:21:37:cf:ad:1d:4b:a4:84:3e:a1:c2:
06:48:8b:43:dd:66:c8:f2:a2:d2:05:07:ce:71:10:
88:b0:ca:d8:b6:d3:b6:48:ae:90:5d:f7:c3:f7:0b:
a6:ae:f9:4e:5c:b1:7f:e6:49:83:bb:e0:87:1a:0a:
c9:b5:9c:6e:77:6a:fa:12:be:a4:5d:6c:03:57:6e:
ad:d8:83:7d:ad:06:77:b8:a8:7d:c3:9e:35:c2:2a:
90:35:49:3a:b7:a7:83:46:ff:27:53:c6:d9:99:3d:
6a:0e:59:af:56:2e:85:8e:cb:f0:e2:f6:a7:d7:a1:
85:9f:4e:fa:ef:f5:62:72:c5:4d:39:73:8a:cd:e5:
6d:b0:df:50:16:7f:69:07:5d:3a:a1:1c:cc:0c:1f:
32:9d:61:97:aa:d3:0a:0f:bd:b1:a3:36:1f:5a:8f:
20:2b:fa:01:78:65:01:1c:c5:b1:12:64:f9:f2:29:
c5:87:00:85:31:38:df:95:6d:ff:1b:10:e3:cc:3a:
f6:f9:8c:eb:94:11:0d:f2:2c:b5:a3:3f:9f:f3:3a:
e3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E4:D6:0C:66:9C:8E:94:9C:52:F9:34:54:64:96:7F:59:30:43:FC
X509v3 Authority Key Identifier:
keyid:AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:36:df:48:8e:ab:86:ac:ef:99:ba:3a:8b:17:d0:24:88:b4:
93:aa:c8:bb:99:a7:20:65:b9:a6:b7:76:7e:23:b6:38:dc:2f:
e2:05:30:15:95:96:fb:07:2d:cd:ca:f3:67:66:fd:ed:8b:21:
aa:bc:69:d5:a0:d2:a8:11:ec:ab:74:c2:c9:83:e9:be:b8:05:
ca:cd:eb:63:38:a0:12:32:91:8f:3d:8a:8c:17:df:7a:30:73:
65:c0:3a:a4:d1:32:34:10:a8:ab:13:81:37:a3:ae:07:8d:89:
4e:d4:10:b5:6d:4f:c5:19:ec:98:41:44:3b:fc:29:17:90:0e:
6f:82:ae:7c:d4:d1:d1:dc:d8:4a:1e:f0:04:ff:de:71:b5:b3:
2e:47:4c:97:06:86:ee:a9:ad:dd:07:39:27:28:12:8c:60:31:
cf:9c:52:14:11:03:d4:9e:9d:a3:8f:57:b6:fe:00:47:07:50:
32:81:d4:76:f1:18:d7:49:dc:8e:35:2b:fc:d4:33:5e:2d:e4:
90:1b:2f:1c:93:22:8c:25:80:63:b8:21:d1:db:05:e5:31:36:
f3:32:50:77:49:0e:ca:81:e6:f1:ee:43:78:62:94:57:e5:ea:
d0:4a:36:8f:f4:c5:32:aa:5d:e6:f9:67:0d:b5:fd:fe:b6:b3:
ec:7e:24:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F5ncbESklm6TUi0vDy7bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYzQ1YjY1OGIxZWMwZmRlYjQ1OWU2ZmYyNTc3ZGI4Y2E2
YTkzMzAwHhcNMjUwMTMxMTYwMDI3WhcNMjUwMjAxMTYwMDI3WjAzMTEwLwYDVQQD
EyhlY2U0ZDYwYzY2OWM4ZTk0OWM1MmY5MzQ1NDY0OTY3ZjU5MzA0M2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOQ50sVeVDQ3l6x9hYnIXgbd7/pd
nFKB6zfVTjsmPXxKYmzRPLWomNFo+zxtoqdNITfPrR1LpIQ+ocIGSItD3WbI8qLS
BQfOcRCIsMrYttO2SK6QXffD9wumrvlOXLF/5kmDu+CHGgrJtZxud2r6Er6kXWwD
V26t2IN9rQZ3uKh9w541wiqQNUk6t6eDRv8nU8bZmT1qDlmvVi6Fjsvw4van16GF
n0767/VicsVNOXOKzeVtsN9QFn9pB106oRzMDB8ynWGXqtMKD72xozYfWo8gK/oB
eGUBHMWxEmT58inFhwCFMTjflW3/GxDjzDr2+YzrlBEN8iy1oz+f8zrjZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzk1gxmnI6UnFL5NFRkln9ZMEP8MB8GA1UdIwQY
MBaAFKvEW2WLHsD960Web/JXfbjKapMwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcThSYlpZc2V3UDNyUlo1djhsZDl1TXBxa3pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9jNWMxYjMtZTVjYS00YTgzLTgzOTAt
OTE3OTMzYjE1MDJlLzEvcThSYlpZc2V3UDNyUlo1djhsZDl1TXBxa3pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9jNWMxYjMtZTVjYS00YTgzLTgzOTAtOTE3OTMzYjE1MDJl
LzEvcThSYlpZc2V3UDNyUlo1djhsZDl1TXBxa3pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnjbfSI6r
hqzvmbo6ixfQJIi0k6rIu5mnIGW5prd2fiO2ONwv4gUwFZWW+wctzcrzZ2b97Ysh
qrxp1aDSqBHsq3TCyYPpvrgFys3rYzigEjKRjz2KjBffejBzZcA6pNEyNBCoqxOB
N6OuB42JTtQQtW1PxRnsmEFEO/wpF5AOb4KufNTR0dzYSh7wBP/ecbWzLkdMlwaG
7qmt3Qc5JygSjGAxz5xSFBED1J6do49Xtv4ARwdQMoHUdvEY10ncjjUr/NQzXi3k
kBsvHJMijCWAY7gh0dsF5TE28zJQd0kOyoHm8e5DeGKUV+Xq0Eo2j/TFMqpd5vln
DbX9/raz7H4k3Q==
-----END CERTIFICATE-----
Generated at Sat Apr 26 10:31:57 2025 by rpki-client