Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ae3840-7dda-482e-a24e-e46ec5b9b06c/1/QXhctfxrQP3xT3Km0l9BQ8F8MXw.mft
File: QXhctfxrQP3xT3Km0l9BQ8F8MXw.mft (raw, json)
Hash identifier: bfA5mHYsNXk1l76q2MM0MKPc15xfVtDxnv9RExZVLEI=
Subject key identifier: D8:CC:60:2D:67:0C:76:18:9A:0C:FA:B2:93:D5:06:73:CC:17:7F:C6
Authority key identifier: 41:78:5C:B5:FC:6B:40:FD:F1:4F:72:A6:D2:5F:41:43:C1:7C:31:7C
Certificate issuer: /CN=41785cb5fc6b40fdf14f72a6d25f4143c17c317c
Certificate serial: 0194BBCE83F4B6DB23C07F35A23042EBAE6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXhctfxrQP3xT3Km0l9BQ8F8MXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/ae3840-7dda-482e-a24e-e46ec5b9b06c/1/QXhctfxrQP3xT3Km0l9BQ8F8MXw.mft
Manifest number: 13BA
Signing time: Fri 31 Jan 2025 10:01:01 +0000
Manifest this update: Fri 31 Jan 2025 10:01:01 +0000
Manifest next update: Sat 01 Feb 2025 10:01:01 +0000
Files and hashes: 1: QXhctfxrQP3xT3Km0l9BQ8F8MXw.crl (hash: aH4OqzaKs9fW1zZXfVq7+WTtDvRjr5avF9H3tQY+EuU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:83:f4:b6:db:23:c0:7f:35:a2:30:42:eb:ae:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41785cb5fc6b40fdf14f72a6d25f4143c17c317c
Validity
Not Before: Jan 31 10:01:01 2025 GMT
Not After : Feb 1 10:01:01 2025 GMT
Subject: CN=d8cc602d670c76189a0cfab293d50673cc177fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1b:05:00:7b:0c:b8:96:e6:64:14:0a:91:12:
27:23:51:02:42:ed:f5:65:eb:51:48:f4:91:1f:f4:
ae:9a:b6:08:98:e5:1e:5b:55:0b:3a:8e:f8:65:31:
1f:8e:8d:68:6f:58:fe:14:33:64:52:f2:bc:65:b2:
35:83:bf:5b:b5:1c:e7:38:33:89:79:59:ad:fb:d0:
9a:7a:d5:69:5c:6a:4d:99:06:00:93:d6:78:e2:98:
73:0a:16:62:93:cc:92:a8:9a:19:39:f0:2d:6c:5f:
a9:41:18:b0:71:cc:f9:c4:46:3e:6f:3b:69:5e:ba:
b2:cc:5a:c1:c6:95:d7:c2:64:66:4c:45:b6:88:88:
e1:56:15:ab:36:70:5b:8d:26:e0:69:6e:c3:e9:5c:
a5:31:95:8e:08:e0:cd:33:38:cd:e7:4f:6a:cb:b4:
4b:ba:ca:97:91:88:25:fe:99:06:30:34:9b:c3:39:
69:66:8b:bf:32:3b:f0:1b:4b:de:28:78:bc:51:f7:
9b:e0:e9:a8:ef:e6:6e:4a:76:c2:94:c0:d6:0b:b9:
64:83:bc:e4:f1:e1:e2:a4:9a:30:a3:d0:92:4d:43:
f5:ec:75:2d:e7:ab:e4:73:ba:ee:25:1a:9c:a5:90:
a4:ff:e7:9f:51:84:c4:1c:ae:f5:8f:a4:14:31:84:
41:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CC:60:2D:67:0C:76:18:9A:0C:FA:B2:93:D5:06:73:CC:17:7F:C6
X509v3 Authority Key Identifier:
keyid:41:78:5C:B5:FC:6B:40:FD:F1:4F:72:A6:D2:5F:41:43:C1:7C:31:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXhctfxrQP3xT3Km0l9BQ8F8MXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ae3840-7dda-482e-a24e-e46ec5b9b06c/1/QXhctfxrQP3xT3Km0l9BQ8F8MXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ae3840-7dda-482e-a24e-e46ec5b9b06c/1/QXhctfxrQP3xT3Km0l9BQ8F8MXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:4c:8d:e5:50:54:37:cd:91:61:8c:93:53:94:af:65:86:96:
77:9d:8d:6c:23:e2:61:2a:76:99:3f:6f:61:e6:bc:24:36:e4:
dd:9c:e8:31:ed:da:4a:bb:bb:1f:8b:21:52:57:08:78:76:4e:
10:df:1d:9f:ea:b0:e5:96:1f:e5:39:59:05:d3:48:21:1a:3b:
1e:53:36:64:4a:ad:58:17:aa:bc:1e:d8:d9:b3:31:69:bc:79:
2b:00:b3:51:c4:d1:60:21:72:8c:8b:c4:64:3d:10:78:b5:b6:
80:dd:6d:95:c7:93:1c:6c:c9:bf:b8:c9:ce:71:66:dd:a0:9e:
3b:e8:b4:21:fd:18:ce:d5:93:cb:77:83:52:d3:1c:63:ef:b2:
75:6f:06:e1:06:c7:9a:5e:c7:bf:90:13:77:11:4c:80:c9:be:
42:a2:98:cf:14:cc:35:b4:b2:3a:c5:e1:da:f2:b2:b1:d0:a8:
fc:85:63:09:e3:aa:64:08:98:6c:49:de:60:74:d0:3d:16:d9:
dd:39:92:e2:4a:7c:30:c2:9f:0c:fe:f9:15:d8:33:26:c5:8b:
1c:c6:da:74:94:fc:71:e9:f7:1a:c2:cd:9d:e6:27:6c:22:a8:
8d:74:c0:9f:21:77:40:27:92:02:db:35:29:e3:b4:98:30:13:
73:99:6c:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zoP0ttsjwH81ojBC665uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNzg1Y2I1ZmM2YjQwZmRmMTRmNzJhNmQyNWY0MTQzYzE3
YzMxN2MwHhcNMjUwMTMxMTAwMTAxWhcNMjUwMjAxMTAwMTAxWjAzMTEwLwYDVQQD
EyhkOGNjNjAyZDY3MGM3NjE4OWEwY2ZhYjI5M2Q1MDY3M2NjMTc3ZmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBsFAHsMuJbmZBQKkRInI1ECQu31
ZetRSPSRH/SumrYImOUeW1ULOo74ZTEfjo1ob1j+FDNkUvK8ZbI1g79btRznODOJ
eVmt+9CaetVpXGpNmQYAk9Z44phzChZik8ySqJoZOfAtbF+pQRiwccz5xEY+bztp
XrqyzFrBxpXXwmRmTEW2iIjhVhWrNnBbjSbgaW7D6VylMZWOCODNMzjN509qy7RL
usqXkYgl/pkGMDSbwzlpZou/MjvwG0veKHi8Ufeb4Omo7+ZuSnbClMDWC7lkg7zk
8eHipJowo9CSTUP17HUt56vkc7ruJRqcpZCk/+efUYTEHK71j6QUMYRB+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNjMYC1nDHYYmgz6spPVBnPMF3/GMB8GA1UdIwQY
MBaAFEF4XLX8a0D98U9yptJfQUPBfDF8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVhoY3RmeHJRUDN4VDNLbTBsOUJROEY4TVh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9hZTM4NDAtN2RkYS00ODJlLWEyNGUt
ZTQ2ZWM1YjliMDZjLzEvUVhoY3RmeHJRUDN4VDNLbTBsOUJROEY4TVh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9hZTM4NDAtN2RkYS00ODJlLWEyNGUtZTQ2ZWM1YjliMDZj
LzEvUVhoY3RmeHJRUDN4VDNLbTBsOUJROEY4TVh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdkyN5VBU
N82RYYyTU5SvZYaWd52NbCPiYSp2mT9vYea8JDbk3ZzoMe3aSru7H4shUlcIeHZO
EN8dn+qw5ZYf5TlZBdNIIRo7HlM2ZEqtWBeqvB7Y2bMxabx5KwCzUcTRYCFyjIvE
ZD0QeLW2gN1tlceTHGzJv7jJznFm3aCeO+i0If0YztWTy3eDUtMcY++ydW8G4QbH
ml7Hv5ATdxFMgMm+QqKYzxTMNbSyOsXh2vKysdCo/IVjCeOqZAiYbEneYHTQPRbZ
3TmS4kp8MMKfDP75FdgzJsWLHMbadJT8cen3GsLNneYnbCKojXTAnyF3QCeSAts1
KeO0mDATc5lszQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:34:01 2025 by rpki-client