Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
File: 1-0q-E5QqvkIPINwUn9xX30BFwUM.mft (raw, json)
Hash identifier: lxeC1QaIkIAN/NsjKXkkZSRzMa6gVtpq26U4/p9oNcg=
Subject key identifier: 2A:F9:F7:36:73:04:52:83:19:0A:0C:06:06:BA:28:C5:D1:EF:96:59
Authority key identifier: FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43
Certificate issuer: /CN=fb4abe13942abe420f20dc149fdc57df4045c143
Certificate serial: 0194BCA9B092BF0FD639B9E4626D70ECC3EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
Manifest number: 0839
Signing time: Fri 31 Jan 2025 14:00:24 +0000
Manifest this update: Fri 31 Jan 2025 14:00:24 +0000
Manifest next update: Sat 01 Feb 2025 14:00:24 +0000
Files and hashes: 1: 1-0q-E5QqvkIPINwUn9xX30BFwUM.crl (hash: IMxpYqmNR5ld+t088yA7ZKQY+Ik0LnLTCvGNWCzDlbY=)
2: Y_oNEiPJWS2zLwFvLL35UCRFKWA.roa (hash: q2i0iB2Ep81QHqaDB0CnMDZLGuww93ap90YlQXqqvaU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b0:92:bf:0f:d6:39:b9:e4:62:6d:70:ec:c3:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb4abe13942abe420f20dc149fdc57df4045c143
Validity
Not Before: Jan 31 14:00:24 2025 GMT
Not After : Feb 1 14:00:24 2025 GMT
Subject: CN=2af9f73673045283190a0c0606ba28c5d1ef9659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:d2:13:32:4e:cf:57:c4:cf:cb:5d:bc:8d:c7:
5c:9b:51:02:80:ba:3f:ee:f6:9a:1b:08:46:23:a4:
ec:3f:0a:cf:c6:13:2b:a3:bc:cf:9e:fa:25:b4:b6:
fa:22:a2:f0:6c:6e:d2:65:77:80:68:97:70:08:29:
41:c1:04:df:8e:c0:6c:bc:38:09:ec:97:6c:a3:cf:
92:66:19:35:a9:61:b7:bc:f8:e9:b1:31:68:40:c6:
de:97:16:90:be:2a:d1:59:60:f8:fb:01:cf:72:e7:
29:ff:58:8d:fe:da:85:51:bd:e9:d8:77:ca:63:f7:
e1:57:65:a3:d6:6a:3a:7d:2b:0b:0e:88:fe:74:eb:
d5:57:58:fd:9e:3f:ae:2a:56:4a:f9:9e:52:58:90:
f5:18:2b:a7:72:29:99:f7:d2:9b:e2:77:7e:4d:28:
4b:07:d4:ba:d6:5d:48:53:f0:f8:d2:0b:20:94:76:
0e:78:2d:98:8f:1f:a5:f7:83:7c:4f:00:3b:e0:a6:
5a:1f:1d:26:ca:5d:ae:7b:d9:ea:76:57:70:66:a0:
6b:19:f7:0d:56:51:66:2c:dd:7f:c3:c7:17:d4:90:
13:2b:f1:91:a3:10:a2:93:3c:f0:9e:09:d0:6a:23:
af:54:18:ae:5b:84:da:a0:d1:51:80:88:ab:d1:89:
77:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F9:F7:36:73:04:52:83:19:0A:0C:06:06:BA:28:C5:D1:EF:96:59
X509v3 Authority Key Identifier:
keyid:FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:4e:eb:b6:79:a9:b7:f2:51:18:69:43:56:a8:50:e7:24:bc:
46:cd:dd:7c:a2:f3:ef:c1:6e:9e:34:8f:01:5f:c1:fb:8e:f1:
1c:cd:64:ad:4d:03:ec:cb:c0:7f:e6:fa:09:b8:43:02:9f:c1:
c1:fe:19:d9:a2:d9:4d:64:99:01:b2:2c:54:8d:42:98:03:2d:
3f:c2:14:0d:27:f8:a3:79:21:a0:ec:ff:0c:8f:20:e7:6a:16:
4c:28:a6:d2:d5:38:a3:11:5c:18:03:cf:77:f4:f0:33:8a:5b:
18:46:83:83:d6:1c:20:83:de:fd:e0:a5:ba:9b:95:38:83:1f:
d9:c7:4a:a1:4e:3a:af:14:28:05:03:73:23:d6:70:f3:b8:4a:
e2:4b:98:45:27:86:f2:72:cb:c8:f0:ac:75:6c:54:58:76:70:
bf:a2:86:81:3d:e5:5f:f6:93:7e:ad:a1:ac:8a:2b:22:b3:c8:
7b:b9:5c:d2:e3:d3:c8:5b:57:6f:df:9a:ce:e3:e7:1d:52:d1:
bf:f4:ea:fa:42:f0:d9:be:4d:62:9f:62:76:04:67:ad:27:b4:
9b:57:f6:b5:e8:e8:a3:8d:34:43:c4:2e:1b:42:df:94:51:9c:
27:67:90:69:7e:b9:f6:5e:01:bd:ba:1f:21:72:e3:24:58:fc:
c9:c6:fc:33
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZS8qbCSvw/WObnkYm1w7MPqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNGFiZTEzOTQyYWJlNDIwZjIwZGMxNDlmZGM1N2RmNDA0
NWMxNDMwHhcNMjUwMTMxMTQwMDI0WhcNMjUwMjAxMTQwMDI0WjAzMTEwLwYDVQQD
EygyYWY5ZjczNjczMDQ1MjgzMTkwYTBjMDYwNmJhMjhjNWQxZWY5NjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/dITMk7PV8TPy128jcdcm1ECgLo/
7vaaGwhGI6TsPwrPxhMro7zPnvoltLb6IqLwbG7SZXeAaJdwCClBwQTfjsBsvDgJ
7Jdso8+SZhk1qWG3vPjpsTFoQMbelxaQvirRWWD4+wHPcucp/1iN/tqFUb3p2HfK
Y/fhV2Wj1mo6fSsLDoj+dOvVV1j9nj+uKlZK+Z5SWJD1GCuncimZ99Kb4nd+TShL
B9S61l1IU/D40gsglHYOeC2Yjx+l94N8TwA74KZaHx0myl2ue9nqdldwZqBrGfcN
VlFmLN1/w8cX1JATK/GRoxCikzzwngnQaiOvVBiuW4TaoNFRgIir0Yl3WQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCr59zZzBFKDGQoMBga6KMXR75ZZMB8GA1UdIwQY
MBaAFPtKvhOUKr5CDyDcFJ/cV99ARcFDMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0wcS1FNVFxdmtJUElOd1VuOXhYMzBCRndVTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvZGVlNjhkLWFhY2QtNDY3My1iYTQy
LTk5MTFlNTEwYThhOS8xLzEtMHEtRTVRcXZrSVBJTndVbjl4WDMwQkZ3VU0ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2VhL2RlZTY4ZC1hYWNkLTQ2NzMtYmE0Mi05OTExZTUxMGE4
YTkvMS8xLTBxLUU1UXF2a0lQSU53VW45eFgzMEJGd1VNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3U7r
tnmpt/JRGGlDVqhQ5yS8Rs3dfKLz78FunjSPAV/B+47xHM1krU0D7MvAf+b6CbhD
Ap/Bwf4Z2aLZTWSZAbIsVI1CmAMtP8IUDSf4o3khoOz/DI8g52oWTCim0tU4oxFc
GAPPd/TwM4pbGEaDg9YcIIPe/eClupuVOIMf2cdKoU46rxQoBQNzI9Zw87hK4kuY
RSeG8nLLyPCsdWxUWHZwv6KGgT3lX/aTfq2hrIorIrPIe7lc0uPTyFtXb9+azuPn
HVLRv/Tq+kLw2b5NYp9idgRnrSe0m1f2tejoo400Q8QuG0LflFGcJ2eQaX659l4B
vbofIXLjJFj8ycb8Mw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:25 2025 by rpki-client