Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
File: qsV1yvoAvEHVfElKwfXbz-54My4.mft (raw, json)
Hash identifier: L7WnvSSia3xauPOy39pKcDMmFsn7Aw44ZDoR1eJTBAY=
Subject key identifier: 05:17:D9:24:73:65:C8:51:24:E5:BC:9C:54:9B:E8:77:9F:FC:C4:C5
Authority key identifier: AA:C5:75:CA:FA:00:BC:41:D5:7C:49:4A:C1:F5:DB:CF:EE:78:33:2E
Certificate issuer: /CN=aac575cafa00bc41d57c494ac1f5dbcfee78332e
Certificate serial: 0194BC3BE7AF2C62D1AA99C3315A8D955F34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:30 +0000
Manifest this update: Fri 31 Jan 2025 12:00:30 +0000
Manifest next update: Sat 01 Feb 2025 12:00:30 +0000
Files and hashes: 1: XtPvNkbtFvkSrn1XGkdkM55xfJ4.roa (hash: XvdvDvnaLffIXutFMAXtL47S87Pb9dwgFS/EYsDxu5Q=)
2: qsV1yvoAvEHVfElKwfXbz-54My4.crl (hash: I+HnT9KMQwuYzZUMqCbb8ogUFAceSeewYrA8uDtEruQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e7:af:2c:62:d1:aa:99:c3:31:5a:8d:95:5f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac575cafa00bc41d57c494ac1f5dbcfee78332e
Validity
Not Before: Jan 31 12:00:30 2025 GMT
Not After : Feb 1 12:00:30 2025 GMT
Subject: CN=0517d9247365c85124e5bc9c549be8779ffcc4c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fc:52:74:f7:47:9e:50:43:e0:db:cb:72:58:
a0:64:52:46:db:13:02:30:d9:8f:25:c6:52:a9:c2:
bb:95:39:0c:dc:df:98:b8:8c:94:0d:47:f9:d9:71:
33:47:18:53:e6:37:30:99:8a:2d:99:f3:0f:96:53:
07:a2:0a:b2:2a:6e:f3:6f:e2:f8:30:1f:3d:62:d9:
95:b5:bc:f6:23:81:1c:83:2f:d7:93:0a:bd:47:b2:
66:04:9b:d5:8b:df:de:99:6a:d2:7e:ed:3e:a3:98:
b4:70:70:09:2b:92:f0:d0:ad:11:19:d4:5a:d7:74:
f8:a0:5f:3a:91:49:84:6c:d1:bb:b2:fc:e1:d8:ae:
64:72:d9:e9:18:dc:41:d8:44:00:7b:44:12:18:63:
19:c0:e1:94:77:82:94:f5:37:95:de:69:b2:24:e2:
34:9c:16:69:1b:26:04:4a:92:71:dd:6f:93:b4:9d:
bc:ef:c3:66:cc:40:fd:1e:8b:a7:9f:6b:4f:0f:d6:
6b:cd:39:8b:dc:bf:62:2e:e2:3c:d0:f9:c1:46:6b:
38:41:8b:40:ee:ea:1f:5e:c6:48:cd:e6:e6:34:93:
71:2d:18:ab:aa:05:75:4b:ac:56:59:0c:f0:a4:7b:
a7:ba:ad:1a:49:f2:d7:b2:c2:d0:7f:8c:e0:63:2d:
d1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:17:D9:24:73:65:C8:51:24:E5:BC:9C:54:9B:E8:77:9F:FC:C4:C5
X509v3 Authority Key Identifier:
keyid:AA:C5:75:CA:FA:00:BC:41:D5:7C:49:4A:C1:F5:DB:CF:EE:78:33:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:61:6b:c6:e3:71:61:dd:23:e1:61:84:9a:32:62:c1:5b:95:
0b:15:fb:b5:c9:d7:45:91:c1:d9:1b:51:08:b3:5d:12:aa:0b:
47:9c:d9:74:f6:49:75:3e:23:10:60:5f:fd:59:cc:a5:91:cd:
b1:c9:22:0e:53:ea:5d:aa:fc:23:7a:fb:b2:71:44:77:fb:2e:
12:d8:80:d3:98:d2:98:3b:d3:d7:de:86:3c:17:35:ff:43:e7:
da:4a:c5:61:73:33:0c:4d:39:da:0c:40:88:39:ca:cb:a9:87:
84:4b:06:0b:27:4a:ee:94:86:51:b4:93:6a:ad:30:b1:6d:07:
93:3a:de:e6:fd:e5:a9:58:ab:f5:a3:92:8c:73:d5:90:a6:43:
19:a4:e6:24:81:73:65:ac:22:b8:bc:c2:8a:c1:11:d6:e5:4b:
4f:27:af:4a:dc:9c:03:d3:d5:0a:6d:12:d7:c1:4d:39:a2:fa:
cd:3d:d2:b2:83:7c:09:d2:85:75:1a:c2:8d:c5:9c:07:27:9f:
93:86:0e:66:19:f5:c8:a1:2a:10:03:45:99:72:2f:35:02:56:
fe:60:17:c3:e5:00:fc:45:de:18:47:a6:c5:35:c8:78:47:72:
50:d3:7a:56:21:64:0d:21:68:1b:84:d6:74:4d:af:ba:e3:cc:
81:f0:22:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O+evLGLRqpnDMVqNlV80MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhYzU3NWNhZmEwMGJjNDFkNTdjNDk0YWMxZjVkYmNmZWU3
ODMzMmUwHhcNMjUwMTMxMTIwMDMwWhcNMjUwMjAxMTIwMDMwWjAzMTEwLwYDVQQD
EygwNTE3ZDkyNDczNjVjODUxMjRlNWJjOWM1NDliZTg3NzlmZmNjNGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/xSdPdHnlBD4NvLcligZFJG2xMC
MNmPJcZSqcK7lTkM3N+YuIyUDUf52XEzRxhT5jcwmYotmfMPllMHogqyKm7zb+L4
MB89YtmVtbz2I4Ecgy/Xkwq9R7JmBJvVi9/emWrSfu0+o5i0cHAJK5Lw0K0RGdRa
13T4oF86kUmEbNG7svzh2K5kctnpGNxB2EQAe0QSGGMZwOGUd4KU9TeV3mmyJOI0
nBZpGyYESpJx3W+TtJ2878NmzED9Hounn2tPD9ZrzTmL3L9iLuI80PnBRms4QYtA
7uofXsZIzebmNJNxLRirqgV1S6xWWQzwpHunuq0aSfLXssLQf4zgYy3RyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAUX2SRzZchRJOW8nFSb6Hef/MTFMB8GA1UdIwQY
MBaAFKrFdcr6ALxB1XxJSsH128/ueDMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXNWMXl2b0F2RUhWZkVsS3dmWGJ6LTU0TXk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8zNWQ1OTgtYzMyYy00OWE3LWIxZjYt
OGY5MTNlMjY5NmU1LzEvcXNWMXl2b0F2RUhWZkVsS3dmWGJ6LTU0TXk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8zNWQ1OTgtYzMyYy00OWE3LWIxZjYtOGY5MTNlMjY5NmU1
LzEvcXNWMXl2b0F2RUhWZkVsS3dmWGJ6LTU0TXk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALmFrxuNx
Yd0j4WGEmjJiwVuVCxX7tcnXRZHB2RtRCLNdEqoLR5zZdPZJdT4jEGBf/VnMpZHN
sckiDlPqXar8I3r7snFEd/suEtiA05jSmDvT196GPBc1/0Pn2krFYXMzDE052gxA
iDnKy6mHhEsGCydK7pSGUbSTaq0wsW0Hkzre5v3lqVir9aOSjHPVkKZDGaTmJIFz
ZawiuLzCisER1uVLTyevStycA9PVCm0S18FNOaL6zT3SsoN8CdKFdRrCjcWcByef
k4YOZhn1yKEqEANFmXIvNQJW/mAXw+UA/EXeGEemxTXIeEdyUNN6ViFkDSFoG4TW
dE2vuuPMgfAigQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:20:57 2025 by rpki-client