Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
File: QqYv_JnylBAtzOI13Bo8E9q81po.mft (raw, json)
Hash identifier: Dx4SM8f8tCwLad/ir7XDvgM4Eu5v5l3WrLuKgXzhiLc=
Subject key identifier: 15:76:3A:C7:FC:11:D2:0E:52:33:1B:92:B7:B4:CC:3C:01:18:65:98
Authority key identifier: 42:A6:2F:FC:99:F2:94:10:2D:CC:E2:35:DC:1A:3C:13:DA:BC:D6:9A
Certificate issuer: /CN=42a62ffc99f294102dcce235dc1a3c13dabcd69a
Certificate serial: 0195E07D869B0FB7B36B4B813146184BE6A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
Manifest number: 14C2
Signing time: Sat 29 Mar 2025 06:01:17 +0000
Manifest this update: Sat 29 Mar 2025 06:01:17 +0000
Manifest next update: Sun 30 Mar 2025 06:01:17 +0000
Files and hashes: 1: QqYv_JnylBAtzOI13Bo8E9q81po.crl (hash: pCiVnbwimf0/uQytJbmims7bZW5t3FDyqJu5b+Fqko4=)
2: WTARnFcaaxywjD8542Gln8y_dnw.roa (hash: Ftlz5tAZ1Wy4DgBSL6cjF0uXQi2BfjzAEtpVPnOo5XU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:86:9b:0f:b7:b3:6b:4b:81:31:46:18:4b:e6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a62ffc99f294102dcce235dc1a3c13dabcd69a
Validity
Not Before: Mar 29 06:01:17 2025 GMT
Not After : Mar 30 06:01:17 2025 GMT
Subject: CN=15763ac7fc11d20e52331b92b7b4cc3c01186598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:65:eb:0a:25:58:e6:83:62:f5:8f:46:61:72:
15:19:23:c6:d4:69:ea:8c:2c:fb:6d:6d:1f:aa:78:
72:68:4d:4d:0a:0e:4a:e3:42:12:0e:42:78:9d:30:
02:89:e5:d2:7e:72:ac:9c:ab:25:92:b2:38:02:6e:
3e:e5:7a:d6:b8:3d:29:35:58:14:db:c9:79:28:6e:
2f:e7:3e:44:06:e4:0a:62:e9:11:e1:05:f4:90:5c:
09:dc:02:2d:53:ea:41:11:6f:fc:bc:de:55:2f:26:
d8:32:a0:ae:70:57:65:2b:17:49:da:c4:6d:dd:63:
a6:2b:70:02:71:52:91:c2:9d:ea:a8:6d:6a:27:e9:
6b:a3:13:ab:01:3f:96:bf:4f:f1:53:37:01:a3:fe:
62:87:15:40:fc:97:f1:73:9f:c7:22:99:25:2d:ea:
bb:1f:fd:fd:b1:75:5e:ba:a6:c2:f9:14:f8:57:3e:
bf:a3:55:b4:0b:47:b7:73:4b:58:84:f7:98:6c:0d:
70:27:ff:b9:14:5e:a7:7a:6c:df:94:1b:22:ec:c9:
41:d7:de:25:b4:19:32:58:78:41:fa:81:5b:6e:66:
82:5d:dc:73:dc:99:d0:31:c6:9c:aa:89:12:c7:b9:
7b:bf:c0:ec:d8:0f:f5:38:7b:97:fe:76:5e:b8:9f:
11:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:76:3A:C7:FC:11:D2:0E:52:33:1B:92:B7:B4:CC:3C:01:18:65:98
X509v3 Authority Key Identifier:
keyid:42:A6:2F:FC:99:F2:94:10:2D:CC:E2:35:DC:1A:3C:13:DA:BC:D6:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:19:f8:dd:0f:60:d3:3a:5b:2a:87:6c:0c:6b:5f:b0:18:2b:
4b:25:ad:09:44:aa:80:c7:be:0f:7b:45:1b:0f:d9:5a:ab:51:
35:55:ab:d8:ec:6b:7d:3a:97:f9:a0:98:fa:d4:21:e3:67:4c:
46:43:d5:ec:fb:95:d6:74:d7:1b:91:83:91:e5:e2:8d:b1:60:
26:56:7e:44:af:1f:45:e0:2f:93:b0:89:98:b2:16:b3:32:6a:
a8:50:24:52:fa:e1:8c:e1:07:6e:d4:14:77:d5:33:38:45:7f:
9c:c8:01:ad:f4:2d:6a:ee:58:ef:69:38:c1:85:86:8f:36:dd:
03:6f:62:3a:ea:4c:c5:7a:c8:d8:82:28:2c:f3:85:9c:2d:fe:
74:90:49:26:26:2c:2b:3c:20:e5:78:54:de:72:e4:cc:b9:b2:
02:da:98:a6:b5:93:5f:13:61:78:86:3a:b4:62:c2:89:db:1f:
af:7c:db:d1:9b:27:5f:10:03:0f:41:a6:16:51:9b:f8:74:71:
f7:12:fe:24:3d:46:8c:7f:db:a8:da:ce:15:be:79:df:bf:37:
f4:db:58:87:63:0c:f1:6d:e4:43:04:66:91:e2:9b:b0:8d:c9:
62:96:50:59:dd:85:f2:b2:30:f0:f2:49:cf:72:c1:8b:13:b4:
e3:0a:4c:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgfYabD7eza0uBMUYYS+agMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyYTYyZmZjOTlmMjk0MTAyZGNjZTIzNWRjMWEzYzEzZGFi
Y2Q2OWEwHhcNMjUwMzI5MDYwMTE3WhcNMjUwMzMwMDYwMTE3WjAzMTEwLwYDVQQD
EygxNTc2M2FjN2ZjMTFkMjBlNTIzMzFiOTJiN2I0Y2MzYzAxMTg2NTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2XrCiVY5oNi9Y9GYXIVGSPG1Gnq
jCz7bW0fqnhyaE1NCg5K40ISDkJ4nTACieXSfnKsnKslkrI4Am4+5XrWuD0pNVgU
28l5KG4v5z5EBuQKYukR4QX0kFwJ3AItU+pBEW/8vN5VLybYMqCucFdlKxdJ2sRt
3WOmK3ACcVKRwp3qqG1qJ+lroxOrAT+Wv0/xUzcBo/5ihxVA/Jfxc5/HIpklLeq7
H/39sXVeuqbC+RT4Vz6/o1W0C0e3c0tYhPeYbA1wJ/+5FF6nemzflBsi7MlB194l
tBkyWHhB+oFbbmaCXdxz3JnQMcacqokSx7l7v8Ds2A/1OHuX/nZeuJ8RxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBV2Osf8EdIOUjMbkre0zDwBGGWYMB8GA1UdIwQY
MBaAFEKmL/yZ8pQQLcziNdwaPBPavNaaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXFZdl9KbnlsQkF0ek9JMTNCbzhFOXE4MXBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9kYzY2NWQtZGIxMC00MDU5LTgzZWQt
MWMyMmRhNDRhMjJkLzEvUXFZdl9KbnlsQkF0ek9JMTNCbzhFOXE4MXBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9kYzY2NWQtZGIxMC00MDU5LTgzZWQtMWMyMmRhNDRhMjJk
LzEvUXFZdl9KbnlsQkF0ek9JMTNCbzhFOXE4MXBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVRn43Q9g
0zpbKodsDGtfsBgrSyWtCUSqgMe+D3tFGw/ZWqtRNVWr2OxrfTqX+aCY+tQh42dM
RkPV7PuV1nTXG5GDkeXijbFgJlZ+RK8fReAvk7CJmLIWszJqqFAkUvrhjOEHbtQU
d9UzOEV/nMgBrfQtau5Y72k4wYWGjzbdA29iOupMxXrI2IIoLPOFnC3+dJBJJiYs
Kzwg5XhU3nLkzLmyAtqYprWTXxNheIY6tGLCidsfr3zb0ZsnXxADD0GmFlGb+HRx
9xL+JD1GjH/bqNrOFb5537839NtYh2MM8W3kQwRmkeKbsI3JYpZQWd2F8rIw8PJJ
z3LBixO04wpMFQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 10:01:02 2025 by rpki-client