Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
File: Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft (raw, json)
Hash identifier: rDHjG+sIZfz8gdR8IuRruekkifr7UCK5j/xT3m4LoW8=
Subject key identifier: B2:AC:B4:FE:CF:6E:17:DA:03:34:E2:CE:71:BC:DE:72:9F:73:2B:6D
Authority key identifier: 43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13
Certificate issuer: /CN=43fad79548afc5c83e59bbfe388c64492cb55013
Certificate serial: 0194BCA9DCD6004F235156624BFDCE5CD520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 14:00:36 +0000
Manifest this update: Fri 31 Jan 2025 14:00:36 +0000
Manifest next update: Sat 01 Feb 2025 14:00:36 +0000
Files and hashes: 1: LV0PrwUwApuyDUZikJDi74P4PbM.roa (hash: CRURkBwcTmvzFW2izVL5pwlfr/5l3k8aD0Pamg8MVGM=)
2: Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl (hash: UlhNG1C7Y963IoOuxjMv7+7STR3lglFgF1D/1D6uG0o=)
3: sG_rr6I8pDA92eA5vBpgqLHPlcc.roa (hash: VBbgkzxs+YQuemItqSI61ff6E1GX47Q0q9j9ZQDjYJM=)
4: z3CwNMmW91OeZadetIEGWrLgAV8.roa (hash: TBa7E7IHnq9QvWerYacnX6IUM0n0LVVjA36Ue+17mgI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:dc:d6:00:4f:23:51:56:62:4b:fd:ce:5c:d5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43fad79548afc5c83e59bbfe388c64492cb55013
Validity
Not Before: Jan 31 14:00:36 2025 GMT
Not After : Feb 1 14:00:36 2025 GMT
Subject: CN=b2acb4fecf6e17da0334e2ce71bcde729f732b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cc:e7:7a:c3:13:cb:f2:c9:51:91:0d:9e:c8:
c1:0f:06:b8:1c:ec:ab:f8:b5:dd:c4:da:2a:f7:82:
58:4d:02:0c:9e:77:ad:de:cd:95:7c:27:d5:3f:b5:
3f:c7:fa:62:e8:49:74:28:60:85:dd:58:bf:50:99:
e5:56:41:87:11:32:68:6f:f7:44:a8:ad:7d:d2:fa:
6e:c7:7b:16:c8:d7:70:fe:1e:2a:e5:59:10:a5:9a:
fc:96:d0:1f:2c:e7:cc:dc:2a:5f:a2:ff:a7:ff:bb:
f9:20:5f:f0:13:43:a3:d7:d3:89:ec:7a:b3:a8:fc:
81:0a:6f:bd:d9:1d:a7:28:bb:dc:b8:6d:25:ee:38:
44:81:2d:17:6b:51:01:a4:47:05:f0:3b:6e:7f:fd:
fe:c9:21:8f:99:09:ce:b7:83:05:63:26:60:76:80:
92:3d:aa:d2:b8:d7:6d:37:1e:71:17:c8:a4:f2:16:
c8:1b:52:0b:9e:bf:ad:e6:f7:c2:cd:cc:af:2d:72:
7f:a9:de:b0:48:1a:93:16:26:43:6c:86:54:6f:43:
cb:df:6f:df:1c:f7:ee:ba:be:2d:60:02:85:e5:f7:
a3:61:f3:c3:3f:8f:67:5e:21:65:66:05:a1:7c:da:
ae:79:a7:bf:6c:07:b1:e3:f5:2a:70:9c:fe:83:88:
b3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AC:B4:FE:CF:6E:17:DA:03:34:E2:CE:71:BC:DE:72:9F:73:2B:6D
X509v3 Authority Key Identifier:
keyid:43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:bf:70:18:75:27:1c:b9:56:23:80:98:04:08:73:8a:bc:5c:
a5:11:0f:f8:38:4a:a9:6b:ef:c6:be:0c:ac:c6:18:dd:d6:db:
d8:88:e6:ab:44:10:73:16:7e:3f:07:3c:91:66:e8:ab:33:3d:
22:8f:ac:9f:70:2b:e9:64:e8:d5:fa:18:51:90:6f:96:28:12:
9a:17:0d:dd:ba:82:f2:d2:7e:d7:87:23:3e:95:55:98:61:e0:
2a:06:1e:14:d5:b3:ea:12:5b:b0:5c:ce:45:19:4e:0d:50:93:
2d:62:49:2a:a7:32:7a:3d:86:d1:81:69:58:4c:8a:21:6e:ad:
46:77:00:b6:f1:82:19:13:b5:26:9c:93:f0:70:b8:c5:2a:74:
f0:24:1d:ae:ea:36:4e:11:ac:a1:82:49:fe:e6:66:32:e7:78:
37:f5:79:6d:ad:cd:70:06:e8:92:0a:3f:df:3f:4e:ab:0f:db:
cb:32:eb:b7:2d:8e:af:c1:f8:8d:43:98:c9:49:47:87:3e:73:
c5:14:f6:25:99:db:9d:9e:8f:78:e9:52:ea:10:4f:e6:dc:0e:
5e:03:fe:9d:d0:f6:17:a8:56:f6:89:14:cd:56:f0:0f:2f:82:
c1:6e:94:43:f7:14:28:76:b6:23:d4:3e:d2:4a:76:7c:f7:b4:
37:2f:c3:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qdzWAE8jUVZiS/3OXNUgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZmFkNzk1NDhhZmM1YzgzZTU5YmJmZTM4OGM2NDQ5MmNi
NTUwMTMwHhcNMjUwMTMxMTQwMDM2WhcNMjUwMjAxMTQwMDM2WjAzMTEwLwYDVQQD
EyhiMmFjYjRmZWNmNmUxN2RhMDMzNGUyY2U3MWJjZGU3MjlmNzMyYjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosznesMTy/LJUZENnsjBDwa4HOyr
+LXdxNoq94JYTQIMnnet3s2VfCfVP7U/x/pi6El0KGCF3Vi/UJnlVkGHETJob/dE
qK190vpux3sWyNdw/h4q5VkQpZr8ltAfLOfM3Cpfov+n/7v5IF/wE0Oj19OJ7Hqz
qPyBCm+92R2nKLvcuG0l7jhEgS0Xa1EBpEcF8Dtuf/3+ySGPmQnOt4MFYyZgdoCS
ParSuNdtNx5xF8ik8hbIG1ILnr+t5vfCzcyvLXJ/qd6wSBqTFiZDbIZUb0PL32/f
HPfuur4tYAKF5fejYfPDP49nXiFlZgWhfNqueae/bAex4/UqcJz+g4izzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLKstP7PbhfaAzTiznG83nKfcyttMB8GA1UdIwQY
MBaAFEP615VIr8XIPlm7/jiMZEkstVATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUV9yWGxVaXZ4Y2ctV2J2LU9JeGtTU3kxVUJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8yY2YyYzEtMTk2Mi00YjcwLTllNWIt
ZmU4NTVkYWJiNzVlLzEvUV9yWGxVaXZ4Y2ctV2J2LU9JeGtTU3kxVUJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8yY2YyYzEtMTk2Mi00YjcwLTllNWItZmU4NTVkYWJiNzVl
LzEvUV9yWGxVaXZ4Y2ctV2J2LU9JeGtTU3kxVUJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABb9wGHUn
HLlWI4CYBAhzirxcpREP+DhKqWvvxr4MrMYY3dbb2Ijmq0QQcxZ+Pwc8kWboqzM9
Io+sn3Ar6WTo1foYUZBvligSmhcN3bqC8tJ+14cjPpVVmGHgKgYeFNWz6hJbsFzO
RRlODVCTLWJJKqcyej2G0YFpWEyKIW6tRncAtvGCGRO1JpyT8HC4xSp08CQdruo2
ThGsoYJJ/uZmMud4N/V5ba3NcAbokgo/3z9Oqw/byzLrty2Or8H4jUOYyUlHhz5z
xRT2JZnbnZ6PeOlS6hBP5twOXgP+ndD2F6hW9okUzVbwDy+CwW6UQ/cUKHa2I9Q+
0kp2fPe0Ny/Ddg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 13:11:56 2025 by rpki-client