Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
File: QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft (raw, json)
Hash identifier: 7rLOAF4edyNvngK00kUqHer79wJli+UhqGAXGS+7A/g=
Subject key identifier: ED:38:14:8B:31:8D:5C:C1:54:62:42:CB:32:DA:77:F4:D9:7B:0B:86
Authority key identifier: 41:9A:82:BE:1E:16:42:2F:9A:88:54:9A:F6:D5:42:48:1D:69:1A:C9
Certificate issuer: /CN=419a82be1e16422f9a88549af6d542481d691ac9
Certificate serial: 01962E61F042689AE1146985294EDB437BEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
Manifest number: 03DE
Signing time: Sun 13 Apr 2025 09:01:32 +0000
Manifest this update: Sun 13 Apr 2025 09:01:32 +0000
Manifest next update: Mon 14 Apr 2025 09:01:32 +0000
Files and hashes: 1: QZqCvh4WQi-aiFSa9tVCSB1pGsk.crl (hash: fWjavKQD+SUHyn37p2aO7Kv2AZ77wyFk1n0j/azItO0=)
2: ixxoDXsLiKFHG8cJ3pni9CuIWeY.roa (hash: e7F9bx5lz4I+jxRKeA3TL2cV3HxTGyF8ndmJymIUkLM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:61:f0:42:68:9a:e1:14:69:85:29:4e:db:43:7b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=419a82be1e16422f9a88549af6d542481d691ac9
Validity
Not Before: Apr 13 09:01:32 2025 GMT
Not After : Apr 14 09:01:32 2025 GMT
Subject: CN=ed38148b318d5cc1546242cb32da77f4d97b0b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d7:76:ac:3d:ef:e7:09:45:eb:53:dd:b1:28:
0d:3a:79:21:60:b8:24:5d:cd:8b:68:2a:5a:dc:b0:
68:24:26:82:c7:9c:63:0e:a2:20:d3:88:01:b3:59:
2c:b7:28:95:b8:5b:23:b7:36:8d:19:5b:5b:4b:ea:
06:04:4d:2e:de:66:e0:ed:eb:40:5f:3a:80:49:e6:
ee:ab:da:31:27:f5:46:2e:45:94:2f:45:6c:b5:e9:
35:0c:94:71:ae:1c:55:89:b7:11:59:f5:f3:b3:69:
2f:24:71:ab:c2:b6:3a:89:f6:c4:f5:79:4f:fb:8b:
e8:af:b3:a8:5a:45:1e:a2:b1:b8:29:17:6c:20:11:
3a:6c:da:f2:76:a0:bc:28:83:45:9d:ff:e9:b6:eb:
57:43:05:cb:9d:d2:63:50:0a:b4:c7:ec:16:0b:8e:
62:b1:a4:7b:ec:b3:51:61:98:0e:25:3b:11:9e:3e:
26:ce:19:3a:e6:a8:48:47:cf:91:4c:b1:4a:ef:bc:
d9:9f:81:ab:8a:5d:28:3f:9d:ce:cf:cb:42:a7:7e:
57:72:f9:73:19:4e:d7:35:b7:5f:38:86:86:05:ad:
c3:2e:3f:fd:2c:5c:17:a7:61:b2:32:17:1a:a7:e3:
32:58:b6:53:76:51:05:bd:22:6f:46:ff:a4:d6:0b:
d6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:38:14:8B:31:8D:5C:C1:54:62:42:CB:32:DA:77:F4:D9:7B:0B:86
X509v3 Authority Key Identifier:
keyid:41:9A:82:BE:1E:16:42:2F:9A:88:54:9A:F6:D5:42:48:1D:69:1A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZqCvh4WQi-aiFSa9tVCSB1pGsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4003bd-494d-4246-be94-c8659f76a2ea/1/QZqCvh4WQi-aiFSa9tVCSB1pGsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b5:f0:00:2a:a3:f0:f8:e2:ec:73:43:85:de:e1:4a:3c:f3:
5b:ba:b1:a0:e5:88:49:ec:09:c0:51:04:d4:d2:32:d3:52:e2:
9f:69:12:83:09:99:05:c1:ba:30:f0:67:74:36:43:46:b3:28:
75:ca:a9:d7:a8:e4:e5:b5:0c:fd:51:ac:8c:05:cc:aa:46:c9:
6c:7e:16:76:31:c7:d0:67:23:b4:7b:4d:2b:88:e9:7d:83:8b:
47:3b:03:9a:0e:32:80:14:da:61:7c:57:1d:13:ee:89:f7:9c:
20:b5:08:5f:19:97:24:d9:26:df:88:a3:e3:49:9d:a7:9f:07:
ba:30:f6:14:7d:5c:d2:10:f8:3b:b2:e9:3c:ee:dc:14:1a:ee:
07:80:a2:c8:de:9d:b0:1d:86:48:12:41:7c:42:aa:59:a4:69:
35:8c:42:57:a2:cd:b3:01:c8:1e:5d:75:06:17:8a:ea:db:4c:
62:9d:5a:bf:b7:a1:e9:73:29:b3:dd:d2:5c:1b:cd:9e:36:09:
c2:55:a9:8d:85:dd:33:24:99:0c:dc:be:91:fc:20:32:8d:a1:
4e:9a:c3:ab:5f:48:72:f1:7f:4c:1b:1e:8c:b0:52:ba:b1:c9:
e8:32:a9:0e:4c:29:d1:d9:5e:0c:69:08:ce:5d:40:09:ae:07:
ce:23:49:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYfBCaJrhFGmFKU7bQ3vrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxOWE4MmJlMWUxNjQyMmY5YTg4NTQ5YWY2ZDU0MjQ4MWQ2
OTFhYzkwHhcNMjUwNDEzMDkwMTMyWhcNMjUwNDE0MDkwMTMyWjAzMTEwLwYDVQQD
EyhlZDM4MTQ4YjMxOGQ1Y2MxNTQ2MjQyY2IzMmRhNzdmNGQ5N2IwYjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9d2rD3v5wlF61PdsSgNOnkhYLgk
Xc2LaCpa3LBoJCaCx5xjDqIg04gBs1kstyiVuFsjtzaNGVtbS+oGBE0u3mbg7etA
XzqASebuq9oxJ/VGLkWUL0Vstek1DJRxrhxVibcRWfXzs2kvJHGrwrY6ifbE9XlP
+4vor7OoWkUeorG4KRdsIBE6bNrydqC8KINFnf/ptutXQwXLndJjUAq0x+wWC45i
saR77LNRYZgOJTsRnj4mzhk65qhIR8+RTLFK77zZn4Gril0oP53Oz8tCp35Xcvlz
GU7XNbdfOIaGBa3DLj/9LFwXp2GyMhcap+MyWLZTdlEFvSJvRv+k1gvWaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO04FIsxjVzBVGJCyzLad/TZewuGMB8GA1UdIwQY
MBaAFEGagr4eFkIvmohUmvbVQkgdaRrJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVpxQ3ZoNFdRaS1haUZTYTl0VkNTQjFwR3NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy80MDAzYmQtNDk0ZC00MjQ2LWJlOTQt
Yzg2NTlmNzZhMmVhLzEvUVpxQ3ZoNFdRaS1haUZTYTl0VkNTQjFwR3NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy80MDAzYmQtNDk0ZC00MjQ2LWJlOTQtYzg2NTlmNzZhMmVh
LzEvUVpxQ3ZoNFdRaS1haUZTYTl0VkNTQjFwR3NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANLXwACqj
8Pji7HNDhd7hSjzzW7qxoOWISewJwFEE1NIy01Lin2kSgwmZBcG6MPBndDZDRrMo
dcqp16jk5bUM/VGsjAXMqkbJbH4WdjHH0GcjtHtNK4jpfYOLRzsDmg4ygBTaYXxX
HRPuifecILUIXxmXJNkm34ij40mdp58HujD2FH1c0hD4O7LpPO7cFBruB4CiyN6d
sB2GSBJBfEKqWaRpNYxCV6LNswHIHl11BheK6ttMYp1av7eh6XMps93SXBvNnjYJ
wlWpjYXdMySZDNy+kfwgMo2hTprDq19IcvF/TBsejLBSurHJ6DKpDkwp0dleDGkI
zl1ACa4HziNJXA==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:46 2025 by rpki-client on console.sobornost.net