Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft
File: QN3nG0G_-xtRbgewxhORvfTTvxE.mft (raw, json)
Hash identifier: rF1sow6WxLg8jD6Jv5Qc6uoq963G5TqUn3wqyGKCzWI=
Subject key identifier: 5A:3C:C7:D8:5A:35:7F:1C:A7:0F:73:3D:08:E0:88:B8:E8:C1:5D:B9
Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Certificate serial: 0194BBCEDDCA8F425CFE0E577F0A68412AA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft
Manifest number: 0520
Signing time: Fri 31 Jan 2025 10:01:23 +0000
Manifest this update: Fri 31 Jan 2025 10:01:23 +0000
Manifest next update: Sat 01 Feb 2025 10:01:23 +0000
Files and hashes: 1: 1gCNF0infgdQK7vG9hr6sTtscNI.roa (hash: gWiE0Pg38BFsOepEyhUFjPHlaQuFw5fcis0anm8dYRU=)
2: CZafDAVgz9ZgHvZyhStItpeOMjc.roa (hash: hGLJxygoXi7vrVR9CZWh+RBLkxDyDklrEoBm/CKOi3E=)
3: QN3nG0G_-xtRbgewxhORvfTTvxE.crl (hash: OXMUItr8EEUl5Q1AQ4bjZjBIU+JHF6MwSqnMc8AgRKc=)
4: Q_I8HxiX3lGIrlrBfXUpFTkjJ9U.roa (hash: bxl6bOXuniXtabrOs3e/TUn7hg5RGTPfDQ1z8I9ZILU=)
5: SlSinHUbXT415BsCEUMFcSa5FDE.roa (hash: bvZr9IMOCpYl5odtPe8ZwjzoJxJcmEbTdBh1WZJRnlM=)
6: aSLrgRiEDgZrlPwMUYmfUSjYiJk.roa (hash: Klm6eKylO8taKRIFczFA3N8O7vgb0EyD6ZTYgammZZE=)
7: ar6RluCxRWglyl3vcKXh9UngTHI.roa (hash: Y08aEt3njBbLVMhzxuYaewkP64gqoAwWE9/IrtVBUKc=)
8: en2FE17oxWOf1j7RNcx1iXgz5wA.roa (hash: PNyPaO3lAAg0PKRhbIUO5dQyysOJ4H1ALeB9MXRg1HQ=)
9: exgV4-G6gQtu_8vaWBNpG7xgV8Q.roa (hash: //bllkCMRWL+aJP9INeCpZFfDYkgdrMmr+a8Ed3cnLI=)
10: jClAwbUeFaeJ9TptwDDyXZvlc14.roa (hash: MdszKxsKPQK52lxuu3EoxQ3Tud9whTFXrhaV83RIA0w=)
11: v0VfhdlTYHVZ8SEWlgvTkUgCya8.roa (hash: 1xE1ey0FIRTZGu5yGCTNV6CooR8Dhp45b/iWyDRQoYU=)
12: wtCDEHKhCugjL0LeG_o5riZbiNA.roa (hash: KklznCnoP6Zxl6N07es7Kw5I3DbSXsa74/hB9O4dGbw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:dd:ca:8f:42:5c:fe:0e:57:7f:0a:68:41:2a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11
Validity
Not Before: Jan 31 10:01:23 2025 GMT
Not After : Feb 1 10:01:23 2025 GMT
Subject: CN=5a3cc7d85a357f1ca70f733d08e088b8e8c15db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d3:a7:9e:3b:fc:28:3c:93:20:86:45:79:f1:
55:fc:c9:a0:5b:22:d1:46:9d:85:d0:e5:93:14:19:
b8:85:5c:1c:57:a7:bd:1a:f8:8a:3d:9a:10:0f:37:
66:ca:0f:6c:10:27:b0:ba:08:5a:9c:d4:3f:ad:48:
dd:2a:9e:f0:aa:74:07:ab:ab:9e:87:e1:43:41:9b:
fb:bf:f7:13:fc:a4:25:34:dc:8f:2f:fe:58:5a:10:
39:f3:ec:84:73:04:d3:e2:df:bc:f3:c0:a2:eb:e3:
b6:ab:27:d8:bd:c8:31:34:50:10:21:f9:54:86:b7:
c8:f7:1e:86:c7:30:65:d0:66:b6:55:d6:28:7e:83:
b1:0e:ea:71:0f:33:99:c8:8a:58:45:cc:fa:58:87:
13:22:2c:9b:72:cf:c8:dd:79:41:90:3f:13:68:12:
d6:72:fc:3b:a0:c3:5c:d0:18:20:dc:d8:6c:1b:ae:
9d:e3:99:b6:a1:43:85:5e:34:45:90:e5:27:be:f0:
86:8c:08:dc:33:87:97:c2:9c:3c:6f:74:65:08:60:
4a:ae:47:ca:24:54:ef:ad:bf:f8:fa:59:9f:17:ab:
06:14:fa:f8:74:1f:b8:13:1b:a6:84:2c:ce:b5:d7:
e8:fd:4d:63:f0:57:9e:b1:66:3a:0b:5b:06:62:4b:
28:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3C:C7:D8:5A:35:7F:1C:A7:0F:73:3D:08:E0:88:B8:E8:C1:5D:B9
X509v3 Authority Key Identifier:
keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:3a:69:c0:2b:ff:ee:9e:61:cd:29:18:7d:cb:37:56:88:ce:
ab:f1:30:75:c2:83:af:07:54:61:fb:1b:42:a7:6d:34:d0:ad:
1e:37:dc:a3:91:5c:7d:ef:85:d8:0f:fe:ed:38:b1:19:b9:a7:
d1:59:f0:04:fa:22:c5:ca:d7:16:e6:5f:db:55:23:84:5e:e7:
44:38:69:6a:bc:78:63:fe:50:02:7b:d7:46:1a:cb:c8:25:fa:
17:72:a3:87:56:18:fc:2d:b0:0e:6a:09:49:47:d6:63:41:e3:
28:35:17:8d:90:31:49:0e:81:1d:39:b4:ad:78:4d:11:70:a6:
25:c6:8d:15:05:39:4c:fd:a2:74:46:ce:8c:0d:9a:10:e2:4f:
1b:82:08:1e:f0:e8:e2:6b:e0:1d:ca:8b:67:19:d1:0d:72:e3:
55:14:be:25:79:bf:c2:ca:d3:66:41:34:c1:24:79:b8:6b:d6:
f5:20:56:f7:0c:19:c0:72:5f:45:f4:17:a3:4d:a7:c0:f6:8f:
72:a1:0f:41:5b:56:60:b6:81:a1:e3:ff:b4:32:e4:f1:56:ec:
a9:7f:d3:52:8b:84:2e:81:a2:31:b2:91:85:b3:fc:77:c9:8e:
d6:2d:ed:7d:c5:bb:ce:e6:b5:2c:26:6f:62:68:0b:57:49:9c:
f2:d6:92:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zt3Kj0Jc/g5XfwpoQSqlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZGRlNzFiNDFiZmZiMWI1MTZlMDdiMGM2MTM5MWJkZjRk
M2JmMTEwHhcNMjUwMTMxMTAwMTIzWhcNMjUwMjAxMTAwMTIzWjAzMTEwLwYDVQQD
Eyg1YTNjYzdkODVhMzU3ZjFjYTcwZjczM2QwOGUwODhiOGU4YzE1ZGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NOnnjv8KDyTIIZFefFV/MmgWyLR
Rp2F0OWTFBm4hVwcV6e9GviKPZoQDzdmyg9sECewughanNQ/rUjdKp7wqnQHq6ue
h+FDQZv7v/cT/KQlNNyPL/5YWhA58+yEcwTT4t+888Ci6+O2qyfYvcgxNFAQIflU
hrfI9x6GxzBl0Ga2VdYofoOxDupxDzOZyIpYRcz6WIcTIiybcs/I3XlBkD8TaBLW
cvw7oMNc0Bgg3NhsG66d45m2oUOFXjRFkOUnvvCGjAjcM4eXwpw8b3RlCGBKrkfK
JFTvrb/4+lmfF6sGFPr4dB+4ExumhCzOtdfo/U1j8FeesWY6C1sGYksoAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFo8x9haNX8cpw9zPQjgiLjowV25MB8GA1UdIwQY
MBaAFEDd5xtBv/sbUW4HsMYTkb30078RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYt
MmJhZGNlNDY2ODUzLzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYtMmJhZGNlNDY2ODUz
LzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYzppwCv/
7p5hzSkYfcs3VojOq/EwdcKDrwdUYfsbQqdtNNCtHjfco5Fcfe+F2A/+7TixGbmn
0VnwBPoixcrXFuZf21UjhF7nRDhparx4Y/5QAnvXRhrLyCX6F3Kjh1YY/C2wDmoJ
SUfWY0HjKDUXjZAxSQ6BHTm0rXhNEXCmJcaNFQU5TP2idEbOjA2aEOJPG4IIHvDo
4mvgHcqLZxnRDXLjVRS+JXm/wsrTZkE0wSR5uGvW9SBW9wwZwHJfRfQXo02nwPaP
cqEPQVtWYLaBoeP/tDLk8VbsqX/TUouELoGiMbKRhbP8d8mO1i3tfcW7zua1LCZv
YmgLV0mc8taSZg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:15:44 2025 by rpki-client