Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
File: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft (raw, json)
Hash identifier: 3oz2ueZsD09hKLPJ0XoheCGyEybLs7nJaLwu0JYWszQ=
Subject key identifier: BC:06:70:C5:BF:EE:84:9B:DA:35:5B:78:E7:BE:1B:91:2E:1A:14:7F
Authority key identifier: 43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C
Certificate issuer: /CN=439137befe8bc55903690c7c46af197cc91a703c
Certificate serial: 0194BC7282B040106E5F82B07169222523D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
Manifest number: 15
Signing time: Fri 31 Jan 2025 13:00:08 +0000
Manifest this update: Fri 31 Jan 2025 13:00:08 +0000
Manifest next update: Sat 01 Feb 2025 13:00:08 +0000
Files and hashes: 1: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl (hash: HgsSuqPrG/fLwzekliiXwRXjM01h1gCEeBl4Ze2dtUk=)
2: wVZ7Q_yh7vY87ipQHKXps_Y5QUU.roa (hash: F0pmi/wk6PrJmlY3U42fDKf/ChECXrlPOqHq8mmS3J0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:82:b0:40:10:6e:5f:82:b0:71:69:22:25:23:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439137befe8bc55903690c7c46af197cc91a703c
Validity
Not Before: Jan 31 13:00:08 2025 GMT
Not After : Feb 1 13:00:08 2025 GMT
Subject: CN=bc0670c5bfee849bda355b78e7be1b912e1a147f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:16:07:09:c2:4f:6b:84:0e:1c:41:b0:46:10:
0d:5d:0b:1a:39:be:d9:29:bc:a0:7a:df:5d:b9:07:
6a:27:20:d8:f2:60:dd:bb:05:25:aa:a5:cd:bc:66:
a1:d8:84:58:7c:df:df:c0:bf:a1:f9:32:e0:d0:55:
bd:70:e4:0a:52:c8:60:7e:d3:4c:3b:08:ff:db:e8:
6f:1a:09:16:0a:bb:ba:9b:c1:e2:92:1a:f3:a6:80:
eb:c3:83:92:1f:2d:a0:90:c7:b4:62:9a:90:8f:b0:
dc:0e:27:c4:b2:b1:ce:a5:0c:db:29:61:ba:e6:c2:
bd:a2:2d:f3:d8:79:ce:43:e9:b2:06:26:35:09:72:
d4:dd:8b:28:99:f4:02:1b:30:56:71:30:fa:f3:88:
c2:f5:99:6c:73:3c:c7:cc:24:a1:a5:89:41:87:11:
51:79:64:86:6e:97:89:12:97:f5:ae:8f:af:4e:e7:
96:ef:b9:8b:5e:32:92:40:5c:fb:e1:a2:1c:ed:e2:
50:7a:47:bb:e4:7b:85:64:65:e4:02:73:48:88:e8:
1c:ed:d5:ec:58:06:d6:64:e2:dd:50:64:d5:0e:d6:
eb:4c:b5:a6:0d:db:c0:1e:b3:e6:72:72:f7:cd:c7:
ac:ab:36:36:0b:81:c5:0f:47:6a:66:96:0d:c7:b6:
6e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:06:70:C5:BF:EE:84:9B:DA:35:5B:78:E7:BE:1B:91:2E:1A:14:7F
X509v3 Authority Key Identifier:
keyid:43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:85:18:62:13:63:8f:5c:5a:08:24:3c:7b:d0:41:55:96:52:
ca:c2:b9:00:23:32:d9:ea:80:f9:83:fd:ef:d1:2a:02:d6:de:
00:19:27:aa:5f:31:13:ce:5d:e0:f3:c8:cf:dc:4a:32:d2:bb:
ae:1c:6d:7e:ce:c4:53:94:bb:0d:64:eb:9a:a0:77:fd:e8:8a:
fb:e6:d8:28:2e:73:2c:c0:aa:9a:e9:7c:6a:04:98:3b:b9:57:
8b:75:d7:52:be:cd:7c:8e:a3:f0:18:9f:f9:2c:66:21:7d:e5:
8f:a4:b6:52:49:d5:a5:d6:f1:00:b8:b8:14:e3:cf:40:39:72:
8b:78:7c:8c:94:1e:87:29:09:a4:a2:9f:8e:1a:4f:2a:e6:7a:
30:c7:c8:cd:3e:d9:fe:83:cf:ef:f8:bc:c1:6b:09:8e:b2:bf:
2e:69:30:3f:a4:f1:05:71:ff:9c:9a:44:fb:d7:14:db:f7:65:
f4:1a:9e:75:b1:af:c8:1f:bd:c8:87:40:ad:e9:c4:7e:ea:69:
29:0b:c2:93:28:cf:82:57:ae:bf:84:0e:3b:76:24:18:e7:9e:
e5:81:24:5a:48:96:51:c2:95:9c:a3:9f:38:f3:d3:b0:e3:a5:
50:e2:32:76:79:20:fd:a1:d3:66:84:aa:b0:83:91:07:5e:4f:
7a:07:15:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8coKwQBBuX4KwcWkiJSPYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzOTEzN2JlZmU4YmM1NTkwMzY5MGM3YzQ2YWYxOTdjYzkx
YTcwM2MwHhcNMjUwMTMxMTMwMDA4WhcNMjUwMjAxMTMwMDA4WjAzMTEwLwYDVQQD
EyhiYzA2NzBjNWJmZWU4NDliZGEzNTViNzhlN2JlMWI5MTJlMWExNDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBYHCcJPa4QOHEGwRhANXQsaOb7Z
Kbyget9duQdqJyDY8mDduwUlqqXNvGah2IRYfN/fwL+h+TLg0FW9cOQKUshgftNM
Owj/2+hvGgkWCru6m8HikhrzpoDrw4OSHy2gkMe0YpqQj7DcDifEsrHOpQzbKWG6
5sK9oi3z2HnOQ+myBiY1CXLU3YsomfQCGzBWcTD684jC9ZlsczzHzCShpYlBhxFR
eWSGbpeJEpf1ro+vTueW77mLXjKSQFz74aIc7eJQeke75HuFZGXkAnNIiOgc7dXs
WAbWZOLdUGTVDtbrTLWmDdvAHrPmcnL3zcesqzY2C4HFD0dqZpYNx7ZuXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwGcMW/7oSb2jVbeOe+G5EuGhR/MB8GA1UdIwQY
MBaAFEORN77+i8VZA2kMfEavGXzJGnA8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTVFM3Z2Nkx4VmtEYVF4OFJxOFpmTWthY0R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy81YWMyMmQtOWU4Zi00NDlkLTgzMDQt
MGY1MmQ4MjhmZDRmLzEvUTVFM3Z2Nkx4VmtEYVF4OFJxOFpmTWthY0R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy81YWMyMmQtOWU4Zi00NDlkLTgzMDQtMGY1MmQ4MjhmZDRm
LzEvUTVFM3Z2Nkx4VmtEYVF4OFJxOFpmTWthY0R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAoUYYhNj
j1xaCCQ8e9BBVZZSysK5ACMy2eqA+YP979EqAtbeABknql8xE85d4PPIz9xKMtK7
rhxtfs7EU5S7DWTrmqB3/eiK++bYKC5zLMCqmul8agSYO7lXi3XXUr7NfI6j8Bif
+SxmIX3lj6S2UknVpdbxALi4FOPPQDlyi3h8jJQehykJpKKfjhpPKuZ6MMfIzT7Z
/oPP7/i8wWsJjrK/LmkwP6TxBXH/nJpE+9cU2/dl9BqedbGvyB+9yIdArenEfupp
KQvCkyjPgleuv4QOO3YkGOee5YEkWkiWUcKVnKOfOPPTsOOlUOIydnkg/aHTZoSq
sIORB15PegcV4g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:34:05 2025 by rpki-client