Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
File: _-QUYBinY6QqUVVjWb8Vv4XjmsY.mft (raw, json)
Hash identifier: 78/h7v/1Y9ee49qE1ICjmQtgE+bzRhcXYDNoFVc8IMU=
Subject key identifier: C5:51:CF:52:61:47:1F:05:CC:90:E9:F8:14:64:31:4B:2E:C9:46:36
Authority key identifier: FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6
Certificate issuer: /CN=ffe4146018a763a42a51556359bf15bf85e39ac6
Certificate serial: 0194BD4E6FDA0128517B45A91DAADC3C70FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 17:00:21 +0000
Manifest this update: Fri 31 Jan 2025 17:00:21 +0000
Manifest next update: Sat 01 Feb 2025 17:00:21 +0000
Files and hashes: 1: ZFIfq_Xye8VtZ1sU3ca9G22FxVM.roa (hash: 1343QU7GIEueYXR0jEegPvkq04EIWR5lFSBDfcLfgSA=)
2: _-QUYBinY6QqUVVjWb8Vv4XjmsY.crl (hash: lMBT8KdYXL9qg/XtiFHpVQ+rWjshYN4nruUT+LVpzHw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6f:da:01:28:51:7b:45:a9:1d:aa:dc:3c:70:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe4146018a763a42a51556359bf15bf85e39ac6
Validity
Not Before: Jan 31 17:00:21 2025 GMT
Not After : Feb 1 17:00:21 2025 GMT
Subject: CN=c551cf5261471f05cc90e9f81464314b2ec94636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2f:a6:05:73:d4:c3:09:ef:ec:89:3e:fe:b2:
97:8b:be:fd:d8:9a:36:86:ad:44:a9:89:90:4c:8e:
34:41:1c:f2:34:05:21:fe:a6:4a:06:c1:ba:aa:e7:
e0:10:76:0b:2b:35:33:e2:fe:b7:43:ab:13:39:98:
c2:dd:8a:db:56:28:1f:4c:f3:90:a0:9f:3a:de:da:
70:16:dc:fc:72:f9:05:2e:6d:e6:8b:e2:e0:70:e4:
41:41:61:5e:a0:23:dd:d7:0e:4e:3f:8e:5c:63:ce:
da:a4:5a:3f:99:2f:5e:20:cc:32:f6:94:b0:9d:1e:
64:9d:94:2d:1d:ed:13:f6:01:a8:68:c1:1d:18:39:
d8:9f:f2:89:6b:dd:b1:51:80:ae:00:2e:44:7c:a0:
ae:ba:f9:de:8d:76:39:3f:a6:17:6d:ae:f4:07:71:
86:5e:3f:7f:c2:cc:de:a3:b7:ba:e2:b1:28:13:14:
96:b4:27:69:53:8d:75:a9:ec:a2:52:2b:05:ac:f1:
0f:0c:0b:47:88:eb:25:64:90:61:de:b3:ed:c0:5a:
79:81:24:a7:06:74:84:fd:dc:76:6e:6c:ce:e9:51:
89:20:18:5e:7e:35:d2:17:6b:5c:bb:1d:42:bf:17:
1d:7f:ca:3c:f7:d2:19:8f:4e:96:12:80:c4:4a:08:
0f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:51:CF:52:61:47:1F:05:CC:90:E9:F8:14:64:31:4B:2E:C9:46:36
X509v3 Authority Key Identifier:
keyid:FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:28:21:f1:e1:ec:96:95:e8:c3:a5:9e:e7:2b:e3:67:aa:61:
9b:a0:2a:01:00:7f:64:59:60:d0:e5:b0:a7:ba:f3:98:55:33:
68:e9:44:2e:45:50:90:36:7e:87:90:99:36:ba:d8:c1:f4:04:
64:03:1d:fa:10:6d:09:22:64:9c:dd:b3:00:65:91:67:ff:2a:
6c:b6:6f:34:fb:24:61:c0:eb:ac:ae:e4:cd:a1:65:e6:97:8c:
13:ac:a4:29:f2:4f:df:21:50:15:a9:80:d7:91:34:7f:db:3f:
73:c4:fc:f5:a8:d9:e9:6a:50:3a:96:3d:3a:9a:e1:5c:4e:8c:
e8:ce:50:23:ca:be:3d:4a:00:96:4f:f8:93:10:db:de:8b:1c:
9a:61:cc:43:b5:d3:ac:8d:f7:5d:ac:ed:c5:b9:f3:5c:66:c1:
60:99:07:15:43:59:f7:4b:86:99:5c:f4:35:ab:38:7a:62:41:
62:75:55:1d:37:75:86:28:08:e4:4b:57:93:55:90:ec:f1:ff:
a5:da:8d:c0:b4:1c:13:0c:c8:4d:8e:fc:12:39:dc:a4:14:11:
54:db:30:40:8c:d5:75:70:3f:bb:f8:ed:35:d6:c9:ee:a9:f0:
f3:3f:36:d7:6a:ed:3b:d7:ee:3d:80:fb:c1:b6:af:d7:1a:42:
3c:30:8e:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tm/aAShRe0WpHarcPHD/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZTQxNDYwMThhNzYzYTQyYTUxNTU2MzU5YmYxNWJmODVl
MzlhYzYwHhcNMjUwMTMxMTcwMDIxWhcNMjUwMjAxMTcwMDIxWjAzMTEwLwYDVQQD
EyhjNTUxY2Y1MjYxNDcxZjA1Y2M5MGU5ZjgxNDY0MzE0YjJlYzk0NjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi+mBXPUwwnv7Ik+/rKXi7792Jo2
hq1EqYmQTI40QRzyNAUh/qZKBsG6qufgEHYLKzUz4v63Q6sTOZjC3YrbVigfTPOQ
oJ863tpwFtz8cvkFLm3mi+LgcORBQWFeoCPd1w5OP45cY87apFo/mS9eIMwy9pSw
nR5knZQtHe0T9gGoaMEdGDnYn/KJa92xUYCuAC5EfKCuuvnejXY5P6YXba70B3GG
Xj9/wszeo7e64rEoExSWtCdpU411qeyiUisFrPEPDAtHiOslZJBh3rPtwFp5gSSn
BnSE/dx2bmzO6VGJIBhefjXSF2tcux1Cvxcdf8o899IZj06WEoDESggPsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVRz1JhRx8FzJDp+BRkMUsuyUY2MB8GA1UdIwQY
MBaAFP/kFGAYp2OkKlFVY1m/Fb+F45rGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXy1RVVlCaW5ZNlFxVVZWaldiOFZ2NFhqbXNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yMjAxMTMtNDRmMS00ZGM1LWIwYmMt
YTY1NjA1OGM1MzFmLzEvXy1RVVlCaW5ZNlFxVVZWaldiOFZ2NFhqbXNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8yMjAxMTMtNDRmMS00ZGM1LWIwYmMtYTY1NjA1OGM1MzFm
LzEvXy1RVVlCaW5ZNlFxVVZWaldiOFZ2NFhqbXNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASSgh8eHs
lpXow6We5yvjZ6phm6AqAQB/ZFlg0OWwp7rzmFUzaOlELkVQkDZ+h5CZNrrYwfQE
ZAMd+hBtCSJknN2zAGWRZ/8qbLZvNPskYcDrrK7kzaFl5peME6ykKfJP3yFQFamA
15E0f9s/c8T89ajZ6WpQOpY9OprhXE6M6M5QI8q+PUoAlk/4kxDb3oscmmHMQ7XT
rI33XaztxbnzXGbBYJkHFUNZ90uGmVz0Nas4emJBYnVVHTd1higI5EtXk1WQ7PH/
pdqNwLQcEwzITY78EjncpBQRVNswQIzVdXA/u/jtNdbJ7qnw8z8212rtO9fuPYD7
wbav1xpCPDCO/w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:26:38 2025 by rpki-client