Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
File: q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft (raw, json)
Hash identifier: vI8HH7zbnQYrHWbrUbRcrXFI+a+6wPybyqL+SrP+p20=
Subject key identifier: 45:3C:9A:D8:64:1A:4A:74:75:6D:0E:2D:9D:CE:20:A5:70:C6:FC:31
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 0194BC7322CB04F9E5E0CA09F1F9FB8C0334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
Manifest number: 148B
Signing time: Fri 31 Jan 2025 13:00:49 +0000
Manifest this update: Fri 31 Jan 2025 13:00:49 +0000
Manifest next update: Sat 01 Feb 2025 13:00:49 +0000
Files and hashes: 1: B_Tk3gL-p_aDMGxj8mFQXz7p6IU.roa (hash: towVudD3ZHXUrLOMltR/8PyVnF7v/kv+y5JbOeuwBgs=)
2: QIAcGzg1E-mkwGlMwIaZKUybW5U.roa (hash: vPFlVcoFxwCs0hnXKdVw9v7+IGUFGVEz3iANXdrxvec=)
3: q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl (hash: LIHVnfJ6wTinzT8CUs8hMadQQ59SlC3TFY6zGApjkaw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:22:cb:04:f9:e5:e0:ca:09:f1:f9:fb:8c:03:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Jan 31 13:00:49 2025 GMT
Not After : Feb 1 13:00:49 2025 GMT
Subject: CN=453c9ad8641a4a74756d0e2d9dce20a570c6fc31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:73:b1:68:24:3a:02:64:ac:20:8e:24:1a:7a:
39:65:f8:79:a5:a2:83:c9:f7:3a:90:60:7e:fe:fe:
55:5a:d9:43:35:a3:21:47:34:2e:3d:47:52:b6:16:
36:92:fd:7b:f7:e3:97:a2:54:87:ab:43:15:44:96:
48:ba:8b:05:f7:40:3c:27:06:eb:96:c4:4c:af:34:
a9:6b:7b:7d:0e:80:78:d1:10:8b:43:c6:96:41:2d:
b4:35:06:df:73:7b:03:a8:b6:75:0f:76:18:c5:ef:
c9:67:86:f3:b6:f1:b0:b5:06:6b:93:2b:14:2e:d2:
3a:ca:42:2f:fe:d3:82:77:54:aa:1e:31:ee:fc:92:
0f:92:08:4e:71:63:a6:96:23:fe:b5:33:1b:9b:2e:
7b:d5:00:55:0f:fb:ea:42:05:e4:d8:e0:31:42:83:
f8:98:42:77:ed:37:2f:07:03:01:e3:a1:b1:73:14:
60:f8:ca:64:01:13:e1:7a:43:6f:f1:3c:a6:40:b2:
b0:15:b6:8e:68:f1:31:65:68:41:ec:16:a5:44:d4:
a0:35:ea:94:0c:57:3e:7e:ef:d5:be:73:93:98:7e:
bb:f6:bd:40:98:57:34:50:88:7d:fc:8a:6b:b9:4b:
5c:2e:96:e6:56:ff:d0:e5:90:55:7e:92:8b:1d:38:
a4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:3C:9A:D8:64:1A:4A:74:75:6D:0E:2D:9D:CE:20:A5:70:C6:FC:31
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ac:94:dd:84:61:44:26:59:b6:3e:3d:2d:94:e6:10:a1:52:
97:f1:31:71:7e:3e:e5:6a:6c:64:76:6d:01:cd:66:00:14:51:
fe:f9:00:a4:1b:d6:1d:3e:6a:5d:4a:56:fc:9a:43:1f:d4:9e:
5e:4d:bb:18:99:66:2f:92:2a:f0:29:b9:c3:ac:a8:89:64:0b:
83:94:f3:2c:63:9e:d3:26:3d:60:b4:68:2a:52:b9:4d:63:b7:
69:ba:37:ac:11:23:e0:2e:1b:19:7a:f7:39:8c:1a:95:83:23:
2d:97:83:8f:fc:81:9a:ab:4c:5b:4b:d6:02:8f:8f:f6:c1:84:
bf:08:fb:fe:99:65:e1:15:75:48:ac:f4:b8:e3:e3:df:0a:a3:
1a:85:2a:2b:49:84:1d:03:2d:00:5f:72:86:50:9a:f4:2d:92:
35:7c:79:20:14:e7:1d:69:8e:53:7c:a4:c8:12:6e:9b:e3:71:
3c:f9:2c:f3:26:d5:c2:d7:91:ac:a2:c6:fd:5a:b8:2e:f0:0a:
e4:11:6c:9c:64:c8:47:68:dd:57:52:04:e7:5c:a4:cf:ed:ad:
1e:9f:91:f2:72:b3:9e:2b:d7:89:59:a6:84:1f:c5:1c:2e:48:
71:6f:bd:d9:04:48:c4:9a:db:3a:c2:83:c0:d2:05:41:54:db:
64:88:1b:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cyLLBPnl4MoJ8fn7jAM0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNzFlOWIxM2Y1YzMzOWE1ODY5MmVlYWJlNzJlYWE0MDZi
YmJkN2QwHhcNMjUwMTMxMTMwMDQ5WhcNMjUwMjAxMTMwMDQ5WjAzMTEwLwYDVQQD
Eyg0NTNjOWFkODY0MWE0YTc0NzU2ZDBlMmQ5ZGNlMjBhNTcwYzZmYzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63OxaCQ6AmSsII4kGno5Zfh5paKD
yfc6kGB+/v5VWtlDNaMhRzQuPUdSthY2kv179+OXolSHq0MVRJZIuosF90A8Jwbr
lsRMrzSpa3t9DoB40RCLQ8aWQS20NQbfc3sDqLZ1D3YYxe/JZ4bztvGwtQZrkysU
LtI6ykIv/tOCd1SqHjHu/JIPkghOcWOmliP+tTMbmy571QBVD/vqQgXk2OAxQoP4
mEJ37TcvBwMB46GxcxRg+MpkARPhekNv8TymQLKwFbaOaPExZWhB7BalRNSgNeqU
DFc+fu/VvnOTmH679r1AmFc0UIh9/IpruUtcLpbmVv/Q5ZBVfpKLHTiksQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEU8mthkGkp0dW0OLZ3OIKVwxvwxMB8GA1UdIwQY
MBaAFKtx6bE/XDOaWGku6r5y6qQGu719MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTNIcHNUOWNNNXBZYVM3cXZuTHFwQWE3dlgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82YmEzOWMtZWYxZC00ZDQ4LTk4MmIt
Y2Y0YjkwMDk5N2EwLzEvcTNIcHNUOWNNNXBZYVM3cXZuTHFwQWE3dlgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82YmEzOWMtZWYxZC00ZDQ4LTk4MmItY2Y0YjkwMDk5N2Ew
LzEvcTNIcHNUOWNNNXBZYVM3cXZuTHFwQWE3dlgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeqyU3YRh
RCZZtj49LZTmEKFSl/ExcX4+5WpsZHZtAc1mABRR/vkApBvWHT5qXUpW/JpDH9Se
Xk27GJlmL5Iq8Cm5w6yoiWQLg5TzLGOe0yY9YLRoKlK5TWO3abo3rBEj4C4bGXr3
OYwalYMjLZeDj/yBmqtMW0vWAo+P9sGEvwj7/pll4RV1SKz0uOPj3wqjGoUqK0mE
HQMtAF9yhlCa9C2SNXx5IBTnHWmOU3ykyBJum+NxPPks8ybVwteRrKLG/Vq4LvAK
5BFsnGTIR2jdV1IE51ykz+2tHp+R8nKznivXiVmmhB/FHC5IcW+92QRIxJrbOsKD
wNIFQVTbZIgbgQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:54:33 2025 by rpki-client