Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
File: qvSWmELenEweGldZ2Y0e1cDWLvg.mft (raw, json)
Hash identifier: /LBMpQ56QDIb9foYEmQU1TrQdySJ8Oqn4H6ToKN97pI=
Subject key identifier: 21:64:1D:14:66:80:CF:03:0C:9C:A3:BF:62:C2:28:FB:1F:BB:2D:61
Authority key identifier: AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
Certificate issuer: /CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Certificate serial: 0195E19049186D01AA900AB5D3D295D71010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
Manifest number: 1077
Signing time: Sat 29 Mar 2025 11:01:24 +0000
Manifest this update: Sat 29 Mar 2025 11:01:24 +0000
Manifest next update: Sun 30 Mar 2025 11:01:24 +0000
Files and hashes: 1: 1-9PbJd606SAcljFaDXOqMtimHsk.roa (hash: KXw8kntxbx0A19gUTumtpNuhW4BHiQmmsQFSl5B6ZYs=)
2: 2-vgpJwDsEY_VoNu8cnFA12khB8.roa (hash: iUnRP/l7HzWTkjMJX+R7OEZ9+tX6NbtdM3UPohuBzqw=)
3: 8w9BEQzRPPy9olwFaw-Zn6Va6YU.roa (hash: g6jDxz/UxGzzizwSc5CDzUUAAjalGAWQr2yYfR64f7Y=)
4: Egh3cL0v2_H-TY-QEmnrWnX0arg.roa (hash: uAUHTXbdFEHAhORw9S54HkonrjueALJUqc4yeHLWHu8=)
5: TvcD9AMtT0yWtHonps0hocI3dlg.roa (hash: fuU4HZNYKHN5G71TXaO9NMKHsWQTf51zKQ44BmOWV1o=)
6: qvSWmELenEweGldZ2Y0e1cDWLvg.crl (hash: kUhT6G1B/cVDLmqvrdw9LE9VFwfukaCuJKCLfqLGmaw=)
7: vEaBzwoEAwzosXDFzJLUwLp5Y64.roa (hash: P0SFRAVbYdQfuoozG6LdZarwkxJX0gGTe/XAuMu2MyU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:49:18:6d:01:aa:90:0a:b5:d3:d2:95:d7:10:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Validity
Not Before: Mar 29 11:01:24 2025 GMT
Not After : Mar 30 11:01:24 2025 GMT
Subject: CN=21641d146680cf030c9ca3bf62c228fb1fbb2d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:98:1e:db:78:5d:21:c1:22:42:37:8d:b0:63:
57:2b:39:2e:26:f7:78:57:b9:58:eb:5c:57:da:6e:
ca:36:2e:71:30:59:95:a1:a0:50:19:ea:0e:74:54:
77:d7:47:a2:9c:5a:6f:65:cf:e9:ce:f8:94:2a:10:
bd:fd:69:9f:f7:e3:40:8e:17:cb:cd:74:50:31:83:
cb:30:cb:0d:58:0e:90:80:d0:b6:b5:bd:1d:d1:48:
ba:de:ab:42:d6:e7:8f:9b:88:30:1e:6c:70:e8:ea:
75:ee:38:77:fe:17:98:24:5b:a1:fa:ce:83:00:90:
13:0e:ef:a8:95:05:8e:05:66:3b:34:3c:b7:b9:50:
c5:15:f6:61:70:46:c0:91:a9:2a:c5:f0:2d:53:e6:
91:1b:65:11:5d:04:17:95:e5:77:e0:d0:97:63:a2:
00:b4:d0:93:56:fc:62:01:31:f1:35:b4:dc:c8:d0:
58:00:2d:bc:88:5b:34:6d:52:9c:fb:38:aa:89:42:
e3:23:99:56:3c:8d:41:a1:bf:ea:d6:6d:89:de:60:
29:eb:6c:e2:ca:da:c4:88:53:04:ee:17:2b:33:95:
95:3b:d7:0e:20:a6:1e:ea:ec:c7:2c:c8:4b:85:c0:
c2:89:99:95:6c:2d:06:59:00:3e:30:84:2a:e8:1c:
b8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:64:1D:14:66:80:CF:03:0C:9C:A3:BF:62:C2:28:FB:1F:BB:2D:61
X509v3 Authority Key Identifier:
keyid:AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:2b:5f:ed:61:10:8b:b0:fe:78:74:b8:c4:d3:44:a1:ed:1e:
de:1c:18:ab:38:8e:29:ef:b6:c9:2e:70:8e:66:1f:3a:53:0c:
4e:38:f3:24:b8:3b:b9:1a:6d:46:97:4f:40:7c:71:2f:b4:97:
1c:ba:25:69:5f:85:8a:80:02:57:f8:a6:f0:27:de:c2:63:16:
e0:a0:d4:79:90:43:a8:e0:90:d0:c2:20:4d:6f:df:9a:2b:67:
be:e9:19:36:83:01:e1:11:b3:d4:2c:e6:32:b4:6f:7f:44:80:
37:b8:3b:6f:5b:80:7f:6b:a5:18:bc:24:60:69:72:2c:22:ef:
32:63:aa:b7:2a:43:f6:b4:89:e6:57:74:a5:af:e3:4b:54:c4:
1b:c5:99:6b:92:c5:85:f5:f3:cf:d5:ad:f1:42:88:0a:9c:7d:
d6:3e:50:c9:ac:b4:04:49:ca:8f:3c:17:2b:b2:0a:18:3e:50:
dc:cb:b6:7f:11:4b:ef:be:61:3a:92:aa:94:42:15:b2:77:62:
27:cc:31:ac:5b:69:3b:ff:79:1f:86:35:ae:dc:56:3e:23:53:
1c:04:c0:0c:d5:e3:31:e0:50:5d:4e:06:40:e9:3e:13:05:fa:
57:2e:8e:fd:7c:b1:c0:8a:52:da:d5:59:96:c4:18:20:10:95:
9a:f0:e7:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhkEkYbQGqkAq109KV1xAQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhZjQ5Njk4NDJkZTljNGMxZTFhNTc1OWQ5OGQxZWQ1YzBk
NjJlZjgwHhcNMjUwMzI5MTEwMTI0WhcNMjUwMzMwMTEwMTI0WjAzMTEwLwYDVQQD
EygyMTY0MWQxNDY2ODBjZjAzMGM5Y2EzYmY2MmMyMjhmYjFmYmIyZDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZge23hdIcEiQjeNsGNXKzkuJvd4
V7lY61xX2m7KNi5xMFmVoaBQGeoOdFR310einFpvZc/pzviUKhC9/Wmf9+NAjhfL
zXRQMYPLMMsNWA6QgNC2tb0d0Ui63qtC1uePm4gwHmxw6Op17jh3/heYJFuh+s6D
AJATDu+olQWOBWY7NDy3uVDFFfZhcEbAkakqxfAtU+aRG2URXQQXleV34NCXY6IA
tNCTVvxiATHxNbTcyNBYAC28iFs0bVKc+ziqiULjI5lWPI1Bob/q1m2J3mAp62zi
ytrEiFME7hcrM5WVO9cOIKYe6uzHLMhLhcDCiZmVbC0GWQA+MIQq6By4XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFkHRRmgM8DDJyjv2LCKPsfuy1hMB8GA1UdIwQY
MBaAFKr0lphC3pxMHhpXWdmNHtXA1i74MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXZTV21FTGVuRXdlR2xkWjJZMGUxY0RXTHZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MjBmOWYtZjBiOC00NGQyLTgzNjct
ZjgxZmRmNzRlNjU1LzEvcXZTV21FTGVuRXdlR2xkWjJZMGUxY0RXTHZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC83MjBmOWYtZjBiOC00NGQyLTgzNjctZjgxZmRmNzRlNjU1
LzEvcXZTV21FTGVuRXdlR2xkWjJZMGUxY0RXTHZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcitf7WEQ
i7D+eHS4xNNEoe0e3hwYqziOKe+2yS5wjmYfOlMMTjjzJLg7uRptRpdPQHxxL7SX
HLolaV+FioACV/im8CfewmMW4KDUeZBDqOCQ0MIgTW/fmitnvukZNoMB4RGz1Czm
MrRvf0SAN7g7b1uAf2ulGLwkYGlyLCLvMmOqtypD9rSJ5ld0pa/jS1TEG8WZa5LF
hfXzz9Wt8UKICpx91j5Qyay0BEnKjzwXK7IKGD5Q3Mu2fxFL775hOpKqlEIVsndi
J8wxrFtpO/95H4Y1rtxWPiNTHATADNXjMeBQXU4GQOk+EwX6Vy6O/XyxwIpS2tVZ
lsQYIBCVmvDnOw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 15:47:29 2025 by rpki-client