Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
File: QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft (raw, json)
Hash identifier: Hir0d/KB4CutMzR0w77ccZLbRKYhTvZuh8t/6IQ134s=
Subject key identifier: 27:FB:DB:A5:65:2E:9B:91:C0:5C:1A:BF:EE:25:05:66:87:50:A8:90
Authority key identifier: 42:35:35:AA:6C:31:7B:A7:6C:CB:81:BB:FE:E5:D4:74:B1:93:E6:E3
Certificate issuer: /CN=423535aa6c317ba76ccb81bbfee5d474b193e6e3
Certificate serial: 0194BC73188FC2F4DE4AAF616CA01E0713C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
Manifest number: 074A
Signing time: Fri 31 Jan 2025 13:00:46 +0000
Manifest this update: Fri 31 Jan 2025 13:00:46 +0000
Manifest next update: Sat 01 Feb 2025 13:00:46 +0000
Files and hashes: 1: QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl (hash: GlpqjYHLkE2POWjnonf2MdR6SquWY5iX/4zc9ydsCRc=)
2: _1j-vq_YcHaEMFMbb53TSNwHgps.roa (hash: FFNOOLLPGSug4NyRBtLQbxLYgOZN6JLp0mqYGuu/rHU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:18:8f:c2:f4:de:4a:af:61:6c:a0:1e:07:13:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423535aa6c317ba76ccb81bbfee5d474b193e6e3
Validity
Not Before: Jan 31 13:00:46 2025 GMT
Not After : Feb 1 13:00:46 2025 GMT
Subject: CN=27fbdba5652e9b91c05c1abfee2505668750a890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6e:9e:00:36:31:f4:47:bb:7c:91:b5:49:8a:
93:ae:ea:4e:ac:9c:36:22:70:1c:2d:ad:0c:e0:d2:
c5:56:41:ab:ba:f4:79:5f:2d:08:95:0d:a1:53:cf:
12:4b:a2:aa:c0:a9:83:0f:5c:aa:f6:16:5f:a6:c2:
fc:e4:60:5e:b6:c3:ba:9e:3b:4d:5c:b9:72:41:9f:
22:31:e8:f3:0b:28:cc:3e:22:3a:49:77:2a:cb:71:
d6:3d:8c:f7:f7:14:20:0b:84:03:00:a9:b2:83:00:
12:47:fe:88:e1:50:c7:0b:9a:53:3f:36:aa:b4:3c:
45:c9:81:9e:1a:51:e4:f8:06:be:b7:05:e5:37:b1:
f8:45:52:59:12:cb:ac:e8:4c:a1:12:6a:ac:50:a9:
3d:ad:d7:e6:25:d4:d8:05:fa:03:31:c8:7a:57:ac:
f2:13:47:e7:d8:bd:02:48:e8:0e:0f:be:c7:ff:9c:
9f:1c:e3:0c:b5:ca:ec:1c:65:c4:8c:45:2e:3d:b5:
04:7f:41:47:11:33:28:84:a8:93:86:6e:62:92:8c:
e2:c1:16:98:65:3c:a6:8b:e4:47:53:51:ee:60:1c:
bf:17:93:47:49:98:5a:2b:e6:13:2a:e6:cd:8b:b2:
55:32:08:57:02:fc:00:8e:e5:73:f6:52:50:fe:6f:
08:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:FB:DB:A5:65:2E:9B:91:C0:5C:1A:BF:EE:25:05:66:87:50:A8:90
X509v3 Authority Key Identifier:
keyid:42:35:35:AA:6C:31:7B:A7:6C:CB:81:BB:FE:E5:D4:74:B1:93:E6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:83:48:ea:39:a9:82:cf:78:3d:7f:0a:a3:b6:99:fc:38:3a:
70:d9:f7:ca:8a:6b:e4:af:f9:00:7a:73:56:94:f5:d8:92:dc:
a4:54:39:f9:ab:36:b2:e3:36:bb:26:9f:93:41:44:1c:34:36:
b2:c2:bb:5f:1d:f4:0c:06:e2:38:4c:c1:e0:bf:a9:75:70:d1:
db:6b:40:ca:dd:06:2d:d1:40:9c:f1:b7:7e:86:d0:fb:50:02:
f6:9b:c2:c1:39:12:07:7b:a5:13:ce:bb:f8:b5:a9:4d:92:4c:
f2:73:77:8c:dd:d0:f1:0f:0f:3a:da:95:53:cd:07:94:39:45:
b2:51:b0:1f:91:36:db:0b:47:a8:d8:d8:bc:18:60:10:f2:30:
40:92:84:1d:81:f6:cb:7f:7c:f1:d2:83:f4:96:f9:14:22:40:
24:e1:6d:52:7b:17:57:08:82:d3:39:be:78:e3:74:74:97:d8:
cf:f0:c5:3e:8f:6d:41:6e:8f:1d:68:a5:30:2a:f8:86:dc:7b:
34:be:65:39:1b:54:ac:1e:9b:2e:75:03:e9:84:6c:e1:72:67:
11:83:d3:63:a1:65:90:b5:ce:06:ec:c6:b9:ff:fa:d5:66:38:
5f:e0:01:8a:b2:a1:1e:5f:06:f6:83:bb:06:a4:94:34:f0:2b:
46:b7:c7:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cxiPwvTeSq9hbKAeBxPFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMzUzNWFhNmMzMTdiYTc2Y2NiODFiYmZlZTVkNDc0YjE5
M2U2ZTMwHhcNMjUwMTMxMTMwMDQ2WhcNMjUwMjAxMTMwMDQ2WjAzMTEwLwYDVQQD
EygyN2ZiZGJhNTY1MmU5YjkxYzA1YzFhYmZlZTI1MDU2Njg3NTBhODkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt26eADYx9Ee7fJG1SYqTrupOrJw2
InAcLa0M4NLFVkGruvR5Xy0IlQ2hU88SS6KqwKmDD1yq9hZfpsL85GBetsO6njtN
XLlyQZ8iMejzCyjMPiI6SXcqy3HWPYz39xQgC4QDAKmygwASR/6I4VDHC5pTPzaq
tDxFyYGeGlHk+Aa+twXlN7H4RVJZEsus6EyhEmqsUKk9rdfmJdTYBfoDMch6V6zy
E0fn2L0CSOgOD77H/5yfHOMMtcrsHGXEjEUuPbUEf0FHETMohKiThm5ikoziwRaY
ZTymi+RHU1HuYBy/F5NHSZhaK+YTKubNi7JVMghXAvwAjuVz9lJQ/m8IEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCf726VlLpuRwFwav+4lBWaHUKiQMB8GA1UdIwQY
MBaAFEI1NapsMXunbMuBu/7l1HSxk+bjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWpVMXFtd3hlNmRzeTRHN191WFVkTEdUNXVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9hMTJiN2EtMmU0YS00ZjIyLTg4MTEt
MDk5NTg3YzcxYmFiLzEvUWpVMXFtd3hlNmRzeTRHN191WFVkTEdUNXVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9hMTJiN2EtMmU0YS00ZjIyLTg4MTEtMDk5NTg3YzcxYmFi
LzEvUWpVMXFtd3hlNmRzeTRHN191WFVkTEdUNXVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArINI6jmp
gs94PX8Ko7aZ/Dg6cNn3yopr5K/5AHpzVpT12JLcpFQ5+as2suM2uyafk0FEHDQ2
ssK7Xx30DAbiOEzB4L+pdXDR22tAyt0GLdFAnPG3fobQ+1AC9pvCwTkSB3ulE867
+LWpTZJM8nN3jN3Q8Q8POtqVU80HlDlFslGwH5E22wtHqNjYvBhgEPIwQJKEHYH2
y3988dKD9Jb5FCJAJOFtUnsXVwiC0zm+eON0dJfYz/DFPo9tQW6PHWilMCr4htx7
NL5lORtUrB6bLnUD6YRs4XJnEYPTY6FlkLXOBuzGuf/61WY4X+ABirKhHl8G9oO7
BqSUNPArRrfH6Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:53 2025 by rpki-client