Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
File: 22QfyQPVtMyXFkkySks05PgkIsU.mft (raw, json)
Hash identifier: fdHVjvCzUZMBP5695V9jyaEZM+xP32Wa5cwHeILZyQU=
Subject key identifier: EA:00:9D:9F:FB:13:D5:57:D6:5C:FF:4B:55:8A:08:2C:34:79:77:CD
Authority key identifier: DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
Certificate issuer: /CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Certificate serial: 0194BD8536FDB95930E4E41AAF082294573F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:11 +0000
Manifest this update: Fri 31 Jan 2025 18:00:11 +0000
Manifest next update: Sat 01 Feb 2025 18:00:11 +0000
Files and hashes: 1: 22QfyQPVtMyXFkkySks05PgkIsU.crl (hash: fz2mGwTZ+LDMuu5QyI5JUk18Z+wiVpsIyKTLbaCYfY8=)
2: 825nFrz3u6HGU-YZ6CH8LLOr_XE.roa (hash: jl6qorIEanDMcWiaTBA0q+h0ZRVRtDHwIH2xPi3aeGw=)
3: 8mzSvC4v5Ni41t8FB8aiAfYjJcI.roa (hash: QyI7qjDJOZQBTsa2Xsr+TTNwnCK4F/pFTnriXbmvjf0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:36:fd:b9:59:30:e4:e4:1a:af:08:22:94:57:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Validity
Not Before: Jan 31 18:00:11 2025 GMT
Not After : Feb 1 18:00:11 2025 GMT
Subject: CN=ea009d9ffb13d557d65cff4b558a082c347977cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d1:91:cc:26:7e:6f:d0:54:18:a9:42:b2:36:
7c:8e:bc:67:36:5b:d0:b4:96:39:97:0a:83:5c:e6:
34:d7:85:67:8e:d5:b6:14:49:a4:55:10:17:54:c4:
1c:ba:c9:3e:79:8a:9c:58:b5:be:a9:00:c9:fe:f8:
d3:91:95:6f:35:1f:2d:4f:7f:29:58:4d:15:97:1a:
1f:d8:a5:a1:4d:0f:ff:5b:75:25:d7:b4:bd:cd:a5:
dd:96:57:66:7f:0e:08:3c:91:56:ad:db:1c:8f:dd:
7e:3f:ab:a4:d2:1c:25:38:76:f5:8c:12:1f:af:08:
85:0d:24:92:9f:79:e1:78:63:22:a6:6f:2b:c6:d0:
61:43:e0:1a:8a:06:4d:ff:63:92:3e:6c:c6:a1:b2:
75:b9:a4:0b:21:1a:d8:c1:0a:c3:92:d1:34:9e:cf:
db:67:ea:fb:c7:8a:fe:60:ae:30:08:7f:b4:6a:fb:
d5:02:0c:46:7c:79:83:ba:7b:ef:47:71:e1:92:74:
37:d6:36:bb:cf:79:c9:b8:e7:bf:cc:2b:2c:be:a9:
3b:7e:e6:f6:1f:6f:6f:db:e7:3b:cd:98:c3:4e:0a:
7b:42:24:c5:5e:21:e5:ae:f9:dc:2b:90:9c:d8:30:
01:de:a9:c9:11:ca:0f:51:ab:50:cd:19:16:0c:6f:
14:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:00:9D:9F:FB:13:D5:57:D6:5C:FF:4B:55:8A:08:2C:34:79:77:CD
X509v3 Authority Key Identifier:
keyid:DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:20:b7:37:94:ca:84:c7:12:8e:14:da:95:2d:0d:a9:45:53:
e2:1f:e2:51:5c:46:14:f1:69:e7:48:30:80:7c:c5:aa:03:e9:
62:71:3d:92:bb:03:63:97:5c:51:10:0f:09:a5:b0:29:57:39:
46:96:a6:4d:53:b4:4e:e3:2c:75:de:af:c1:55:32:04:8f:23:
21:0a:70:d6:91:04:0a:46:03:c7:49:59:8a:08:eb:5b:26:38:
fb:92:16:f9:70:3f:a8:de:a6:38:0a:98:c8:03:31:fb:df:cb:
20:0c:b6:56:33:ab:a8:62:c0:38:12:0b:49:b9:75:14:c2:8e:
b3:70:3c:07:73:e6:50:8c:17:60:68:05:41:45:33:a6:6e:b9:
b2:e5:d4:1a:66:d5:97:40:9d:15:02:80:ba:fa:20:97:1f:0d:
3e:75:8b:cf:8e:46:cb:c6:c0:0a:80:81:73:3f:5e:83:78:fe:
1b:c2:6c:2f:ad:af:35:2a:8b:49:ff:9e:e4:e5:96:54:2e:9a:
92:47:49:41:a9:fd:37:a9:ea:45:a1:2d:a4:7d:6c:63:55:5a:
37:09:54:7d:9f:5f:55:cd:0e:3a:26:2e:e8:cc:45:90:79:bb:
6d:e4:8b:24:97:d1:11:71:11:b4:cb:10:f8:b9:93:dc:3a:52:
1d:18:e2:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hTb9uVkw5OQarwgilFc/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNjQxZmM5MDNkNWI0Y2M5NzE2NDkzMjRhNGIzNGU0Zjgy
NDIyYzUwHhcNMjUwMTMxMTgwMDExWhcNMjUwMjAxMTgwMDExWjAzMTEwLwYDVQQD
EyhlYTAwOWQ5ZmZiMTNkNTU3ZDY1Y2ZmNGI1NThhMDgyYzM0Nzk3N2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dGRzCZ+b9BUGKlCsjZ8jrxnNlvQ
tJY5lwqDXOY014VnjtW2FEmkVRAXVMQcusk+eYqcWLW+qQDJ/vjTkZVvNR8tT38p
WE0Vlxof2KWhTQ//W3Ul17S9zaXdlldmfw4IPJFWrdscj91+P6uk0hwlOHb1jBIf
rwiFDSSSn3nheGMipm8rxtBhQ+AaigZN/2OSPmzGobJ1uaQLIRrYwQrDktE0ns/b
Z+r7x4r+YK4wCH+0avvVAgxGfHmDunvvR3HhknQ31ja7z3nJuOe/zCssvqk7fub2
H29v2+c7zZjDTgp7QiTFXiHlrvncK5Cc2DAB3qnJEcoPUatQzRkWDG8UgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOoAnZ/7E9VX1lz/S1WKCCw0eXfNMB8GA1UdIwQY
MBaAFNtkH8kD1bTMlxZJMkpLNOT4JCLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjJRZnlRUFZ0TXlYRmtreVNrczA1UGdrSXNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8xMDA5NWYtZmQzNS00YTA2LThmMzkt
N2ZlZTU5MWEyMDljLzEvMjJRZnlRUFZ0TXlYRmtreVNrczA1UGdrSXNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8xMDA5NWYtZmQzNS00YTA2LThmMzktN2ZlZTU5MWEyMDlj
LzEvMjJRZnlRUFZ0TXlYRmtreVNrczA1UGdrSXNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXiC3N5TK
hMcSjhTalS0NqUVT4h/iUVxGFPFp50gwgHzFqgPpYnE9krsDY5dcURAPCaWwKVc5
RpamTVO0TuMsdd6vwVUyBI8jIQpw1pEECkYDx0lZigjrWyY4+5IW+XA/qN6mOAqY
yAMx+9/LIAy2VjOrqGLAOBILSbl1FMKOs3A8B3PmUIwXYGgFQUUzpm65suXUGmbV
l0CdFQKAuvoglx8NPnWLz45Gy8bACoCBcz9eg3j+G8JsL62vNSqLSf+e5OWWVC6a
kkdJQan9N6nqRaEtpH1sY1VaNwlUfZ9fVc0OOiYu6MxFkHm7beSLJJfREXERtMsQ
+LmT3DpSHRji5g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:40:00 2025 by rpki-client