Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
File: QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft (raw, json)
Hash identifier: us9YFUyVd3SR3c4BSKybAVIOQfV03WIXLJL4TPmdBxg=
Subject key identifier: 39:73:F5:96:1D:48:53:85:BF:53:89:47:6B:2D:D6:B7:6A:08:0F:0C
Authority key identifier: 42:43:2A:31:9F:54:B0:58:37:2F:D3:25:28:EA:E5:1F:C9:0C:15:B2
Certificate issuer: /CN=42432a319f54b058372fd32528eae51fc90c15b2
Certificate serial: 0194BD85AAC6872D2BB785B064039C1D0F4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
Manifest number: D9
Signing time: Fri 31 Jan 2025 18:00:41 +0000
Manifest this update: Fri 31 Jan 2025 18:00:41 +0000
Manifest next update: Sat 01 Feb 2025 18:00:41 +0000
Files and hashes: 1: Fg4gfGthOyzcFXfxEYyjwrss7as.roa (hash: mWUv12QovIjIHXpuDNAMlgedx6+BQ3vMWaiHrsA7+3A=)
2: Q5e6g1WUMRG4cL4aNZtJqqD_-yo.roa (hash: T3aZ91YVxRUkDJ96e4vMqo7oCynEMTZ2Xb8h0pZbGMo=)
3: QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl (hash: /kLq9OHliicTPXK/zSxz9KHtZFeTuz4JFvfpA6HLJcI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:aa:c6:87:2d:2b:b7:85:b0:64:03:9c:1d:0f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42432a319f54b058372fd32528eae51fc90c15b2
Validity
Not Before: Jan 31 18:00:41 2025 GMT
Not After : Feb 1 18:00:41 2025 GMT
Subject: CN=3973f5961d485385bf5389476b2dd6b76a080f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:14:b6:47:35:35:a9:04:38:df:9f:68:48:eb:
c0:7f:81:c5:e2:af:6b:87:08:ad:33:49:8e:a9:24:
5c:06:c0:cc:b6:ff:ce:03:d9:ba:14:f9:d3:16:da:
c1:ff:55:3a:56:2a:af:33:3b:06:8a:45:b5:6b:e6:
df:ac:40:41:d7:87:ed:59:ab:79:0d:81:ac:87:ce:
f3:e4:8d:c9:ad:41:d7:fc:1c:5e:2c:5b:75:fe:e5:
97:2c:c5:f2:b2:08:e0:21:b0:55:2d:ec:af:8a:e7:
f1:b5:77:db:9b:cd:9a:22:e0:85:76:4f:01:ab:e0:
1d:77:76:a1:44:4a:12:ca:37:4a:bf:f4:79:48:3b:
39:b4:af:84:50:5c:d5:dc:c8:c3:bc:30:c7:f4:f4:
07:2b:f4:4e:03:ab:9f:41:29:fd:4a:7d:00:41:32:
7f:b0:60:9c:99:eb:96:ca:9c:ef:2e:15:63:60:76:
9f:5b:80:7d:ca:1c:ee:09:60:52:b0:a9:2a:cd:a9:
35:f3:98:c2:b5:84:29:74:58:44:96:78:42:68:49:
24:c1:86:86:0c:30:50:01:b3:41:6c:2e:e3:15:f5:
1f:d3:a3:73:e3:5d:a9:7f:52:89:a5:c6:53:b0:f3:
4b:cb:78:b9:5e:8e:1d:a3:29:46:c9:74:91:08:0d:
e3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:73:F5:96:1D:48:53:85:BF:53:89:47:6B:2D:D6:B7:6A:08:0F:0C
X509v3 Authority Key Identifier:
keyid:42:43:2A:31:9F:54:B0:58:37:2F:D3:25:28:EA:E5:1F:C9:0C:15:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:8d:94:6c:63:dc:0d:ed:f6:d7:ea:b8:17:dc:e4:cf:64:ea:
14:d6:bf:89:f7:d0:04:dc:5d:82:ba:27:6d:ed:33:32:ad:1f:
8b:60:a4:31:46:a8:f0:bc:d5:9b:4a:64:f3:ad:04:32:ba:f3:
0f:fc:77:52:4f:b8:27:fa:ec:13:b6:61:32:bd:af:f5:a4:96:
73:4f:73:87:71:11:f9:47:08:b0:c5:9a:0f:c6:21:01:75:e6:
eb:a6:ba:b4:a2:0f:01:90:31:5b:5d:9a:4b:2d:c3:ba:d8:91:
f3:81:57:b2:16:e1:6e:bb:00:76:99:46:42:65:ec:eb:e3:0b:
bf:0d:30:df:ee:b3:6b:3c:15:99:41:44:79:bb:42:85:58:28:
4c:9e:b6:2d:eb:ff:81:9e:82:b4:97:42:b7:b8:ec:e4:13:12:
81:9f:be:74:52:48:ea:97:62:51:6c:eb:0f:e8:c4:e4:69:83:
c3:a8:cb:20:8e:52:27:80:27:00:23:24:47:85:f6:95:19:6f:
a4:7f:87:e4:6a:c1:7d:e3:a8:49:05:e4:98:97:d3:e7:2c:c7:
c6:7b:54:82:64:45:4a:64:32:ff:18:e5:fa:b8:d1:05:1a:53:
ea:f1:84:78:62:38:ec:76:d3:34:30:9c:ed:25:d2:d5:ac:10:
13:6b:bd:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9harGhy0rt4WwZAOcHQ9OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNDMyYTMxOWY1NGIwNTgzNzJmZDMyNTI4ZWFlNTFmYzkw
YzE1YjIwHhcNMjUwMTMxMTgwMDQxWhcNMjUwMjAxMTgwMDQxWjAzMTEwLwYDVQQD
EygzOTczZjU5NjFkNDg1Mzg1YmY1Mzg5NDc2YjJkZDZiNzZhMDgwZjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhS2RzU1qQQ4359oSOvAf4HF4q9r
hwitM0mOqSRcBsDMtv/OA9m6FPnTFtrB/1U6ViqvMzsGikW1a+bfrEBB14ftWat5
DYGsh87z5I3JrUHX/BxeLFt1/uWXLMXysgjgIbBVLeyviufxtXfbm82aIuCFdk8B
q+Add3ahREoSyjdKv/R5SDs5tK+EUFzV3MjDvDDH9PQHK/ROA6ufQSn9Sn0AQTJ/
sGCcmeuWypzvLhVjYHafW4B9yhzuCWBSsKkqzak185jCtYQpdFhElnhCaEkkwYaG
DDBQAbNBbC7jFfUf06Nz412pf1KJpcZTsPNLy3i5Xo4doylGyXSRCA3jXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlz9ZYdSFOFv1OJR2st1rdqCA8MMB8GA1UdIwQY
MBaAFEJDKjGfVLBYNy/TJSjq5R/JDBWyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWtNcU1aOVVzRmczTDlNbEtPcmxIOGtNRmJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS83YWI3OWMtOWRmZi00YTVkLWFlODMt
MTMxZGMyYmEyZWM4LzEvUWtNcU1aOVVzRmczTDlNbEtPcmxIOGtNRmJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS83YWI3OWMtOWRmZi00YTVkLWFlODMtMTMxZGMyYmEyZWM4
LzEvUWtNcU1aOVVzRmczTDlNbEtPcmxIOGtNRmJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAI2UbGPc
De321+q4F9zkz2TqFNa/iffQBNxdgronbe0zMq0fi2CkMUao8LzVm0pk860EMrrz
D/x3Uk+4J/rsE7ZhMr2v9aSWc09zh3ER+UcIsMWaD8YhAXXm66a6tKIPAZAxW12a
Sy3DutiR84FXshbhbrsAdplGQmXs6+MLvw0w3+6zazwVmUFEebtChVgoTJ62Lev/
gZ6CtJdCt7js5BMSgZ++dFJI6pdiUWzrD+jE5GmDw6jLII5SJ4AnACMkR4X2lRlv
pH+H5GrBfeOoSQXkmJfT5yzHxntUgmRFSmQy/xjl+rjRBRpT6vGEeGI47HbTNDCc
7SXS1awQE2u9kQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:01:44 2025 by rpki-client