Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft
File: Q7iP8e37ZyBmAwJncaquyEuLHrg.mft (raw, json)
Hash identifier: 4P+Rrl5vgjVXSLLY4/SfWpwDS7rCr0OPbToUiYcBh7k=
Subject key identifier: B4:EB:24:DD:F1:C4:44:E3:88:FB:07:DB:C8:77:5C:B7:2B:62:A0:BB
Authority key identifier: 43:B8:8F:F1:ED:FB:67:20:66:03:02:67:71:AA:AE:C8:4B:8B:1E:B8
Certificate issuer: /CN=43b88ff1edfb67206603026771aaaec84b8b1eb8
Certificate serial: 0194BCAA3F0F978E9FBD79E637E3AC72ABDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft
Manifest number: 0BDA
Signing time: Fri 31 Jan 2025 14:01:01 +0000
Manifest this update: Fri 31 Jan 2025 14:01:01 +0000
Manifest next update: Sat 01 Feb 2025 14:01:01 +0000
Files and hashes: 1: Q7iP8e37ZyBmAwJncaquyEuLHrg.crl (hash: 1gM8YmnHramx4ilQlaMy9sJH6HKtIHoJvchyy/MWfsI=)
2: gg-emnwJIGdBmpEHYh5OFvjnfmc.roa (hash: f0YF0XqFky78qYjbpn5730w15nHy84AldxyEdZxgOEY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:3f:0f:97:8e:9f:bd:79:e6:37:e3:ac:72:ab:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43b88ff1edfb67206603026771aaaec84b8b1eb8
Validity
Not Before: Jan 31 14:01:01 2025 GMT
Not After : Feb 1 14:01:01 2025 GMT
Subject: CN=b4eb24ddf1c444e388fb07dbc8775cb72b62a0bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a5:04:27:0c:ef:79:7f:f8:60:cb:0b:41:81:
44:d0:de:85:2d:a2:38:7c:78:c0:37:a0:f6:c4:1d:
6e:74:e6:c2:7a:c6:06:21:49:0e:67:28:40:77:b0:
80:a1:20:0f:64:21:e6:68:b1:9c:6a:b2:34:b1:4b:
5a:cc:a6:88:98:d6:a5:3d:cc:cb:f9:c6:19:5d:ad:
0a:1f:65:ca:a3:dc:63:4c:48:32:47:4d:a4:b5:25:
8b:6f:d0:7c:0d:74:41:73:c2:5c:04:21:ea:dd:ad:
18:95:04:94:d2:04:06:00:c6:4e:1c:9c:9a:3f:b7:
57:d1:17:3c:0f:9a:bd:0d:49:86:ef:81:fc:e5:41:
c1:61:1f:83:e9:52:4f:a0:11:3a:38:e7:a1:dd:69:
93:26:a5:54:a5:58:01:b9:38:4d:4a:e7:93:61:92:
0c:fa:4a:8b:5e:d3:bb:d4:be:06:a6:40:8d:d9:fb:
51:ca:57:ce:5d:47:d5:b3:bc:c9:be:97:5d:1f:43:
e3:68:98:16:26:17:93:fb:d7:26:0f:07:c4:34:bb:
58:ca:63:49:43:ff:98:e8:71:6b:99:e3:f5:25:0c:
dd:61:91:c9:df:5e:53:63:f0:dc:da:e6:85:29:69:
da:96:af:ad:4e:df:ee:a4:36:a3:15:9d:37:23:a4:
86:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:EB:24:DD:F1:C4:44:E3:88:FB:07:DB:C8:77:5C:B7:2B:62:A0:BB
X509v3 Authority Key Identifier:
keyid:43:B8:8F:F1:ED:FB:67:20:66:03:02:67:71:AA:AE:C8:4B:8B:1E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:5b:8d:cc:e7:f9:39:0c:50:d6:7d:37:14:87:29:b3:d1:aa:
d0:b7:7c:df:61:63:8d:1b:59:b5:7a:d5:70:a7:e5:fa:e8:f5:
70:20:4d:91:1b:e9:5d:e5:5c:44:50:49:41:57:dc:fe:cd:a4:
1e:6e:5f:a9:28:4c:35:31:41:fe:9a:3e:fc:31:6e:73:cd:27:
d1:c9:64:e5:e5:91:ea:a9:5d:52:4e:be:7a:e7:bd:9b:33:86:
78:7d:3a:da:24:03:b4:bc:03:35:29:c6:98:c3:24:d5:7d:dc:
18:5e:1d:66:14:d5:0d:3a:61:b7:a4:12:45:38:5b:ba:e3:8b:
2b:19:03:ef:0c:27:61:a7:3a:21:62:64:b9:6c:7c:39:d0:9b:
49:72:9d:5e:db:56:56:4d:c5:45:6f:c0:1a:f9:d1:ce:a0:64:
b2:4e:87:9a:4f:bf:ca:74:6a:ed:68:87:2d:ad:19:15:e5:fc:
de:bf:8a:5d:05:c9:f9:e9:a0:8d:80:39:61:95:64:3d:36:ca:
09:79:ee:a1:85:12:9b:47:66:ae:bd:f8:97:d8:c6:ce:cc:de:
05:71:25:3b:16:99:d0:ff:78:e0:13:5b:6f:07:11:7a:32:5a:
4e:e9:57:2e:79:57:cd:2e:ba:74:0e:01:e7:f3:87:ba:24:27:
44:5e:85:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qj8Pl46fvXnmN+OscqvcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYjg4ZmYxZWRmYjY3MjA2NjAzMDI2NzcxYWFhZWM4NGI4
YjFlYjgwHhcNMjUwMTMxMTQwMTAxWhcNMjUwMjAxMTQwMTAxWjAzMTEwLwYDVQQD
EyhiNGViMjRkZGYxYzQ0NGUzODhmYjA3ZGJjODc3NWNiNzJiNjJhMGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6UEJwzveX/4YMsLQYFE0N6FLaI4
fHjAN6D2xB1udObCesYGIUkOZyhAd7CAoSAPZCHmaLGcarI0sUtazKaImNalPczL
+cYZXa0KH2XKo9xjTEgyR02ktSWLb9B8DXRBc8JcBCHq3a0YlQSU0gQGAMZOHJya
P7dX0Rc8D5q9DUmG74H85UHBYR+D6VJPoBE6OOeh3WmTJqVUpVgBuThNSueTYZIM
+kqLXtO71L4GpkCN2ftRylfOXUfVs7zJvpddH0PjaJgWJheT+9cmDwfENLtYymNJ
Q/+Y6HFrmeP1JQzdYZHJ315TY/Dc2uaFKWnalq+tTt/upDajFZ03I6SGvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTrJN3xxETjiPsH28h3XLcrYqC7MB8GA1UdIwQY
MBaAFEO4j/Ht+2cgZgMCZ3GqrshLix64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTdpUDhlMzdaeUJtQXdKbmNhcXV5RXVMSHJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9lNWM3ODMtNDM2ZS00NmU1LWI1MTQt
YzFiZTVkYzAxYmJlLzEvUTdpUDhlMzdaeUJtQXdKbmNhcXV5RXVMSHJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9lNWM3ODMtNDM2ZS00NmU1LWI1MTQtYzFiZTVkYzAxYmJl
LzEvUTdpUDhlMzdaeUJtQXdKbmNhcXV5RXVMSHJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJFuNzOf5
OQxQ1n03FIcps9Gq0Ld832FjjRtZtXrVcKfl+uj1cCBNkRvpXeVcRFBJQVfc/s2k
Hm5fqShMNTFB/po+/DFuc80n0clk5eWR6qldUk6+eue9mzOGeH062iQDtLwDNSnG
mMMk1X3cGF4dZhTVDTpht6QSRThbuuOLKxkD7wwnYac6IWJkuWx8OdCbSXKdXttW
Vk3FRW/AGvnRzqBksk6Hmk+/ynRq7WiHLa0ZFeX83r+KXQXJ+emgjYA5YZVkPTbK
CXnuoYUSm0dmrr34l9jGzszeBXElOxaZ0P944BNbbwcRejJaTulXLnlXzS66dA4B
5/OHuiQnRF6F3g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:14 2025 by rpki-client