Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
File: qo_QXutuoFoR1mer7djqEJPScbM.mft (raw, json)
Hash identifier: alu9YW1u6w7cflsilhk1yA2rVwnCgg2uTgX99B4WRjU=
Subject key identifier: 6D:10:C4:C6:CA:21:49:35:60:37:D8:29:05:B3:4C:6F:52:6D:34:16
Authority key identifier: AA:8F:D0:5E:EB:6E:A0:5A:11:D6:67:AB:ED:D8:EA:10:93:D2:71:B3
Certificate issuer: /CN=aa8fd05eeb6ea05a11d667abedd8ea1093d271b3
Certificate serial: 0194BD1771CE76AE3B903598909E3743F1B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:17 +0000
Manifest this update: Fri 31 Jan 2025 16:00:17 +0000
Manifest next update: Sat 01 Feb 2025 16:00:17 +0000
Files and hashes: 1: lfJUEj9OpKtkyjj6xaEeSMukOrA.roa (hash: 9AsF2IZpbVSPw/O9UldkVW9AyHlVo6jZ0snpU1eDlm8=)
2: qo_QXutuoFoR1mer7djqEJPScbM.crl (hash: /4yIgKTxeSZxnYfBJtF7FjA1rO7l0j7PwshJL4GjirM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:71:ce:76:ae:3b:90:35:98:90:9e:37:43:f1:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8fd05eeb6ea05a11d667abedd8ea1093d271b3
Validity
Not Before: Jan 31 16:00:17 2025 GMT
Not After : Feb 1 16:00:17 2025 GMT
Subject: CN=6d10c4c6ca2149356037d82905b34c6f526d3416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:2d:54:ca:25:9c:09:5e:06:17:4a:98:2f:ee:
d9:ba:40:3d:7b:84:19:f8:d9:a2:bf:d5:68:2c:0e:
16:3a:88:3b:ba:f4:7b:43:34:eb:60:ec:02:4e:dc:
40:47:92:5e:34:d1:f2:2a:2a:35:20:c7:be:9a:fb:
58:1f:23:6f:01:19:fa:3d:eb:f6:9e:c3:d7:a8:f8:
4d:3f:7e:42:11:97:1f:8e:b7:49:d1:ec:a8:19:3c:
15:89:4f:71:d5:a1:04:a4:30:4c:55:35:dd:33:cf:
ea:87:57:76:76:42:50:79:da:1e:06:33:41:02:d3:
24:d9:50:ee:52:7d:0a:d6:50:17:95:11:bd:84:4f:
63:b8:c0:fa:99:d9:96:1e:f0:25:b1:e1:d3:f2:89:
39:5c:79:eb:2c:cf:b9:69:32:94:58:e0:e5:cc:1c:
17:71:fb:86:37:03:6a:66:b4:94:50:23:9e:3e:64:
f3:ad:ad:5b:cd:50:6a:d1:71:d1:78:38:08:2b:62:
2f:ab:1b:8e:c8:bf:26:da:ec:ba:41:96:05:e3:15:
a3:65:57:1c:49:a8:51:68:77:64:40:ea:70:4e:cd:
49:e6:a8:c8:0a:76:bd:af:2f:63:f8:6c:a0:4b:53:
4e:03:27:15:72:10:a1:73:d7:60:1b:4e:cf:ee:78:
fb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:10:C4:C6:CA:21:49:35:60:37:D8:29:05:B3:4C:6F:52:6D:34:16
X509v3 Authority Key Identifier:
keyid:AA:8F:D0:5E:EB:6E:A0:5A:11:D6:67:AB:ED:D8:EA:10:93:D2:71:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:35:46:52:44:42:fb:18:57:c1:70:ed:61:2a:ae:f1:31:e6:
88:8f:0f:60:df:6e:01:07:97:d5:91:cf:1b:85:de:6f:d8:fb:
1a:d0:f7:fd:8c:1e:90:38:2f:1f:91:3e:08:e9:c9:a7:f5:b8:
36:d7:f5:2b:12:14:be:ec:9d:24:e7:49:50:64:f1:71:ff:2d:
3b:5a:e5:e4:45:2d:dc:57:65:f7:99:1c:a3:f3:02:65:56:56:
84:fe:27:36:fd:9f:24:2f:cf:55:ed:b3:f0:c8:d5:58:5b:4b:
a1:da:e8:3f:7a:e9:df:d2:cf:28:8c:b7:71:b2:5f:49:c1:14:
81:0a:95:65:41:a6:d5:d9:05:87:a3:ae:fd:d2:5e:cd:c1:32:
52:67:59:7d:b2:3d:d8:96:56:85:40:3b:91:f6:e0:54:03:cb:
f6:06:b4:2b:4f:c4:bf:6a:f2:0a:89:5b:2e:5d:fe:99:60:6c:
d9:0f:d4:c0:eb:84:ee:e1:a8:06:eb:bf:4d:11:56:67:33:df:
9d:f7:fb:61:57:02:a5:9f:16:64:21:f1:9e:0d:5a:64:31:41:
fd:f1:9c:35:53:9b:1e:9a:38:49:e6:a6:f9:12:ae:0b:de:cc:
dd:b0:0d:ee:eb:c6:f1:aa:52:76:d9:f2:b1:83:9b:5b:c3:db:
b9:86:c1:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F3HOdq47kDWYkJ43Q/G0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhOGZkMDVlZWI2ZWEwNWExMWQ2NjdhYmVkZDhlYTEwOTNk
MjcxYjMwHhcNMjUwMTMxMTYwMDE3WhcNMjUwMjAxMTYwMDE3WjAzMTEwLwYDVQQD
Eyg2ZDEwYzRjNmNhMjE0OTM1NjAzN2Q4MjkwNWIzNGM2ZjUyNmQzNDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7y1UyiWcCV4GF0qYL+7ZukA9e4QZ
+Nmiv9VoLA4WOog7uvR7QzTrYOwCTtxAR5JeNNHyKio1IMe+mvtYHyNvARn6Pev2
nsPXqPhNP35CEZcfjrdJ0eyoGTwViU9x1aEEpDBMVTXdM8/qh1d2dkJQedoeBjNB
AtMk2VDuUn0K1lAXlRG9hE9juMD6mdmWHvAlseHT8ok5XHnrLM+5aTKUWODlzBwX
cfuGNwNqZrSUUCOePmTzra1bzVBq0XHReDgIK2IvqxuOyL8m2uy6QZYF4xWjZVcc
SahRaHdkQOpwTs1J5qjICna9ry9j+GygS1NOAycVchChc9dgG07P7nj7rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0QxMbKIUk1YDfYKQWzTG9SbTQWMB8GA1UdIwQY
MBaAFKqP0F7rbqBaEdZnq+3Y6hCT0nGzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW9fUVh1dHVvRm9SMW1lcjdkanFFSlBTY2JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yYmI3MDYtNjZkNC00ZmFlLTkzYTEt
Yjk3YzJjNGFkNDM5LzEvcW9fUVh1dHVvRm9SMW1lcjdkanFFSlBTY2JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8yYmI3MDYtNjZkNC00ZmFlLTkzYTEtYjk3YzJjNGFkNDM5
LzEvcW9fUVh1dHVvRm9SMW1lcjdkanFFSlBTY2JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgjVGUkRC
+xhXwXDtYSqu8THmiI8PYN9uAQeX1ZHPG4Xeb9j7GtD3/YwekDgvH5E+COnJp/W4
Ntf1KxIUvuydJOdJUGTxcf8tO1rl5EUt3Fdl95kco/MCZVZWhP4nNv2fJC/PVe2z
8MjVWFtLodroP3rp39LPKIy3cbJfScEUgQqVZUGm1dkFh6Ou/dJezcEyUmdZfbI9
2JZWhUA7kfbgVAPL9ga0K0/Ev2ryColbLl3+mWBs2Q/UwOuE7uGoBuu/TRFWZzPf
nff7YVcCpZ8WZCHxng1aZDFB/fGcNVObHpo4Seam+RKuC97M3bAN7uvG8apSdtny
sYObW8PbuYbBBQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:10:27 2025 by rpki-client