Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/cb0d26-893b-4804-b5d2-0c584926d821/1/q-Xi6xcODCq4YdswjbvLKl_V8Y0.mft
File: q-Xi6xcODCq4YdswjbvLKl_V8Y0.mft (raw, json)
Hash identifier: RyXIERTGPNDS8GQf25Ohk7aM7O5o9RVfnJn+RIXAZKM=
Subject key identifier: 47:AF:E8:E3:4D:D7:43:DB:25:D7:53:99:D7:6B:66:B7:FC:32:CE:34
Authority key identifier: AB:E5:E2:EB:17:0E:0C:2A:B8:61:DB:30:8D:BB:CB:2A:5F:D5:F1:8D
Certificate issuer: /CN=abe5e2eb170e0c2ab861db308dbbcb2a5fd5f18d
Certificate serial: 0196AE7AE099E38E9DC05D81287623A438C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-Xi6xcODCq4YdswjbvLKl_V8Y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/cb0d26-893b-4804-b5d2-0c584926d821/1/q-Xi6xcODCq4YdswjbvLKl_V8Y0.mft
Manifest number: 152D
Signing time: Thu 08 May 2025 06:00:10 +0000
Manifest this update: Thu 08 May 2025 06:00:10 +0000
Manifest next update: Fri 09 May 2025 06:00:10 +0000
Files and hashes: 1: cMGXmTRMraio0J6I7HNBr7NWueA.roa (hash: fmI2PBkGPQFw2If/jchTfAwZs8fPgvDxYocX6ZJt4ZY=)
2: q-Xi6xcODCq4YdswjbvLKl_V8Y0.crl (hash: AmDYmorgZA1q8r+7W1+4iYU7l8HyJNHv4CVxs6yI++0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:7a:e0:99:e3:8e:9d:c0:5d:81:28:76:23:a4:38:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe5e2eb170e0c2ab861db308dbbcb2a5fd5f18d
Validity
Not Before: May 8 06:00:10 2025 GMT
Not After : May 9 06:00:10 2025 GMT
Subject: CN=47afe8e34dd743db25d75399d76b66b7fc32ce34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7c:fe:ee:8e:c6:ff:15:cc:c8:e0:96:0a:dd:
af:fd:ff:61:c8:a9:a2:13:e6:88:12:40:4c:aa:bf:
04:8f:da:be:7a:36:4f:82:ac:20:82:10:78:62:2a:
0b:8e:28:63:b1:07:5f:1f:57:6c:f1:b0:0b:53:8a:
20:3f:14:78:b6:3b:3f:3f:26:e9:32:b9:71:85:83:
2b:32:d4:63:8a:98:fb:5d:48:89:5d:26:ed:1c:91:
61:93:12:2f:94:b2:f3:d7:7d:ac:b4:6d:e1:32:6c:
aa:30:e3:3b:3c:fe:61:36:93:e8:51:6d:62:e3:60:
9e:ef:6e:98:22:e5:dd:a7:47:a8:99:98:04:37:6d:
d1:d4:ff:14:3e:43:38:c5:6b:12:84:0e:4a:65:82:
ba:3f:d3:e4:d1:30:44:76:92:d4:ba:4f:f9:2c:93:
d0:69:ad:38:55:bd:03:0f:d0:3c:dc:99:5d:63:47:
b4:fa:97:96:78:cd:03:fd:80:64:fa:85:ed:eb:18:
67:a9:60:c7:8e:8f:3f:d0:06:7e:a2:d4:bb:09:42:
81:f5:b5:48:68:b4:92:43:4a:64:d6:35:f4:da:7a:
55:45:99:f3:71:2b:82:7f:83:d6:c2:7b:99:c7:90:
17:c9:d0:3f:c4:1f:a7:e6:7f:5c:dc:86:37:77:5d:
b3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AF:E8:E3:4D:D7:43:DB:25:D7:53:99:D7:6B:66:B7:FC:32:CE:34
X509v3 Authority Key Identifier:
keyid:AB:E5:E2:EB:17:0E:0C:2A:B8:61:DB:30:8D:BB:CB:2A:5F:D5:F1:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-Xi6xcODCq4YdswjbvLKl_V8Y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cb0d26-893b-4804-b5d2-0c584926d821/1/q-Xi6xcODCq4YdswjbvLKl_V8Y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cb0d26-893b-4804-b5d2-0c584926d821/1/q-Xi6xcODCq4YdswjbvLKl_V8Y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:f0:52:1f:f3:31:f5:5d:08:75:0e:2d:ad:fe:6a:f3:85:88:
8d:b0:58:73:ae:e7:6b:38:6f:0c:93:56:40:28:30:55:f5:a1:
a6:3d:ad:3d:e5:0f:9d:62:e8:d8:41:d7:91:fd:cb:f2:f4:06:
95:33:ab:9d:8d:30:80:10:19:40:5a:e0:5d:1a:9d:2a:1e:fa:
26:91:f6:c0:d1:92:3f:dd:96:d3:3c:f5:cb:cd:d6:a8:4b:1b:
38:fe:0e:48:e7:fd:f0:80:62:ed:4c:4e:5d:ec:8a:a4:72:19:
8c:ab:26:fe:fe:38:28:2b:f9:f9:61:5d:53:6f:c5:54:b9:68:
2e:13:06:ba:79:12:3c:60:52:14:66:8b:f5:f5:90:42:8d:8a:
eb:72:99:3f:8d:bb:41:ec:59:46:93:51:44:38:84:ee:98:9d:
83:cb:31:6f:f9:ea:10:e8:be:8b:fd:7d:0a:56:b4:4b:a8:b8:
05:61:bb:88:c6:b9:bb:00:82:ce:2f:06:b5:0d:03:db:52:c7:
7d:8b:e2:bd:09:9f:bc:fa:a2:25:ca:cb:35:d6:42:ea:8c:08:
6f:5f:d5:8d:71:d5:34:96:60:52:46:c4:81:82:77:41:80:8e:
b0:55:40:83:be:88:d6:58:bf:29:92:47:de:a9:0b:4c:e7:c2:
97:a6:9b:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaueuCZ446dwF2BKHYjpDjHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiZTVlMmViMTcwZTBjMmFiODYxZGIzMDhkYmJjYjJhNWZk
NWYxOGQwHhcNMjUwNTA4MDYwMDEwWhcNMjUwNTA5MDYwMDEwWjAzMTEwLwYDVQQD
Eyg0N2FmZThlMzRkZDc0M2RiMjVkNzUzOTlkNzZiNjZiN2ZjMzJjZTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHz+7o7G/xXMyOCWCt2v/f9hyKmi
E+aIEkBMqr8Ej9q+ejZPgqwgghB4YioLjihjsQdfH1ds8bALU4ogPxR4tjs/Pybp
MrlxhYMrMtRjipj7XUiJXSbtHJFhkxIvlLLz132stG3hMmyqMOM7PP5hNpPoUW1i
42Ce726YIuXdp0eomZgEN23R1P8UPkM4xWsShA5KZYK6P9Pk0TBEdpLUuk/5LJPQ
aa04Vb0DD9A83JldY0e0+peWeM0D/YBk+oXt6xhnqWDHjo8/0AZ+otS7CUKB9bVI
aLSSQ0pk1jX02npVRZnzcSuCf4PWwnuZx5AXydA/xB+n5n9c3IY3d12zuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEev6ONN10PbJddTmddrZrf8Ms40MB8GA1UdIwQY
MBaAFKvl4usXDgwquGHbMI27yypf1fGNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcS1YaTZ4Y09EQ3E0WWRzd2pidkxLbF9WOFkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9jYjBkMjYtODkzYi00ODA0LWI1ZDIt
MGM1ODQ5MjZkODIxLzEvcS1YaTZ4Y09EQ3E0WWRzd2pidkxLbF9WOFkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9jYjBkMjYtODkzYi00ODA0LWI1ZDItMGM1ODQ5MjZkODIx
LzEvcS1YaTZ4Y09EQ3E0WWRzd2pidkxLbF9WOFkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO/BSH/Mx
9V0IdQ4trf5q84WIjbBYc67nazhvDJNWQCgwVfWhpj2tPeUPnWLo2EHXkf3L8vQG
lTOrnY0wgBAZQFrgXRqdKh76JpH2wNGSP92W0zz1y83WqEsbOP4OSOf98IBi7UxO
XeyKpHIZjKsm/v44KCv5+WFdU2/FVLloLhMGunkSPGBSFGaL9fWQQo2K63KZP427
QexZRpNRRDiE7pidg8sxb/nqEOi+i/19Cla0S6i4BWG7iMa5uwCCzi8GtQ0D21LH
fYvivQmfvPqiJcrLNdZC6owIb1/VjXHVNJZgUkbEgYJ3QYCOsFVAg76I1li/KZJH
3qkLTOfCl6abQQ==
-----END CERTIFICATE-----
Generated at Mon May 12 10:59:41 2025 by rpki-client