Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
File: Qd0c5O65L_U7YziS_UV7AR4RcfE.mft (raw, json)
Hash identifier: qiSwV5IXhCLlQMBK9su6SM6P6Ie17C9ljjFTZy2GKqg=
Subject key identifier: 20:8C:1B:99:6A:90:FD:66:1C:95:E8:90:26:B7:B8:4B:24:A0:72:A5
Authority key identifier: 41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1
Certificate issuer: /CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
Certificate serial: 0194BD857E6D11724813BAE51715DC1670A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
Manifest number: 032E
Signing time: Fri 31 Jan 2025 18:00:29 +0000
Manifest this update: Fri 31 Jan 2025 18:00:29 +0000
Manifest next update: Sat 01 Feb 2025 18:00:29 +0000
Files and hashes: 1: 1x79pZoohAevF-wAltNrdmaEw7A.roa (hash: X95oyzYUBEcZ4ziZ4mVGblrLPHO/qZ2hl0H2DCGm0kU=)
2: OGowf2WEKM-skig3VJkvUQd-0gk.roa (hash: l4GHRqUF3zigOregk/7osWSfttuJS7LG0PoEdo83VPY=)
3: Qd0c5O65L_U7YziS_UV7AR4RcfE.crl (hash: i2I8f+9lc/ZXLHolEZREPCVUjpVLRgOXsyz5GVVqPb8=)
4: eZIEFgBJU4XMsDODJF_Qh5daqig.roa (hash: QB6Ap2HopDkfiGK/ll+DE26kM8PVZ0ppQSxKwCrTbr4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7e:6d:11:72:48:13:ba:e5:17:15:dc:16:70:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
Validity
Not Before: Jan 31 18:00:29 2025 GMT
Not After : Feb 1 18:00:29 2025 GMT
Subject: CN=208c1b996a90fd661c95e89026b7b84b24a072a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3e:e8:b7:d8:07:bc:9e:a6:83:e3:07:24:af:
cc:63:ca:77:a0:4b:02:13:ea:4e:68:ad:3e:21:59:
19:32:81:c5:fe:5b:f9:28:f7:c1:36:4a:f0:43:3e:
2c:67:62:53:c7:2e:85:7e:53:18:00:c2:0d:ca:4f:
a5:5d:12:fb:b2:bd:43:67:79:c7:c4:e9:87:29:45:
a1:7e:fa:fe:b5:19:98:7d:05:b6:5a:c7:da:2b:5d:
24:dc:d4:49:27:5d:2b:0f:8b:91:d1:c9:3a:8b:ee:
71:70:2c:d1:bc:b8:0a:42:d5:cc:c5:b2:dd:c5:39:
7b:72:4c:b5:bd:83:59:64:cd:9d:35:5e:66:22:87:
3a:2c:23:6e:b8:6c:a8:3f:57:bf:88:03:41:cb:d4:
2b:21:2c:e7:16:0b:83:c4:ad:54:eb:f7:40:c9:d7:
4e:a4:96:57:e8:c6:dc:63:04:f6:e5:73:47:b6:fc:
63:73:13:64:dd:31:9e:47:51:db:99:04:21:9a:e6:
e9:68:27:4a:2f:9f:0d:51:ae:d4:2a:2e:e9:17:f9:
a5:50:6d:75:01:55:60:b9:74:da:05:3d:97:aa:91:
e7:75:1f:8b:b1:cf:48:f3:74:f1:23:78:84:ba:19:
e5:e9:e2:61:6c:75:94:a0:af:6a:ea:57:06:cd:ec:
88:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8C:1B:99:6A:90:FD:66:1C:95:E8:90:26:B7:B8:4B:24:A0:72:A5
X509v3 Authority Key Identifier:
keyid:41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:21:39:f1:fc:58:c0:79:56:08:71:2f:eb:b2:cf:5b:20:d8:
49:cb:6d:fd:88:44:9c:bf:5f:bb:ec:ef:46:b0:5d:b8:e3:fe:
74:b9:87:e1:35:d7:c2:fb:ae:0f:7d:ea:15:59:aa:44:77:e1:
a8:94:ee:a0:1a:77:cb:d7:2d:8a:f1:a6:a3:b2:aa:aa:33:c5:
1e:bb:ad:01:2d:25:f7:6e:6d:88:87:f8:d4:15:bd:cd:2d:33:
d9:90:8c:a9:e0:2b:3e:22:ba:6b:88:38:12:a6:99:10:7f:b7:
5d:fa:fa:45:14:af:03:10:c1:b6:bb:d5:7b:42:a7:17:6d:c9:
33:03:90:18:51:34:22:fc:8c:93:17:8a:62:b6:b2:db:d5:a2:
59:0e:bb:eb:29:36:d7:d9:ac:62:4e:bc:81:6b:70:78:c3:7c:
0a:e9:42:1c:36:07:f3:bf:86:76:42:ff:a2:80:00:0b:7c:4a:
fe:f3:1a:82:65:fc:1e:17:8a:7b:d4:22:aa:fa:72:49:1b:0e:
b6:9e:3a:9b:a4:ec:24:32:09:f9:29:46:f9:ad:92:1a:c3:ae:
87:f0:13:15:e9:f5:8b:59:0c:58:37:6b:b2:f4:c1:9d:08:5d:
11:73:2e:72:a3:43:52:d2:2b:67:a5:64:2a:9c:b6:17:1f:cf:
5f:ed:76:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hX5tEXJIE7rlFxXcFnCmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZGQxY2U0ZWViOTJmZjUzYjYzMzg5MmZkNDU3YjAxMWUx
MTcxZjEwHhcNMjUwMTMxMTgwMDI5WhcNMjUwMjAxMTgwMDI5WjAzMTEwLwYDVQQD
EygyMDhjMWI5OTZhOTBmZDY2MWM5NWU4OTAyNmI3Yjg0YjI0YTA3MmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnT7ot9gHvJ6mg+MHJK/MY8p3oEsC
E+pOaK0+IVkZMoHF/lv5KPfBNkrwQz4sZ2JTxy6FflMYAMINyk+lXRL7sr1DZ3nH
xOmHKUWhfvr+tRmYfQW2WsfaK10k3NRJJ10rD4uR0ck6i+5xcCzRvLgKQtXMxbLd
xTl7cky1vYNZZM2dNV5mIoc6LCNuuGyoP1e/iANBy9QrISznFguDxK1U6/dAyddO
pJZX6MbcYwT25XNHtvxjcxNk3TGeR1HbmQQhmubpaCdKL58NUa7UKi7pF/mlUG11
AVVguXTaBT2XqpHndR+Lsc9I83TxI3iEuhnl6eJhbHWUoK9q6lcGzeyI3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCMG5lqkP1mHJXokCa3uEskoHKlMB8GA1UdIwQY
MBaAFEHdHOTuuS/1O2M4kv1FewEeEXHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWQwYzVPNjVMX1U3WXppU19VVjdBUjRSY2ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8xYWNjNjEtYjk1YS00MDZlLTgwZmMt
ODg1MjFhZDk5YzdlLzEvUWQwYzVPNjVMX1U3WXppU19VVjdBUjRSY2ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8xYWNjNjEtYjk1YS00MDZlLTgwZmMtODg1MjFhZDk5Yzdl
LzEvUWQwYzVPNjVMX1U3WXppU19VVjdBUjRSY2ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQyE58fxY
wHlWCHEv67LPWyDYSctt/YhEnL9fu+zvRrBduOP+dLmH4TXXwvuuD33qFVmqRHfh
qJTuoBp3y9ctivGmo7KqqjPFHrutAS0l925tiIf41BW9zS0z2ZCMqeArPiK6a4g4
EqaZEH+3Xfr6RRSvAxDBtrvVe0KnF23JMwOQGFE0IvyMkxeKYray29WiWQ676yk2
19msYk68gWtweMN8CulCHDYH87+GdkL/ooAAC3xK/vMagmX8HheKe9QiqvpySRsO
tp46m6TsJDIJ+SlG+a2SGsOuh/ATFen1i1kMWDdrsvTBnQhdEXMucqNDUtIrZ6Vk
Kpy2Fx/PX+123g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:37:25 2025 by rpki-client