Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ec2565-711c-4b86-ba35-03e9d49d5f3f/1/Q7Wy0QwPTnhNJJSnAX-44BMZ_nA.mft
File: Q7Wy0QwPTnhNJJSnAX-44BMZ_nA.mft (raw, json)
Hash identifier: WTsKnS1SRQwpZzeLbgqJzvi+h7R7uy/s7I8ubHtTIoE=
Subject key identifier: A8:BD:A2:B6:E4:FD:E6:51:57:79:CA:AF:B4:A8:20:AF:05:FA:AC:5C
Authority key identifier: 43:B5:B2:D1:0C:0F:4E:78:4D:24:94:A7:01:7F:B8:E0:13:19:FE:70
Certificate issuer: /CN=43b5b2d10c0f4e784d2494a7017fb8e01319fe70
Certificate serial: 01932DFC80F683AD24D1C164075518EF5030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q7Wy0QwPTnhNJJSnAX-44BMZ_nA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ec2565-711c-4b86-ba35-03e9d49d5f3f/1/Q7Wy0QwPTnhNJJSnAX-44BMZ_nA.mft
Manifest number: 1359
Signing time: Fri 15 Nov 2024 04:02:23 +0000
Manifest this update: Fri 15 Nov 2024 04:02:23 +0000
Manifest next update: Sat 16 Nov 2024 04:02:23 +0000
Files and hashes: 1: Q7Wy0QwPTnhNJJSnAX-44BMZ_nA.crl (hash: h5vWThTPCUjR0oFQDzihzeg3b4Ai82DdPWwo9OX3kl0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2d:fc:80:f6:83:ad:24:d1:c1:64:07:55:18:ef:50:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43b5b2d10c0f4e784d2494a7017fb8e01319fe70
Validity
Not Before: Nov 15 04:02:23 2024 GMT
Not After : Nov 16 04:02:23 2024 GMT
Subject: CN=a8bda2b6e4fde6515779caafb4a820af05faac5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0f:cd:08:51:96:68:7c:60:5b:89:eb:b8:dd:
d0:76:f9:ff:52:c9:0f:28:a4:9a:b2:89:dc:15:ac:
83:99:60:09:f2:b6:7a:e0:26:0a:6f:32:c7:48:45:
49:a0:55:d1:70:1a:38:10:9a:7c:e5:a7:af:f3:f6:
3c:5f:13:24:b2:8f:89:bf:8f:d4:db:07:c7:af:02:
ee:2a:4f:63:55:04:f7:4d:c5:e6:cc:bb:cf:c8:01:
9f:ad:44:96:88:cd:45:98:09:e2:53:0f:ee:45:09:
21:81:96:5b:90:7f:4f:f3:8e:70:2c:f2:c8:f1:a9:
a6:20:2f:01:07:e5:88:f9:a0:ed:07:cb:97:38:98:
64:eb:a8:51:ba:11:4f:43:0b:e6:47:e8:f2:ea:88:
43:f4:a0:3c:6d:2f:c5:a8:f0:b5:98:3c:a5:e1:43:
01:7b:55:4e:cf:1f:c9:8f:82:55:97:43:b8:be:ea:
d8:17:13:38:4b:20:39:78:75:0b:b0:27:47:e7:9f:
88:53:f0:43:25:5f:35:38:39:5d:4c:02:d5:6e:3f:
65:7f:83:59:00:04:d5:1f:60:81:38:1f:b2:94:7a:
04:67:ac:fc:3b:4f:3f:eb:3c:d6:89:f8:99:ce:90:
35:76:26:4e:85:b7:4c:0b:7b:82:48:d1:79:a4:b4:
34:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BD:A2:B6:E4:FD:E6:51:57:79:CA:AF:B4:A8:20:AF:05:FA:AC:5C
X509v3 Authority Key Identifier:
keyid:43:B5:B2:D1:0C:0F:4E:78:4D:24:94:A7:01:7F:B8:E0:13:19:FE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7Wy0QwPTnhNJJSnAX-44BMZ_nA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ec2565-711c-4b86-ba35-03e9d49d5f3f/1/Q7Wy0QwPTnhNJJSnAX-44BMZ_nA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ec2565-711c-4b86-ba35-03e9d49d5f3f/1/Q7Wy0QwPTnhNJJSnAX-44BMZ_nA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a7:69:a3:29:bb:d5:bd:04:10:cc:33:63:d5:e9:99:3d:aa:
99:7d:00:aa:e1:32:45:2e:f1:85:db:d5:6a:eb:42:8a:11:81:
51:4a:56:74:70:a3:9f:0f:ba:d6:59:53:76:68:9a:77:30:5d:
29:d7:32:9a:b7:63:70:18:16:65:ce:43:89:90:81:ff:dc:4b:
c4:f6:fe:7b:af:b2:52:97:26:88:3a:43:12:93:a6:db:b5:3a:
6f:4e:d9:2c:a1:7b:81:7e:60:64:c6:e9:f3:d4:51:c0:b8:16:
6c:3d:32:04:6d:17:d0:ca:24:30:3d:f8:e8:0a:88:f5:54:c0:
f5:6d:a9:0f:9d:09:3e:7a:82:d6:84:ac:c7:c8:a3:4d:78:71:
d4:fc:c4:d5:33:03:29:3a:16:4f:a8:8e:b1:09:00:98:32:5d:
e6:06:79:39:92:ca:25:4b:1b:06:fb:be:7f:e2:e0:4a:0e:88:
62:7d:ac:e5:18:cb:a8:38:af:d6:26:9c:70:b4:bd:2d:ca:9f:
bd:26:b6:8a:11:bb:1e:4b:6a:ca:f7:dd:8f:b1:00:61:8e:b3:
cd:d7:40:42:19:8e:1b:3d:e5:6a:8d:ab:86:53:44:7a:5d:f1:
c8:12:fe:bc:e6:6f:e3:93:13:0b:b3:55:e7:c5:87:18:39:13:
fc:8b:44:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZMt/ID2g60k0cFkB1UY71AwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYjViMmQxMGMwZjRlNzg0ZDI0OTRhNzAxN2ZiOGUwMTMx
OWZlNzAwHhcNMjQxMTE1MDQwMjIzWhcNMjQxMTE2MDQwMjIzWjAzMTEwLwYDVQQD
EyhhOGJkYTJiNmU0ZmRlNjUxNTc3OWNhYWZiNGE4MjBhZjA1ZmFhYzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQ/NCFGWaHxgW4nruN3Qdvn/UskP
KKSasoncFayDmWAJ8rZ64CYKbzLHSEVJoFXRcBo4EJp85aev8/Y8XxMkso+Jv4/U
2wfHrwLuKk9jVQT3TcXmzLvPyAGfrUSWiM1FmAniUw/uRQkhgZZbkH9P845wLPLI
8ammIC8BB+WI+aDtB8uXOJhk66hRuhFPQwvmR+jy6ohD9KA8bS/FqPC1mDyl4UMB
e1VOzx/Jj4JVl0O4vurYFxM4SyA5eHULsCdH55+IU/BDJV81ODldTALVbj9lf4NZ
AATVH2CBOB+ylHoEZ6z8O08/6zzWifiZzpA1diZOhbdMC3uCSNF5pLQ0yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKi9orbk/eZRV3nKr7SoIK8F+qxcMB8GA1UdIwQY
MBaAFEO1stEMD054TSSUpwF/uOATGf5wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTdXeTBRd1BUbmhOSkpTbkFYLTQ0Qk1aX25BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lYzI1NjUtNzExYy00Yjg2LWJhMzUt
MDNlOWQ0OWQ1ZjNmLzEvUTdXeTBRd1BUbmhOSkpTbkFYLTQ0Qk1aX25BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9lYzI1NjUtNzExYy00Yjg2LWJhMzUtMDNlOWQ0OWQ1ZjNm
LzEvUTdXeTBRd1BUbmhOSkpTbkFYLTQ0Qk1aX25BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ6dpoym7
1b0EEMwzY9XpmT2qmX0AquEyRS7xhdvVautCihGBUUpWdHCjnw+61llTdmiadzBd
KdcymrdjcBgWZc5DiZCB/9xLxPb+e6+yUpcmiDpDEpOm27U6b07ZLKF7gX5gZMbp
89RRwLgWbD0yBG0X0MokMD346AqI9VTA9W2pD50JPnqC1oSsx8ijTXhx1PzE1TMD
KToWT6iOsQkAmDJd5gZ5OZLKJUsbBvu+f+LgSg6IYn2s5RjLqDiv1iaccLS9Lcqf
vSa2ihG7Hktqyvfdj7EAYY6zzddAQhmOGz3lao2rhlNEel3xyBL+vOZv45MTC7NV
58WHGDkT/ItEBg==
-----END CERTIFICATE-----
Generated at Mon Jun 9 08:52:57 2025 by rpki-client