Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
File: qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft (raw, json)
Hash identifier: pZH7e4p7RmpM1exT704gsCnCQRKtkZE5NKApPVPl7xY=
Subject key identifier: 18:4B:B9:CA:A5:56:AD:3C:94:A4:25:B5:84:29:0B:21:7E:9C:AF:2C
Authority key identifier: A9:FF:3A:73:86:8D:C1:1C:D8:DB:F5:E1:C3:80:BB:B7:10:60:2F:B4
Certificate issuer: /CN=a9ff3a73868dc11cd8dbf5e1c380bbb710602fb4
Certificate serial: 0194BCA989E40C8C129EFDC91B4AB16149AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
Manifest number: 079E
Signing time: Fri 31 Jan 2025 14:00:14 +0000
Manifest this update: Fri 31 Jan 2025 14:00:14 +0000
Manifest next update: Sat 01 Feb 2025 14:00:14 +0000
Files and hashes: 1: 6erG3SJtn2TNRyDkzUal0dRi1s8.roa (hash: zMaNZ9haJooDEzDMLzt1I2Ft1PlQQjaYiPOAhINpWfw=)
2: qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl (hash: hrIEd5vkwW4Ktiq64wOGjpc51cKyLyYC5QV5oojlpSk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:89:e4:0c:8c:12:9e:fd:c9:1b:4a:b1:61:49:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9ff3a73868dc11cd8dbf5e1c380bbb710602fb4
Validity
Not Before: Jan 31 14:00:14 2025 GMT
Not After : Feb 1 14:00:14 2025 GMT
Subject: CN=184bb9caa556ad3c94a425b584290b217e9caf2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dc:da:d4:e5:33:d1:6e:a8:74:4d:b5:18:98:
c5:d3:69:9e:7a:bd:e2:60:4c:ff:54:c5:24:44:09:
47:32:94:61:22:da:be:7a:22:90:65:08:08:bf:e2:
53:0e:12:a6:39:de:7d:6f:1d:8f:6f:bb:15:78:c1:
50:23:ef:fd:19:d4:57:21:b8:3d:31:9a:39:1f:70:
ca:6b:d3:e4:18:15:f5:c1:48:d6:38:fe:1e:86:6b:
ff:c8:0c:fa:53:ef:0a:b8:18:86:3c:6e:a3:7e:87:
7a:50:dd:dd:dd:88:51:9b:2e:cb:bd:0f:3e:ec:9a:
21:08:4f:92:f2:d4:7f:63:93:b0:47:11:77:c2:89:
80:d7:c7:fe:f0:d8:b0:49:f8:3a:17:18:5e:13:dc:
0f:34:fe:1f:f9:08:19:e6:5b:d7:14:a4:97:c0:fa:
f7:90:15:e2:2e:24:03:a5:c3:11:06:73:e8:c7:e5:
70:6f:a8:d7:b4:98:66:9b:ba:4b:b7:3e:99:f0:cf:
62:b8:59:1d:87:d6:75:94:f8:60:e6:bf:4c:5c:70:
0a:d3:bb:6a:f0:fd:e3:18:bd:2b:c0:a9:e7:f9:54:
82:1d:b0:f1:ec:61:8a:4a:3f:31:f1:b9:e9:dc:60:
d3:ad:bd:b2:a9:15:e2:b3:9a:51:30:76:23:ef:f2:
7d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4B:B9:CA:A5:56:AD:3C:94:A4:25:B5:84:29:0B:21:7E:9C:AF:2C
X509v3 Authority Key Identifier:
keyid:A9:FF:3A:73:86:8D:C1:1C:D8:DB:F5:E1:C3:80:BB:B7:10:60:2F:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:2e:f1:c7:f1:9a:4a:aa:8a:45:0c:8e:a7:c9:f6:25:5d:55:
0b:c8:82:61:5b:71:5f:24:98:6d:e0:b7:f9:08:c8:05:a9:9e:
6e:05:36:9e:8b:fd:b4:a9:1e:58:1c:d2:19:b4:b5:9a:f0:1d:
83:67:db:78:9b:ae:07:c9:b9:a7:eb:5a:8b:5a:69:1a:8c:e1:
ae:4a:9e:04:bc:b3:4e:9f:a8:94:41:44:f7:39:59:9d:59:ec:
65:05:21:f2:ce:7f:df:88:14:e1:c4:49:97:40:63:4e:78:0d:
ca:04:fe:1a:ed:b9:aa:40:17:46:9b:41:09:66:e3:00:88:2c:
2c:df:63:cd:0d:ea:49:2a:95:dc:47:90:44:96:95:af:26:d6:
b6:a7:99:35:f1:7f:db:a6:52:7e:7c:89:15:dd:a2:61:33:41:
24:1a:73:3a:73:3a:5d:04:0a:6a:52:fb:d7:d6:09:b7:80:69:
ad:ca:e7:51:3a:12:73:7c:cd:af:f4:5f:fb:43:d2:c3:e6:72:
26:34:52:c4:86:e1:88:5a:7f:ba:57:6c:38:a1:14:b5:d8:cb:
6b:d9:23:6c:5f:5b:7a:ea:7d:36:a1:9f:c2:cd:b2:a9:52:df:
9a:10:e8:47:83:76:e1:69:c5:33:58:28:aa:eb:99:4f:4a:7d:
75:44:5d:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qYnkDIwSnv3JG0qxYUmvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZmYzYTczODY4ZGMxMWNkOGRiZjVlMWMzODBiYmI3MTA2
MDJmYjQwHhcNMjUwMTMxMTQwMDE0WhcNMjUwMjAxMTQwMDE0WjAzMTEwLwYDVQQD
EygxODRiYjljYWE1NTZhZDNjOTRhNDI1YjU4NDI5MGIyMTdlOWNhZjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdza1OUz0W6odE21GJjF02meer3i
YEz/VMUkRAlHMpRhItq+eiKQZQgIv+JTDhKmOd59bx2Pb7sVeMFQI+/9GdRXIbg9
MZo5H3DKa9PkGBX1wUjWOP4ehmv/yAz6U+8KuBiGPG6jfod6UN3d3YhRmy7LvQ8+
7JohCE+S8tR/Y5OwRxF3womA18f+8NiwSfg6FxheE9wPNP4f+QgZ5lvXFKSXwPr3
kBXiLiQDpcMRBnPox+Vwb6jXtJhmm7pLtz6Z8M9iuFkdh9Z1lPhg5r9MXHAK07tq
8P3jGL0rwKnn+VSCHbDx7GGKSj8x8bnp3GDTrb2yqRXis5pRMHYj7/J9bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhLucqlVq08lKQltYQpCyF+nK8sMB8GA1UdIwQY
MBaAFKn/OnOGjcEc2Nv14cOAu7cQYC+0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWY4NmM0YU53UnpZMl9YaHc0Qzd0eEJnTDdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85MTU4NWEtYTM4Zi00NzQ5LTlmNDgt
NDc5NzRmNWM3MDRhLzEvcWY4NmM0YU53UnpZMl9YaHc0Qzd0eEJnTDdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi85MTU4NWEtYTM4Zi00NzQ5LTlmNDgtNDc5NzRmNWM3MDRh
LzEvcWY4NmM0YU53UnpZMl9YaHc0Qzd0eEJnTDdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAky7xx/Ga
SqqKRQyOp8n2JV1VC8iCYVtxXySYbeC3+QjIBamebgU2nov9tKkeWBzSGbS1mvAd
g2fbeJuuB8m5p+tai1ppGozhrkqeBLyzTp+olEFE9zlZnVnsZQUh8s5/34gU4cRJ
l0BjTngNygT+Gu25qkAXRptBCWbjAIgsLN9jzQ3qSSqV3EeQRJaVrybWtqeZNfF/
26ZSfnyJFd2iYTNBJBpzOnM6XQQKalL719YJt4BprcrnUToSc3zNr/Rf+0PSw+Zy
JjRSxIbhiFp/uldsOKEUtdjLa9kjbF9beup9NqGfws2yqVLfmhDoR4N24WnFM1go
quuZT0p9dURdLQ==
-----END CERTIFICATE-----
Generated at Wed May 14 02:22:13 2025 by rpki-client