Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/14dd4c-d72d-4666-9242-920dd39ac62b/1/Q3FIOk0xlpOmC4o7x5_YgtIScPo.mft
File: Q3FIOk0xlpOmC4o7x5_YgtIScPo.mft (raw, json)
Hash identifier: N7aAmCBS84ztBQU6i5BxGA7wt7sWj9qi1Ef0mLHGElY=
Subject key identifier: 10:0E:A7:BB:E9:58:26:DD:CF:1A:64:85:77:6B:56:D7:2D:AD:F0:37
Authority key identifier: 43:71:48:3A:4D:31:96:93:A6:0B:8A:3B:C7:9F:D8:82:D2:12:70:FA
Certificate issuer: /CN=4371483a4d319693a60b8a3bc79fd882d21270fa
Certificate serial: 0195E159322C678E1D5323FDF3BF4949DC6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3FIOk0xlpOmC4o7x5_YgtIScPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/14dd4c-d72d-4666-9242-920dd39ac62b/1/Q3FIOk0xlpOmC4o7x5_YgtIScPo.mft
Manifest number: 0720
Signing time: Sat 29 Mar 2025 10:01:13 +0000
Manifest this update: Sat 29 Mar 2025 10:01:13 +0000
Manifest next update: Sun 30 Mar 2025 10:01:13 +0000
Files and hashes: 1: Q3FIOk0xlpOmC4o7x5_YgtIScPo.crl (hash: fFjAUIBgxrTwKnPz0ZGGg4msRQhhnsukQGyMQ4qfbOk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:32:2c:67:8e:1d:53:23:fd:f3:bf:49:49:dc:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4371483a4d319693a60b8a3bc79fd882d21270fa
Validity
Not Before: Mar 29 10:01:13 2025 GMT
Not After : Mar 30 10:01:13 2025 GMT
Subject: CN=100ea7bbe95826ddcf1a6485776b56d72dadf037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:58:7f:a6:c2:1f:90:cd:55:ca:03:8f:e6:4e:
07:6f:c4:fb:77:7e:02:ad:c1:3a:1f:d3:1e:28:1d:
da:3f:12:75:c7:9d:5c:64:ca:7e:fe:64:9e:78:5f:
75:51:e5:e9:74:b7:bf:e2:58:bb:63:99:98:b9:e5:
02:fa:2d:01:79:e4:00:ba:3f:83:30:f8:79:64:68:
03:74:33:fb:2e:6c:8a:0a:7e:f2:d4:ef:d8:b4:c5:
37:1d:2c:97:36:5a:21:1b:32:13:46:1f:01:62:7c:
1c:0c:f8:85:14:d0:d3:c1:4e:84:b1:13:3d:6e:51:
c0:3d:14:77:66:20:78:cd:eb:66:95:a1:7c:ac:7f:
e2:72:68:a6:e9:cc:49:41:f2:26:41:18:08:60:d1:
0e:5a:d4:08:ad:15:5d:45:e7:2b:31:28:20:5c:c5:
d4:7e:59:02:9b:de:9a:c0:33:bd:cd:a6:7d:d4:55:
d9:ee:43:2b:b2:14:70:61:23:6b:be:3e:7f:61:d3:
3d:91:87:3f:c8:71:9e:66:a9:6d:0e:79:75:4b:37:
a6:48:a4:21:38:73:96:94:20:bf:b1:7a:79:d9:39:
9f:a1:ac:5e:d0:da:80:e2:ec:d4:29:d2:51:42:8a:
ce:c3:bf:40:2b:a9:cd:f9:2b:e6:dd:1f:61:ec:45:
87:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0E:A7:BB:E9:58:26:DD:CF:1A:64:85:77:6B:56:D7:2D:AD:F0:37
X509v3 Authority Key Identifier:
keyid:43:71:48:3A:4D:31:96:93:A6:0B:8A:3B:C7:9F:D8:82:D2:12:70:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3FIOk0xlpOmC4o7x5_YgtIScPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/14dd4c-d72d-4666-9242-920dd39ac62b/1/Q3FIOk0xlpOmC4o7x5_YgtIScPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/14dd4c-d72d-4666-9242-920dd39ac62b/1/Q3FIOk0xlpOmC4o7x5_YgtIScPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:00:86:55:fb:b5:87:d2:c3:18:a8:71:5d:3d:08:08:93:c6:
a4:c3:73:6d:b0:81:70:36:be:01:18:ca:75:67:11:d4:b2:50:
b2:0d:fe:66:f1:26:58:6d:f5:f9:b6:32:76:54:c8:71:43:e4:
82:0f:09:73:0e:ff:71:30:28:d2:3f:a8:44:7a:3d:ff:ef:56:
b8:7f:23:72:e0:d1:2b:ed:f1:ce:a7:c0:25:bb:ae:3b:f5:0b:
b9:fa:24:c2:14:7d:e3:2e:cd:f9:77:54:63:d4:e9:9c:ae:d3:
1b:e3:5a:bc:4b:68:72:03:d3:15:60:22:19:80:fc:47:b9:ce:
2c:82:91:9b:e1:9e:3c:dc:22:f4:2a:6e:80:ce:19:36:aa:aa:
43:f3:88:41:c5:7a:5d:91:0a:06:24:da:5e:89:a0:14:06:cf:
f8:35:02:fa:42:9d:83:3f:9c:bd:cf:f2:ea:3c:60:1c:8b:60:
49:6a:b9:5c:32:c4:ae:9f:e7:59:91:c7:4d:b2:ea:0a:7d:ff:
de:74:80:73:5b:67:51:c9:a6:65:a6:6a:57:93:6a:11:eb:5c:
3c:32:e5:27:c8:65:c1:19:ba:22:55:7e:cb:52:2f:30:88:1d:
2a:4d:c1:97:9c:fa:7c:79:7d:98:74:05:4b:b4:9f:a8:ba:ae:
09:2b:31:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhWTIsZ44dUyP9879JSdxvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNzE0ODNhNGQzMTk2OTNhNjBiOGEzYmM3OWZkODgyZDIx
MjcwZmEwHhcNMjUwMzI5MTAwMTEzWhcNMjUwMzMwMTAwMTEzWjAzMTEwLwYDVQQD
EygxMDBlYTdiYmU5NTgyNmRkY2YxYTY0ODU3NzZiNTZkNzJkYWRmMDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlh/psIfkM1VygOP5k4Hb8T7d34C
rcE6H9MeKB3aPxJ1x51cZMp+/mSeeF91UeXpdLe/4li7Y5mYueUC+i0BeeQAuj+D
MPh5ZGgDdDP7LmyKCn7y1O/YtMU3HSyXNlohGzITRh8BYnwcDPiFFNDTwU6EsRM9
blHAPRR3ZiB4zetmlaF8rH/icmim6cxJQfImQRgIYNEOWtQIrRVdRecrMSggXMXU
flkCm96awDO9zaZ91FXZ7kMrshRwYSNrvj5/YdM9kYc/yHGeZqltDnl1SzemSKQh
OHOWlCC/sXp52Tmfoaxe0NqA4uzUKdJRQorOw79AK6nN+Svm3R9h7EWH/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAOp7vpWCbdzxpkhXdrVtctrfA3MB8GA1UdIwQY
MBaAFENxSDpNMZaTpguKO8ef2ILSEnD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTNGSU9rMHhscE9tQzRvN3g1X1lndElTY1BvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xNGRkNGMtZDcyZC00NjY2LTkyNDIt
OTIwZGQzOWFjNjJiLzEvUTNGSU9rMHhscE9tQzRvN3g1X1lndElTY1BvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8xNGRkNGMtZDcyZC00NjY2LTkyNDItOTIwZGQzOWFjNjJi
LzEvUTNGSU9rMHhscE9tQzRvN3g1X1lndElTY1BvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoACGVfu1
h9LDGKhxXT0ICJPGpMNzbbCBcDa+ARjKdWcR1LJQsg3+ZvEmWG31+bYydlTIcUPk
gg8Jcw7/cTAo0j+oRHo9/+9WuH8jcuDRK+3xzqfAJbuuO/ULufokwhR94y7N+XdU
Y9TpnK7TG+NavEtocgPTFWAiGYD8R7nOLIKRm+GePNwi9CpugM4ZNqqqQ/OIQcV6
XZEKBiTaXomgFAbP+DUC+kKdgz+cvc/y6jxgHItgSWq5XDLErp/nWZHHTbLqCn3/
3nSAc1tnUcmmZaZqV5NqEetcPDLlJ8hlwRm6IlV+y1IvMIgdKk3Bl5z6fHl9mHQF
S7SfqLquCSsxmg==
-----END CERTIFICATE-----
Generated at Sun May 11 20:16:17 2025 by rpki-client