Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
File: qGBDVsdQGuIQSyzO087cXb3BFjs.mft (raw, json)
Hash identifier: Dyq2weCbjQbdVhF/wNmgB4nLzjA8ws0NYrw2xprfyWs=
Subject key identifier: 5D:CB:46:AC:17:18:FC:B0:DA:D6:BE:99:8B:11:A0:15:94:20:15:59
Authority key identifier: A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
Certificate issuer: /CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Certificate serial: 0194BBCDBD194D19FBC635736814593AB144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
Manifest number: 04E7
Signing time: Fri 31 Jan 2025 10:00:10 +0000
Manifest this update: Fri 31 Jan 2025 10:00:10 +0000
Manifest next update: Sat 01 Feb 2025 10:00:10 +0000
Files and hashes: 1: jnSve3XmFe0Ms43uzQn1WmoreJ0.roa (hash: JpZLimfc7+7aqyHJzwRKIdaJc+FFYashS7WERx4Vf3Q=)
2: qGBDVsdQGuIQSyzO087cXb3BFjs.crl (hash: ER0LELcMYZzVhza6y3ry4UE1RnGS62bXE4vxdrqN/1c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:bd:19:4d:19:fb:c6:35:73:68:14:59:3a:b1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Validity
Not Before: Jan 31 10:00:10 2025 GMT
Not After : Feb 1 10:00:10 2025 GMT
Subject: CN=5dcb46ac1718fcb0dad6be998b11a01594201559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:38:01:8e:d8:a3:9c:f0:27:0a:c9:0b:44:cb:
f2:89:af:8d:b9:5f:9a:7e:97:86:fe:f8:f8:2c:1c:
70:e0:e3:7c:a3:4c:fc:f1:37:89:b0:6c:c0:43:bc:
19:83:f4:ed:8c:ab:53:46:44:e5:bb:38:fb:80:64:
32:1d:f5:68:40:24:fd:be:84:6b:7c:69:76:84:90:
90:08:fe:d7:42:df:27:2c:34:f3:96:df:41:f6:92:
16:db:cb:cb:da:6c:32:f7:a4:5c:81:39:94:0e:db:
81:d1:c0:11:84:11:63:d3:8b:01:9c:b7:15:99:26:
31:c2:c6:87:1b:4e:c0:93:35:c7:d7:37:c4:12:d6:
e7:5a:e0:1c:ea:3a:56:c1:b3:75:7c:88:3d:ea:74:
eb:14:e7:a0:a4:1c:c3:63:c8:9b:a8:8c:94:b9:e7:
55:c3:06:93:12:11:61:d1:9d:af:10:f6:34:d7:21:
0e:8b:d9:6e:6f:34:e3:55:ce:3f:4f:99:4d:cb:1c:
02:66:32:9a:9e:92:d7:34:a3:30:ee:c4:1a:05:94:
45:9c:a3:0f:ae:b6:25:9d:9d:db:2d:fc:21:1c:e1:
95:cf:18:3a:80:69:a4:33:e4:45:74:76:f7:f2:cb:
98:2e:a0:55:1e:88:72:1d:d5:3a:16:02:5a:16:86:
bb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CB:46:AC:17:18:FC:B0:DA:D6:BE:99:8B:11:A0:15:94:20:15:59
X509v3 Authority Key Identifier:
keyid:A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b9:78:2b:a2:ef:96:4d:96:a0:7c:bd:f6:58:25:0e:97:51:
57:1f:b5:ae:74:ec:ca:8d:50:93:e9:ca:70:09:67:66:14:ed:
66:6d:d2:b7:50:c0:32:24:70:dc:22:31:a2:b2:c0:7f:fc:07:
7c:23:5a:25:5f:26:c2:1a:7a:57:52:36:02:ad:fd:db:93:51:
19:ed:62:76:2f:18:0d:13:61:84:42:a0:70:2f:e1:3c:89:7b:
b0:72:ce:99:38:f2:3c:2b:4e:41:29:fb:6c:15:1d:1d:53:c4:
2f:f3:a9:3b:25:9b:22:45:d6:c7:72:51:69:93:ec:64:c8:db:
20:84:76:6f:6a:77:1a:b7:5f:3b:dc:93:0d:e4:c8:50:d4:3d:
f1:09:e8:2d:63:1b:09:4b:5a:42:7e:9d:10:e8:3c:b8:04:3e:
46:12:0c:0d:53:12:e1:89:f6:b8:4b:60:d4:dc:41:07:34:b6:
b0:df:6e:8a:bc:5c:35:4f:7a:1d:d8:36:82:9a:b6:9a:a4:31:
55:76:f6:e8:da:26:50:be:e9:a0:17:e6:be:62:8b:cf:48:f3:
1d:29:8b:2a:16:95:70:13:79:b0:4c:d5:fb:56:7c:06:19:14:
95:aa:33:6a:bb:97:cf:8a:7b:2f:5f:01:fb:f3:43:9e:ab:71:
3b:7a:60:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zb0ZTRn7xjVzaBRZOrFEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NjA0MzU2Yzc1MDFhZTIxMDRiMmNjZWQzY2VkYzVkYmRj
MTE2M2IwHhcNMjUwMTMxMTAwMDEwWhcNMjUwMjAxMTAwMDEwWjAzMTEwLwYDVQQD
Eyg1ZGNiNDZhYzE3MThmY2IwZGFkNmJlOTk4YjExYTAxNTk0MjAxNTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDgBjtijnPAnCskLRMvyia+NuV+a
fpeG/vj4LBxw4ON8o0z88TeJsGzAQ7wZg/TtjKtTRkTluzj7gGQyHfVoQCT9voRr
fGl2hJCQCP7XQt8nLDTzlt9B9pIW28vL2mwy96RcgTmUDtuB0cARhBFj04sBnLcV
mSYxwsaHG07AkzXH1zfEEtbnWuAc6jpWwbN1fIg96nTrFOegpBzDY8ibqIyUuedV
wwaTEhFh0Z2vEPY01yEOi9lubzTjVc4/T5lNyxwCZjKanpLXNKMw7sQaBZRFnKMP
rrYlnZ3bLfwhHOGVzxg6gGmkM+RFdHb38suYLqBVHohyHdU6FgJaFoa7LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF3LRqwXGPyw2ta+mYsRoBWUIBVZMB8GA1UdIwQY
MBaAFKhgQ1bHUBriEEssztPO3F29wRY7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUdCRFZzZFFHdUlRU3l6TzA4N2NYYjNCRmpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC80NTg1MDEtYWNhYi00MmVkLThhNmEt
N2JlYmJiNzBjMDUwLzEvcUdCRFZzZFFHdUlRU3l6TzA4N2NYYjNCRmpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC80NTg1MDEtYWNhYi00MmVkLThhNmEtN2JlYmJiNzBjMDUw
LzEvcUdCRFZzZFFHdUlRU3l6TzA4N2NYYjNCRmpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjrl4K6Lv
lk2WoHy99lglDpdRVx+1rnTsyo1Qk+nKcAlnZhTtZm3St1DAMiRw3CIxorLAf/wH
fCNaJV8mwhp6V1I2Aq3925NRGe1idi8YDRNhhEKgcC/hPIl7sHLOmTjyPCtOQSn7
bBUdHVPEL/OpOyWbIkXWx3JRaZPsZMjbIIR2b2p3GrdfO9yTDeTIUNQ98QnoLWMb
CUtaQn6dEOg8uAQ+RhIMDVMS4Yn2uEtg1NxBBzS2sN9uirxcNU96Hdg2gpq2mqQx
VXb26NomUL7poBfmvmKLz0jzHSmLKhaVcBN5sEzV+1Z8BhkUlaozaruXz4p7L18B
+/NDnqtxO3pgWw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:58:47 2025 by rpki-client