Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.mft
File: QBY91EFO8-eS4AUB80786UQKnE4.mft (raw, json)
Hash identifier: 24oDeF4wrKhJa60Q3TA00AGZHF98GrQPYGpYUewobV4=
Subject key identifier: 87:64:A9:7B:E0:A1:B9:EF:F5:46:28:E5:49:D0:97:B5:0B:AC:C0:57
Authority key identifier: 40:16:3D:D4:41:4E:F3:E7:92:E0:05:01:F3:4E:FC:E9:44:0A:9C:4E
Certificate issuer: /CN=40163dd4414ef3e792e00501f34efce9440a9c4e
Certificate serial: 01962F064A2B33DD269431A7206FACDD1071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QBY91EFO8-eS4AUB80786UQKnE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.mft
Manifest number: 14EC
Signing time: Sun 13 Apr 2025 12:01:03 +0000
Manifest this update: Sun 13 Apr 2025 12:01:03 +0000
Manifest next update: Mon 14 Apr 2025 12:01:03 +0000
Files and hashes: 1: QBY91EFO8-eS4AUB80786UQKnE4.crl (hash: OAa/unPaJ0GPuhrrl3gWWL3C+rZRNwuRyJyA6+yPObw=)
2: gYnUiXQeHZXoU2ZAN-fbsd-Pbx0.roa (hash: V+jQPfwx3Xoa/wL9PzJ6rz+juFyDwb1B2F2Hpp1ngN4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2f:06:4a:2b:33:dd:26:94:31:a7:20:6f:ac:dd:10:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40163dd4414ef3e792e00501f34efce9440a9c4e
Validity
Not Before: Apr 13 12:01:03 2025 GMT
Not After : Apr 14 12:01:03 2025 GMT
Subject: CN=8764a97be0a1b9eff54628e549d097b50bacc057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:8e:3e:3e:a7:ad:5e:31:f8:1b:d2:0b:b7:21:
44:9e:09:26:6e:01:b7:ed:92:de:9c:dd:9f:8e:ae:
24:9f:24:15:0f:21:4c:ad:a8:6c:fd:43:84:e8:af:
8c:7f:61:d0:76:25:97:94:25:d7:df:7b:57:91:c6:
87:a2:70:78:0e:12:f5:de:16:e5:4c:61:79:b0:b3:
36:a4:63:cb:91:4d:73:dd:9e:a3:f4:65:06:4c:79:
6c:ae:e7:9c:4a:f9:b4:d7:cc:60:4a:41:5b:f4:ce:
c1:66:5b:1a:8d:98:6d:f3:fc:d6:f8:b9:16:7e:5b:
67:c2:54:01:0b:9b:cc:2e:05:cf:a0:9f:d9:8e:2e:
07:2a:7d:c1:20:03:95:67:a2:9b:4a:34:52:2a:93:
2a:27:f5:e1:20:77:22:30:e7:15:eb:f3:63:8d:16:
d2:a2:f9:0f:ed:e1:3a:a0:16:6f:02:a0:45:38:d2:
9c:c3:af:95:90:47:c8:0b:e2:6b:d1:19:9b:36:e7:
fb:44:95:28:3c:9e:01:00:38:7c:68:61:eb:5a:7b:
4e:fc:fc:ee:c7:70:ee:7e:a3:70:7e:ee:ac:c2:4a:
ff:fe:f7:42:b4:1f:2b:93:41:ae:b0:0d:db:f3:a8:
26:5b:a1:3e:08:75:cd:c2:e9:34:b2:a9:3a:97:2f:
30:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:64:A9:7B:E0:A1:B9:EF:F5:46:28:E5:49:D0:97:B5:0B:AC:C0:57
X509v3 Authority Key Identifier:
keyid:40:16:3D:D4:41:4E:F3:E7:92:E0:05:01:F3:4E:FC:E9:44:0A:9C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBY91EFO8-eS4AUB80786UQKnE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:fc:42:3a:86:58:5a:5f:a0:f3:e7:a1:b4:02:e2:97:5c:42:
26:cc:9a:57:17:49:97:79:c0:b2:3f:88:db:4e:56:0e:c3:61:
a6:82:e8:11:9c:73:41:0b:8a:2a:81:ed:e5:a6:58:a3:0f:96:
be:b6:e9:8a:13:1b:5a:f3:ae:c8:00:b2:aa:e0:b9:4a:f2:7e:
a2:29:88:28:3b:86:72:cc:aa:76:eb:6f:0d:90:5a:6d:f1:25:
99:37:c0:b7:7a:52:60:c8:74:52:14:22:fe:7f:29:5f:f9:7c:
76:41:1e:25:34:6d:09:98:a3:0b:cb:ec:ef:45:34:a1:81:3b:
4b:24:18:38:0a:fe:fb:4b:6d:b8:e1:9f:cf:30:74:4e:ef:0c:
1b:01:18:1e:e9:0d:de:65:d9:3b:db:c4:e2:5e:75:1f:45:61:
a1:bf:05:de:9f:99:5c:d5:6d:24:28:95:b9:3f:d4:1c:b9:fd:
03:40:fb:f7:b7:23:99:90:7e:b6:1c:a2:ab:3c:44:11:62:3e:
3e:70:f0:ec:58:92:d8:de:1e:e7:73:60:e1:c2:d1:b7:28:5a:
0a:b3:d4:1f:b6:64:3c:8f:c4:84:e8:2d:c4:96:55:f2:4d:e6:
bf:81:ed:04:cc:35:3f:5a:63:65:a8:a5:23:08:25:02:4d:a5:
5a:b8:0a:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBkorM90mlDGnIG+s3RBxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMTYzZGQ0NDE0ZWYzZTc5MmUwMDUwMWYzNGVmY2U5NDQw
YTljNGUwHhcNMjUwNDEzMTIwMTAzWhcNMjUwNDE0MTIwMTAzWjAzMTEwLwYDVQQD
Eyg4NzY0YTk3YmUwYTFiOWVmZjU0NjI4ZTU0OWQwOTdiNTBiYWNjMDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA844+PqetXjH4G9ILtyFEngkmbgG3
7ZLenN2fjq4knyQVDyFMrahs/UOE6K+Mf2HQdiWXlCXX33tXkcaHonB4DhL13hbl
TGF5sLM2pGPLkU1z3Z6j9GUGTHlsruecSvm018xgSkFb9M7BZlsajZht8/zW+LkW
fltnwlQBC5vMLgXPoJ/Zji4HKn3BIAOVZ6KbSjRSKpMqJ/XhIHciMOcV6/NjjRbS
ovkP7eE6oBZvAqBFONKcw6+VkEfIC+Jr0RmbNuf7RJUoPJ4BADh8aGHrWntO/Pzu
x3DufqNwfu6swkr//vdCtB8rk0GusA3b86gmW6E+CHXNwuk0sqk6ly8waQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdkqXvgobnv9UYo5UnQl7ULrMBXMB8GA1UdIwQY
MBaAFEAWPdRBTvPnkuAFAfNO/OlECpxOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUJZOTFFRk84LWVTNEFVQjgwNzg2VVFLbkU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy81MjE0MzgtM2UwNC00ZDcyLTg4ZGUt
MzYyMmFjN2Q2NWNjLzEvUUJZOTFFRk84LWVTNEFVQjgwNzg2VVFLbkU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy81MjE0MzgtM2UwNC00ZDcyLTg4ZGUtMzYyMmFjN2Q2NWNj
LzEvUUJZOTFFRk84LWVTNEFVQjgwNzg2VVFLbkU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApfxCOoZY
Wl+g8+ehtALil1xCJsyaVxdJl3nAsj+I205WDsNhpoLoEZxzQQuKKoHt5aZYow+W
vrbpihMbWvOuyACyquC5SvJ+oimIKDuGcsyqdutvDZBabfElmTfAt3pSYMh0UhQi
/n8pX/l8dkEeJTRtCZijC8vs70U0oYE7SyQYOAr++0ttuOGfzzB0Tu8MGwEYHukN
3mXZO9vE4l51H0Vhob8F3p+ZXNVtJCiVuT/UHLn9A0D797cjmZB+thyiqzxEEWI+
PnDw7FiS2N4e53Ng4cLRtyhaCrPUH7ZkPI/EhOgtxJZV8k3mv4HtBMw1P1pjZail
IwglAk2lWrgKCg==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:46 2025 by rpki-client on console.sobornost.net