Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
File: QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft (raw, json)
Hash identifier: fvrh/oxxhArVTAwpqbL+DQesWLQ99njxnsQO2TAsFfI=
Subject key identifier: D4:8B:19:64:F8:8D:3D:90:39:7B:60:E9:56:1E:A1:D7:9C:92:DF:6E
Authority key identifier: 42:91:96:31:0A:7F:7D:D9:99:9E:C4:3E:93:8F:D9:06:98:5A:3F:87
Certificate issuer: /CN=429196310a7f7dd9999ec43e938fd906985a3f87
Certificate serial: 0194BD4E5EFEE7A31EF2007E9C55FB881F85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
Manifest number: 0987
Signing time: Fri 31 Jan 2025 17:00:17 +0000
Manifest this update: Fri 31 Jan 2025 17:00:17 +0000
Manifest next update: Sat 01 Feb 2025 17:00:17 +0000
Files and hashes: 1: QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl (hash: R0NBzzwsxXwn7zTqpMxsmIRjcg78G5XdABhfXTrLZRw=)
2: wqLf4HxTBxblmV7dYjywZ9LSO_g.roa (hash: xrazM8n3J2DoAIHJJglhb+L4RSIj7Z+1Mi/FtQpdckQ=)
3: yy37HnfCaW61gwGyu1dsgubo12s.roa (hash: iEoXay/v6I8F/MG3qHjPe1FvicHR4Thx5PSijnoSoog=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5e:fe:e7:a3:1e:f2:00:7e:9c:55:fb:88:1f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429196310a7f7dd9999ec43e938fd906985a3f87
Validity
Not Before: Jan 31 17:00:17 2025 GMT
Not After : Feb 1 17:00:17 2025 GMT
Subject: CN=d48b1964f88d3d90397b60e9561ea1d79c92df6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:99:fb:23:73:14:47:62:bf:3b:9b:64:c0:10:
39:cb:5f:2e:70:92:ca:02:c3:b2:80:7a:7a:05:ea:
3e:33:0d:b1:89:6e:6e:85:2d:5a:bc:13:16:5e:34:
43:b7:22:be:92:15:62:7e:74:e9:22:b0:68:4c:1c:
7d:24:c2:f5:de:7d:ff:f6:ac:b6:c8:12:40:bc:02:
c7:fc:8f:a5:78:a3:9d:3b:1b:f8:e8:74:64:d1:36:
52:28:86:a4:a0:e8:e6:d2:af:82:a3:04:06:03:47:
1f:45:6f:17:76:25:88:0f:b2:57:1b:3f:5a:fd:f1:
ba:d8:fb:54:3d:ed:c3:4c:f9:39:76:e8:fd:ec:1b:
6f:8b:a2:ad:2b:7d:49:f1:e6:f1:18:eb:51:e0:7e:
63:3a:37:c4:f2:3c:35:f3:70:66:a2:31:cc:89:9f:
4a:b6:88:ca:a6:e4:23:4a:68:17:36:26:41:a7:a0:
5a:57:73:21:b8:20:5c:4a:77:5d:b5:1d:49:cc:c7:
75:03:50:79:8a:f5:93:7e:c2:85:20:2a:22:6e:bb:
39:a3:3c:9b:41:d5:5c:7e:60:91:53:a3:d1:b9:0a:
43:11:68:56:9d:ad:aa:3d:7a:54:f4:f1:6f:c6:3a:
d7:51:89:c7:83:3d:d4:e5:ab:51:44:6f:b9:9e:00:
49:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8B:19:64:F8:8D:3D:90:39:7B:60:E9:56:1E:A1:D7:9C:92:DF:6E
X509v3 Authority Key Identifier:
keyid:42:91:96:31:0A:7F:7D:D9:99:9E:C4:3E:93:8F:D9:06:98:5A:3F:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:8c:4b:89:1e:29:51:8f:61:87:68:34:e3:bc:49:12:34:0c:
39:fb:21:39:f5:fc:b8:d9:63:ee:f0:41:ac:63:01:b1:ef:af:
2f:a9:96:69:e2:6c:29:fb:b5:26:50:1d:20:df:e9:cc:c5:10:
9d:8a:5f:29:32:a9:3a:49:35:2d:b7:b2:9a:dc:0d:6e:34:8f:
96:56:f9:57:74:4d:da:9a:56:6c:46:3d:79:12:92:4a:2d:89:
d6:9d:24:38:ef:ea:c3:7d:e9:2b:6f:69:78:85:db:40:e5:f5:
21:a9:23:f8:fd:c5:2b:3b:d0:80:ce:c0:83:e2:b8:15:cb:30:
8b:dc:c5:98:5c:cb:2c:52:e0:9c:db:29:46:2e:a0:ec:46:8b:
3f:8d:f6:97:51:3b:22:a4:f0:20:54:2b:b8:87:0c:96:c1:ef:
92:7d:81:04:2f:eb:39:c9:79:02:12:ef:44:2d:61:54:54:26:
1c:4d:d5:57:57:9d:47:43:ff:64:b6:95:5f:52:23:2c:25:db:
14:69:ae:06:48:23:fe:80:87:0c:11:84:30:f2:34:5d:8d:ee:
56:ff:47:8c:92:eb:2d:b1:62:62:04:83:43:4a:7a:6f:20:19:
52:ee:17:8b:a0:38:bf:77:32:07:b3:b1:6e:2c:16:22:51:e5:
ea:d2:2c:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tl7+56Me8gB+nFX7iB+FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyOTE5NjMxMGE3ZjdkZDk5OTllYzQzZTkzOGZkOTA2OTg1
YTNmODcwHhcNMjUwMTMxMTcwMDE3WhcNMjUwMjAxMTcwMDE3WjAzMTEwLwYDVQQD
EyhkNDhiMTk2NGY4OGQzZDkwMzk3YjYwZTk1NjFlYTFkNzljOTJkZjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJn7I3MUR2K/O5tkwBA5y18ucJLK
AsOygHp6Beo+Mw2xiW5uhS1avBMWXjRDtyK+khVifnTpIrBoTBx9JML13n3/9qy2
yBJAvALH/I+leKOdOxv46HRk0TZSKIakoOjm0q+CowQGA0cfRW8XdiWID7JXGz9a
/fG62PtUPe3DTPk5duj97Btvi6KtK31J8ebxGOtR4H5jOjfE8jw183BmojHMiZ9K
tojKpuQjSmgXNiZBp6BaV3MhuCBcSnddtR1JzMd1A1B5ivWTfsKFICoibrs5ozyb
QdVcfmCRU6PRuQpDEWhWna2qPXpU9PFvxjrXUYnHgz3U5atRRG+5ngBJnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNSLGWT4jT2QOXtg6VYeodeckt9uMB8GA1UdIwQY
MBaAFEKRljEKf33ZmZ7EPpOP2QaYWj+HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXBHV01RcF9mZG1abnNRLWs0X1pCcGhhUDRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9iYzY4OTItMTc3OS00NTdjLTkyMTQt
MGFhOWQ5N2M4Yzk4LzEvUXBHV01RcF9mZG1abnNRLWs0X1pCcGhhUDRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9iYzY4OTItMTc3OS00NTdjLTkyMTQtMGFhOWQ5N2M4Yzk4
LzEvUXBHV01RcF9mZG1abnNRLWs0X1pCcGhhUDRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATYxLiR4p
UY9hh2g047xJEjQMOfshOfX8uNlj7vBBrGMBse+vL6mWaeJsKfu1JlAdIN/pzMUQ
nYpfKTKpOkk1LbeymtwNbjSPllb5V3RN2ppWbEY9eRKSSi2J1p0kOO/qw33pK29p
eIXbQOX1Iakj+P3FKzvQgM7Ag+K4Fcswi9zFmFzLLFLgnNspRi6g7EaLP432l1E7
IqTwIFQruIcMlsHvkn2BBC/rOcl5AhLvRC1hVFQmHE3VV1edR0P/ZLaVX1IjLCXb
FGmuBkgj/oCHDBGEMPI0XY3uVv9HjJLrLbFiYgSDQ0p6byAZUu4Xi6A4v3cyB7Ox
biwWIlHl6tIshQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:20:24 2025 by rpki-client