Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.mft
File: QhuumJiY2UAkJKra-7R8Om1MJbM.mft (raw, json)
Hash identifier: GvUjeVrGBhUy5qfxcwrZHCjtuUVzTR9cR138UgdHfcI=
Subject key identifier: 05:22:9A:94:4D:11:42:48:ED:00:5B:8C:B1:64:F9:84:2C:02:4C:BD
Authority key identifier: 42:1B:AE:98:98:98:D9:40:24:24:AA:DA:FB:B4:7C:3A:6D:4C:25:B3
Certificate issuer: /CN=421bae989898d9402424aadafbb47c3a6d4c25b3
Certificate serial: 0194BCE0662744123C8AE11772363AD896F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhuumJiY2UAkJKra-7R8Om1MJbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:10 +0000
Manifest this update: Fri 31 Jan 2025 15:00:10 +0000
Manifest next update: Sat 01 Feb 2025 15:00:10 +0000
Files and hashes: 1: QhuumJiY2UAkJKra-7R8Om1MJbM.crl (hash: j153VfN5b/TnJhuKBUOcxAUDOGh9lvkzASFKwYQbQNE=)
2: xEzkfssYjKevzeoOO5X4YoPlUEM.roa (hash: XVhmZzjA2lTx9NfBnhkKpr5elG5hNpASyKi7U0uFnvQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:66:27:44:12:3c:8a:e1:17:72:36:3a:d8:96:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421bae989898d9402424aadafbb47c3a6d4c25b3
Validity
Not Before: Jan 31 15:00:10 2025 GMT
Not After : Feb 1 15:00:10 2025 GMT
Subject: CN=05229a944d114248ed005b8cb164f9842c024cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bb:28:4f:5a:f6:f1:85:da:bd:bd:ca:c0:23:
29:07:4e:7e:5f:92:31:d0:91:b1:fc:48:a3:69:e2:
b6:fb:92:65:10:db:46:2f:33:e9:c0:93:43:77:66:
5b:a8:3f:3f:63:55:5c:5a:d5:ec:02:38:08:8e:f6:
89:bf:fd:f8:de:81:79:76:bd:fb:4d:c9:cd:01:5e:
3f:e0:bb:0c:0e:12:a7:37:03:be:09:36:de:6a:c6:
a1:55:2f:e2:c8:8d:1e:14:88:d6:87:db:cb:62:0d:
7a:03:67:19:b8:56:30:2c:74:d4:84:c0:e2:83:ce:
ec:5a:04:38:65:9b:4d:e2:df:11:b1:e3:99:99:c9:
26:ac:0b:58:36:3c:0e:4b:dd:f9:e6:07:15:de:d5:
69:1d:d0:cd:34:f3:65:b7:a8:ea:40:6f:a6:2d:39:
04:54:78:df:53:38:54:a3:44:35:d5:c3:db:f5:46:
31:3a:ae:e0:32:d7:28:81:3b:fc:1c:c3:27:eb:ed:
b7:25:a9:6e:8b:4d:70:3b:2d:3c:f0:69:31:fd:41:
70:92:d4:55:dc:f8:ba:4a:0c:59:3f:e7:db:2e:3c:
17:20:28:62:4b:91:99:3a:bc:55:3f:9d:61:ca:eb:
30:55:b4:2b:3d:b8:86:15:91:fb:b5:2d:27:29:cf:
29:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:22:9A:94:4D:11:42:48:ED:00:5B:8C:B1:64:F9:84:2C:02:4C:BD
X509v3 Authority Key Identifier:
keyid:42:1B:AE:98:98:98:D9:40:24:24:AA:DA:FB:B4:7C:3A:6D:4C:25:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhuumJiY2UAkJKra-7R8Om1MJbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/b34cb0-2f71-4f59-bd5e-67efcb3d86fe/1/QhuumJiY2UAkJKra-7R8Om1MJbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:6e:69:20:35:34:0d:cf:fb:46:d0:f1:de:f6:17:b8:28:2c:
6f:83:d2:85:75:cb:69:5f:e8:f7:ca:e9:c2:90:ed:24:04:6c:
0c:43:6d:89:42:81:d0:8a:8c:fe:f6:fb:a2:d8:3e:fb:8e:14:
e5:ac:68:4d:75:7c:bb:26:64:ee:34:68:e3:89:a0:d3:55:b3:
e4:50:25:37:71:ee:dd:ab:c1:f8:db:b2:2f:ad:3f:16:81:55:
89:38:a1:2a:09:62:01:41:67:e7:56:dc:a9:62:d4:6d:c4:af:
e0:7c:4e:38:76:7f:0a:e6:5b:7b:65:16:79:99:ea:08:29:82:
6c:62:57:ac:0c:16:1c:fb:1a:be:bb:8b:19:cc:80:67:8b:46:
0f:4a:a9:9f:4b:09:c0:02:c8:79:f4:d0:c0:f8:b9:85:e0:db:
a5:78:28:d9:de:7c:b7:7d:36:e9:65:94:b0:9e:d1:ba:e6:20:
01:31:ee:e0:92:1f:be:ae:50:a6:4f:de:45:f4:84:ec:90:40:
13:68:aa:48:f5:27:cb:24:3f:27:49:0e:99:50:0b:93:57:cb:
0a:f7:de:77:8f:b2:de:1b:f7:b5:28:b4:80:d8:d4:d1:d2:c9:
a1:74:b8:0e:f0:6c:b9:96:5b:75:42:fe:0f:17:f8:1d:aa:e0:
26:ba:7b:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84GYnRBI8iuEXcjY62Jb5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMWJhZTk4OTg5OGQ5NDAyNDI0YWFkYWZiYjQ3YzNhNmQ0
YzI1YjMwHhcNMjUwMTMxMTUwMDEwWhcNMjUwMjAxMTUwMDEwWjAzMTEwLwYDVQQD
EygwNTIyOWE5NDRkMTE0MjQ4ZWQwMDViOGNiMTY0Zjk4NDJjMDI0Y2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLsoT1r28YXavb3KwCMpB05+X5Ix
0JGx/EijaeK2+5JlENtGLzPpwJNDd2ZbqD8/Y1VcWtXsAjgIjvaJv/343oF5dr37
TcnNAV4/4LsMDhKnNwO+CTbeasahVS/iyI0eFIjWh9vLYg16A2cZuFYwLHTUhMDi
g87sWgQ4ZZtN4t8RseOZmckmrAtYNjwOS9355gcV3tVpHdDNNPNlt6jqQG+mLTkE
VHjfUzhUo0Q11cPb9UYxOq7gMtcogTv8HMMn6+23Jalui01wOy088Gkx/UFwktRV
3Pi6SgxZP+fbLjwXIChiS5GZOrxVP51hyuswVbQrPbiGFZH7tS0nKc8pzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAUimpRNEUJI7QBbjLFk+YQsAky9MB8GA1UdIwQY
MBaAFEIbrpiYmNlAJCSq2vu0fDptTCWzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWh1dW1KaVkyVUFrSktyYS03UjhPbTFNSmJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9iMzRjYjAtMmY3MS00ZjU5LWJkNWUt
NjdlZmNiM2Q4NmZlLzEvUWh1dW1KaVkyVUFrSktyYS03UjhPbTFNSmJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9iMzRjYjAtMmY3MS00ZjU5LWJkNWUtNjdlZmNiM2Q4NmZl
LzEvUWh1dW1KaVkyVUFrSktyYS03UjhPbTFNSmJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbG5pIDU0
Dc/7RtDx3vYXuCgsb4PShXXLaV/o98rpwpDtJARsDENtiUKB0IqM/vb7otg++44U
5axoTXV8uyZk7jRo44mg01Wz5FAlN3Hu3avB+NuyL60/FoFViTihKgliAUFn51bc
qWLUbcSv4HxOOHZ/CuZbe2UWeZnqCCmCbGJXrAwWHPsavruLGcyAZ4tGD0qpn0sJ
wALIefTQwPi5heDbpXgo2d58t3026WWUsJ7RuuYgATHu4JIfvq5Qpk/eRfSE7JBA
E2iqSPUnyyQ/J0kOmVALk1fLCvfed4+y3hv3tSi0gNjU0dLJoXS4DvBsuZZbdUL+
Dxf4HargJrp7UA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:58 2025 by rpki-client