Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
File: Q68umH0rY63apa3BePMekNh2qqc.mft (raw, json)
Hash identifier: EYOzET0N6kyjiUYTtz8sLIwa/Kd+xgiBiSKFMXkDK4o=
Subject key identifier: A7:20:D0:19:D7:91:7A:6A:E3:5E:CF:79:D3:3F:0A:5C:61:D7:52:3B
Authority key identifier: 43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
Certificate issuer: /CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Certificate serial: 0194BCA972C28CD38B6D7A4720E5C461B882
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:08 +0000
Manifest this update: Fri 31 Jan 2025 14:00:08 +0000
Manifest next update: Sat 01 Feb 2025 14:00:08 +0000
Files and hashes: 1: 71gvIX06FZhti5C8KqbG-iL3ji8.roa (hash: ixliMnZsbefklIbCdZSQC08KvvVc2/x3CDK+CGl2CBA=)
2: KX5-b8tfIxZ9QaObI34wusMJAu8.roa (hash: E8pkGADzxdyLbNBpzexYq9jUYKSiA426sagviGcATi8=)
3: Q68umH0rY63apa3BePMekNh2qqc.crl (hash: 2Ga5ZuF+Hy4i/0c1TI1gdewUPY760uN5exd0P6ETqR4=)
4: XwmnQ9xqPRkuLArWSFnpHEebGQg.roa (hash: Y7Tgn3WDH0rYWGZT30S1SX34Yy+8g/AzLBEDrpEo5zI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:72:c2:8c:d3:8b:6d:7a:47:20:e5:c4:61:b8:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Validity
Not Before: Jan 31 14:00:08 2025 GMT
Not After : Feb 1 14:00:08 2025 GMT
Subject: CN=a720d019d7917a6ae35ecf79d33f0a5c61d7523b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e5:c6:35:bb:86:22:22:c0:eb:5f:dc:ea:6b:
12:98:d6:82:aa:dc:82:96:ee:a9:2f:71:91:0e:ce:
74:6e:29:68:66:04:e8:3f:de:87:d3:fa:30:82:6c:
68:91:65:1c:f8:5c:76:e0:a5:f5:b4:e0:cb:89:0b:
3c:46:97:b5:00:75:47:c5:f9:93:16:ab:71:17:35:
11:67:80:b7:5d:1e:18:d8:8e:c5:45:b2:c6:91:87:
4d:16:58:c2:f2:2e:b7:60:9f:21:1e:57:26:87:29:
76:70:2f:58:df:87:18:db:c8:91:a5:56:21:c4:29:
72:fa:d3:04:69:b9:fb:c4:f4:90:89:7f:a3:3f:83:
1a:17:ac:e3:f3:dd:13:c4:3e:25:1e:23:b8:7d:9b:
24:31:db:02:18:40:fc:10:aa:1e:d7:b5:d1:9e:da:
86:3b:15:f1:f4:fc:24:94:ce:e1:73:76:9b:c3:24:
67:8c:fc:00:f0:cc:3c:42:ce:eb:e2:6f:23:a5:12:
85:3b:c6:5d:22:4e:55:aa:aa:15:95:c7:2c:0f:36:
74:93:93:e1:e7:5b:1b:31:4b:42:5d:09:6b:0f:38:
29:f2:f5:32:bc:87:a4:7a:76:1d:b4:2e:dc:8e:ee:
44:31:1d:61:4b:52:9b:86:43:4d:dc:a6:92:5a:79:
5f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:20:D0:19:D7:91:7A:6A:E3:5E:CF:79:D3:3F:0A:5C:61:D7:52:3B
X509v3 Authority Key Identifier:
keyid:43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ec:05:69:41:e4:eb:66:a3:de:5a:95:38:9a:c3:86:3f:df:
e8:91:84:ee:a6:23:7c:63:49:d4:1a:1c:be:4d:7c:c5:22:53:
6c:00:ef:bd:52:b0:ae:91:df:25:b7:c0:c5:97:2f:0d:b4:05:
aa:dd:69:7f:60:48:53:cc:ee:da:49:96:8f:2c:3c:bb:1e:5c:
95:5d:1a:29:99:1c:d5:82:89:21:82:2e:6a:9a:57:90:33:f2:
a9:e0:a7:3b:8e:4c:94:7d:c1:d6:d1:eb:f2:b5:5f:8d:3e:d9:
b7:aa:e7:61:6a:f0:31:67:5a:39:5d:84:4b:e5:eb:0f:d5:70:
cb:da:61:fb:21:c8:5c:b4:2e:36:1f:b3:d7:b0:88:5c:e7:ab:
23:76:86:96:0f:18:d4:b2:a2:d5:5a:28:b9:1b:c0:68:cb:2c:
1b:f8:6f:ef:a9:c4:4c:07:ab:e5:76:b7:aa:f8:d4:7e:8c:3e:
fd:3a:01:6c:b1:66:f2:ec:da:dc:75:62:37:f6:48:fe:b1:46:
e8:44:f0:0d:40:84:c4:1b:c6:24:87:81:7c:25:e6:3f:e3:a5:
b2:4c:28:f5:c6:d5:5c:0a:0e:47:56:c5:21:33:e6:de:dc:7b:
6c:e8:c9:8e:69:5c:f5:c2:04:cf:98:9c:d4:41:7b:ff:13:c4:
a2:6e:d6:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qXLCjNOLbXpHIOXEYbiCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYWYyZTk4N2QyYjYzYWRkYWE1YWRjMTc4ZjMxZTkwZDg3
NmFhYTcwHhcNMjUwMTMxMTQwMDA4WhcNMjUwMjAxMTQwMDA4WjAzMTEwLwYDVQQD
EyhhNzIwZDAxOWQ3OTE3YTZhZTM1ZWNmNzlkMzNmMGE1YzYxZDc1MjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOXGNbuGIiLA61/c6msSmNaCqtyC
lu6pL3GRDs50biloZgToP96H0/owgmxokWUc+Fx24KX1tODLiQs8Rpe1AHVHxfmT
FqtxFzURZ4C3XR4Y2I7FRbLGkYdNFljC8i63YJ8hHlcmhyl2cC9Y34cY28iRpVYh
xCly+tMEabn7xPSQiX+jP4MaF6zj890TxD4lHiO4fZskMdsCGED8EKoe17XRntqG
OxXx9PwklM7hc3abwyRnjPwA8Mw8Qs7r4m8jpRKFO8ZdIk5VqqoVlccsDzZ0k5Ph
51sbMUtCXQlrDzgp8vUyvIekenYdtC7cju5EMR1hS1KbhkNN3KaSWnlf7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKcg0BnXkXpq417PedM/Clxh11I7MB8GA1UdIwQY
MBaAFEOvLph9K2Ot2qWtwXjzHpDYdqqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTY4dW1IMHJZNjNhcGEzQmVQTWVrTmgycXFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82Njg0MzctOTdjMi00OGMyLWI3Yzgt
Y2M3NzQ2NzE5NDA2LzEvUTY4dW1IMHJZNjNhcGEzQmVQTWVrTmgycXFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi82Njg0MzctOTdjMi00OGMyLWI3YzgtY2M3NzQ2NzE5NDA2
LzEvUTY4dW1IMHJZNjNhcGEzQmVQTWVrTmgycXFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfewFaUHk
62aj3lqVOJrDhj/f6JGE7qYjfGNJ1Bocvk18xSJTbADvvVKwrpHfJbfAxZcvDbQF
qt1pf2BIU8zu2kmWjyw8ux5clV0aKZkc1YKJIYIuappXkDPyqeCnO45MlH3B1tHr
8rVfjT7Zt6rnYWrwMWdaOV2ES+XrD9Vwy9ph+yHIXLQuNh+z17CIXOerI3aGlg8Y
1LKi1VoouRvAaMssG/hv76nETAer5Xa3qvjUfow+/ToBbLFm8uza3HViN/ZI/rFG
6ETwDUCExBvGJIeBfCXmP+Olskwo9cbVXAoOR1bFITPm3tx7bOjJjmlc9cIEz5ic
1EF7/xPEom7W/g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:25:01 2025 by rpki-client