Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.mft
File: Q_2TYug7hS8_0zEbCQlvYommoPg.mft (raw, json)
Hash identifier: dFb3lIrbH9xiqB6OUwpTawehNqaN+bUUIKc10vW3GUI=
Subject key identifier: D0:01:3D:2D:D4:FD:7D:A7:48:F7:29:3D:47:B8:53:06:88:0C:A8:F2
Authority key identifier: 43:FD:93:62:E8:3B:85:2F:3F:D3:31:1B:09:09:6F:62:89:A6:A0:F8
Certificate issuer: /CN=43fd9362e83b852f3fd3311b09096f6289a6a0f8
Certificate serial: 0194BCE08AF3AC89518E41193FAC50C5CAB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_2TYug7hS8_0zEbCQlvYommoPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.mft
Manifest number: 0CFF
Signing time: Fri 31 Jan 2025 15:00:19 +0000
Manifest this update: Fri 31 Jan 2025 15:00:19 +0000
Manifest next update: Sat 01 Feb 2025 15:00:19 +0000
Files and hashes: 1: Fy-RDVpoQYqhk9YIhC0_OXJ7Ngw.roa (hash: MSpbkpTae0BKWb0wW1Z5MLxX2eex/b1uULBuB1GrJoU=)
2: Q_2TYug7hS8_0zEbCQlvYommoPg.crl (hash: Ud4Fqb3DnndBd+h+OIX8Hx3We59zYYVpvIyNtgs4iWo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:8a:f3:ac:89:51:8e:41:19:3f:ac:50:c5:ca:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43fd9362e83b852f3fd3311b09096f6289a6a0f8
Validity
Not Before: Jan 31 15:00:19 2025 GMT
Not After : Feb 1 15:00:19 2025 GMT
Subject: CN=d0013d2dd4fd7da748f7293d47b85306880ca8f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7d:91:bd:9c:8d:9f:85:97:da:79:7c:36:4f:
c2:22:e4:74:50:3a:3a:1f:b9:86:e6:23:1c:c2:68:
34:63:a7:c6:f6:bc:5b:53:e3:94:6f:c5:28:0e:84:
f3:98:0c:d5:0c:a6:71:59:2e:59:dd:d5:aa:f1:5d:
16:d3:cb:95:90:74:84:ec:87:dd:c3:3a:ec:26:11:
ba:41:75:53:ec:f7:31:d5:14:0e:37:10:aa:ef:44:
48:28:c0:fb:30:17:6a:ce:ca:c5:f2:26:16:1b:3d:
ac:38:19:c9:f6:7f:60:a5:78:68:b4:dd:e2:92:b2:
8b:ce:e9:cb:52:41:50:ea:66:c8:f4:0c:77:04:6a:
6f:fe:06:a0:a5:56:e4:ba:58:6c:24:4a:67:9d:19:
a0:e7:74:92:71:0d:c2:23:e4:65:df:c0:32:4a:07:
5f:b8:69:72:49:6d:bf:f0:10:26:b8:35:5a:0c:7b:
22:c3:de:6c:d6:05:b2:91:b8:e5:b4:81:ed:0c:44:
6e:21:99:27:1e:b4:47:d1:68:e7:db:25:97:db:29:
e0:08:c5:a5:49:6b:e1:96:92:00:32:68:aa:0e:a7:
d1:8b:ae:33:aa:45:4e:74:74:74:c0:27:12:39:3b:
fd:00:70:74:6d:bd:c5:39:70:e2:0c:01:c5:81:1f:
31:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:01:3D:2D:D4:FD:7D:A7:48:F7:29:3D:47:B8:53:06:88:0C:A8:F2
X509v3 Authority Key Identifier:
keyid:43:FD:93:62:E8:3B:85:2F:3F:D3:31:1B:09:09:6F:62:89:A6:A0:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_2TYug7hS8_0zEbCQlvYommoPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1d3c15-3416-44ad-9a89-6547bb1b80c2/1/Q_2TYug7hS8_0zEbCQlvYommoPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:83:a8:20:52:1e:0e:3a:3c:6a:2c:ce:2f:15:7e:4b:01:1b:
5d:cd:56:a3:4a:9a:a1:f8:cf:6f:cf:f8:48:6e:cb:43:03:93:
ff:dc:55:66:af:c8:c8:cd:aa:d4:cd:55:2b:31:95:64:44:f6:
b2:58:e9:b0:da:cb:13:0c:4c:20:f8:0e:b2:b7:f3:59:3e:7a:
09:72:95:54:fd:86:38:de:3f:4d:2e:4c:88:a6:89:63:2a:1f:
37:8a:d0:ab:c6:5a:d8:f1:b4:e9:5f:98:ec:4c:1c:94:df:89:
2e:5a:93:15:0a:7b:a5:e7:34:fd:2f:0b:39:ff:ac:ef:db:34:
a4:8d:60:3f:b5:80:01:4b:0b:e6:8a:a5:c5:53:07:79:9a:76:
4a:08:be:eb:da:ee:ca:10:7a:ae:3b:cc:b9:4b:88:c1:2e:55:
15:ed:e8:a7:02:84:ea:21:85:06:17:f1:30:08:84:fd:34:e8:
60:f7:45:91:ed:72:76:01:8a:ca:f7:eb:5e:f5:e2:bf:63:e6:
12:e3:d0:0e:31:35:90:1d:e0:63:5f:66:00:1d:99:f5:9d:92:
dc:00:01:fb:d8:67:f8:ac:cb:f2:6f:24:f9:77:51:fa:40:b6:
f2:78:07:5a:b2:02:56:73:44:a1:17:93:54:19:c3:16:47:f0:
b7:dd:e8:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84IrzrIlRjkEZP6xQxcqzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZmQ5MzYyZTgzYjg1MmYzZmQzMzExYjA5MDk2ZjYyODlh
NmEwZjgwHhcNMjUwMTMxMTUwMDE5WhcNMjUwMjAxMTUwMDE5WjAzMTEwLwYDVQQD
EyhkMDAxM2QyZGQ0ZmQ3ZGE3NDhmNzI5M2Q0N2I4NTMwNjg4MGNhOGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs32RvZyNn4WX2nl8Nk/CIuR0UDo6
H7mG5iMcwmg0Y6fG9rxbU+OUb8UoDoTzmAzVDKZxWS5Z3dWq8V0W08uVkHSE7Ifd
wzrsJhG6QXVT7Pcx1RQONxCq70RIKMD7MBdqzsrF8iYWGz2sOBnJ9n9gpXhotN3i
krKLzunLUkFQ6mbI9Ax3BGpv/gagpVbkulhsJEpnnRmg53SScQ3CI+Rl38AySgdf
uGlySW2/8BAmuDVaDHsiw95s1gWykbjltIHtDERuIZknHrRH0Wjn2yWX2yngCMWl
SWvhlpIAMmiqDqfRi64zqkVOdHR0wCcSOTv9AHB0bb3FOXDiDAHFgR8xVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNABPS3U/X2nSPcpPUe4UwaIDKjyMB8GA1UdIwQY
MBaAFEP9k2LoO4UvP9MxGwkJb2KJpqD4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUV8yVFl1ZzdoUzhfMHpFYkNRbHZZb21tb1BnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xZDNjMTUtMzQxNi00NGFkLTlhODkt
NjU0N2JiMWI4MGMyLzEvUV8yVFl1ZzdoUzhfMHpFYkNRbHZZb21tb1BnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xZDNjMTUtMzQxNi00NGFkLTlhODktNjU0N2JiMWI4MGMy
LzEvUV8yVFl1ZzdoUzhfMHpFYkNRbHZZb21tb1BnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAioOoIFIe
Djo8aizOLxV+SwEbXc1Wo0qaofjPb8/4SG7LQwOT/9xVZq/IyM2q1M1VKzGVZET2
sljpsNrLEwxMIPgOsrfzWT56CXKVVP2GON4/TS5MiKaJYyofN4rQq8Za2PG06V+Y
7EwclN+JLlqTFQp7pec0/S8LOf+s79s0pI1gP7WAAUsL5oqlxVMHeZp2Sgi+69ru
yhB6rjvMuUuIwS5VFe3opwKE6iGFBhfxMAiE/TToYPdFke1ydgGKyvfrXvXiv2Pm
EuPQDjE1kB3gY19mAB2Z9Z2S3AAB+9hn+KzL8m8k+XdR+kC28ngHWrICVnNEoReT
VBnDFkfwt93ouw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:24:49 2025 by rpki-client