Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
File: qjX0oGEfcqiSww2CEtIfhswTqWc.mft (raw, json)
Hash identifier: zJM8Dl/lzYyWJWNtRp/l+Tjb+iKCU/cDD1WjztWULGo=
Subject key identifier: FC:22:75:93:E6:1F:1C:9F:C3:C9:54:95:84:EB:02:DC:5E:18:9F:E6
Authority key identifier: AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
Certificate issuer: /CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Certificate serial: 0194BC3BBA2CB5679DAE6A1482DF3FCDF566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
Manifest number: 04C3
Signing time: Fri 31 Jan 2025 12:00:18 +0000
Manifest this update: Fri 31 Jan 2025 12:00:18 +0000
Manifest next update: Sat 01 Feb 2025 12:00:18 +0000
Files and hashes: 1: qjX0oGEfcqiSww2CEtIfhswTqWc.crl (hash: 8M5/mftGsvz+6gRdMq8wBbjk15ckzE4U/JlCgsGH+vY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ba:2c:b5:67:9d:ae:6a:14:82:df:3f:cd:f5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Validity
Not Before: Jan 31 12:00:18 2025 GMT
Not After : Feb 1 12:00:18 2025 GMT
Subject: CN=fc227593e61f1c9fc3c9549584eb02dc5e189fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:20:96:25:08:6c:f6:91:b7:fa:73:37:32:c5:
2b:0f:a2:b0:21:eb:6b:6d:75:aa:0a:2c:3d:3e:cf:
24:db:5d:af:a8:f5:d5:b4:36:79:ad:2d:6c:2a:43:
f3:e5:f8:78:1d:58:84:e7:e3:84:b9:b1:98:7a:6a:
36:b8:28:a2:0e:6f:2d:05:16:cf:5e:ec:4c:19:74:
b0:4a:73:35:44:2a:6a:9a:70:81:4b:6f:be:1c:00:
8b:73:86:9f:38:c9:b2:19:3e:b0:7a:f9:28:28:9b:
05:c0:f0:87:69:8e:f5:48:83:3c:0c:26:0c:c4:97:
05:22:e7:44:b0:20:20:4c:e5:48:dd:f5:e2:a3:e3:
0c:07:20:1d:e0:b4:a1:eb:9e:d4:2c:e5:b2:83:cc:
c6:b6:21:ea:65:26:6e:1a:be:31:75:1a:9e:75:2f:
cd:7e:05:85:09:94:ea:18:66:35:a0:ca:0c:54:fa:
1b:5b:25:77:d0:e9:20:1c:eb:76:5e:1a:95:01:ff:
33:25:68:51:75:23:62:cd:4e:8c:00:61:0c:8e:e5:
91:6f:8c:14:78:a9:8b:dc:f1:d6:4d:89:aa:d1:9c:
b9:bf:26:0f:ff:67:ce:9a:af:d0:ca:29:10:0a:3f:
16:cf:b2:c5:1a:64:93:76:98:b7:ec:5d:42:e8:3c:
ff:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:22:75:93:E6:1F:1C:9F:C3:C9:54:95:84:EB:02:DC:5E:18:9F:E6
X509v3 Authority Key Identifier:
keyid:AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:28:c6:77:a7:a6:b9:7d:9b:43:9d:dd:fc:42:00:b9:05:44:
0a:7e:2f:df:79:36:a5:df:27:30:5b:45:65:6c:da:bd:c3:24:
b1:17:bf:e7:bf:2d:e7:a4:1e:1a:ca:02:dd:5e:e7:c8:45:bd:
83:a4:d8:b4:3b:d5:fe:2b:07:3b:c2:69:f9:a4:6c:03:ed:da:
17:ba:b2:4d:64:a2:4a:a8:49:54:ca:65:a8:11:b9:d3:d7:d7:
f1:98:ce:f9:a1:e7:01:99:d3:50:39:42:27:4a:e5:81:c8:db:
be:f8:48:79:29:c2:c2:54:01:20:40:21:0d:74:f9:71:3c:6d:
cf:c5:f7:7e:ad:17:98:f5:56:a9:38:83:79:b8:bc:b6:bd:b3:
8a:34:c8:38:e2:ed:12:b9:19:44:cb:e5:f6:e4:bf:d3:c4:fc:
aa:16:7b:17:bb:a6:92:13:33:76:96:49:e1:3f:5b:6c:5b:d0:
1c:18:4d:74:a8:6c:62:91:d1:7e:1d:8c:3f:94:16:b0:0e:da:
1e:96:6e:2e:7b:83:53:0a:3a:d1:1f:91:77:69:ed:8e:d9:1f:
23:f3:91:84:2b:a2:f6:62:0b:e1:b3:84:12:04:1b:e7:17:6b:
97:b4:d2:65:16:bd:92:17:c3:a4:a4:9c:9f:9e:d8:e3:9a:9a:
20:79:c6:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O7ostWedrmoUgt8/zfVmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMzVmNGEwNjExZjcyYTg5MmMzMGQ4MjEyZDIxZjg2Y2Mx
M2E5NjcwHhcNMjUwMTMxMTIwMDE4WhcNMjUwMjAxMTIwMDE4WjAzMTEwLwYDVQQD
EyhmYzIyNzU5M2U2MWYxYzlmYzNjOTU0OTU4NGViMDJkYzVlMTg5ZmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiCWJQhs9pG3+nM3MsUrD6KwIetr
bXWqCiw9Ps8k212vqPXVtDZ5rS1sKkPz5fh4HViE5+OEubGYemo2uCiiDm8tBRbP
XuxMGXSwSnM1RCpqmnCBS2++HACLc4afOMmyGT6wevkoKJsFwPCHaY71SIM8DCYM
xJcFIudEsCAgTOVI3fXio+MMByAd4LSh657ULOWyg8zGtiHqZSZuGr4xdRqedS/N
fgWFCZTqGGY1oMoMVPobWyV30OkgHOt2XhqVAf8zJWhRdSNizU6MAGEMjuWRb4wU
eKmL3PHWTYmq0Zy5vyYP/2fOmq/QyikQCj8Wz7LFGmSTdpi37F1C6Dz/RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwidZPmHxyfw8lUlYTrAtxeGJ/mMB8GA1UdIwQY
MBaAFKo19KBhH3KoksMNghLSH4bME6lnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWpYMG9HRWZjcWlTd3cyQ0V0SWZoc3dUcVdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hYTFmOTQtODgyNS00YmRkLWI0ZDgt
NmJiZmU1OGExY2EwLzEvcWpYMG9HRWZjcWlTd3cyQ0V0SWZoc3dUcVdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9hYTFmOTQtODgyNS00YmRkLWI0ZDgtNmJiZmU1OGExY2Ew
LzEvcWpYMG9HRWZjcWlTd3cyQ0V0SWZoc3dUcVdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASSjGd6em
uX2bQ53d/EIAuQVECn4v33k2pd8nMFtFZWzavcMksRe/578t56QeGsoC3V7nyEW9
g6TYtDvV/isHO8Jp+aRsA+3aF7qyTWSiSqhJVMplqBG509fX8ZjO+aHnAZnTUDlC
J0rlgcjbvvhIeSnCwlQBIEAhDXT5cTxtz8X3fq0XmPVWqTiDebi8tr2zijTIOOLt
ErkZRMvl9uS/08T8qhZ7F7umkhMzdpZJ4T9bbFvQHBhNdKhsYpHRfh2MP5QWsA7a
HpZuLnuDUwo60R+Rd2ntjtkfI/ORhCui9mIL4bOEEgQb5xdrl7TSZRa9khfDpKSc
n57Y45qaIHnGGQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:59:51 2025 by rpki-client