Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
File: qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft (raw, json)
Hash identifier: 4iKVz4SnRw6SuAholPytMVAYcbHQfxbVm6Eufux3nE4=
Subject key identifier: 03:1B:14:41:13:28:41:B1:25:8C:4E:86:48:2D:B7:90:39:30:4B:F6
Authority key identifier: A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74
Certificate issuer: /CN=a93616365693fb6502cb4d687bb66747b1a2fd74
Certificate serial: 0195E0B48347B976293D210AE85427550944
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
Manifest number: 0F9F
Signing time: Sat 29 Mar 2025 07:01:21 +0000
Manifest this update: Sat 29 Mar 2025 07:01:21 +0000
Manifest next update: Sun 30 Mar 2025 07:01:21 +0000
Files and hashes: 1: dvh6dEQn3L0Lue4PHisFZ5z30t4.roa (hash: YZ3UChYkMOxFSMlqaHDcH6csBlA5vkgT+POe5BlyoUo=)
2: qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl (hash: vD2ciJqLFcJ6W3QlDmzmrl6npW3NgzGQyZtmYwg/3wQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:83:47:b9:76:29:3d:21:0a:e8:54:27:55:09:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93616365693fb6502cb4d687bb66747b1a2fd74
Validity
Not Before: Mar 29 07:01:21 2025 GMT
Not After : Mar 30 07:01:21 2025 GMT
Subject: CN=031b1441132841b1258c4e86482db79039304bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d3:ae:ce:a6:26:a4:46:de:db:d8:80:51:23:
27:a3:da:c7:5a:85:3a:4e:f4:8c:6e:b9:87:da:98:
86:dc:41:68:55:95:05:6b:5a:67:3a:e5:22:cc:06:
47:0a:6f:0f:01:7a:41:18:90:5c:07:42:ab:71:82:
c3:50:ad:37:79:c6:81:61:c1:b6:eb:d7:0c:25:46:
77:fe:01:a3:a0:17:0f:63:c5:13:22:01:38:1e:f8:
88:76:1b:d7:d3:40:a2:fd:ac:fe:b3:25:de:f7:39:
4d:fb:b3:6d:9c:33:e3:1e:ef:71:f5:c3:98:7e:b7:
c0:38:09:d4:79:7a:14:f2:09:84:e4:09:2c:76:8d:
b4:41:e3:b3:7d:09:8a:94:5d:8c:21:e0:2a:f8:ee:
e1:ab:0e:7e:a3:93:27:50:de:d1:d5:9f:ff:f8:a9:
89:d9:df:79:bb:f1:59:ae:69:be:56:48:6d:9b:1b:
5c:bc:19:d3:c5:ea:f9:d5:cd:7c:1c:1c:20:bc:b1:
9a:ef:ca:c0:b9:c7:1c:cd:32:58:0b:a4:7f:40:47:
87:e7:d8:2b:61:1f:83:a1:83:4e:8d:c8:4e:cc:3e:
cd:59:74:eb:cb:77:bb:41:bc:76:41:5a:bb:b3:14:
6f:c7:66:90:cc:19:41:a1:6e:e3:60:e3:a3:ac:d3:
ac:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1B:14:41:13:28:41:B1:25:8C:4E:86:48:2D:B7:90:39:30:4B:F6
X509v3 Authority Key Identifier:
keyid:A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:fb:b2:aa:15:2f:71:16:2f:77:d9:58:9f:41:f4:6d:a3:3f:
64:a5:e4:cd:ec:c2:db:97:17:cd:b3:40:14:e7:58:53:05:58:
20:6b:6c:e1:1d:8d:5c:39:9e:82:0d:a8:d6:45:4d:9a:20:57:
16:95:bc:6e:19:e4:3b:f3:bb:fb:55:25:9b:38:fe:ca:4b:13:
1e:6d:93:c1:c1:74:d1:40:e5:9d:51:cd:0c:e0:84:e1:1d:23:
d0:d2:63:74:09:cc:b3:21:c5:2a:c8:a4:65:4f:75:7d:6d:07:
0a:ba:97:29:80:b5:ab:21:16:ff:08:73:93:27:0a:86:47:35:
ce:b3:d5:65:a4:f0:60:00:57:38:97:1c:3a:aa:fd:8a:03:b4:
69:b3:d4:f5:e1:d7:78:00:41:d8:49:c0:f7:a2:b3:8d:b3:a6:
a6:09:44:c2:f4:73:b5:81:60:65:9f:22:c0:84:34:79:37:79:
8c:27:4a:98:3f:58:bb:a2:4e:60:9e:43:47:06:ba:a8:91:b4:
9f:04:2b:f2:89:49:22:98:4a:97:e7:97:f6:5c:20:d2:5d:96:
8c:52:c8:b9:b9:a6:e3:c2:55:d5:e8:74:74:89:ec:ab:9d:69:
28:b1:9b:49:b0:91:db:2b:17:e2:b3:93:3f:29:03:43:73:26:
56:b9:f6:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgtINHuXYpPSEK6FQnVQlEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MzYxNjM2NTY5M2ZiNjUwMmNiNGQ2ODdiYjY2NzQ3YjFh
MmZkNzQwHhcNMjUwMzI5MDcwMTIxWhcNMjUwMzMwMDcwMTIxWjAzMTEwLwYDVQQD
EygwMzFiMTQ0MTEzMjg0MWIxMjU4YzRlODY0ODJkYjc5MDM5MzA0YmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydOuzqYmpEbe29iAUSMno9rHWoU6
TvSMbrmH2piG3EFoVZUFa1pnOuUizAZHCm8PAXpBGJBcB0KrcYLDUK03ecaBYcG2
69cMJUZ3/gGjoBcPY8UTIgE4HviIdhvX00Ci/az+syXe9zlN+7NtnDPjHu9x9cOY
frfAOAnUeXoU8gmE5Aksdo20QeOzfQmKlF2MIeAq+O7hqw5+o5MnUN7R1Z//+KmJ
2d95u/FZrmm+VkhtmxtcvBnTxer51c18HBwgvLGa78rAuccczTJYC6R/QEeH59gr
YR+DoYNOjchOzD7NWXTry3e7Qbx2QVq7sxRvx2aQzBlBoW7jYOOjrNOsRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAMbFEETKEGxJYxOhkgtt5A5MEv2MB8GA1UdIwQY
MBaAFKk2FjZWk/tlAstNaHu2Z0exov10MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVRZV05sYVQtMlVDeTAxb2U3Wm5SN0dpX1hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZWIxODctNzQ4Ni00MDRjLWExZGMt
MDkxMjk4NzJlMTQzLzEvcVRZV05sYVQtMlVDeTAxb2U3Wm5SN0dpX1hRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9jZWIxODctNzQ4Ni00MDRjLWExZGMtMDkxMjk4NzJlMTQz
LzEvcVRZV05sYVQtMlVDeTAxb2U3Wm5SN0dpX1hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp/uyqhUv
cRYvd9lYn0H0baM/ZKXkzezC25cXzbNAFOdYUwVYIGts4R2NXDmegg2o1kVNmiBX
FpW8bhnkO/O7+1Ulmzj+yksTHm2TwcF00UDlnVHNDOCE4R0j0NJjdAnMsyHFKsik
ZU91fW0HCrqXKYC1qyEW/whzkycKhkc1zrPVZaTwYABXOJccOqr9igO0abPU9eHX
eABB2EnA96KzjbOmpglEwvRztYFgZZ8iwIQ0eTd5jCdKmD9Yu6JOYJ5DRwa6qJG0
nwQr8olJIphKl+eX9lwg0l2WjFLIubmm48JV1eh0dInsq51pKLGbSbCR2ysX4rOT
PykDQ3MmVrn2kQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:36:34 2025 by rpki-client