Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.mft
File: QD8Iu6_6QWGEMgOop1erbpVGsM4.mft (raw, json)
Hash identifier: 2xHEVvDdK57wNHWhpyhKLL2PzdXfMFhIwYvgvnhTnZE=
Subject key identifier: 60:6B:22:66:80:0D:8F:1F:DE:5F:DC:54:4C:7D:0A:A8:D3:B2:19:54
Authority key identifier: 40:3F:08:BB:AF:FA:41:61:84:32:03:A8:A7:57:AB:6E:95:46:B0:CE
Certificate issuer: /CN=403f08bbaffa4161843203a8a757ab6e9546b0ce
Certificate serial: 0194BCE0EC0B87CD4D213C4475C125588357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QD8Iu6_6QWGEMgOop1erbpVGsM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.mft
Manifest number: 033D
Signing time: Fri 31 Jan 2025 15:00:44 +0000
Manifest this update: Fri 31 Jan 2025 15:00:44 +0000
Manifest next update: Sat 01 Feb 2025 15:00:44 +0000
Files and hashes: 1: QD8Iu6_6QWGEMgOop1erbpVGsM4.crl (hash: 6XrD64KhWVU37asgLNJGs+wWfzurRWru1LIUkFCQ4WM=)
2: iZdS2-tNGexZgQ6b60_nSgwLQyg.roa (hash: fu8S/yGRbl5J7FTMShuPVuIAZ577VH2m1tV/BoybOg4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ec:0b:87:cd:4d:21:3c:44:75:c1:25:58:83:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403f08bbaffa4161843203a8a757ab6e9546b0ce
Validity
Not Before: Jan 31 15:00:44 2025 GMT
Not After : Feb 1 15:00:44 2025 GMT
Subject: CN=606b2266800d8f1fde5fdc544c7d0aa8d3b21954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8c:bf:c7:cb:14:e8:39:68:f4:be:3c:9f:3a:
ed:bb:28:61:4a:f4:37:3f:8c:37:6f:ff:cd:da:c8:
8a:ee:36:19:89:51:a4:19:29:ab:1d:bb:6e:7f:5e:
6b:ec:95:2d:01:39:94:37:86:1d:ac:cd:45:fd:07:
df:3c:9b:fd:f9:1c:58:ea:7a:95:b4:12:3c:dc:9a:
de:b3:3c:f2:30:21:72:7b:0b:81:ce:ce:5a:85:c2:
01:87:4c:cf:5d:fb:c4:4e:d4:30:01:11:aa:94:bf:
07:2d:08:d4:39:d4:09:1c:24:bf:d1:1c:b7:8e:30:
82:67:d4:0a:dc:70:e7:ac:30:70:d3:c9:71:21:42:
14:95:16:58:37:7b:32:4c:8b:7f:cd:b8:60:11:a8:
de:a4:4d:e7:17:f5:42:9d:55:8a:5d:1b:2a:b3:78:
b4:64:cb:1d:41:3c:01:8e:32:bc:e6:a0:7e:d8:09:
80:ca:71:9b:b7:27:9d:d6:5d:be:61:79:08:70:5f:
b5:3b:01:04:cc:92:c0:0f:7d:5b:d4:66:a2:56:6a:
7e:2b:6f:ec:c8:f8:7f:46:1f:3d:1c:46:76:80:44:
42:d9:eb:e2:86:01:93:2b:df:f3:ee:ec:5a:c0:a4:
94:9c:d9:ef:e6:15:9a:d7:65:63:c3:45:9f:5e:f9:
b4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:6B:22:66:80:0D:8F:1F:DE:5F:DC:54:4C:7D:0A:A8:D3:B2:19:54
X509v3 Authority Key Identifier:
keyid:40:3F:08:BB:AF:FA:41:61:84:32:03:A8:A7:57:AB:6E:95:46:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QD8Iu6_6QWGEMgOop1erbpVGsM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d06832-dbdf-4f87-99b8-38d8a78a4862/1/QD8Iu6_6QWGEMgOop1erbpVGsM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:9b:95:88:0e:65:c3:f4:8d:60:ff:e4:bb:a9:45:af:f8:a4:
a6:98:60:c3:84:36:a3:a0:8a:33:1c:3d:de:f4:63:3c:92:f3:
8c:6a:db:2b:ae:84:17:56:b6:e1:e7:ae:4f:5d:3b:fc:6d:e2:
f0:9f:15:75:c6:24:6d:9e:cd:aa:d0:d9:ba:21:6a:b7:1c:0f:
58:5f:d4:0f:3b:7e:f7:12:a1:3b:25:cc:25:24:a7:3f:e5:78:
66:bc:bf:49:e6:e7:4b:90:0f:a4:ea:2b:bc:55:a3:c5:e7:26:
bb:76:cb:08:f6:72:7e:1a:48:cd:51:ea:22:45:fc:48:df:d4:
fb:c3:f4:82:54:7f:e3:57:c7:04:ff:1a:42:a9:db:fd:fd:17:
80:89:2c:13:22:7c:72:61:18:bb:31:8e:d2:c6:a6:bf:8d:9a:
99:db:fe:63:a4:a5:b8:9d:08:28:a3:ee:39:3a:e2:76:38:9d:
30:1e:85:51:20:e7:96:d8:fa:79:fc:62:ea:f0:01:98:65:2c:
3f:29:c1:f4:d8:b0:19:60:7f:f1:59:81:fa:ae:b0:c4:6c:a5:
59:b9:c3:b2:85:b6:85:1c:32:45:20:7d:c1:23:31:3b:1a:a6:
98:29:dc:98:71:61:7e:58:31:17:d0:c7:63:7f:3a:e0:69:5e:
d6:69:9a:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84OwLh81NITxEdcElWINXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwM2YwOGJiYWZmYTQxNjE4NDMyMDNhOGE3NTdhYjZlOTU0
NmIwY2UwHhcNMjUwMTMxMTUwMDQ0WhcNMjUwMjAxMTUwMDQ0WjAzMTEwLwYDVQQD
Eyg2MDZiMjI2NjgwMGQ4ZjFmZGU1ZmRjNTQ0YzdkMGFhOGQzYjIxOTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4y/x8sU6Dlo9L48nzrtuyhhSvQ3
P4w3b//N2siK7jYZiVGkGSmrHbtuf15r7JUtATmUN4YdrM1F/QffPJv9+RxY6nqV
tBI83JreszzyMCFyewuBzs5ahcIBh0zPXfvETtQwARGqlL8HLQjUOdQJHCS/0Ry3
jjCCZ9QK3HDnrDBw08lxIUIUlRZYN3syTIt/zbhgEajepE3nF/VCnVWKXRsqs3i0
ZMsdQTwBjjK85qB+2AmAynGbtyed1l2+YXkIcF+1OwEEzJLAD31b1GaiVmp+K2/s
yPh/Rh89HEZ2gERC2evihgGTK9/z7uxawKSUnNnv5hWa12Vjw0WfXvm0YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGBrImaADY8f3l/cVEx9CqjTshlUMB8GA1UdIwQY
MBaAFEA/CLuv+kFhhDIDqKdXq26VRrDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUQ4SXU2XzZRV0dFTWdPb3AxZXJicFZHc000LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9kMDY4MzItZGJkZi00Zjg3LTk5Yjgt
MzhkOGE3OGE0ODYyLzEvUUQ4SXU2XzZRV0dFTWdPb3AxZXJicFZHc000Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9kMDY4MzItZGJkZi00Zjg3LTk5YjgtMzhkOGE3OGE0ODYy
LzEvUUQ4SXU2XzZRV0dFTWdPb3AxZXJicFZHc000LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGpuViA5l
w/SNYP/ku6lFr/ikpphgw4Q2o6CKMxw93vRjPJLzjGrbK66EF1a24eeuT107/G3i
8J8VdcYkbZ7NqtDZuiFqtxwPWF/UDzt+9xKhOyXMJSSnP+V4Zry/SebnS5APpOor
vFWjxecmu3bLCPZyfhpIzVHqIkX8SN/U+8P0glR/41fHBP8aQqnb/f0XgIksEyJ8
cmEYuzGO0samv42amdv+Y6SluJ0IKKPuOTridjidMB6FUSDnltj6efxi6vABmGUs
PynB9NiwGWB/8VmB+q6wxGylWbnDsoW2hRwyRSB9wSMxOxqmmCncmHFhflgxF9DH
Y3864Gle1mmaow==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:40 2025 by rpki-client