Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
File: q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft (raw, json)
Hash identifier: 2K5DewVbDNWX7EAHJdFV8vh89dH3VnQ77RGLnPjfYf8=
Subject key identifier: A0:9C:07:C7:09:7B:0C:EF:90:E7:05:F4:42:E0:B6:94:E1:18:88:12
Authority key identifier: AB:91:D5:26:25:61:A9:DD:71:3D:FA:39:16:3D:EC:84:9F:EE:46:36
Certificate issuer: /CN=ab91d5262561a9dd713dfa39163dec849fee4636
Certificate serial: 0194BD4E6F9507D182B9E021AC4CD8DD365C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:21 +0000
Manifest this update: Fri 31 Jan 2025 17:00:21 +0000
Manifest next update: Sat 01 Feb 2025 17:00:21 +0000
Files and hashes: 1: 90qSTJbYoJhXhjJi4rtP_ZNlhJU.roa (hash: OSVSFtU4v1yfm+DOAOwZeidgdh2EY4LpmP/NOkKDmkg=)
2: JErXjXvKorGj9aJu1omld6wdpcs.roa (hash: kiyLNY+zTwPwB8AkdrotNIs7qiykrRwfggYUByu+C28=)
3: UscJiSEPN7-PYnIHOgT8LNjrioo.roa (hash: RVU014DpCH3z/tdVgprON9hggZk6wMumDABO2h4+Fx0=)
4: q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl (hash: cOeoqCfGabkRmNDE9HnusTswE8pmW0iJ8CyLx2Besl8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6f:95:07:d1:82:b9:e0:21:ac:4c:d8:dd:36:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab91d5262561a9dd713dfa39163dec849fee4636
Validity
Not Before: Jan 31 17:00:21 2025 GMT
Not After : Feb 1 17:00:21 2025 GMT
Subject: CN=a09c07c7097b0cef90e705f442e0b694e1188812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c6:31:2b:45:48:5b:a8:83:5b:15:99:09:07:
ea:55:c5:c7:14:bf:48:7c:af:9e:81:a7:80:01:35:
40:5c:25:04:13:3d:13:35:17:5d:7e:5c:6b:60:f1:
e6:ea:89:ea:c0:64:36:03:d1:7c:83:ac:38:80:67:
c8:f2:5b:2e:10:ba:e1:47:68:4d:ad:7e:64:66:5a:
a7:04:5b:14:f9:09:4d:3d:3d:2d:68:15:15:a2:55:
b7:75:67:93:8a:79:5c:b1:09:d2:d7:9f:70:97:ff:
f6:f8:f6:4b:0a:ab:48:9f:77:3d:af:ab:59:f3:01:
5b:31:0d:2c:c1:77:e9:94:bd:68:f1:e1:0c:25:92:
27:cd:4e:f9:80:0a:e7:1e:d0:98:61:31:84:80:2a:
78:d7:6a:ae:a2:aa:38:e5:e3:31:48:b6:ea:d6:8a:
15:a1:d3:16:41:6d:ec:e0:aa:01:d4:bd:c0:2f:37:
ba:8e:9c:be:5d:51:ae:67:5a:89:d2:18:59:29:cd:
69:99:df:57:a8:26:2f:86:5a:ec:cb:75:ae:09:6d:
a6:4e:46:98:36:60:b6:37:6a:19:54:e5:c8:7f:38:
9f:62:a0:78:a2:fa:d8:ae:bb:f3:4c:fd:8a:cc:04:
2c:9e:ed:6b:83:da:23:30:81:17:7a:c2:50:c9:ae:
82:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9C:07:C7:09:7B:0C:EF:90:E7:05:F4:42:E0:B6:94:E1:18:88:12
X509v3 Authority Key Identifier:
keyid:AB:91:D5:26:25:61:A9:DD:71:3D:FA:39:16:3D:EC:84:9F:EE:46:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f4:2b:2a:7b:21:9a:b3:a2:c9:10:10:f4:48:13:4d:f9:d3:
a6:ee:e6:70:ac:95:7c:1c:20:89:c5:4c:23:9e:b9:d7:1e:ca:
4f:27:b5:89:9f:65:77:17:06:61:e5:4b:39:1f:e1:c3:f4:aa:
13:69:a5:c9:9e:16:df:20:9a:f6:4e:ec:c3:84:ae:f0:c9:bb:
55:5a:e3:58:87:e4:b5:93:54:94:53:9d:81:b2:b5:05:a2:98:
55:3f:fa:43:5b:19:63:6c:14:ff:9b:ad:fe:e2:0e:38:ad:75:
4b:16:77:b9:30:c9:3b:1c:de:9b:e1:02:cd:ab:c5:4a:66:5d:
7c:3a:bb:df:3b:38:ae:19:56:c1:38:d2:47:22:49:7f:0f:bc:
b0:1a:c2:52:b7:c1:42:ff:e0:60:61:c5:69:bb:47:2e:47:a6:
53:2f:f7:39:56:4e:9e:2d:4f:49:3a:e4:76:12:49:91:b0:67:
66:bf:09:03:ec:39:59:35:b9:a0:52:93:e9:f8:23:a2:56:cb:
7b:77:ed:65:2f:d0:6e:ff:46:15:31:a0:b8:07:1c:15:01:82:
80:f2:cd:0f:ce:63:bb:c9:ba:86:8a:16:e7:63:1e:cb:89:62:
44:8d:c6:3e:fb:1f:82:af:67:c9:d6:da:69:ec:f5:eb:e4:5e:
d6:1e:9c:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tm+VB9GCueAhrEzY3TZcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiOTFkNTI2MjU2MWE5ZGQ3MTNkZmEzOTE2M2RlYzg0OWZl
ZTQ2MzYwHhcNMjUwMTMxMTcwMDIxWhcNMjUwMjAxMTcwMDIxWjAzMTEwLwYDVQQD
EyhhMDljMDdjNzA5N2IwY2VmOTBlNzA1ZjQ0MmUwYjY5NGUxMTg4ODEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8YxK0VIW6iDWxWZCQfqVcXHFL9I
fK+egaeAATVAXCUEEz0TNRddflxrYPHm6onqwGQ2A9F8g6w4gGfI8lsuELrhR2hN
rX5kZlqnBFsU+QlNPT0taBUVolW3dWeTinlcsQnS159wl//2+PZLCqtIn3c9r6tZ
8wFbMQ0swXfplL1o8eEMJZInzU75gArnHtCYYTGEgCp412quoqo45eMxSLbq1ooV
odMWQW3s4KoB1L3ALze6jpy+XVGuZ1qJ0hhZKc1pmd9XqCYvhlrsy3WuCW2mTkaY
NmC2N2oZVOXIfzifYqB4ovrYrrvzTP2KzAQsnu1rg9ojMIEXesJQya6CIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKCcB8cJewzvkOcF9ELgtpThGIgSMB8GA1UdIwQY
MBaAFKuR1SYlYandcT36ORY97ISf7kY2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTVIVkppVmhxZDF4UGZvNUZqM3NoSl91UmpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85MWU4ODItYmE4YS00NGM1LTliMGQt
Mjc1MjQyYWE2Nzc1LzEvcTVIVkppVmhxZDF4UGZvNUZqM3NoSl91UmpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi85MWU4ODItYmE4YS00NGM1LTliMGQtMjc1MjQyYWE2Nzc1
LzEvcTVIVkppVmhxZDF4UGZvNUZqM3NoSl91UmpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAvQrKnsh
mrOiyRAQ9EgTTfnTpu7mcKyVfBwgicVMI5651x7KTye1iZ9ldxcGYeVLOR/hw/Sq
E2mlyZ4W3yCa9k7sw4Su8Mm7VVrjWIfktZNUlFOdgbK1BaKYVT/6Q1sZY2wU/5ut
/uIOOK11SxZ3uTDJOxzem+ECzavFSmZdfDq73zs4rhlWwTjSRyJJfw+8sBrCUrfB
Qv/gYGHFabtHLkemUy/3OVZOni1PSTrkdhJJkbBnZr8JA+w5WTW5oFKT6fgjolbL
e3ftZS/Qbv9GFTGguAccFQGCgPLND85ju8m6hooW52Mey4liRI3GPvsfgq9nydba
aez16+Re1h6cKQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:23 2025 by rpki-client