Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
File: 2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft (raw, json)
Hash identifier: 3obYJ+SrEB946s7MGP49TJ4CxO2i2JzFUBouGPdhdNY=
Subject key identifier: FB:9A:41:E2:08:0A:0A:E5:D4:CA:19:C1:97:DF:95:39:C9:CC:53:D5
Authority key identifier: D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77
Certificate issuer: /CN=d90482763070955e7ea87e2ca37b891b864b2577
Certificate serial: 0194BC72D1DA9ED05F55D3994A5198C7ED67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
Manifest number: 0235
Signing time: Fri 31 Jan 2025 13:00:28 +0000
Manifest this update: Fri 31 Jan 2025 13:00:28 +0000
Manifest next update: Sat 01 Feb 2025 13:00:28 +0000
Files and hashes: 1: 2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl (hash: cYPY1WZ2QQ9xxs3mDKvmllLkPqaweCLp9ZPcprXBz/k=)
2: JNEydf2lKXnao8GrKqno19jXP6w.roa (hash: +0xX0M+yF7B+qU3xPS7RZz2tcDVRNPquvsVNbfH8B2E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d1:da:9e:d0:5f:55:d3:99:4a:51:98:c7:ed:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90482763070955e7ea87e2ca37b891b864b2577
Validity
Not Before: Jan 31 13:00:28 2025 GMT
Not After : Feb 1 13:00:28 2025 GMT
Subject: CN=fb9a41e2080a0ae5d4ca19c197df9539c9cc53d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:97:95:bb:58:12:f9:4c:28:28:ff:de:02:50:
a4:e3:b1:16:84:7a:8a:c2:02:25:9e:b9:75:af:33:
d4:21:45:5c:cc:74:75:86:92:81:0b:af:0b:56:5d:
3f:da:18:2d:53:75:57:29:39:1e:ae:8e:fc:aa:38:
a1:d6:4d:14:da:49:d6:fe:9f:2f:ff:4f:2d:04:49:
f5:86:d2:14:a2:ce:82:b1:c3:44:72:17:49:80:14:
34:08:f5:5a:68:8f:9a:56:ef:d6:14:55:d7:09:12:
53:9a:79:4b:02:8d:06:45:6b:b8:fa:bf:20:9c:da:
30:76:cb:a6:6a:0f:4f:32:14:ac:f6:b9:be:2a:9e:
47:fe:7e:50:5a:da:3e:8b:f3:d1:71:a0:6b:39:8f:
85:11:82:34:55:10:2b:11:31:95:f6:85:e3:66:e0:
19:76:b7:42:6c:2a:86:ab:e7:0f:60:24:9b:03:ad:
77:40:53:44:63:15:00:41:b3:bf:2c:6c:57:b4:e4:
25:ce:96:3e:68:e1:5b:bd:79:b2:42:34:2f:09:80:
37:5c:89:61:15:16:43:49:29:2a:55:3c:a7:eb:c8:
8e:e1:25:6b:54:dc:88:10:9e:dc:df:38:c8:40:38:
ec:9a:4f:e9:5a:2c:3a:34:ee:75:23:92:71:95:f4:
fb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:9A:41:E2:08:0A:0A:E5:D4:CA:19:C1:97:DF:95:39:C9:CC:53:D5
X509v3 Authority Key Identifier:
keyid:D9:04:82:76:30:70:95:5E:7E:A8:7E:2C:A3:7B:89:1B:86:4B:25:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QSCdjBwlV5-qH4so3uJG4ZLJXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/94c2bb-e80a-4f2c-8208-a9b2766773aa/1/2QSCdjBwlV5-qH4so3uJG4ZLJXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:8e:6a:b4:64:2e:06:3d:36:08:cb:58:10:73:88:7c:17:62:
7d:07:a8:23:0d:07:1b:3d:2c:10:90:5e:4e:12:b2:28:91:6c:
54:30:c7:09:b1:15:54:93:1b:a5:14:d8:aa:b9:e6:d6:b9:8c:
0b:d3:c0:8c:8b:03:c3:12:56:aa:f8:d9:eb:17:56:03:48:95:
75:30:73:1b:8a:93:fb:2a:98:1b:81:c3:90:5e:d1:2d:97:66:
a7:c2:96:a3:ed:9e:17:03:d2:b6:0b:13:2a:51:00:38:3d:2e:
f3:f0:b6:db:15:f9:34:f9:8d:68:7b:b5:3a:85:6a:d2:63:dc:
f3:d1:81:da:a2:3f:ea:3f:c5:91:5d:7a:e8:92:2e:05:f4:53:
3a:52:f1:a1:ba:d7:59:20:83:8b:35:d2:a4:c9:9a:b8:63:c0:
51:15:64:af:b4:b7:a0:37:e8:ac:e4:88:fd:ad:87:1d:54:4c:
0f:2a:8f:fa:c3:7e:12:e5:84:f4:85:b3:97:e7:2c:d5:47:1d:
aa:29:cd:0d:df:5c:bf:49:f7:f3:c9:b1:e9:56:e8:d3:b2:82:
1f:04:c3:1e:33:2e:0c:f9:c4:3d:c2:48:d9:52:a9:bb:64:cf:
15:4b:de:2f:0c:27:85:be:db:89:70:1d:24:83:9d:04:ff:98:
99:bc:29:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8ctHantBfVdOZSlGYx+1nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MDQ4Mjc2MzA3MDk1NWU3ZWE4N2UyY2EzN2I4OTFiODY0
YjI1NzcwHhcNMjUwMTMxMTMwMDI4WhcNMjUwMjAxMTMwMDI4WjAzMTEwLwYDVQQD
EyhmYjlhNDFlMjA4MGEwYWU1ZDRjYTE5YzE5N2RmOTUzOWM5Y2M1M2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZeVu1gS+UwoKP/eAlCk47EWhHqK
wgIlnrl1rzPUIUVczHR1hpKBC68LVl0/2hgtU3VXKTkero78qjih1k0U2knW/p8v
/08tBEn1htIUos6CscNEchdJgBQ0CPVaaI+aVu/WFFXXCRJTmnlLAo0GRWu4+r8g
nNowdsumag9PMhSs9rm+Kp5H/n5QWto+i/PRcaBrOY+FEYI0VRArETGV9oXjZuAZ
drdCbCqGq+cPYCSbA613QFNEYxUAQbO/LGxXtOQlzpY+aOFbvXmyQjQvCYA3XIlh
FRZDSSkqVTyn68iO4SVrVNyIEJ7c3zjIQDjsmk/pWiw6NO51I5JxlfT7kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPuaQeIICgrl1MoZwZfflTnJzFPVMB8GA1UdIwQY
MBaAFNkEgnYwcJVefqh+LKN7iRuGSyV3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlFTQ2RqQndsVjUtcUg0c28zdUpHNFpMSlhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC85NGMyYmItZTgwYS00ZjJjLTgyMDgt
YTliMjc2Njc3M2FhLzEvMlFTQ2RqQndsVjUtcUg0c28zdUpHNFpMSlhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC85NGMyYmItZTgwYS00ZjJjLTgyMDgtYTliMjc2Njc3M2Fh
LzEvMlFTQ2RqQndsVjUtcUg0c28zdUpHNFpMSlhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAo5qtGQu
Bj02CMtYEHOIfBdifQeoIw0HGz0sEJBeThKyKJFsVDDHCbEVVJMbpRTYqrnm1rmM
C9PAjIsDwxJWqvjZ6xdWA0iVdTBzG4qT+yqYG4HDkF7RLZdmp8KWo+2eFwPStgsT
KlEAOD0u8/C22xX5NPmNaHu1OoVq0mPc89GB2qI/6j/FkV166JIuBfRTOlLxobrX
WSCDizXSpMmauGPAURVkr7S3oDforOSI/a2HHVRMDyqP+sN+EuWE9IWzl+cs1Ucd
qinNDd9cv0n388mx6Vbo07KCHwTDHjMuDPnEPcJI2VKpu2TPFUveLwwnhb7biXAd
JIOdBP+YmbwptQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:27 2025 by rpki-client