Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
File: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft (raw, json)
Hash identifier: 1I3b2Iglr0n8Y7mGCX8qXRPubxqWgAnNYDKkKx1JNGM=
Subject key identifier: C2:A3:1A:C8:B9:76:45:70:17:B1:DA:D8:28:84:33:34:54:60:68:E6
Authority key identifier: 43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
Certificate issuer: /CN=43a438813750133e55001bf89670a0db3ae5be1f
Certificate serial: 0195E19056ECE4CB43C1B0DBC69737AFD885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
Manifest number: 14C4
Signing time: Sat 29 Mar 2025 11:01:27 +0000
Manifest this update: Sat 29 Mar 2025 11:01:27 +0000
Manifest next update: Sun 30 Mar 2025 11:01:27 +0000
Files and hashes: 1: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl (hash: 92l0+L4WSg54hrzsXpR8omienXxBrpoBZtbxCdVeNWQ=)
2: RyUHQEgGXjRJvvBofzPoVBVvJLI.roa (hash: 8LvL1DJ5MAmrFF0fUbGtnSpplfiMkmqva41THaM74ck=)
3: s_oUhLMqLfuuuJ5GAra3RGPGuEo.roa (hash: lMo8tMkOr3gYSijDEd95RyC1UxQ+xYW4gIbbh74Ckwk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:56:ec:e4:cb:43:c1:b0:db:c6:97:37:af:d8:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a438813750133e55001bf89670a0db3ae5be1f
Validity
Not Before: Mar 29 11:01:27 2025 GMT
Not After : Mar 30 11:01:27 2025 GMT
Subject: CN=c2a31ac8b976457017b1dad828843334546068e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:41:47:cd:a9:e8:c2:3f:5e:05:d8:38:c0:11:
f3:a3:da:49:58:4d:cb:d2:1d:9f:13:85:5f:79:8c:
bd:74:83:4e:5c:97:8b:e0:a8:52:f6:05:0f:04:8a:
d5:ac:3b:bc:21:0f:3e:27:9f:ad:30:58:90:7e:7e:
d9:5e:33:a3:2a:92:71:31:6e:a7:36:32:b5:d6:9c:
d6:44:8c:12:a4:3f:b7:56:62:28:1d:77:e8:e3:6d:
bc:60:34:39:00:f2:b9:a6:5b:92:a5:31:85:60:03:
4b:94:e1:4d:50:79:36:a3:f4:18:40:48:e7:2a:b7:
cb:b9:04:09:7e:2d:e8:e8:52:69:04:43:d3:14:8d:
03:68:21:90:8a:c1:60:fe:c0:85:91:a4:e7:9f:f3:
b9:0c:81:54:2c:ef:f4:7f:9c:d9:9a:dc:87:e0:15:
32:97:f8:25:0a:8f:2e:d4:8e:31:fc:0c:9a:4b:fd:
94:ce:2a:da:f0:fb:2e:36:ac:bc:ca:1d:ca:08:fd:
af:49:6c:4c:d4:b1:f2:f5:5e:91:20:68:04:81:4f:
f9:f6:0d:b2:cf:e7:ec:32:f7:ed:cb:d4:a0:0f:8f:
cb:6e:1d:88:f0:46:f9:18:a8:1c:27:05:ae:dc:44:
34:9d:50:fe:99:06:54:3d:c5:a0:6e:56:39:0d:ae:
e8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A3:1A:C8:B9:76:45:70:17:B1:DA:D8:28:84:33:34:54:60:68:E6
X509v3 Authority Key Identifier:
keyid:43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:28:67:29:9e:9a:7b:9c:43:4f:06:ab:b5:7d:90:23:a8:81:
d5:b5:31:5f:a4:b7:d2:40:b5:80:b9:77:ef:9e:9f:46:e5:a1:
43:06:e4:75:44:d1:e3:59:2a:57:da:41:af:73:ce:c0:6a:76:
3e:1a:f3:02:fa:6a:0d:2f:24:fd:39:c3:dd:e0:81:5d:2c:df:
86:84:6d:9a:b2:87:af:c7:55:38:76:30:58:5b:61:6a:c4:d9:
fd:1a:18:85:77:85:2b:65:78:e5:5b:25:ba:07:ed:10:ef:b3:
61:44:a3:30:8e:da:dc:e7:0e:3f:22:ca:0b:2d:a8:00:30:e9:
84:c7:9c:f0:c9:f9:a4:c7:6a:29:94:57:48:95:56:f9:26:3d:
9b:d5:c4:a0:d0:c7:f1:2c:74:f3:b4:82:f9:e8:0a:ed:4e:e2:
29:5d:65:b7:a6:5a:c8:de:f8:2c:40:89:f6:bf:60:4a:19:34:
f6:d8:76:36:32:a5:4e:dc:4e:1c:b2:30:18:77:24:08:d6:79:
f6:77:50:0c:84:aa:77:2e:cd:c2:d6:47:66:7f:18:3b:37:49:
af:04:8f:5f:06:9a:b7:c2:ba:41:32:7b:4f:a0:eb:24:f5:cf:
1a:c9:79:47:5b:c5:e3:20:a2:d9:78:f0:26:91:c0:d2:9a:8a:
57:1a:96:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhkFbs5MtDwbDbxpc3r9iFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYTQzODgxMzc1MDEzM2U1NTAwMWJmODk2NzBhMGRiM2Fl
NWJlMWYwHhcNMjUwMzI5MTEwMTI3WhcNMjUwMzMwMTEwMTI3WjAzMTEwLwYDVQQD
EyhjMmEzMWFjOGI5NzY0NTcwMTdiMWRhZDgyODg0MzMzNDU0NjA2OGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEFHzanowj9eBdg4wBHzo9pJWE3L
0h2fE4VfeYy9dINOXJeL4KhS9gUPBIrVrDu8IQ8+J5+tMFiQfn7ZXjOjKpJxMW6n
NjK11pzWRIwSpD+3VmIoHXfo4228YDQ5APK5pluSpTGFYANLlOFNUHk2o/QYQEjn
KrfLuQQJfi3o6FJpBEPTFI0DaCGQisFg/sCFkaTnn/O5DIFULO/0f5zZmtyH4BUy
l/glCo8u1I4x/AyaS/2Uzira8PsuNqy8yh3KCP2vSWxM1LHy9V6RIGgEgU/59g2y
z+fsMvfty9SgD4/Lbh2I8Eb5GKgcJwWu3EQ0nVD+mQZUPcWgblY5Da7o5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMKjGsi5dkVwF7Ha2CiEMzRUYGjmMB8GA1UdIwQY
MBaAFEOkOIE3UBM+VQAb+JZwoNs65b4fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTZRNGdUZFFFejVWQUJ2NGxuQ2cyenJsdmg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81Y2I0NzMtMzVhMS00NzI3LTg3NzMt
YTBkNmYwZWViNWMyLzEvUTZRNGdUZFFFejVWQUJ2NGxuQ2cyenJsdmg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81Y2I0NzMtMzVhMS00NzI3LTg3NzMtYTBkNmYwZWViNWMy
LzEvUTZRNGdUZFFFejVWQUJ2NGxuQ2cyenJsdmg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfihnKZ6a
e5xDTwartX2QI6iB1bUxX6S30kC1gLl3756fRuWhQwbkdUTR41kqV9pBr3POwGp2
PhrzAvpqDS8k/TnD3eCBXSzfhoRtmrKHr8dVOHYwWFthasTZ/RoYhXeFK2V45Vsl
ugftEO+zYUSjMI7a3OcOPyLKCy2oADDphMec8Mn5pMdqKZRXSJVW+SY9m9XEoNDH
8Sx087SC+egK7U7iKV1lt6ZayN74LECJ9r9gShk09th2NjKlTtxOHLIwGHckCNZ5
9ndQDISqdy7NwtZHZn8YOzdJrwSPXwaat8K6QTJ7T6DrJPXPGsl5R1vF4yCi2Xjw
JpHA0pqKVxqWtw==
-----END CERTIFICATE-----
Generated at Wed Apr 9 01:21:49 2025 by rpki-client