Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
File: QC3C-6qj1HWWdqebiv20wiX8BV8.mft (raw, json)
Hash identifier: GzBjiM+7o4PBNzaDCS8UU+3USxN5TH1S+EwpsM6RaLM=
Subject key identifier: 13:CE:06:B6:41:9D:95:92:33:CB:88:08:54:77:47:79:42:65:4A:C1
Authority key identifier: 40:2D:C2:FB:AA:A3:D4:75:96:76:A7:9B:8A:FD:B4:C2:25:FC:05:5F
Certificate issuer: /CN=402dc2fbaaa3d4759676a79b8afdb4c225fc055f
Certificate serial: 0194BD17AA99DBF292145B12944B8A37C2AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QC3C-6qj1HWWdqebiv20wiX8BV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
Manifest number: B3
Signing time: Fri 31 Jan 2025 16:00:32 +0000
Manifest this update: Fri 31 Jan 2025 16:00:32 +0000
Manifest next update: Sat 01 Feb 2025 16:00:32 +0000
Files and hashes: 1: QC3C-6qj1HWWdqebiv20wiX8BV8.crl (hash: TbvHx47s0KdUQcHL0DjqW5fwnfvT4fuqwuxaz7PN7iI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:aa:99:db:f2:92:14:5b:12:94:4b:8a:37:c2:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=402dc2fbaaa3d4759676a79b8afdb4c225fc055f
Validity
Not Before: Jan 31 16:00:32 2025 GMT
Not After : Feb 1 16:00:32 2025 GMT
Subject: CN=13ce06b6419d959233cb88085477477942654ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:de:23:dc:0e:07:f3:1e:b5:f7:76:cf:6c:07:
0e:b9:6e:f3:37:ba:e5:34:db:87:91:dd:2d:e8:b8:
ef:b5:52:11:be:3c:dd:ff:52:ab:f1:f5:ef:e7:77:
37:82:de:65:bc:5f:6b:ba:1a:0f:4f:6d:3f:f1:51:
23:9d:38:8e:11:ca:95:48:f0:0f:59:1b:b0:a0:9e:
c0:b4:11:dc:60:81:56:d0:5c:47:82:30:96:ba:8b:
93:38:14:4a:db:58:e4:ab:91:f1:96:5c:6e:01:84:
b7:08:76:ed:f4:b7:cf:d0:53:e3:76:bf:fd:60:58:
03:cb:e1:f0:85:91:2c:0e:a8:a7:78:62:dc:89:56:
4e:66:ea:a3:f5:d8:84:6f:03:db:09:7d:db:85:c5:
fe:4b:a9:31:77:a8:cd:8d:d6:dc:5f:91:69:6d:f2:
53:98:2d:40:5e:a6:2a:28:71:a9:98:b3:cc:0a:e0:
dc:b5:f0:86:5d:de:8e:62:7b:9d:d2:d9:6d:92:76:
dc:47:06:86:b6:57:8f:d7:4b:e9:39:75:bf:03:dd:
ed:2c:d6:39:d5:03:97:ce:7c:22:4e:72:98:75:f6:
49:4b:70:58:39:df:44:0e:bc:50:f7:00:86:e5:06:
cb:f7:8b:e7:9b:e4:2e:6f:a8:ea:c9:9a:e0:85:b6:
c6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CE:06:B6:41:9D:95:92:33:CB:88:08:54:77:47:79:42:65:4A:C1
X509v3 Authority Key Identifier:
keyid:40:2D:C2:FB:AA:A3:D4:75:96:76:A7:9B:8A:FD:B4:C2:25:FC:05:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QC3C-6qj1HWWdqebiv20wiX8BV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:98:63:fd:0d:da:f2:80:ee:1d:98:26:37:4c:7d:92:47:d8:
74:aa:78:2a:04:df:bd:6e:76:d3:3d:e4:9e:5b:46:2e:33:80:
25:c2:2f:fd:96:b3:02:3c:52:71:e7:4e:99:1a:5f:f6:87:7e:
51:2f:f4:d6:0b:e0:39:5b:29:d5:c3:4b:96:c5:7c:9b:b7:e7:
ac:61:76:8b:39:e8:68:a2:b6:3f:75:10:0e:a8:f4:0d:b4:b4:
62:2c:44:92:dd:d8:97:00:c0:79:ef:cf:44:71:86:df:2c:f1:
52:90:f1:6e:be:21:c0:a1:68:25:76:b8:ff:66:e6:e7:e0:5c:
75:c5:62:42:97:4c:ef:8e:84:11:35:ad:90:85:72:79:ff:3a:
5f:77:68:ca:f5:23:8d:4a:16:31:89:e5:5a:b0:48:7d:57:e2:
80:9d:5d:a8:9a:f1:31:ef:69:b7:b0:b1:bc:e4:63:79:5d:f4:
db:55:15:a4:ea:3d:af:54:ae:1a:e5:9f:7c:34:29:65:20:e6:
b8:90:6f:5a:8e:d0:f9:06:f6:63:e5:95:d3:16:32:98:c4:3e:
da:d5:3b:a1:21:f4:52:6e:1a:cf:5c:e2:e7:1b:75:48:95:e2:
81:d5:df:96:ec:6c:5f:80:6f:b5:0b:6b:22:a7:e2:e4:ef:80:
a1:bd:d3:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F6qZ2/KSFFsSlEuKN8KvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMmRjMmZiYWFhM2Q0NzU5Njc2YTc5YjhhZmRiNGMyMjVm
YzA1NWYwHhcNMjUwMTMxMTYwMDMyWhcNMjUwMjAxMTYwMDMyWjAzMTEwLwYDVQQD
EygxM2NlMDZiNjQxOWQ5NTkyMzNjYjg4MDg1NDc3NDc3OTQyNjU0YWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApd4j3A4H8x6193bPbAcOuW7zN7rl
NNuHkd0t6LjvtVIRvjzd/1Kr8fXv53c3gt5lvF9ruhoPT20/8VEjnTiOEcqVSPAP
WRuwoJ7AtBHcYIFW0FxHgjCWuouTOBRK21jkq5HxllxuAYS3CHbt9LfP0FPjdr/9
YFgDy+HwhZEsDqineGLciVZOZuqj9diEbwPbCX3bhcX+S6kxd6jNjdbcX5FpbfJT
mC1AXqYqKHGpmLPMCuDctfCGXd6OYnud0tltknbcRwaGtleP10vpOXW/A93tLNY5
1QOXznwiTnKYdfZJS3BYOd9EDrxQ9wCG5QbL94vnm+Qub6jqyZrghbbGSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBPOBrZBnZWSM8uICFR3R3lCZUrBMB8GA1UdIwQY
MBaAFEAtwvuqo9R1lnanm4r9tMIl/AVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUMzQy02cWoxSFdXZHFlYml2MjB3aVg4QlY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi82YTJlOGYtNTgwMy00ZjFkLWE0NWYt
M2UwMjEzMzdjZWE2LzEvUUMzQy02cWoxSFdXZHFlYml2MjB3aVg4QlY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi82YTJlOGYtNTgwMy00ZjFkLWE0NWYtM2UwMjEzMzdjZWE2
LzEvUUMzQy02cWoxSFdXZHFlYml2MjB3aVg4QlY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZhj/Q3a
8oDuHZgmN0x9kkfYdKp4KgTfvW520z3knltGLjOAJcIv/ZazAjxScedOmRpf9od+
US/01gvgOVsp1cNLlsV8m7fnrGF2iznoaKK2P3UQDqj0DbS0YixEkt3YlwDAee/P
RHGG3yzxUpDxbr4hwKFoJXa4/2bm5+BcdcViQpdM746EETWtkIVyef86X3doyvUj
jUoWMYnlWrBIfVfigJ1dqJrxMe9pt7CxvORjeV3021UVpOo9r1SuGuWffDQpZSDm
uJBvWo7Q+Qb2Y+WV0xYymMQ+2tU7oSH0Um4az1zi5xt1SJXigdXfluxsX4BvtQtr
Iqfi5O+Aob3Tmg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:54 2025 by rpki-client