Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
File: qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft (raw, json)
Hash identifier: n8fiYXtGFG+nAKOxwqh3hIf8GnwPc0MoQGDmJ+O3QDo=
Subject key identifier: 57:8E:82:40:09:71:62:AB:59:B6:8A:21:5A:FC:09:83:B3:82:A9:0B
Authority key identifier: A8:EB:D8:AE:6F:D5:2B:BB:D4:97:0C:21:61:63:D9:B2:B0:F0:F2:41
Certificate issuer: /CN=a8ebd8ae6fd52bbbd4970c216163d9b2b0f0f241
Certificate serial: 0194BD17FB492E596F851D69D76F3A5E3C3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
Manifest number: 0F18
Signing time: Fri 31 Jan 2025 16:00:52 +0000
Manifest this update: Fri 31 Jan 2025 16:00:52 +0000
Manifest next update: Sat 01 Feb 2025 16:00:52 +0000
Files and hashes: 1: qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl (hash: kcWzmepUG/FVCUVSmWRVaVlzHqrWCm8lG+kpZ4WKmmw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:fb:49:2e:59:6f:85:1d:69:d7:6f:3a:5e:3c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8ebd8ae6fd52bbbd4970c216163d9b2b0f0f241
Validity
Not Before: Jan 31 16:00:52 2025 GMT
Not After : Feb 1 16:00:52 2025 GMT
Subject: CN=578e8240097162ab59b68a215afc0983b382a90b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c4:fb:f4:f1:4e:6b:f3:b7:69:73:dc:98:ae:
22:38:f3:a9:ec:5e:5f:88:68:2c:f4:a0:a7:15:df:
cf:01:fd:a2:3c:d4:06:0f:41:1d:af:ff:39:21:77:
a3:1d:c7:1f:3a:bb:50:a8:04:d1:b6:fb:42:5e:05:
92:73:e6:17:fc:ab:f9:8f:69:69:39:31:57:96:bc:
e2:2d:09:59:55:65:b8:2e:05:8a:d5:c7:4a:48:cb:
33:77:d2:4f:1d:f3:02:91:3f:fd:ba:f6:9f:af:2a:
db:cc:01:03:5a:54:b1:58:b1:e8:48:bf:4b:bc:93:
31:ad:c7:ba:10:d1:f6:e0:89:de:0a:29:e6:54:2b:
86:a9:ec:90:61:f9:dd:8f:af:33:fb:c0:f6:ed:35:
43:f1:0a:dd:d1:a3:aa:57:ff:01:38:af:29:90:9d:
97:a3:4a:2e:97:ff:90:5c:31:87:94:54:7f:35:93:
2f:d7:f9:23:ec:6e:5e:b6:13:1a:45:33:61:77:f0:
76:e3:ea:1f:65:13:5f:ee:03:3c:66:15:e3:1e:28:
4e:e1:eb:35:c9:4b:5d:d0:49:7d:e6:23:1b:ce:47:
d4:54:0b:ad:d3:98:d6:af:da:76:cf:61:0f:d2:3c:
6c:4e:b0:e1:8b:5e:a8:20:95:db:d7:e2:5b:5a:63:
14:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8E:82:40:09:71:62:AB:59:B6:8A:21:5A:FC:09:83:B3:82:A9:0B
X509v3 Authority Key Identifier:
keyid:A8:EB:D8:AE:6F:D5:2B:BB:D4:97:0C:21:61:63:D9:B2:B0:F0:F2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:dc:10:ec:9a:0f:e2:c3:f9:28:65:66:f3:4e:20:43:1a:e7:
8e:ae:06:fd:02:af:ae:6d:52:da:fd:ce:0f:e7:f1:83:35:7d:
c6:2e:1e:f5:21:96:32:43:16:ba:a2:9a:fe:73:51:a4:84:9a:
cc:e5:8f:d1:10:5f:19:15:22:ca:93:5b:8e:b9:36:70:b9:63:
fc:b3:88:9c:3d:0b:b8:b2:91:03:ad:62:4e:d1:86:b6:39:52:
18:be:69:7c:0c:10:e0:29:78:df:f8:3c:b0:16:3d:26:00:cb:
1a:13:52:67:0a:d6:7e:a5:9e:09:af:a6:2e:f3:53:34:90:31:
55:43:17:fe:4d:fe:c3:de:73:c5:01:77:1c:93:63:e8:48:23:
50:22:91:e8:52:9d:1a:fa:21:b6:47:7f:a0:79:a0:3f:81:39:
3b:4c:57:5b:3a:44:19:21:d8:a1:ee:8c:c6:0c:76:f1:14:49:
d8:26:6a:4a:63:52:b4:4c:98:5d:f2:3c:10:a2:37:c4:20:2d:
28:7d:b9:2d:0a:2b:41:41:33:e3:b5:96:91:bd:bf:49:31:fd:
b0:56:52:6c:02:d3:8a:4b:bb:62:5f:03:8a:bc:79:d3:71:26:
6f:80:9e:f8:b0:cf:90:18:2e:2e:e6:3d:a7:fe:b0:82:2e:f6:
18:fe:b9:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F/tJLllvhR1p1286Xjw+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZWJkOGFlNmZkNTJiYmJkNDk3MGMyMTYxNjNkOWIyYjBm
MGYyNDEwHhcNMjUwMTMxMTYwMDUyWhcNMjUwMjAxMTYwMDUyWjAzMTEwLwYDVQQD
Eyg1NzhlODI0MDA5NzE2MmFiNTliNjhhMjE1YWZjMDk4M2IzODJhOTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcT79PFOa/O3aXPcmK4iOPOp7F5f
iGgs9KCnFd/PAf2iPNQGD0Edr/85IXejHccfOrtQqATRtvtCXgWSc+YX/Kv5j2lp
OTFXlrziLQlZVWW4LgWK1cdKSMszd9JPHfMCkT/9uvafryrbzAEDWlSxWLHoSL9L
vJMxrce6ENH24IneCinmVCuGqeyQYfndj68z+8D27TVD8Qrd0aOqV/8BOK8pkJ2X
o0oul/+QXDGHlFR/NZMv1/kj7G5ethMaRTNhd/B24+ofZRNf7gM8ZhXjHihO4es1
yUtd0El95iMbzkfUVAut05jWr9p2z2EP0jxsTrDhi16oIJXb1+JbWmMUGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFeOgkAJcWKrWbaKIVr8CYOzgqkLMB8GA1UdIwQY
MBaAFKjr2K5v1Su71JcMIWFj2bKw8PJBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU92WXJtX1ZLN3ZVbHd3aFlXUFpzckR3OGtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82ZWMwYzgtMWM4Yi00NDczLTk3ZmQt
ZTFjNGM0YWEwZTFkLzEvcU92WXJtX1ZLN3ZVbHd3aFlXUFpzckR3OGtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi82ZWMwYzgtMWM4Yi00NDczLTk3ZmQtZTFjNGM0YWEwZTFk
LzEvcU92WXJtX1ZLN3ZVbHd3aFlXUFpzckR3OGtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAutwQ7JoP
4sP5KGVm804gQxrnjq4G/QKvrm1S2v3OD+fxgzV9xi4e9SGWMkMWuqKa/nNRpISa
zOWP0RBfGRUiypNbjrk2cLlj/LOInD0LuLKRA61iTtGGtjlSGL5pfAwQ4Cl43/g8
sBY9JgDLGhNSZwrWfqWeCa+mLvNTNJAxVUMX/k3+w95zxQF3HJNj6EgjUCKR6FKd
Gvohtkd/oHmgP4E5O0xXWzpEGSHYoe6Mxgx28RRJ2CZqSmNStEyYXfI8EKI3xCAt
KH25LQorQUEz47WWkb2/STH9sFZSbALTiku7Yl8Dirx503Emb4Ce+LDPkBguLuY9
p/6wgi72GP65tw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:25:53 2025 by rpki-client