Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.mft
File: QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.mft (raw, json)
Hash identifier: qDTqK11PbDmOe4kcISuKCttIMTdiukYPyqqCghXf+Fg=
Subject key identifier: 43:CB:91:B0:67:79:C8:E9:3F:4A:12:62:09:29:76:C1:42:FF:C1:F7
Authority key identifier: 40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
Certificate issuer: /CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Certificate serial: 018EF599920F7C1EFA0969A93600037CE429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.mft
Manifest number: 83
Signing time: Fri 19 Apr 2024 09:04:26 +0000
Manifest this update: Fri 19 Apr 2024 09:04:26 +0000
Manifest next update: Sat 20 Apr 2024 09:04:26 +0000
Files and hashes: 1: QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.crl (hash: LFiQr7FYb2gTDPiZfPyZGcUBbPeP5uzipInvEZbQLpw=)
2: _BsX64j0r1A3rpmQTbKrvzyIF6Q.roa (hash: bGPhoNpqgvB7BwWMAeYLPWjb3c8rk4tstDfhu6jl4I4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f5:99:92:0f:7c:1e:fa:09:69:a9:36:00:03:7c:e4:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b132c17e598f11b6a10f42ef3bce961e18e8ef
Validity
Not Before: Apr 19 09:04:26 2024 GMT
Not After : Apr 20 09:04:26 2024 GMT
Subject: CN=43cb91b06779c8e93f4a1262092976c142ffc1f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f4:71:51:e1:f7:78:4e:f7:5a:5f:74:9a:6f:
2f:f1:2f:e7:2c:90:03:22:34:83:07:91:65:1f:27:
02:62:1c:9e:cd:0a:f2:3a:84:71:93:63:ae:ac:98:
9b:fa:6f:da:62:2d:17:d2:21:8a:36:05:be:7f:06:
c5:83:70:ac:ad:06:1c:f7:8e:90:a2:bc:b1:21:14:
85:28:a1:48:c7:da:79:21:76:11:aa:b2:0d:2b:65:
d8:06:8f:ff:cb:80:41:44:ad:c3:99:3c:e1:71:61:
d0:fd:d1:79:46:71:8f:e2:9c:82:0d:24:d4:3b:db:
ef:a4:22:9a:d9:c5:ef:f6:71:1b:22:3b:64:ca:0d:
eb:72:1e:c6:55:56:3f:d6:50:40:8a:b4:b9:f3:a3:
26:0d:6b:c2:66:d7:c2:88:f2:d7:64:cd:13:1f:78:
2b:f6:ee:c4:ff:62:3c:46:62:a5:f0:6a:a5:ec:18:
0a:ad:19:b9:61:f2:dd:93:cd:87:3e:ad:1a:3b:d9:
cf:85:e4:3d:18:1f:77:26:48:e3:d6:5b:6a:75:7f:
dd:c4:75:c1:44:41:44:7e:4f:9a:a8:82:e2:10:ff:
a7:15:00:28:e8:aa:3a:8c:c9:0a:bf:cb:b2:03:82:
36:18:bc:c6:dc:c5:be:c0:07:cc:63:7a:b1:a5:c5:
9e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CB:91:B0:67:79:C8:E9:3F:4A:12:62:09:29:76:C1:42:FF:C1:F7
X509v3 Authority Key Identifier:
keyid:40:B1:32:C1:7E:59:8F:11:B6:A1:0F:42:EF:3B:CE:96:1E:18:E8:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/67f049-879e-4eb4-b1c2-8c8ebf5889da/1/QLEywX5ZjxG2oQ9C7zvOlh4Y6O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:28:b4:ed:59:ff:6d:28:d2:0c:b0:e3:92:c8:23:41:c1:42:
67:cb:02:b5:3e:f7:73:8c:72:72:2f:d0:9a:bf:63:07:fe:e5:
f9:7e:d5:ae:74:c5:36:c0:a2:06:1e:27:0d:4a:0c:f2:4b:09:
e1:7b:7e:6c:ea:92:3a:b9:4c:dd:21:d9:35:6e:87:1a:f5:9c:
ff:99:4b:7b:92:7c:b6:46:cc:54:8a:a0:80:4b:78:bb:2c:28:
cb:2d:21:68:87:ed:75:ea:a7:2f:3d:9d:97:a7:48:0d:d2:6f:
bd:9d:6a:b3:3b:b1:98:f1:32:63:a6:cc:13:6c:4e:67:53:0e:
82:06:3d:5c:ce:94:17:4a:37:55:d8:e8:eb:bc:76:43:b9:bb:
ca:75:4a:c5:98:29:1d:e1:42:33:c9:bf:9a:0b:61:de:10:1f:
3a:a7:16:93:09:31:5b:3c:6b:89:b0:5b:88:fe:6d:73:c3:3d:
ff:60:8c:98:68:7e:59:4b:ac:0a:db:f8:3c:65:01:47:f5:c0:
1f:dd:21:8b:f1:47:38:eb:3f:14:f4:06:c7:61:f5:73:92:91:
40:48:34:6a:c0:0d:89:89:c9:c3:4f:68:68:51:f0:89:26:0f:
57:60:53:25:7a:02:36:4e:7b:0b:e4:7d:d9:db:2c:07:bb:1c:
70:07:ce:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY71mZIPfB76CWmpNgADfOQpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwYjEzMmMxN2U1OThmMTFiNmExMGY0MmVmM2JjZTk2MWUx
OGU4ZWYwHhcNMjQwNDE5MDkwNDI2WhcNMjQwNDIwMDkwNDI2WjAzMTEwLwYDVQQD
Eyg0M2NiOTFiMDY3NzljOGU5M2Y0YTEyNjIwOTI5NzZjMTQyZmZjMWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/RxUeH3eE73Wl90mm8v8S/nLJAD
IjSDB5FlHycCYhyezQryOoRxk2OurJib+m/aYi0X0iGKNgW+fwbFg3CsrQYc946Q
oryxIRSFKKFIx9p5IXYRqrINK2XYBo//y4BBRK3DmTzhcWHQ/dF5RnGP4pyCDSTU
O9vvpCKa2cXv9nEbIjtkyg3rch7GVVY/1lBAirS586MmDWvCZtfCiPLXZM0TH3gr
9u7E/2I8RmKl8Gql7BgKrRm5YfLdk82HPq0aO9nPheQ9GB93Jkjj1ltqdX/dxHXB
REFEfk+aqILiEP+nFQAo6Ko6jMkKv8uyA4I2GLzG3MW+wAfMY3qxpcWeKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPLkbBnecjpP0oSYgkpdsFC/8H3MB8GA1UdIwQY
MBaAFECxMsF+WY8RtqEPQu87zpYeGOjvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUxFeXdYNVpqeEcyb1E5Qzd6dk9saDRZNk84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy82N2YwNDktODc5ZS00ZWI0LWIxYzIt
OGM4ZWJmNTg4OWRhLzEvUUxFeXdYNVpqeEcyb1E5Qzd6dk9saDRZNk84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy82N2YwNDktODc5ZS00ZWI0LWIxYzItOGM4ZWJmNTg4OWRh
LzEvUUxFeXdYNVpqeEcyb1E5Qzd6dk9saDRZNk84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlSi07Vn/
bSjSDLDjksgjQcFCZ8sCtT73c4xyci/Qmr9jB/7l+X7VrnTFNsCiBh4nDUoM8ksJ
4Xt+bOqSOrlM3SHZNW6HGvWc/5lLe5J8tkbMVIqggEt4uywoyy0haIftdeqnLz2d
l6dIDdJvvZ1qszuxmPEyY6bME2xOZ1MOggY9XM6UF0o3Vdjo67x2Q7m7ynVKxZgp
HeFCM8m/mgth3hAfOqcWkwkxWzxribBbiP5tc8M9/2CMmGh+WUusCtv4PGUBR/XA
H90hi/FHOOs/FPQGx2H1c5KRQEg0asANiYnJw09oaFHwiSYPV2BTJXoCNk57C+R9
2dssB7sccAfODg==
-----END CERTIFICATE-----
Generated at Mon Jun 9 10:09:08 2025 by rpki-client