Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
File: H5TRNU5yMGqff5Ufk_UujROkCr8.mft (raw, json)
Hash identifier: OMVViEIAzrEv67G1Ghy6pYlWrCV+r43hucWujFTlM+U=
Subject key identifier: EF:CA:8E:66:38:E5:6B:7C:E8:30:02:C4:D3:22:84:F2:E6:93:5C:AE
Authority key identifier: 1F:94:D1:35:4E:72:30:6A:9F:7F:95:1F:93:F5:2E:8D:13:A4:0A:BF
Certificate issuer: /CN=1f94d1354e72306a9f7f951f93f52e8d13a40abf
Certificate serial: 0194BCAA097B999A7999C00D927ED5656C70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
Manifest number: 0C5F
Signing time: Fri 31 Jan 2025 14:00:47 +0000
Manifest this update: Fri 31 Jan 2025 14:00:47 +0000
Manifest next update: Sat 01 Feb 2025 14:00:47 +0000
Files and hashes: 1: H5TRNU5yMGqff5Ufk_UujROkCr8.crl (hash: mlYfa9fBTt3EnVN6xPJltISLqn3klrLSRVeRfNS28Nk=)
2: LKhlG3TMTYsgOdNspAeUKjE3FDY.roa (hash: ktutiAHlvXrlvrW8ZLJWK+gJEGiryttMuOJwRo+ROtA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:09:7b:99:9a:79:99:c0:0d:92:7e:d5:65:6c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f94d1354e72306a9f7f951f93f52e8d13a40abf
Validity
Not Before: Jan 31 14:00:47 2025 GMT
Not After : Feb 1 14:00:47 2025 GMT
Subject: CN=efca8e6638e56b7ce83002c4d32284f2e6935cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:43:35:12:6c:9b:a9:9a:e4:e1:1e:41:d3:f9:
41:f9:81:d3:ef:27:88:b8:b9:ed:84:47:54:19:48:
13:99:9f:20:af:8c:c4:8a:dc:c6:ed:b2:ff:49:d8:
2a:ff:d7:df:12:1c:4a:6f:5c:6e:06:bc:29:48:32:
49:ae:e2:62:a1:68:cd:af:39:01:e1:64:3d:de:c5:
4b:a6:51:84:4e:40:39:ec:4b:88:be:2f:78:c1:39:
d6:1c:01:a7:7b:36:93:1f:d8:d8:68:5b:0c:5f:f3:
45:4d:41:d9:4c:d5:19:43:e2:9a:a2:22:e5:00:75:
8c:d7:4d:57:b0:c1:a9:da:c4:3d:14:22:f5:8f:d8:
27:12:05:15:dd:0c:e5:29:6d:2b:bf:f8:ed:72:8d:
81:79:30:51:1a:32:ea:06:90:22:6c:ce:9f:85:db:
b0:cc:63:57:69:22:ff:73:d3:b7:1c:f3:1b:11:ad:
76:12:c0:7b:1f:1c:e6:ef:50:05:82:ee:13:c2:bb:
77:fc:20:6b:08:62:0b:df:8c:76:cb:12:22:a7:9a:
4e:e9:b0:94:fb:a3:0f:e1:99:95:d6:81:82:35:6e:
ff:0b:dc:fd:81:4c:3c:5c:7e:aa:32:5c:78:c0:7e:
73:3d:2c:b3:0b:b8:ec:36:6d:ee:68:10:98:98:7d:
a6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CA:8E:66:38:E5:6B:7C:E8:30:02:C4:D3:22:84:F2:E6:93:5C:AE
X509v3 Authority Key Identifier:
keyid:1F:94:D1:35:4E:72:30:6A:9F:7F:95:1F:93:F5:2E:8D:13:A4:0A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:67:35:d0:95:d2:b5:ac:e9:83:6f:ec:e3:56:7f:72:a1:63:
21:67:b2:e5:ac:c4:cf:24:d0:94:20:89:86:29:3f:d8:ca:28:
57:5a:33:05:2b:dc:5f:43:6d:3c:e5:7d:5a:9b:ce:3b:88:94:
e7:03:a0:b1:e9:ab:51:f2:9a:19:15:f6:a6:3b:cd:7f:58:13:
36:b2:b7:bd:26:97:01:fb:2d:10:7d:7f:d3:5d:39:a4:9a:be:
ce:16:a0:b7:07:32:06:0e:00:63:18:2d:f7:b9:2d:02:c6:33:
34:b0:0f:12:9e:58:34:de:60:bc:95:82:4a:1c:7b:67:8c:b0:
63:d3:f5:d1:da:3e:d9:d9:cd:88:9d:77:0f:14:8b:45:2e:d8:
05:82:87:f8:0b:f2:ee:05:9f:2d:92:45:c4:18:cc:73:1c:1b:
d4:e1:56:ef:9a:3b:29:79:f4:99:3c:eb:17:4e:ee:00:a0:ba:
5e:1f:7f:06:1b:25:cb:df:b5:08:f9:ad:2b:28:19:28:23:fd:
fa:44:33:14:19:19:09:49:18:d0:90:a5:e3:6d:c3:d8:1f:e8:
a9:93:51:4c:26:45:f8:2a:3b:fe:5b:d1:1d:21:91:5b:25:36:
45:b3:7c:14:da:ab:8a:06:9f:dd:1e:ec:4f:83:8b:ce:71:3f:
a0:62:19:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qgl7mZp5mcANkn7VZWxwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmOTRkMTM1NGU3MjMwNmE5ZjdmOTUxZjkzZjUyZThkMTNh
NDBhYmYwHhcNMjUwMTMxMTQwMDQ3WhcNMjUwMjAxMTQwMDQ3WjAzMTEwLwYDVQQD
EyhlZmNhOGU2NjM4ZTU2YjdjZTgzMDAyYzRkMzIyODRmMmU2OTM1Y2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkM1EmybqZrk4R5B0/lB+YHT7yeI
uLnthEdUGUgTmZ8gr4zEitzG7bL/Sdgq/9ffEhxKb1xuBrwpSDJJruJioWjNrzkB
4WQ93sVLplGETkA57EuIvi94wTnWHAGnezaTH9jYaFsMX/NFTUHZTNUZQ+KaoiLl
AHWM101XsMGp2sQ9FCL1j9gnEgUV3QzlKW0rv/jtco2BeTBRGjLqBpAibM6fhduw
zGNXaSL/c9O3HPMbEa12EsB7Hxzm71AFgu4Twrt3/CBrCGIL34x2yxIip5pO6bCU
+6MP4ZmV1oGCNW7/C9z9gUw8XH6qMlx4wH5zPSyzC7jsNm3uaBCYmH2mUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/KjmY45Wt86DACxNMihPLmk1yuMB8GA1UdIwQY
MBaAFB+U0TVOcjBqn3+VH5P1Lo0TpAq/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDVUUk5VNXlNR3FmZjVVZmtfVXVqUk9rQ3I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9kZjk2YTUtMzE1Ny00ODgzLTgwODMt
MjEyZjg5M2ZjODM1LzEvSDVUUk5VNXlNR3FmZjVVZmtfVXVqUk9rQ3I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9kZjk2YTUtMzE1Ny00ODgzLTgwODMtMjEyZjg5M2ZjODM1
LzEvSDVUUk5VNXlNR3FmZjVVZmtfVXVqUk9rQ3I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnmc10JXS
tazpg2/s41Z/cqFjIWey5azEzyTQlCCJhik/2MooV1ozBSvcX0NtPOV9WpvOO4iU
5wOgsemrUfKaGRX2pjvNf1gTNrK3vSaXAfstEH1/0105pJq+zhagtwcyBg4AYxgt
97ktAsYzNLAPEp5YNN5gvJWCShx7Z4ywY9P10do+2dnNiJ13DxSLRS7YBYKH+Avy
7gWfLZJFxBjMcxwb1OFW75o7KXn0mTzrF07uAKC6Xh9/Bhsly9+1CPmtKygZKCP9
+kQzFBkZCUkY0JCl423D2B/oqZNRTCZF+Co7/lvRHSGRWyU2RbN8FNqrigaf3R7s
T4OLznE/oGIZNg==
-----END CERTIFICATE-----
Generated at Thu May 1 09:24:14 2025 by rpki-client