Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
File: QTe22qILXgYYYrb7meI2rCwuNPg.mft (raw, json)
Hash identifier: lKMlRRNDvjN8NJRZV6ZVVQt2YWI/w21cK+nlWlR+r70=
Subject key identifier: C3:72:09:58:26:19:CB:D0:37:AB:56:50:58:1D:4E:0B:3D:F2:C8:01
Authority key identifier: 41:37:B6:DA:A2:0B:5E:06:18:62:B6:FB:99:E2:36:AC:2C:2E:34:F8
Certificate issuer: /CN=4137b6daa20b5e061862b6fb99e236ac2c2e34f8
Certificate serial: 0195E00FB22646E8BF744D615EB2324D1652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
Manifest number: 048E
Signing time: Sat 29 Mar 2025 04:01:19 +0000
Manifest this update: Sat 29 Mar 2025 04:01:19 +0000
Manifest next update: Sun 30 Mar 2025 04:01:19 +0000
Files and hashes: 1: 4aDro6K4uBzQDwqf0WWWDv-WEKk.roa (hash: KqqgAJBLDDctP248xFMqsm3yeCd/FvEIq/xYuv9Vp94=)
2: QTe22qILXgYYYrb7meI2rCwuNPg.crl (hash: V5flwoejQWUX66aqls+TwHe1V305PGjibUTIAnd3tew=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:b2:26:46:e8:bf:74:4d:61:5e:b2:32:4d:16:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4137b6daa20b5e061862b6fb99e236ac2c2e34f8
Validity
Not Before: Mar 29 04:01:19 2025 GMT
Not After : Mar 30 04:01:19 2025 GMT
Subject: CN=c37209582619cbd037ab5650581d4e0b3df2c801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cb:51:49:b7:27:eb:46:0b:f0:f9:1a:47:4b:
10:e7:34:de:c4:cf:ee:e8:a5:88:18:c8:e1:d3:d6:
0d:85:fb:af:9c:59:92:60:0a:b5:f4:2d:e1:76:03:
db:d9:cd:07:7d:b1:89:f1:0f:87:da:7d:91:7a:f9:
f3:7b:84:c3:16:3e:67:23:db:19:86:17:b4:4c:29:
17:d1:8e:ab:b5:09:55:9a:6d:75:48:e9:50:da:bd:
6f:4a:9d:6e:55:d0:af:3e:57:c5:74:b5:1a:98:ea:
72:27:dc:f1:b8:6a:40:8f:45:24:1f:c9:d0:e5:17:
fc:1e:86:26:16:2a:4a:11:ea:2c:54:dd:29:a7:7f:
2a:77:1c:ab:da:23:e7:5e:02:a6:5a:e7:47:4b:55:
6a:a1:20:43:0f:20:bc:c0:ff:95:1a:d2:9c:7b:87:
4b:a3:05:26:2b:23:a4:da:18:12:33:33:39:52:ee:
1f:18:14:ce:5e:f9:b3:ca:c8:16:f8:71:56:99:58:
dd:94:69:c7:b6:26:19:40:6a:8a:bb:26:2f:3c:de:
04:b5:a9:8d:0d:f1:bb:53:01:fb:b6:1c:8b:c0:a6:
cb:58:35:9b:5e:40:c5:1a:a6:32:d6:15:52:21:fe:
1f:4c:96:cb:f9:c8:3a:95:df:47:05:03:f7:9b:11:
10:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:72:09:58:26:19:CB:D0:37:AB:56:50:58:1D:4E:0B:3D:F2:C8:01
X509v3 Authority Key Identifier:
keyid:41:37:B6:DA:A2:0B:5E:06:18:62:B6:FB:99:E2:36:AC:2C:2E:34:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:15:95:93:33:cb:0e:7f:c2:32:ea:8b:c6:84:ce:d5:57:63:
7e:27:a1:41:c9:33:a9:86:5c:23:be:c6:7a:04:f7:10:c9:73:
b8:29:2c:6b:87:2e:d5:d5:b8:d1:bc:71:3a:6e:de:20:13:3e:
c1:b2:95:9e:94:fa:b4:00:14:99:cb:b6:ac:e3:68:9e:c4:22:
4a:3a:88:7c:59:47:08:88:ec:3f:c8:29:c9:5c:12:11:8e:30:
37:20:0f:01:4d:cf:9d:2b:69:0a:e8:48:25:75:3c:a5:a0:b8:
c9:c4:22:b1:92:aa:09:fe:aa:68:19:68:2c:79:7d:0d:20:94:
07:30:da:12:97:dd:cd:74:49:3c:37:45:fa:e7:3a:ea:e3:76:
c5:02:9a:3d:f5:d0:3c:7f:69:72:2a:a6:82:92:80:f4:88:55:
e9:2a:2a:13:e5:92:c5:fa:a2:fb:77:1c:ab:38:b0:7d:14:8e:
5b:cb:d6:f8:6c:fc:8c:f1:22:58:8f:ba:27:16:53:43:48:38:
4c:7b:7f:9f:a2:b8:25:99:d1:a4:6b:c1:12:8a:36:e9:28:89:
dc:4b:63:9c:54:bd:d7:a1:e8:d8:07:57:42:f9:a4:3d:e5:7d:
b4:5d:34:e1:cd:ec:8c:93:85:39:88:3d:f1:74:7d:2f:98:21:
29:61:8e:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgD7ImRui/dE1hXrIyTRZSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMzdiNmRhYTIwYjVlMDYxODYyYjZmYjk5ZTIzNmFjMmMy
ZTM0ZjgwHhcNMjUwMzI5MDQwMTE5WhcNMjUwMzMwMDQwMTE5WjAzMTEwLwYDVQQD
EyhjMzcyMDk1ODI2MTljYmQwMzdhYjU2NTA1ODFkNGUwYjNkZjJjODAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMtRSbcn60YL8PkaR0sQ5zTexM/u
6KWIGMjh09YNhfuvnFmSYAq19C3hdgPb2c0HfbGJ8Q+H2n2Revnze4TDFj5nI9sZ
hhe0TCkX0Y6rtQlVmm11SOlQ2r1vSp1uVdCvPlfFdLUamOpyJ9zxuGpAj0UkH8nQ
5Rf8HoYmFipKEeosVN0pp38qdxyr2iPnXgKmWudHS1VqoSBDDyC8wP+VGtKce4dL
owUmKyOk2hgSMzM5Uu4fGBTOXvmzysgW+HFWmVjdlGnHtiYZQGqKuyYvPN4EtamN
DfG7UwH7thyLwKbLWDWbXkDFGqYy1hVSIf4fTJbL+cg6ld9HBQP3mxEQLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMNyCVgmGcvQN6tWUFgdTgs98sgBMB8GA1UdIwQY
MBaAFEE3ttqiC14GGGK2+5niNqwsLjT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVRlMjJxSUxYZ1lZWXJiN21lSTJyQ3d1TlBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8wM2ZkNDItNjU4OS00NmJhLWE2NzMt
MGIwMmE0NzMyNDc5LzEvUVRlMjJxSUxYZ1lZWXJiN21lSTJyQ3d1TlBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS8wM2ZkNDItNjU4OS00NmJhLWE2NzMtMGIwMmE0NzMyNDc5
LzEvUVRlMjJxSUxYZ1lZWXJiN21lSTJyQ3d1TlBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaRWVkzPL
Dn/CMuqLxoTO1VdjfiehQckzqYZcI77GegT3EMlzuCksa4cu1dW40bxxOm7eIBM+
wbKVnpT6tAAUmcu2rONonsQiSjqIfFlHCIjsP8gpyVwSEY4wNyAPAU3PnStpCuhI
JXU8paC4ycQisZKqCf6qaBloLHl9DSCUBzDaEpfdzXRJPDdF+uc66uN2xQKaPfXQ
PH9pciqmgpKA9IhV6SoqE+WSxfqi+3ccqziwfRSOW8vW+Gz8jPEiWI+6JxZTQ0g4
THt/n6K4JZnRpGvBEoo26SiJ3EtjnFS916Ho2AdXQvmkPeV9tF004c3sjJOFOYg9
8XR9L5ghKWGOLw==
-----END CERTIFICATE-----
Generated at Tue Apr 8 03:45:45 2025 by rpki-client