Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
File: 1QYosB6kR3GDy_-S23oMWBRRlaQ.mft (raw, json)
Hash identifier: RHhl4FD2L3gFZlJgnZjo23Alna+HRwEEyO3AKtrwkz8=
Subject key identifier: 54:4B:36:13:D0:96:70:9E:9C:A2:69:A5:63:9C:FE:C0:93:7A:59:CE
Authority key identifier: D5:06:28:B0:1E:A4:47:71:83:CB:FF:92:DB:7A:0C:58:14:51:95:A4
Certificate issuer: /CN=d50628b01ea4477183cbff92db7a0c58145195a4
Certificate serial: 0194BC3C7219C6FBDFCB621222E0687B2EB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
Manifest number: 08D0
Signing time: Fri 31 Jan 2025 12:01:05 +0000
Manifest this update: Fri 31 Jan 2025 12:01:05 +0000
Manifest next update: Sat 01 Feb 2025 12:01:05 +0000
Files and hashes: 1: 1QYosB6kR3GDy_-S23oMWBRRlaQ.crl (hash: JRRJoEJLpxIQp3COXCBtH8ytlwwyhoSDy09Pkd+gSio=)
2: _pIpWC2mISR6dq-6G_9xF8Tberk.roa (hash: AVYabGQyAC/dt95JDDKLIXfkPwJWf47FBbAQTadMiJU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:72:19:c6:fb:df:cb:62:12:22:e0:68:7b:2e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50628b01ea4477183cbff92db7a0c58145195a4
Validity
Not Before: Jan 31 12:01:05 2025 GMT
Not After : Feb 1 12:01:05 2025 GMT
Subject: CN=544b3613d096709e9ca269a5639cfec0937a59ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:da:b6:be:c2:32:c0:4f:8b:ba:21:dc:7c:79:
db:55:e2:aa:69:8a:f0:28:fe:c2:96:e1:d6:0d:53:
69:ea:b6:ba:fa:24:e9:1b:7f:6e:3c:29:92:f0:23:
58:ba:13:5d:ff:b0:9b:af:27:2f:21:98:12:04:dc:
cb:f0:ab:38:54:12:94:f3:70:8c:be:d8:a9:42:27:
f4:07:d7:d5:30:54:92:08:14:6e:ce:6f:f9:3f:ed:
98:87:9d:55:ad:f9:ae:70:b8:38:d1:33:4b:c7:45:
63:bf:56:8e:49:72:2f:a1:bc:f5:67:7d:1b:64:af:
13:e5:84:90:c0:57:f0:cf:5f:74:1c:f0:7c:6e:cc:
f1:b2:e6:bb:5a:b1:11:61:35:92:06:de:69:ad:48:
34:14:56:e3:86:3b:82:d6:5c:77:91:f1:50:99:95:
1d:6d:5b:6d:c8:1c:29:bb:e3:b0:17:28:ff:4b:79:
f6:f5:78:0b:92:00:65:17:d4:cf:b8:3c:7a:32:26:
a7:09:9f:f7:0d:ca:f1:5e:71:91:61:84:c0:fa:36:
f9:da:3a:17:d0:4d:d0:46:30:76:cb:d1:ab:0f:59:
c7:6b:9f:17:c0:9a:5e:c5:f8:34:42:96:8f:6c:d6:
25:8a:38:2b:1d:18:1a:b7:1f:f2:91:26:fd:f4:30:
98:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4B:36:13:D0:96:70:9E:9C:A2:69:A5:63:9C:FE:C0:93:7A:59:CE
X509v3 Authority Key Identifier:
keyid:D5:06:28:B0:1E:A4:47:71:83:CB:FF:92:DB:7A:0C:58:14:51:95:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f8:35:e3:b0:cf:af:4a:2a:6b:53:62:a3:20:d2:03:6b:e1:
f8:a8:76:c3:73:6b:39:87:e6:36:08:55:56:40:6f:74:85:2c:
42:86:d1:07:6b:b7:8f:bc:96:12:ee:24:84:41:a6:ec:d7:b7:
f0:20:89:ca:5f:2f:ed:9d:1b:b6:92:46:29:2d:16:9b:af:05:
c7:0f:13:4e:0a:06:7a:d4:b7:b1:8e:1b:26:1a:95:00:98:84:
75:ef:cf:55:5a:f7:23:1c:d4:5d:2e:2d:de:56:8d:39:a9:16:
4f:0a:ea:27:ab:2f:07:db:6a:04:93:94:6e:3d:84:19:86:bc:
24:88:ea:65:c5:66:21:ea:e7:f2:c7:0a:78:b4:80:6a:0c:93:
b6:05:1c:a8:72:01:42:1f:9b:db:b5:68:14:45:c9:bd:66:be:
76:52:bc:b9:09:61:1c:db:24:9f:33:69:5f:42:b5:d7:ac:27:
32:a3:d8:6f:1d:96:a8:58:40:a8:f9:98:d2:66:b7:4c:90:4c:
78:a3:56:2e:42:b9:8e:d1:88:64:10:d5:8d:c6:89:e1:59:53:
17:b2:6d:14:7c:5c:16:8a:6a:07:65:cf:b9:25:4d:92:fd:74:
1e:00:5a:31:3d:3f:18:1d:6c:b1:85:7e:2a:bc:8e:5a:9c:c1:
22:ba:1e:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PHIZxvvfy2ISIuBoey6wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MDYyOGIwMWVhNDQ3NzE4M2NiZmY5MmRiN2EwYzU4MTQ1
MTk1YTQwHhcNMjUwMTMxMTIwMTA1WhcNMjUwMjAxMTIwMTA1WjAzMTEwLwYDVQQD
Eyg1NDRiMzYxM2QwOTY3MDllOWNhMjY5YTU2MzljZmVjMDkzN2E1OWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9q2vsIywE+LuiHcfHnbVeKqaYrw
KP7CluHWDVNp6ra6+iTpG39uPCmS8CNYuhNd/7CbrycvIZgSBNzL8Ks4VBKU83CM
vtipQif0B9fVMFSSCBRuzm/5P+2Yh51VrfmucLg40TNLx0Vjv1aOSXIvobz1Z30b
ZK8T5YSQwFfwz190HPB8bszxsua7WrERYTWSBt5prUg0FFbjhjuC1lx3kfFQmZUd
bVttyBwpu+OwFyj/S3n29XgLkgBlF9TPuDx6MianCZ/3DcrxXnGRYYTA+jb52joX
0E3QRjB2y9GrD1nHa58XwJpexfg0QpaPbNYlijgrHRgatx/ykSb99DCYgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRLNhPQlnCenKJppWOc/sCTelnOMB8GA1UdIwQY
MBaAFNUGKLAepEdxg8v/ktt6DFgUUZWkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVFZb3NCNmtSM0dEeV8tUzIzb01XQlJSbGFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hODA5NmMtOTUyNy00OWNjLTk0Y2Qt
ODNlNGJhZTM3NTViLzEvMVFZb3NCNmtSM0dEeV8tUzIzb01XQlJSbGFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9hODA5NmMtOTUyNy00OWNjLTk0Y2QtODNlNGJhZTM3NTVi
LzEvMVFZb3NCNmtSM0dEeV8tUzIzb01XQlJSbGFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkPg147DP
r0oqa1NioyDSA2vh+Kh2w3NrOYfmNghVVkBvdIUsQobRB2u3j7yWEu4khEGm7Ne3
8CCJyl8v7Z0btpJGKS0Wm68Fxw8TTgoGetS3sY4bJhqVAJiEde/PVVr3IxzUXS4t
3laNOakWTwrqJ6svB9tqBJOUbj2EGYa8JIjqZcVmIern8scKeLSAagyTtgUcqHIB
Qh+b27VoFEXJvWa+dlK8uQlhHNsknzNpX0K116wnMqPYbx2WqFhAqPmY0ma3TJBM
eKNWLkK5jtGIZBDVjcaJ4VlTF7JtFHxcFopqB2XPuSVNkv10HgBaMT0/GB1ssYV+
KryOWpzBIroeew==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:11 2025 by rpki-client