Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
File: Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft (raw, json)
Hash identifier: 7ZsX1hBi4ixBCJhrNVHJv/9UA91+uVwFxwln1Wo9EeA=
Subject key identifier: 75:0D:21:29:D0:68:16:D3:22:EC:75:2F:2A:FD:6B:C9:B5:69:D1:2C
Authority key identifier: 43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84
Certificate issuer: /CN=43d94e06871609cc1f815a56de5c9faf6d57d584
Certificate serial: 0194BD852D35D23096F42EF3DFBBCC6805C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:08 +0000
Manifest this update: Fri 31 Jan 2025 18:00:08 +0000
Manifest next update: Sat 01 Feb 2025 18:00:08 +0000
Files and hashes: 1: Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl (hash: VVHngcsuplStiq9mFu4u8pMNfPWXMhISMKaHlXP0q44=)
2: pFcInvEW15iKWvoPMx5EVwuCano.roa (hash: nE+nXG0xZdbwspGUmTTrOhLDVrJyA6M8TZL//6qKpZc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:2d:35:d2:30:96:f4:2e:f3:df:bb:cc:68:05:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d94e06871609cc1f815a56de5c9faf6d57d584
Validity
Not Before: Jan 31 18:00:08 2025 GMT
Not After : Feb 1 18:00:08 2025 GMT
Subject: CN=750d2129d06816d322ec752f2afd6bc9b569d12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:95:c0:e5:bf:5a:70:7c:c3:5a:34:8d:86:26:
55:04:42:94:29:11:0c:cc:11:7e:63:b8:42:01:fc:
da:17:54:1c:17:c9:07:e2:3e:55:ba:44:49:ec:f5:
59:48:83:23:4f:bb:5b:f4:6c:89:4a:6f:2d:1b:7d:
70:ab:96:7f:f6:5d:9c:59:2a:01:82:60:72:db:b7:
b9:33:5f:64:39:b7:52:d6:11:57:1a:54:17:24:52:
6a:27:4f:b1:44:c2:95:d4:21:3b:0e:6a:36:f3:16:
54:8e:6d:ab:19:59:4e:39:60:33:f4:aa:92:ca:f3:
25:9b:d8:63:a6:24:70:31:08:fc:d1:df:6f:3a:d1:
df:a0:db:b5:60:63:6c:64:a3:ad:1b:40:1a:dc:85:
ba:9f:6c:b9:ff:70:f7:4e:83:ca:27:6e:fa:e7:99:
22:6a:16:a1:1e:21:86:40:7a:6d:ba:a4:05:a5:a6:
db:c8:7d:a0:bc:30:2e:cc:2b:d3:e1:e0:f2:cb:91:
11:9c:38:7e:da:20:bf:6e:81:4a:ef:31:f0:30:4d:
2f:99:e2:50:8d:1f:23:bd:7c:f5:4c:d2:5a:94:3d:
75:99:45:21:70:a4:4d:7c:9e:e9:dc:dc:e1:7a:fa:
5e:b8:a3:a6:a3:09:c9:23:50:9a:a8:af:62:0b:e1:
c4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0D:21:29:D0:68:16:D3:22:EC:75:2F:2A:FD:6B:C9:B5:69:D1:2C
X509v3 Authority Key Identifier:
keyid:43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:24:62:3f:e7:53:ca:f2:51:da:23:8d:10:ef:df:0d:b7:32:
4b:8e:ca:f5:29:6f:85:ec:04:bc:57:ab:a0:12:25:22:b1:79:
eb:d1:74:57:e1:e8:47:4d:0a:0e:36:40:cd:c1:e2:38:17:02:
6a:2a:ee:0c:61:f9:41:9a:09:ae:fe:57:cc:4c:ce:e9:a3:a6:
dd:3c:ac:99:b3:2d:17:02:30:a5:64:09:82:3c:10:ca:ee:f9:
d0:b4:c5:36:f2:36:b5:5b:06:da:2c:b1:77:fc:42:54:a6:ab:
19:43:19:37:bd:4c:4c:9f:3b:8b:06:5b:b7:35:b8:2a:1c:38:
4b:8c:8e:77:f1:4c:1d:2e:3f:34:7d:44:45:25:26:0f:81:99:
1d:69:03:11:d7:07:b1:ac:e6:30:f5:90:f0:1a:f2:51:74:f1:
00:36:96:4d:04:df:ae:ee:81:42:a5:c4:b1:cb:0c:af:05:cf:
df:30:26:fb:47:87:9d:64:b8:73:d2:06:3c:9f:08:ff:2e:9e:
3c:61:3e:a2:d6:56:76:41:d9:28:7c:4e:47:ca:cc:1a:0e:9d:
5f:61:f4:b0:08:ed:04:d9:f5:6f:0f:3e:54:6b:de:17:e0:fc:
f1:20:51:26:f0:7f:3d:0b:e7:d6:e8:b9:21:bc:e4:00:d7:ca:
c8:05:d6:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hS010jCW9C7z37vMaAXEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZDk0ZTA2ODcxNjA5Y2MxZjgxNWE1NmRlNWM5ZmFmNmQ1
N2Q1ODQwHhcNMjUwMTMxMTgwMDA4WhcNMjUwMjAxMTgwMDA4WjAzMTEwLwYDVQQD
Eyg3NTBkMjEyOWQwNjgxNmQzMjJlYzc1MmYyYWZkNmJjOWI1NjlkMTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15XA5b9acHzDWjSNhiZVBEKUKREM
zBF+Y7hCAfzaF1QcF8kH4j5VukRJ7PVZSIMjT7tb9GyJSm8tG31wq5Z/9l2cWSoB
gmBy27e5M19kObdS1hFXGlQXJFJqJ0+xRMKV1CE7Dmo28xZUjm2rGVlOOWAz9KqS
yvMlm9hjpiRwMQj80d9vOtHfoNu1YGNsZKOtG0Aa3IW6n2y5/3D3ToPKJ27655ki
ahahHiGGQHptuqQFpabbyH2gvDAuzCvT4eDyy5ERnDh+2iC/boFK7zHwME0vmeJQ
jR8jvXz1TNJalD11mUUhcKRNfJ7p3NzhevpeuKOmownJI1CaqK9iC+HEKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUNISnQaBbTIux1Lyr9a8m1adEsMB8GA1UdIwQY
MBaAFEPZTgaHFgnMH4FaVt5cn69tV9WEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTlsT0JvY1dDY3dmZ1ZwVzNseWZyMjFYMVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8zMjEzZDMtY2QxYS00NjRkLTkxOGQt
MmQ2MjZhY2I3ODMzLzEvUTlsT0JvY1dDY3dmZ1ZwVzNseWZyMjFYMVlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8zMjEzZDMtY2QxYS00NjRkLTkxOGQtMmQ2MjZhY2I3ODMz
LzEvUTlsT0JvY1dDY3dmZ1ZwVzNseWZyMjFYMVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkyRiP+dT
yvJR2iONEO/fDbcyS47K9SlvhewEvFeroBIlIrF569F0V+HoR00KDjZAzcHiOBcC
airuDGH5QZoJrv5XzEzO6aOm3TysmbMtFwIwpWQJgjwQyu750LTFNvI2tVsG2iyx
d/xCVKarGUMZN71MTJ87iwZbtzW4Khw4S4yOd/FMHS4/NH1ERSUmD4GZHWkDEdcH
sazmMPWQ8BryUXTxADaWTQTfru6BQqXEscsMrwXP3zAm+0eHnWS4c9IGPJ8I/y6e
PGE+otZWdkHZKHxOR8rMGg6dX2H0sAjtBNn1bw8+VGveF+D88SBRJvB/PQvn1ui5
IbzkANfKyAXW0Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:34:17 2025 by rpki-client