Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/879665-e3c3-44a7-bac7-53152c94c1ae/1/q5teKDpFc4rxQItbZQBCnf4v39g.mft
File: q5teKDpFc4rxQItbZQBCnf4v39g.mft (raw, json)
Hash identifier: kAruj7W/+DM/rT3NDoOrxTBffRMKExdqqmTODub/pC8=
Subject key identifier: 53:35:C7:7A:E6:AC:A0:24:28:E1:2C:3D:79:4A:39:3B:A3:88:2A:79
Authority key identifier: AB:9B:5E:28:3A:45:73:8A:F1:40:8B:5B:65:00:42:9D:FE:2F:DF:D8
Certificate issuer: /CN=ab9b5e283a45738af1408b5b6500429dfe2fdfd8
Certificate serial: 0194122B418B43EFBCB307029D0DAD914C7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5teKDpFc4rxQItbZQBCnf4v39g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/879665-e3c3-44a7-bac7-53152c94c1ae/1/q5teKDpFc4rxQItbZQBCnf4v39g.mft
Manifest number: 01
Signing time: Sun 29 Dec 2024 11:26:52 +0000
Manifest this update: Sun 29 Dec 2024 11:26:52 +0000
Manifest next update: Mon 30 Dec 2024 11:26:52 +0000
Files and hashes: 1: q5teKDpFc4rxQItbZQBCnf4v39g.crl (hash: 90AEUeHpGXjXxdq3Po0HieRcdjilgM41Sia6SIz65xI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:12:2b:41:8b:43:ef:bc:b3:07:02:9d:0d:ad:91:4c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9b5e283a45738af1408b5b6500429dfe2fdfd8
Validity
Not Before: Dec 29 11:26:52 2024 GMT
Not After : Dec 30 11:26:52 2024 GMT
Subject: CN=5335c77ae6aca02428e12c3d794a393ba3882a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:75:90:f3:dd:e0:21:e7:5e:d0:97:de:5b:69:
86:19:b4:f7:bb:7b:81:76:0f:70:a3:d6:c4:d0:bc:
42:de:19:92:da:01:75:1b:ac:3b:f4:29:65:8c:17:
57:3a:cd:20:73:2c:fe:c9:97:d5:05:d9:0d:60:72:
ca:c0:f9:cb:5d:ea:8f:6f:75:24:fc:24:7d:6a:be:
a0:d6:6d:68:b9:19:58:79:f3:cc:45:cd:7f:f6:5c:
ba:93:59:05:a7:d4:75:33:2c:ae:58:f6:6f:6b:98:
bc:43:fc:52:37:a7:7e:96:ec:24:0b:0e:13:6e:db:
99:6f:85:3f:fc:58:c3:09:1b:bf:cd:12:31:c2:1b:
83:6c:bd:86:30:25:bf:dc:11:15:95:54:1d:2a:0a:
05:ee:c7:9c:b7:70:18:dd:13:33:14:4c:b2:bd:44:
d6:c7:6b:24:c7:11:73:fb:a8:f4:67:d7:8e:a9:39:
39:86:6a:60:61:c0:31:eb:35:2e:13:6d:54:b8:9c:
9a:34:48:11:94:1a:3f:4e:ab:af:ed:94:f1:1a:61:
9a:d8:a6:26:dc:cd:b4:73:52:b9:65:91:e6:77:5e:
33:ca:00:8f:48:70:95:d5:21:d0:e4:0c:ed:a7:fd:
60:a6:be:07:73:af:98:6f:5b:2e:99:3d:7c:05:14:
1e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:35:C7:7A:E6:AC:A0:24:28:E1:2C:3D:79:4A:39:3B:A3:88:2A:79
X509v3 Authority Key Identifier:
keyid:AB:9B:5E:28:3A:45:73:8A:F1:40:8B:5B:65:00:42:9D:FE:2F:DF:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5teKDpFc4rxQItbZQBCnf4v39g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/879665-e3c3-44a7-bac7-53152c94c1ae/1/q5teKDpFc4rxQItbZQBCnf4v39g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/879665-e3c3-44a7-bac7-53152c94c1ae/1/q5teKDpFc4rxQItbZQBCnf4v39g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:5c:f8:af:ba:e5:17:2e:b6:08:43:c3:c9:d0:50:b4:74:9f:
6a:62:69:64:b8:42:ef:78:d2:66:fa:5e:ff:ce:a5:d3:0f:00:
79:89:93:ba:48:f1:26:e6:3b:66:23:fe:e7:3c:3b:20:d2:cf:
f5:93:70:3e:7e:a7:ad:de:3d:2d:23:98:31:3a:68:45:65:37:
66:1e:10:8e:b5:7f:4a:dd:a4:6e:9c:bd:7d:d9:ff:60:3d:ea:
df:41:48:04:ea:a4:64:08:50:b1:3f:ac:5f:a5:cf:58:41:b7:
56:cf:b7:2f:82:1a:ca:13:be:ba:68:d9:e2:a0:db:89:62:97:
97:29:78:42:b6:94:bd:ce:c8:de:f7:8b:60:f7:e8:b5:a6:dc:
91:2c:b0:39:c7:72:7d:86:de:d4:ae:ec:8d:ce:8e:33:3a:9f:
36:bd:87:c5:b1:6a:b8:b8:3d:55:36:92:22:84:b8:2f:a9:18:
e0:44:d1:02:e4:60:f4:75:34:8c:30:2d:21:c1:01:92:e8:6b:
eb:cf:dd:18:43:d4:5d:85:c3:c3:ae:59:44:39:51:d1:e8:9d:
ce:f1:93:25:9a:3e:0d:60:77:9e:b4:bf:4c:c0:58:d7:70:c6:
b8:c8:ac:66:ea:3f:f2:15:c2:22:e3:c4:ab:3a:b8:10:ed:0c:
ef:51:3b:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQSK0GLQ++8swcCnQ2tkUx8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiOWI1ZTI4M2E0NTczOGFmMTQwOGI1YjY1MDA0MjlkZmUy
ZmRmZDgwHhcNMjQxMjI5MTEyNjUyWhcNMjQxMjMwMTEyNjUyWjAzMTEwLwYDVQQD
Eyg1MzM1Yzc3YWU2YWNhMDI0MjhlMTJjM2Q3OTRhMzkzYmEzODgyYTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HWQ893gIede0JfeW2mGGbT3u3uB
dg9wo9bE0LxC3hmS2gF1G6w79ClljBdXOs0gcyz+yZfVBdkNYHLKwPnLXeqPb3Uk
/CR9ar6g1m1ouRlYefPMRc1/9ly6k1kFp9R1MyyuWPZva5i8Q/xSN6d+luwkCw4T
btuZb4U//FjDCRu/zRIxwhuDbL2GMCW/3BEVlVQdKgoF7sect3AY3RMzFEyyvUTW
x2skxxFz+6j0Z9eOqTk5hmpgYcAx6zUuE21UuJyaNEgRlBo/Tquv7ZTxGmGa2KYm
3M20c1K5ZZHmd14zygCPSHCV1SHQ5Aztp/1gpr4Hc6+Yb1sumT18BRQemQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFM1x3rmrKAkKOEsPXlKOTujiCp5MB8GA1UdIwQY
MBaAFKubXig6RXOK8UCLW2UAQp3+L9/YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTV0ZUtEcEZjNHJ4UUl0YlpRQkNuZjR2MzlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS84Nzk2NjUtZTNjMy00NGE3LWJhYzct
NTMxNTJjOTRjMWFlLzEvcTV0ZUtEcEZjNHJ4UUl0YlpRQkNuZjR2MzlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS84Nzk2NjUtZTNjMy00NGE3LWJhYzctNTMxNTJjOTRjMWFl
LzEvcTV0ZUtEcEZjNHJ4UUl0YlpRQkNuZjR2MzlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKFz4r7rl
Fy62CEPDydBQtHSfamJpZLhC73jSZvpe/86l0w8AeYmTukjxJuY7ZiP+5zw7INLP
9ZNwPn6nrd49LSOYMTpoRWU3Zh4QjrV/St2kbpy9fdn/YD3q30FIBOqkZAhQsT+s
X6XPWEG3Vs+3L4IayhO+umjZ4qDbiWKXlyl4QraUvc7I3veLYPfotabckSywOcdy
fYbe1K7sjc6OMzqfNr2HxbFquLg9VTaSIoS4L6kY4ETRAuRg9HU0jDAtIcEBkuhr
68/dGEPUXYXDw65ZRDlR0eidzvGTJZo+DWB3nrS/TMBY13DGuMisZuo/8hXCIuPE
qzq4EO0M71E77Q==
-----END CERTIFICATE-----
Generated at Wed Apr 30 01:00:18 2025 by rpki-client