Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
File: q9h7vvWUNUayqD0x7CuZrYg9Udc.mft (raw, json)
Hash identifier: MVV8q1ynrmqZgsGCYEXJMfGF2E7MGi8R0v8GTonM1wM=
Subject key identifier: E4:3E:F1:17:EF:30:E5:E6:02:EB:EC:8E:04:1E:EE:9F:C3:92:8A:AC
Authority key identifier: AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
Certificate issuer: /CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Certificate serial: 0194BC3C458D246FB456B8B56AB2858C314C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
Manifest number: 0990
Signing time: Fri 31 Jan 2025 12:00:54 +0000
Manifest this update: Fri 31 Jan 2025 12:00:54 +0000
Manifest next update: Sat 01 Feb 2025 12:00:54 +0000
Files and hashes: 1: 7d46OTwbNs5KuUyqdxKYkS8NBJI.roa (hash: 4Rn+6tq432h7x4Ge16LfuM8y8RGTaZzgBXirAxsJ5MM=)
2: HHYTxAvbn4nuCD1NEky4HWGAtGc.roa (hash: t9aKBjKzundXNxaOe/jFb9HR2pns+s0n9RcDSD2onl4=)
3: W2NhW2V8Iexgd4nWoDLptnalys8.roa (hash: qN2oaoKEpYxm1heQ0tQCx/vfqwegOgZk4tzwgcNVmWg=)
4: XB2P8pqeFQE5V_wiPLEy8Uw8TL4.roa (hash: eEOspJ3pbx3Bzx3yuT7YUHqNvJo2s+nrBm58kVOY9b8=)
5: e70_76D8VUKzyOllsP-C6ko3aJ4.roa (hash: YSc6a0NAXpNIVXvLTAs9uQ9JjUM2SpjCK+qzw0/wRpY=)
6: q9h7vvWUNUayqD0x7CuZrYg9Udc.crl (hash: WVsgLCcSPiDKFRXDLDXyFdp3k+jpuRBUesQZVw6d77Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:45:8d:24:6f:b4:56:b8:b5:6a:b2:85:8c:31:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Validity
Not Before: Jan 31 12:00:54 2025 GMT
Not After : Feb 1 12:00:54 2025 GMT
Subject: CN=e43ef117ef30e5e602ebec8e041eee9fc3928aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2b:25:90:a4:3b:8c:6f:79:dc:ee:66:6a:30:
c4:51:ef:65:69:89:86:13:c5:a3:6b:e2:ff:3c:13:
26:c9:c5:76:95:ef:32:ec:db:08:57:e2:4d:ab:26:
6c:00:c9:b8:0f:03:e2:f8:83:9d:c5:d7:9f:1e:9e:
5f:43:16:3e:cb:ff:41:d4:db:70:5c:e2:46:f1:30:
72:f0:c6:6a:ad:4c:24:b7:f5:35:07:d7:9b:20:80:
bd:cd:0b:c8:94:7a:41:1d:72:ee:22:59:6f:64:a0:
5f:ca:22:20:c4:24:c0:eb:7b:68:9b:6b:33:a7:cb:
f0:cd:71:a8:cd:7a:0c:41:40:e9:c6:9d:7e:e0:18:
ff:b7:55:00:1b:47:2f:d2:f2:c2:33:c5:24:f4:7b:
dd:fb:8a:5c:86:fa:9d:77:29:89:71:2d:a9:8f:8c:
dd:dc:e3:2a:c9:1e:bb:a3:b8:d0:ad:19:eb:da:c0:
1d:8e:f1:40:ee:0f:9e:c8:ee:2d:24:07:33:1c:e0:
a1:fd:24:13:ef:8c:e1:d2:32:3f:32:d1:7d:35:dc:
4b:87:a9:51:2e:a8:47:0b:97:e7:8c:f7:9b:a6:8b:
48:14:10:03:c7:23:97:ac:d9:c6:a0:51:45:23:76:
d7:c4:29:40:5c:fd:bc:ed:cc:d8:cc:50:d5:f8:cc:
8e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3E:F1:17:EF:30:E5:E6:02:EB:EC:8E:04:1E:EE:9F:C3:92:8A:AC
X509v3 Authority Key Identifier:
keyid:AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:86:0b:95:8f:0a:1f:e5:7c:25:f7:98:25:86:b7:29:9a:ea:
35:3b:d3:01:1e:7a:96:09:4b:b6:84:b8:b8:01:b9:02:11:d9:
46:e4:d4:ef:44:27:9a:fb:0d:59:37:5f:3e:82:3f:09:67:bd:
92:a8:a8:a2:7f:14:cf:fe:6c:41:f4:20:da:1a:87:f7:f5:41:
30:19:ee:d4:12:53:1e:a2:e5:f4:39:89:5b:82:90:ae:69:79:
7a:4a:8d:d6:15:1a:dc:24:a7:0f:c8:05:f5:af:4e:1c:00:74:
e2:ee:36:c4:94:da:ad:88:59:d1:03:13:fc:a0:ea:3e:f0:39:
a2:3f:2b:70:74:c2:56:58:c5:89:57:32:24:d7:5e:20:26:08:
83:8a:1a:c3:76:4d:9f:37:4c:24:37:e8:7c:30:71:c8:38:e9:
cf:1b:aa:74:ac:0a:f3:57:1e:9c:74:af:92:77:22:d9:d0:c9:
cf:de:58:57:42:f9:d1:c7:d1:7c:1a:42:e3:46:58:6c:25:ca:
84:68:e1:92:19:cc:7d:84:c5:41:4d:a0:6f:61:66:ab:02:08:
3a:1c:bc:0b:ec:ea:f8:1c:bf:b3:4f:e2:0a:6f:3e:d9:4f:5f:
72:36:bc:91:1b:37:63:df:da:0f:a7:7f:0d:81:53:b7:80:97:
73:3e:4a:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PEWNJG+0Vri1arKFjDFMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiZDg3YmJlZjU5NDM1NDZiMmE4M2QzMWVjMmI5OWFkODgz
ZDUxZDcwHhcNMjUwMTMxMTIwMDU0WhcNMjUwMjAxMTIwMDU0WjAzMTEwLwYDVQQD
EyhlNDNlZjExN2VmMzBlNWU2MDJlYmVjOGUwNDFlZWU5ZmMzOTI4YWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApislkKQ7jG953O5majDEUe9laYmG
E8Wja+L/PBMmycV2le8y7NsIV+JNqyZsAMm4DwPi+IOdxdefHp5fQxY+y/9B1Ntw
XOJG8TBy8MZqrUwkt/U1B9ebIIC9zQvIlHpBHXLuIllvZKBfyiIgxCTA63tom2sz
p8vwzXGozXoMQUDpxp1+4Bj/t1UAG0cv0vLCM8Uk9Hvd+4pchvqddymJcS2pj4zd
3OMqyR67o7jQrRnr2sAdjvFA7g+eyO4tJAczHOCh/SQT74zh0jI/MtF9NdxLh6lR
LqhHC5fnjPebpotIFBADxyOXrNnGoFFFI3bXxClAXP287czYzFDV+MyOVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQ+8RfvMOXmAuvsjgQe7p/DkoqsMB8GA1UdIwQY
MBaAFKvYe771lDVGsqg9Mewrma2IPVHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84YWQyZTAtZTNmMC00YWJlLWJjYjYt
MmY1Yzc0YzY5YWUxLzEvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC84YWQyZTAtZTNmMC00YWJlLWJjYjYtMmY1Yzc0YzY5YWUx
LzEvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH4YLlY8K
H+V8JfeYJYa3KZrqNTvTAR56lglLtoS4uAG5AhHZRuTU70QnmvsNWTdfPoI/CWe9
kqioon8Uz/5sQfQg2hqH9/VBMBnu1BJTHqLl9DmJW4KQrml5ekqN1hUa3CSnD8gF
9a9OHAB04u42xJTarYhZ0QMT/KDqPvA5oj8rcHTCVljFiVcyJNdeICYIg4oaw3ZN
nzdMJDfofDBxyDjpzxuqdKwK81cenHSvknci2dDJz95YV0L50cfRfBpC40ZYbCXK
hGjhkhnMfYTFQU2gb2FmqwIIOhy8C+zq+By/s0/iCm8+2U9fcja8kRs3Y9/aD6d/
DYFTt4CXcz5KDQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:15:08 2025 by rpki-client