Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
File: qujptNjblGuyDM9RJ5cHXIr9g80.mft (raw, json)
Hash identifier: CNV8eNPJKGMs9zAty/isVEZTBpsLMsTyBC7fqkmxT94=
Subject key identifier: AA:3A:74:9D:3F:47:58:D4:27:1F:7A:4E:80:B5:A4:A5:A6:AD:AA:D2
Authority key identifier: AA:E8:E9:B4:D8:DB:94:6B:B2:0C:CF:51:27:97:07:5C:8A:FD:83:CD
Certificate issuer: /CN=aae8e9b4d8db946bb20ccf512797075c8afd83cd
Certificate serial: 01962E9962F51E9F381F82FC95FAD274163F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
Manifest number: 0344
Signing time: Sun 13 Apr 2025 10:02:06 +0000
Manifest this update: Sun 13 Apr 2025 10:02:06 +0000
Manifest next update: Mon 14 Apr 2025 10:02:06 +0000
Files and hashes: 1: ABD8LSpm9Ko-5zn9g0r9GsemMIA.roa (hash: 1zcaf+BfE0QK77Rl0YVNTPqdqeAJJr/C/HmAQhJgCmY=)
2: qujptNjblGuyDM9RJ5cHXIr9g80.crl (hash: O2CUhu3FAjlwl/EctrPOwakwsujmtuY/nzzy92ozZRc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:99:62:f5:1e:9f:38:1f:82:fc:95:fa:d2:74:16:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae8e9b4d8db946bb20ccf512797075c8afd83cd
Validity
Not Before: Apr 13 10:02:06 2025 GMT
Not After : Apr 14 10:02:06 2025 GMT
Subject: CN=aa3a749d3f4758d4271f7a4e80b5a4a5a6adaad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:46:bf:71:b3:29:08:51:57:ac:d2:da:43:6c:
77:67:0c:62:3c:c6:08:81:e6:36:e1:56:10:07:3c:
02:46:5a:f7:1f:00:4c:51:21:29:a1:ff:00:1e:8e:
2d:b9:20:ab:63:51:89:6a:69:f8:80:21:6e:42:af:
25:bd:27:ac:5f:08:f1:12:67:41:6f:fc:d1:b2:27:
7b:4c:03:15:03:b8:91:24:28:a2:cf:73:86:75:fd:
fd:ec:62:aa:f5:53:6f:99:85:46:29:4c:63:e7:1b:
56:46:8d:6e:41:e6:31:9f:2f:a7:e0:20:c3:b3:f0:
36:80:5b:c6:dd:d3:88:af:59:15:8c:38:7f:74:88:
26:92:d1:53:b3:b6:94:98:af:c4:31:d3:a0:b8:a4:
65:43:ad:0e:7a:92:38:d0:c5:6c:08:eb:12:6e:97:
57:29:bb:95:d0:35:3a:a5:76:7e:93:b2:3d:9d:ce:
76:f2:0b:e0:87:0f:fc:aa:c5:48:b1:e5:f6:cc:08:
f6:2d:ff:77:ae:dd:bc:1e:ce:aa:f1:0e:3e:24:a7:
ff:10:52:f6:ec:61:2d:a3:67:3e:12:13:2a:fc:7d:
b4:14:05:b7:a0:03:fa:7c:b8:01:fc:5c:f0:bb:4a:
20:33:b0:a0:5f:b9:4f:b4:c2:5f:c5:20:df:fc:e4:
24:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3A:74:9D:3F:47:58:D4:27:1F:7A:4E:80:B5:A4:A5:A6:AD:AA:D2
X509v3 Authority Key Identifier:
keyid:AA:E8:E9:B4:D8:DB:94:6B:B2:0C:CF:51:27:97:07:5C:8A:FD:83:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:30:ae:a5:bf:70:50:00:ac:6f:f5:8c:e7:8d:97:ad:f8:2b:
3c:fe:61:13:d0:d8:7d:14:89:01:ca:3a:7d:ec:a0:95:47:ba:
84:18:c5:d9:d2:0c:e7:e7:0a:64:16:64:49:4d:50:ee:42:06:
0d:61:12:7e:66:d6:49:1d:b6:5f:a0:aa:92:46:60:a9:3a:9c:
6b:6d:d4:70:66:0d:1a:6f:8d:e9:99:d5:17:ed:b5:71:b9:80:
d6:e7:7e:e7:eb:78:65:12:91:c1:4c:5d:47:28:b9:47:b1:e1:
aa:24:47:cd:1e:c9:12:34:11:7a:b0:a2:c4:e9:f7:8b:00:c8:
48:64:5e:a5:1f:a9:b2:75:9d:cf:b5:b7:fa:5f:df:d6:a0:e2:
3b:97:f5:a8:25:a8:ad:dd:1d:18:7a:6a:9f:5b:e0:f2:5e:84:
69:05:1b:8e:ff:4a:1e:8c:ff:4d:60:f1:3f:38:15:72:04:bd:
09:64:42:90:b7:00:8f:a4:70:91:f5:f2:5c:66:62:8a:52:1b:
1c:8e:03:f7:6a:0d:e4:1b:5d:27:26:17:b9:51:cb:97:96:52:
9c:ca:fa:24:6b:f6:64:01:5e:ca:34:72:9c:67:f4:30:ba:a9:
d2:9b:da:29:31:c4:63:79:53:30:fe:41:c4:6d:21:15:5d:e0:
00:fd:ec:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumWL1Hp84H4L8lfrSdBY/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhZThlOWI0ZDhkYjk0NmJiMjBjY2Y1MTI3OTcwNzVjOGFm
ZDgzY2QwHhcNMjUwNDEzMTAwMjA2WhcNMjUwNDE0MTAwMjA2WjAzMTEwLwYDVQQD
EyhhYTNhNzQ5ZDNmNDc1OGQ0MjcxZjdhNGU4MGI1YTRhNWE2YWRhYWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxka/cbMpCFFXrNLaQ2x3ZwxiPMYI
geY24VYQBzwCRlr3HwBMUSEpof8AHo4tuSCrY1GJamn4gCFuQq8lvSesXwjxEmdB
b/zRsid7TAMVA7iRJCiiz3OGdf397GKq9VNvmYVGKUxj5xtWRo1uQeYxny+n4CDD
s/A2gFvG3dOIr1kVjDh/dIgmktFTs7aUmK/EMdOguKRlQ60OepI40MVsCOsSbpdX
KbuV0DU6pXZ+k7I9nc528gvghw/8qsVIseX2zAj2Lf93rt28Hs6q8Q4+JKf/EFL2
7GEto2c+EhMq/H20FAW3oAP6fLgB/Fzwu0ogM7CgX7lPtMJfxSDf/OQkKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKo6dJ0/R1jUJx96ToC1pKWmrarSMB8GA1UdIwQY
MBaAFKro6bTY25RrsgzPUSeXB1yK/YPNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXVqcHROamJsR3V5RE05Uko1Y0hYSXI5ZzgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8xZTg3MmYtODg1MS00ZDE3LTkxNDgt
Zjg5MDU2NzJlNTlkLzEvcXVqcHROamJsR3V5RE05Uko1Y0hYSXI5ZzgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8xZTg3MmYtODg1MS00ZDE3LTkxNDgtZjg5MDU2NzJlNTlk
LzEvcXVqcHROamJsR3V5RE05Uko1Y0hYSXI5ZzgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXDCupb9w
UACsb/WM542XrfgrPP5hE9DYfRSJAco6feyglUe6hBjF2dIM5+cKZBZkSU1Q7kIG
DWESfmbWSR22X6CqkkZgqTqca23UcGYNGm+N6ZnVF+21cbmA1ud+5+t4ZRKRwUxd
Ryi5R7HhqiRHzR7JEjQRerCixOn3iwDISGRepR+psnWdz7W3+l/f1qDiO5f1qCWo
rd0dGHpqn1vg8l6EaQUbjv9KHoz/TWDxPzgVcgS9CWRCkLcAj6RwkfXyXGZiilIb
HI4D92oN5BtdJyYXuVHLl5ZSnMr6JGv2ZAFeyjRynGf0MLqp0pvaKTHEY3lTMP5B
xG0hFV3gAP3stw==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:49 2025 by rpki-client on console.sobornost.net