Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/qbX_0k0utdXB4c_niwA8S6taLxM.mft
File: qbX_0k0utdXB4c_niwA8S6taLxM.mft (raw, json)
Hash identifier: uFI0L3jgw3IdI1NwU3rf+X/4PQXM+TIEmfVaXk5ab2w=
Subject key identifier: 58:02:AC:1E:3E:E8:5D:61:31:4F:66:4E:42:7C:3B:39:CE:5D:AC:9C
Authority key identifier: A9:B5:FF:D2:4D:2E:B5:D5:C1:E1:CF:E7:8B:00:3C:4B:AB:5A:2F:13
Certificate issuer: /CN=a9b5ffd24d2eb5d5c1e1cfe78b003c4bab5a2f13
Certificate serial: 019482F165A55B0D30FAB68A37D31BD04970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbX_0k0utdXB4c_niwA8S6taLxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/qbX_0k0utdXB4c_niwA8S6taLxM.mft
Manifest number: 0BD3
Signing time: Mon 20 Jan 2025 09:00:45 +0000
Manifest this update: Mon 20 Jan 2025 09:00:45 +0000
Manifest next update: Tue 21 Jan 2025 09:00:45 +0000
Files and hashes: 1: PsH0T0HA4q611pE2-TqYOfMEvtE.roa (hash: YuO1r/ViiGZlU0bORq+WH7czhRQVk89ieeJ//ER4s4E=)
2: o4npVXSuR0O2RTEWKmoQxtQ_SqU.roa (hash: jhjPP6bkhxT2TmGafGFbjdI9WjarAC6+cLsCHvKjKes=)
3: qbX_0k0utdXB4c_niwA8S6taLxM.crl (hash: PLOUqQAq4ONZcZo0lf4SPQEAEuXQ3HXneNrDypuXM7o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:82:f1:65:a5:5b:0d:30:fa:b6:8a:37:d3:1b:d0:49:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9b5ffd24d2eb5d5c1e1cfe78b003c4bab5a2f13
Validity
Not Before: Jan 20 09:00:45 2025 GMT
Not After : Jan 21 09:00:45 2025 GMT
Subject: CN=5802ac1e3ee85d61314f664e427c3b39ce5dac9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:72:ff:b5:6e:11:51:6c:23:06:43:d7:c9:2f:
4d:9e:ca:8b:06:f3:1e:08:1a:26:d0:e1:00:29:09:
42:53:d6:b6:60:43:0c:85:58:2c:8d:88:54:14:c4:
bd:37:2e:f8:ca:70:df:73:2e:6d:e7:63:b5:f3:2a:
ee:3a:85:58:1d:56:03:49:8c:b8:b7:89:53:ec:ac:
a1:0a:89:09:54:ea:d6:90:e9:4c:58:26:35:7a:91:
d9:0f:78:d3:50:9c:35:6f:27:64:8b:a0:67:58:32:
31:50:be:4b:75:3a:b8:90:e4:93:c2:6b:aa:aa:81:
7f:a0:c8:46:01:aa:66:c1:87:18:f4:96:f5:fb:08:
19:8b:d1:dd:94:b4:c9:0b:01:72:30:50:55:f7:ab:
6f:bc:d8:31:22:ab:cd:62:4b:36:9f:7b:1a:9b:01:
66:e2:0c:77:42:54:5e:79:d9:57:64:7d:62:4c:6d:
4c:7a:73:02:30:4e:6b:33:21:3e:1e:97:cf:5e:05:
c2:bb:4b:a3:f4:a5:c7:c1:de:99:53:7f:79:f4:b2:
b9:78:c5:63:13:6e:b5:0d:bb:62:42:e7:e3:90:0d:
3b:ea:31:56:64:5e:23:87:7d:03:5e:b4:14:4d:98:
52:d8:9f:4c:1c:36:6b:7f:de:89:3f:58:87:29:23:
d7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:02:AC:1E:3E:E8:5D:61:31:4F:66:4E:42:7C:3B:39:CE:5D:AC:9C
X509v3 Authority Key Identifier:
keyid:A9:B5:FF:D2:4D:2E:B5:D5:C1:E1:CF:E7:8B:00:3C:4B:AB:5A:2F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbX_0k0utdXB4c_niwA8S6taLxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/qbX_0k0utdXB4c_niwA8S6taLxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/qbX_0k0utdXB4c_niwA8S6taLxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:db:2e:a1:60:ed:90:16:a6:94:42:cc:0a:00:89:5a:7c:69:
d4:5d:21:ea:b4:cb:ce:1d:53:25:e4:29:58:d0:18:bc:ee:3c:
ce:65:56:64:d0:4e:9d:0d:60:0d:c1:4f:5b:0e:f0:b3:c4:33:
72:5b:17:e8:e8:30:b1:2e:7a:a8:b3:f1:f6:1a:3e:62:29:93:
c9:e1:c0:ab:b1:77:43:77:d8:14:41:9c:b1:c6:7d:bc:92:48:
cd:ef:2b:30:c9:a7:d7:01:3c:99:b3:0e:8f:76:fc:59:aa:cc:
dd:e6:94:d8:27:41:4a:69:d8:76:25:d5:59:b0:d5:72:9e:ce:
ea:63:0a:ab:56:99:f3:7d:26:46:d4:f1:15:1c:cb:89:84:4b:
f1:00:8e:47:35:bc:c6:97:f3:f3:8b:cb:e1:74:e8:52:b2:5e:
fe:e8:69:49:f3:0b:c1:60:43:ec:5e:ab:27:50:e3:17:49:68:
ec:a0:86:33:77:10:57:1a:1b:91:7c:65:38:8d:3c:7f:8b:2e:
fb:db:cd:b9:7f:bd:eb:7d:5e:41:79:05:05:f6:e4:3e:99:2e:
f7:d6:e2:ca:53:fd:3a:5d:d4:32:73:fa:b6:f1:af:06:d0:f5:
8f:56:f4:4a:20:6e:fb:56:a6:0e:fe:83:3e:97:06:79:5f:91:
46:c0:41:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZSC8WWlWw0w+raKN9Mb0ElwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5YjVmZmQyNGQyZWI1ZDVjMWUxY2ZlNzhiMDAzYzRiYWI1
YTJmMTMwHhcNMjUwMTIwMDkwMDQ1WhcNMjUwMTIxMDkwMDQ1WjAzMTEwLwYDVQQD
Eyg1ODAyYWMxZTNlZTg1ZDYxMzE0ZjY2NGU0MjdjM2IzOWNlNWRhYzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXL/tW4RUWwjBkPXyS9NnsqLBvMe
CBom0OEAKQlCU9a2YEMMhVgsjYhUFMS9Ny74ynDfcy5t52O18yruOoVYHVYDSYy4
t4lT7KyhCokJVOrWkOlMWCY1epHZD3jTUJw1bydki6BnWDIxUL5LdTq4kOSTwmuq
qoF/oMhGAapmwYcY9Jb1+wgZi9HdlLTJCwFyMFBV96tvvNgxIqvNYks2n3samwFm
4gx3QlReedlXZH1iTG1MenMCME5rMyE+HpfPXgXCu0uj9KXHwd6ZU3959LK5eMVj
E261DbtiQufjkA076jFWZF4jh30DXrQUTZhS2J9MHDZrf96JP1iHKSPXYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFgCrB4+6F1hMU9mTkJ8OznOXaycMB8GA1UdIwQY
MBaAFKm1/9JNLrXVweHP54sAPEurWi8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWJYXzBrMHV0ZFhCNGNfbml3QThTNnRhTHhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8wMzAxZDQtNDgwNS00MDVjLWE2ZTAt
YTQyZTFmMWY0Nzk4LzEvcWJYXzBrMHV0ZFhCNGNfbml3QThTNnRhTHhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi8wMzAxZDQtNDgwNS00MDVjLWE2ZTAtYTQyZTFmMWY0Nzk4
LzEvcWJYXzBrMHV0ZFhCNGNfbml3QThTNnRhTHhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJtsuoWDt
kBamlELMCgCJWnxp1F0h6rTLzh1TJeQpWNAYvO48zmVWZNBOnQ1gDcFPWw7ws8Qz
clsX6OgwsS56qLPx9ho+YimTyeHAq7F3Q3fYFEGcscZ9vJJIze8rMMmn1wE8mbMO
j3b8WarM3eaU2CdBSmnYdiXVWbDVcp7O6mMKq1aZ830mRtTxFRzLiYRL8QCORzW8
xpfz84vL4XToUrJe/uhpSfMLwWBD7F6rJ1DjF0lo7KCGM3cQVxobkXxlOI08f4su
+9vNuX+9631eQXkFBfbkPpku99biylP9Ol3UMnP6tvGvBtD1j1b0SiBu+1amDv6D
PpcGeV+RRsBBoQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:01 2025 by rpki-client