Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
File: Qy_nD0zvEDdoNhUvOOTghTLMe58.mft (raw, json)
Hash identifier: 6/+Jn3h8DNkZ4a4lVfsvUYUJqVIRD8C7Snm+9SfS6zo=
Subject key identifier: 60:CA:5E:94:59:46:25:E6:C3:C9:A1:7B:56:98:03:7E:67:F5:5E:30
Authority key identifier: 43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
Certificate issuer: /CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Certificate serial: 0195E159DBEA78CCDAA4D826494C85487C35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
Manifest number: 036B
Signing time: Sat 29 Mar 2025 10:01:57 +0000
Manifest this update: Sat 29 Mar 2025 10:01:57 +0000
Manifest next update: Sun 30 Mar 2025 10:01:57 +0000
Files and hashes: 1: Qy_nD0zvEDdoNhUvOOTghTLMe58.crl (hash: l9vw4j3UH4fO1N23ePuxy3+5qo3iT4v+IPNMG1mXDpM=)
2: YjwHZ-U8mcXCH0aU6JQJG4PEKkA.roa (hash: AnaRhDa+1cCeJd4R7WSfA8EHeNFUa2CX4p8vAAGKzHM=)
3: ZSjK1k03bVh7IszUUplOg1a3fhc.roa (hash: ur9lsl4V/e4ObtEPnWIBtt1dkjYzJgol0eBWTC8If5g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:db:ea:78:cc:da:a4:d8:26:49:4c:85:48:7c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Validity
Not Before: Mar 29 10:01:57 2025 GMT
Not After : Mar 30 10:01:57 2025 GMT
Subject: CN=60ca5e94594625e6c3c9a17b5698037e67f55e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:11:a8:ad:28:e8:5d:9b:5f:e3:fa:b9:8d:73:
fa:62:48:6a:24:10:24:2b:bc:81:89:34:4e:d4:c1:
a2:9b:19:c8:90:e8:5b:a0:07:6d:01:a0:f8:0e:b0:
79:19:01:7f:10:ec:fd:6a:cb:ae:97:0a:8e:1b:b6:
d5:9d:81:f3:f0:31:dd:7b:26:08:38:be:b0:37:b8:
be:73:23:d9:7f:31:f9:c2:e3:98:39:01:4b:75:96:
a2:b0:c6:6b:67:73:dc:03:24:e8:58:3d:c9:1b:2b:
f1:e6:d8:3d:b5:1c:61:4a:3f:bb:65:ee:f8:4e:a8:
2c:46:52:b2:5e:74:2a:62:60:4c:3b:40:54:6c:69:
2e:08:e3:2e:f2:3d:a1:e8:04:5d:f7:84:25:31:a2:
af:46:95:0a:a2:3f:77:2f:43:40:cb:94:32:bd:16:
ec:8d:8b:2c:ac:6a:61:db:f3:6d:7c:f7:5d:1b:4c:
05:98:44:1f:45:1d:f5:6e:e6:97:25:a3:fc:df:6c:
1a:0e:92:0f:16:47:63:4e:a1:e7:94:ec:3b:b9:5d:
05:a3:78:d4:ed:a7:07:35:52:a5:5b:7c:a6:86:e3:
19:b5:23:28:72:67:05:0b:f4:13:f4:a1:54:b3:07:
7b:96:09:a9:4d:f5:11:65:3f:0e:db:0f:63:e3:00:
87:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CA:5E:94:59:46:25:E6:C3:C9:A1:7B:56:98:03:7E:67:F5:5E:30
X509v3 Authority Key Identifier:
keyid:43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:8b:bd:83:b3:1c:e9:95:d9:87:49:f8:75:ff:2c:66:9f:fb:
b8:54:61:9b:b1:fd:40:f5:f5:68:bc:be:6e:fe:5a:0d:4f:2b:
c9:28:f5:26:eb:e3:fa:6e:1f:db:67:2b:6d:31:00:96:1d:0b:
b7:11:a5:ea:23:f8:99:d3:6e:81:1e:6a:7e:58:c4:0b:b1:25:
28:ac:c9:58:dc:cb:44:8e:dd:13:06:4e:e0:e0:f5:16:57:1f:
fb:4e:08:99:bd:bd:bb:a4:29:0c:36:62:39:3c:56:39:17:cc:
a7:54:96:3a:b3:4a:3d:de:48:fb:9b:2d:24:d8:01:45:49:18:
68:25:33:8d:c0:50:7d:c3:6f:0d:15:26:e5:48:e0:43:20:38:
a0:bc:a8:0a:78:cf:61:03:f7:67:18:15:69:b4:ef:38:01:80:
cf:65:2c:c5:91:fe:c5:e4:0b:32:95:a7:86:11:f7:e2:69:3a:
43:e1:92:db:e3:98:3e:35:89:8a:ae:59:a6:ec:ad:11:09:98:
6c:a0:05:08:a6:a0:a1:16:98:9c:7e:35:b0:3f:b1:22:bf:4d:
f7:d9:95:d0:8e:24:e5:b0:f3:dc:8b:d5:04:1e:7c:98:32:89:
99:0d:63:9a:bc:89:89:fc:8e:51:3a:a4:58:b9:99:90:79:e5:
76:f1:a1:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhWdvqeMzapNgmSUyFSHw1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMmZlNzBmNGNlZjEwMzc2ODM2MTUyZjM4ZTRlMDg1MzJj
YzdiOWYwHhcNMjUwMzI5MTAwMTU3WhcNMjUwMzMwMTAwMTU3WjAzMTEwLwYDVQQD
Eyg2MGNhNWU5NDU5NDYyNWU2YzNjOWExN2I1Njk4MDM3ZTY3ZjU1ZTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxGorSjoXZtf4/q5jXP6YkhqJBAk
K7yBiTRO1MGimxnIkOhboAdtAaD4DrB5GQF/EOz9asuulwqOG7bVnYHz8DHdeyYI
OL6wN7i+cyPZfzH5wuOYOQFLdZaisMZrZ3PcAyToWD3JGyvx5tg9tRxhSj+7Ze74
TqgsRlKyXnQqYmBMO0BUbGkuCOMu8j2h6ARd94QlMaKvRpUKoj93L0NAy5QyvRbs
jYssrGph2/NtfPddG0wFmEQfRR31buaXJaP832waDpIPFkdjTqHnlOw7uV0Fo3jU
7acHNVKlW3ymhuMZtSMocmcFC/QT9KFUswd7lgmpTfURZT8O2w9j4wCHGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGDKXpRZRiXmw8mhe1aYA35n9V4wMB8GA1UdIwQY
MBaAFEMv5w9M7xA3aDYVLzjk4IUyzHufMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXlfbkQwenZFRGRvTmhVdk9PVGdoVExNZTU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zMDc2MDctNTcwNi00ZTQ0LWJiOGUt
MTg5ZDAwYTMzM2VlLzEvUXlfbkQwenZFRGRvTmhVdk9PVGdoVExNZTU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8zMDc2MDctNTcwNi00ZTQ0LWJiOGUtMTg5ZDAwYTMzM2Vl
LzEvUXlfbkQwenZFRGRvTmhVdk9PVGdoVExNZTU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZIu9g7Mc
6ZXZh0n4df8sZp/7uFRhm7H9QPX1aLy+bv5aDU8rySj1Juvj+m4f22crbTEAlh0L
txGl6iP4mdNugR5qfljEC7ElKKzJWNzLRI7dEwZO4OD1Flcf+04Imb29u6QpDDZi
OTxWORfMp1SWOrNKPd5I+5stJNgBRUkYaCUzjcBQfcNvDRUm5UjgQyA4oLyoCnjP
YQP3ZxgVabTvOAGAz2UsxZH+xeQLMpWnhhH34mk6Q+GS2+OYPjWJiq5ZpuytEQmY
bKAFCKagoRaYnH41sD+xIr9N99mV0I4k5bDz3IvVBB58mDKJmQ1jmryJifyOUTqk
WLmZkHnldvGh3Q==
-----END CERTIFICATE-----
Generated at Fri Apr 11 09:41:34 2025 by rpki-client