Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft
File: cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft (raw, json)
Hash identifier: CrTjeExXQcpJIIFhg8UkvJYpgn1j6QBsamtfSkOd+DA=
Subject key identifier: 40:7E:E3:DE:D3:3E:16:44:9E:1E:BD:25:FD:CA:3F:B3:90:FB:47:A8
Authority key identifier: 71:0A:B2:86:DA:E8:D8:CB:5F:6F:C4:EE:C3:F3:23:81:4C:87:F5:BE
Certificate issuer: /CN=710ab286dae8d8cb5f6fc4eec3f323814c87f5be
Certificate serial: 0194BCA9A5635ECE48584F4ABCAC6F4CBB9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:21 +0000
Manifest this update: Fri 31 Jan 2025 14:00:21 +0000
Manifest next update: Sat 01 Feb 2025 14:00:21 +0000
Files and hashes: 1: MXRY_gWfemtb4d9S12bJTdSx1HE.roa (hash: PGm1ZEfOELutLc4FdNXikN8yLBd24rRaKhDmxZUHdZk=)
2: cQqyhtro2Mtfb8Tuw_MjgUyH9b4.crl (hash: AzozbZzYlcN421NTooiP7CVKkBbuBU5mfSGkc7weGUk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a5:63:5e:ce:48:58:4f:4a:bc:ac:6f:4c:bb:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=710ab286dae8d8cb5f6fc4eec3f323814c87f5be
Validity
Not Before: Jan 31 14:00:21 2025 GMT
Not After : Feb 1 14:00:21 2025 GMT
Subject: CN=407ee3ded33e16449e1ebd25fdca3fb390fb47a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f7:10:15:47:6e:4a:63:af:ec:70:61:30:d4:
88:c7:03:91:04:5d:79:d5:0c:04:90:f3:f7:70:9c:
26:ec:83:d2:73:ed:9e:a5:3a:bd:64:35:09:c4:52:
6e:5b:9b:9b:7c:f0:dd:3b:e7:60:32:06:6d:37:16:
52:fd:ad:ff:09:ca:5f:64:70:d7:a5:3a:c6:82:0d:
d0:0c:6d:34:f5:5f:4e:b9:81:17:29:b7:90:59:10:
7b:3a:2c:02:13:a4:02:ff:ac:a2:35:02:b4:2a:0b:
cf:b3:02:51:c2:86:07:30:bb:4f:f1:5b:79:11:1d:
78:eb:c3:7b:16:15:cf:4b:d7:ef:81:83:58:11:a0:
3e:dc:16:56:71:d2:9b:07:23:5c:cb:52:77:06:07:
10:23:d3:e2:86:6e:3a:ba:0f:ac:38:25:d0:d5:7c:
69:3a:d4:95:61:e7:6a:54:ed:6a:f7:45:2e:c6:8f:
88:5a:67:b1:9d:59:f4:b0:21:4a:d6:21:05:b2:39:
03:50:97:6c:73:e2:f1:f3:26:a0:3e:0e:6d:dc:0a:
38:a0:0d:33:83:a4:b0:b9:78:14:b8:7b:12:d0:6a:
06:80:69:e3:57:ab:bc:9a:57:d6:8f:9e:96:97:42:
95:80:92:e0:68:2b:e9:9c:7a:a7:43:c6:b4:4b:0d:
37:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7E:E3:DE:D3:3E:16:44:9E:1E:BD:25:FD:CA:3F:B3:90:FB:47:A8
X509v3 Authority Key Identifier:
keyid:71:0A:B2:86:DA:E8:D8:CB:5F:6F:C4:EE:C3:F3:23:81:4C:87:F5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:17:3c:26:1f:39:01:16:71:4a:19:cb:12:3a:6a:de:f6:7b:
eb:03:04:24:0f:37:76:bf:1b:27:ef:31:d2:a0:9b:43:11:e8:
c8:64:22:68:20:1e:f2:3a:a2:a3:25:4f:9b:b0:24:8a:63:35:
77:5b:aa:06:56:a9:03:ed:5e:09:4b:36:86:39:30:b0:dd:3f:
3e:bf:11:91:32:f1:53:f6:21:c8:b6:58:de:18:e8:27:4e:e3:
a5:59:2b:56:cb:53:e9:54:a3:88:7d:e9:96:d5:da:6e:c4:ca:
f3:1f:2e:4d:e0:3f:0a:e4:6d:15:3d:69:06:0c:8e:26:13:c1:
8f:78:6e:2b:fd:3d:06:72:02:c7:d7:0a:09:0e:1b:a3:b7:ed:
d5:a6:89:a6:8f:14:12:fd:e4:26:87:33:c6:9f:12:b3:59:0b:
cc:15:60:47:32:4a:76:1f:fe:ec:5b:e3:6d:c9:54:5f:aa:84:
be:23:0d:08:f9:2e:13:56:01:99:b7:10:cb:d8:c9:54:3d:37:
3e:42:67:7a:73:80:23:f1:c4:1a:24:0f:1a:3b:bc:b9:8d:42:
0d:25:90:5d:b3:17:f6:ba:04:81:79:56:d4:dc:e4:ab:c4:73:
b4:64:4a:44:12:b1:49:bf:fd:ee:dc:2d:e9:2c:29:58:95:13:
a8:97:77:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qaVjXs5IWE9KvKxvTLucMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMGFiMjg2ZGFlOGQ4Y2I1ZjZmYzRlZWMzZjMyMzgxNGM4
N2Y1YmUwHhcNMjUwMTMxMTQwMDIxWhcNMjUwMjAxMTQwMDIxWjAzMTEwLwYDVQQD
Eyg0MDdlZTNkZWQzM2UxNjQ0OWUxZWJkMjVmZGNhM2ZiMzkwZmI0N2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/cQFUduSmOv7HBhMNSIxwORBF15
1QwEkPP3cJwm7IPSc+2epTq9ZDUJxFJuW5ubfPDdO+dgMgZtNxZS/a3/CcpfZHDX
pTrGgg3QDG009V9OuYEXKbeQWRB7OiwCE6QC/6yiNQK0KgvPswJRwoYHMLtP8Vt5
ER1468N7FhXPS9fvgYNYEaA+3BZWcdKbByNcy1J3BgcQI9Pihm46ug+sOCXQ1Xxp
OtSVYedqVO1q90Uuxo+IWmexnVn0sCFK1iEFsjkDUJdsc+Lx8yagPg5t3Ao4oA0z
g6SwuXgUuHsS0GoGgGnjV6u8mlfWj56Wl0KVgJLgaCvpnHqnQ8a0Sw03bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEB+497TPhZEnh69Jf3KP7OQ+0eoMB8GA1UdIwQY
MBaAFHEKsoba6NjLX2/E7sPzI4FMh/W+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1FxeWh0cm8yTXRmYjhUdXdfTWpnVXlIOWI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mMTJlNmItN2YwNi00MDQwLTg2Yjkt
N2JmOTY4MzJlMWVhLzEvY1FxeWh0cm8yTXRmYjhUdXdfTWpnVXlIOWI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9mMTJlNmItN2YwNi00MDQwLTg2YjktN2JmOTY4MzJlMWVh
LzEvY1FxeWh0cm8yTXRmYjhUdXdfTWpnVXlIOWI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAixc8Jh85
ARZxShnLEjpq3vZ76wMEJA83dr8bJ+8x0qCbQxHoyGQiaCAe8jqioyVPm7AkimM1
d1uqBlapA+1eCUs2hjkwsN0/Pr8RkTLxU/YhyLZY3hjoJ07jpVkrVstT6VSjiH3p
ltXabsTK8x8uTeA/CuRtFT1pBgyOJhPBj3huK/09BnICx9cKCQ4bo7ft1aaJpo8U
Ev3kJoczxp8Ss1kLzBVgRzJKdh/+7FvjbclUX6qEviMNCPkuE1YBmbcQy9jJVD03
PkJnenOAI/HEGiQPGju8uY1CDSWQXbMX9roEgXlW1Nzkq8RztGRKRBKxSb/97twt
6SwpWJUTqJd3SA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:25 2025 by rpki-client