Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f2e659-5bb1-46b5-b55d-bd717752f2f6/1/q-CYgB9UyaPEeuLzWLjj-9RoYU8.mft
File: q-CYgB9UyaPEeuLzWLjj-9RoYU8.mft (raw, json)
Hash identifier: goFlamdKEoiyZPQZTXzaNzpCmo/hQBdusLNh//E+jPM=
Subject key identifier: 79:FA:7A:11:74:88:DA:30:2F:0A:66:FF:3B:91:08:11:43:FE:C9:27
Authority key identifier: AB:E0:98:80:1F:54:C9:A3:C4:7A:E2:F3:58:B8:E3:FB:D4:68:61:4F
Certificate issuer: /CN=abe098801f54c9a3c47ae2f358b8e3fbd468614f
Certificate serial: 018528B745230171615821A2CB290B0F363E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-CYgB9UyaPEeuLzWLjj-9RoYU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f2e659-5bb1-46b5-b55d-bd717752f2f6/1/q-CYgB9UyaPEeuLzWLjj-9RoYU8.mft
Manifest number: 0926
Signing time: Mon 19 Dec 2022 04:49:37 +0000
Manifest this update: Mon 19 Dec 2022 04:49:37 +0000
Manifest next update: Tue 20 Dec 2022 04:49:37 +0000
Files and hashes: 1: flrnDdjhOd7wmW5Ph8ymkCq2v6U.roa (hash: N1CaplSn66e0djtS2mk3he+4wrwAVLe47rL3nBGWL/4=)
2: q-CYgB9UyaPEeuLzWLjj-9RoYU8.crl (hash: M4W52p7wp5rVJ7Lh1Xlw3YmJGq7NzPjV2bzmrDjnELE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:28:b7:45:23:01:71:61:58:21:a2:cb:29:0b:0f:36:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe098801f54c9a3c47ae2f358b8e3fbd468614f
Validity
Not Before: Dec 19 04:49:37 2022 GMT
Not After : Dec 20 04:49:37 2022 GMT
Subject: CN=79fa7a117488da302f0a66ff3b91081143fec927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c9:8a:ca:61:c7:98:61:9e:92:cf:8d:0e:fd:
c2:cd:03:0c:e2:a0:c1:09:68:0a:b6:8f:45:54:19:
94:86:31:8b:dc:7e:9e:95:43:8a:ee:64:6d:b5:7b:
cd:e1:a9:a6:0a:11:0e:c9:bd:65:e0:e3:14:6e:f5:
05:bd:0c:8f:33:33:54:20:aa:e7:1b:84:7f:6c:55:
fe:9a:79:ef:b6:e9:1c:66:68:c4:2b:b9:6c:37:42:
b3:fe:c3:bd:f7:f3:a3:e8:4a:74:65:07:bd:18:51:
78:6a:6a:95:64:1e:07:2d:33:93:63:46:ad:8d:3f:
7c:63:92:fe:7b:48:a5:8d:80:80:81:c5:73:b5:56:
ad:63:ea:69:9c:1e:0e:ad:a3:40:63:1e:a6:17:36:
bd:dd:a1:00:e1:9a:b9:15:d4:16:c0:a4:bb:36:1a:
ce:32:7e:fb:3a:1f:3a:54:b6:3a:dc:a2:91:de:3d:
73:9c:06:7b:b7:72:f6:ec:36:ba:a2:9e:47:b2:bb:
9f:d7:f6:cc:41:27:b6:3a:46:10:25:b8:9d:50:59:
3b:6c:e3:a4:7a:99:dc:ac:3b:09:37:3d:bd:d7:c2:
81:75:23:89:c3:72:38:21:85:e9:fb:35:b9:3e:64:
44:0e:34:4a:20:58:4f:fd:40:58:2f:51:5f:5a:5d:
e1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:FA:7A:11:74:88:DA:30:2F:0A:66:FF:3B:91:08:11:43:FE:C9:27
X509v3 Authority Key Identifier:
keyid:AB:E0:98:80:1F:54:C9:A3:C4:7A:E2:F3:58:B8:E3:FB:D4:68:61:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-CYgB9UyaPEeuLzWLjj-9RoYU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f2e659-5bb1-46b5-b55d-bd717752f2f6/1/q-CYgB9UyaPEeuLzWLjj-9RoYU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f2e659-5bb1-46b5-b55d-bd717752f2f6/1/q-CYgB9UyaPEeuLzWLjj-9RoYU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:fb:f3:80:ee:b2:94:79:5e:70:7e:03:6f:25:09:7f:f8:7c:
f1:86:96:ed:b0:be:38:61:1b:64:38:86:45:80:37:fc:2a:6e:
c8:b0:ce:ad:95:16:da:e6:de:4a:c6:98:77:3d:5e:1a:1d:15:
61:bf:50:b0:8d:95:e5:a8:81:74:3a:7b:79:d7:38:97:f6:38:
2b:dc:40:00:2a:a0:72:47:12:3c:ae:53:78:df:6f:de:c5:9c:
57:d6:71:e3:cc:ee:a0:b5:0d:a1:dc:93:7d:cb:e3:a5:c5:ce:
e3:88:74:49:76:4c:16:04:c4:4a:05:d8:4a:69:d3:3e:38:12:
38:fc:e3:65:7e:8e:02:75:23:d5:28:36:f9:40:93:bb:ed:74:
ae:14:46:e9:bd:d8:bd:9a:da:ea:9b:84:04:96:d2:11:28:38:
57:c4:55:3a:da:3f:4a:96:e8:ec:3d:81:e5:ab:73:a6:96:de:
67:fe:70:81:ff:68:32:29:32:26:85:79:a0:af:c8:a8:94:6c:
a8:99:a4:09:57:31:83:1a:d6:ed:9a:bb:c8:00:e6:a7:81:ab:
2f:17:80:a3:dc:ea:fe:8d:ab:1f:aa:29:43:68:ad:55:99:0d:
c7:eb:66:d3:a0:78:21:ab:9c:cc:4e:2c:24:7f:7f:1f:d6:40:
37:55:eb:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYUot0UjAXFhWCGiyykLDzY+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiZTA5ODgwMWY1NGM5YTNjNDdhZTJmMzU4YjhlM2ZiZDQ2
ODYxNGYwHhcNMjIxMjE5MDQ0OTM3WhcNMjIxMjIwMDQ0OTM3WjAzMTEwLwYDVQQD
Eyg3OWZhN2ExMTc0ODhkYTMwMmYwYTY2ZmYzYjkxMDgxMTQzZmVjOTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMmKymHHmGGeks+NDv3CzQMM4qDB
CWgKto9FVBmUhjGL3H6elUOK7mRttXvN4ammChEOyb1l4OMUbvUFvQyPMzNUIKrn
G4R/bFX+mnnvtukcZmjEK7lsN0Kz/sO99/Oj6Ep0ZQe9GFF4amqVZB4HLTOTY0at
jT98Y5L+e0iljYCAgcVztVatY+ppnB4OraNAYx6mFza93aEA4Zq5FdQWwKS7NhrO
Mn77Oh86VLY63KKR3j1znAZ7t3L27Da6op5Hsruf1/bMQSe2OkYQJbidUFk7bOOk
epncrDsJNz2918KBdSOJw3I4IYXp+zW5PmREDjRKIFhP/UBYL1FfWl3hIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHn6ehF0iNowLwpm/zuRCBFD/sknMB8GA1UdIwQY
MBaAFKvgmIAfVMmjxHri81i44/vUaGFPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcS1DWWdCOVV5YVBFZXVMeldMamotOVJvWVU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9mMmU2NTktNWJiMS00NmI1LWI1NWQt
YmQ3MTc3NTJmMmY2LzEvcS1DWWdCOVV5YVBFZXVMeldMamotOVJvWVU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9mMmU2NTktNWJiMS00NmI1LWI1NWQtYmQ3MTc3NTJmMmY2
LzEvcS1DWWdCOVV5YVBFZXVMeldMamotOVJvWVU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR/vzgO6y
lHlecH4DbyUJf/h88YaW7bC+OGEbZDiGRYA3/CpuyLDOrZUW2ubeSsaYdz1eGh0V
Yb9QsI2V5aiBdDp7edc4l/Y4K9xAACqgckcSPK5TeN9v3sWcV9Zx48zuoLUNodyT
fcvjpcXO44h0SXZMFgTESgXYSmnTPjgSOPzjZX6OAnUj1Sg2+UCTu+10rhRG6b3Y
vZra6puEBJbSESg4V8RVOto/Spbo7D2B5atzppbeZ/5wgf9oMikyJoV5oK/IqJRs
qJmkCVcxgxrW7Zq7yADmp4GrLxeAo9zq/o2rH6opQ2itVZkNx+tm06B4IauczE4s
JH9/H9ZAN1Xreg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:29 2025 by rpki-client