Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
File: 5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft (raw, json)
Hash identifier: FkV0+D9EJSQHQc+jlM2c1oYCh3y8r4vMHLRH0I9IlO4=
Subject key identifier: A0:A3:97:8B:47:5A:06:C9:66:69:6B:80:4D:8D:9C:40:0F:FB:FE:7F
Authority key identifier: E4:6B:3D:61:FE:43:AB:68:04:B6:F1:E3:29:7A:8C:DC:C2:6B:9D:6C
Certificate issuer: /CN=e46b3d61fe43ab6804b6f1e3297a8cdcc26b9d6c
Certificate serial: 0194BC3C32A4625B31C1FF9BA3A90C94C883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
Manifest number: 9A
Signing time: Fri 31 Jan 2025 12:00:49 +0000
Manifest this update: Fri 31 Jan 2025 12:00:49 +0000
Manifest next update: Sat 01 Feb 2025 12:00:49 +0000
Files and hashes: 1: 5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl (hash: C4Ht3rnlIIut/Hv/SSkLyZmQ809Zpo6+vDrJ6D+8yd8=)
2: sh2pFLFRXQ_LNHY8Z6kE6uVGJsM.roa (hash: LOYuvxv+r/IWU8gCda5GHcFP5KoGM8hEkOX7ufXWF5A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:32:a4:62:5b:31:c1:ff:9b:a3:a9:0c:94:c8:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e46b3d61fe43ab6804b6f1e3297a8cdcc26b9d6c
Validity
Not Before: Jan 31 12:00:49 2025 GMT
Not After : Feb 1 12:00:49 2025 GMT
Subject: CN=a0a3978b475a06c966696b804d8d9c400ffbfe7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f3:f6:0e:14:a6:9c:14:46:b9:ce:51:f4:61:
4f:95:b9:69:6a:f5:84:e2:71:e3:63:75:e6:bd:05:
23:75:42:c2:db:75:95:a8:f7:f9:03:e9:51:d2:34:
b1:59:ce:8a:01:89:02:54:7a:da:a9:85:c0:d1:a3:
54:0d:75:0c:33:00:3d:90:0d:07:8c:d5:a4:83:83:
bc:aa:af:15:5a:45:96:6e:08:60:42:14:45:6a:08:
f4:a4:86:10:2f:b2:20:2a:f0:64:13:ec:7c:de:8e:
45:62:5b:69:f8:54:7b:41:d1:78:95:35:e0:e2:02:
b5:50:7e:07:e4:91:ac:f7:ae:b3:c7:6b:f5:27:90:
4f:6f:08:df:f2:33:f7:19:5a:aa:4f:2b:4a:47:64:
01:85:c7:62:b6:48:bc:88:37:a9:dd:0d:94:85:50:
d2:a3:ca:c8:b8:4f:1e:36:14:40:5b:05:86:70:95:
33:00:a2:db:79:38:08:f2:7a:f4:71:f3:f9:82:8f:
7f:6f:ed:a0:0b:c1:d5:cb:b4:9a:b1:6b:ea:96:f6:
c6:cb:04:ac:b4:12:c6:d9:bf:7c:89:32:0b:b9:5e:
20:ad:7d:bf:ea:7a:8a:7e:31:5e:ac:a7:03:19:21:
ad:f8:44:23:76:72:9f:2f:39:31:45:07:d8:ef:a1:
32:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A3:97:8B:47:5A:06:C9:66:69:6B:80:4D:8D:9C:40:0F:FB:FE:7F
X509v3 Authority Key Identifier:
keyid:E4:6B:3D:61:FE:43:AB:68:04:B6:F1:E3:29:7A:8C:DC:C2:6B:9D:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:85:cd:db:1d:00:bd:cb:60:a1:e4:f2:2d:e1:82:49:5a:c2:
5c:09:4b:9e:07:6f:5f:85:20:21:af:8e:eb:c7:8a:e9:06:62:
7f:7f:c1:83:a5:4c:50:04:00:5b:e0:d9:8a:07:e3:8b:6a:a6:
59:da:49:05:5d:d9:b2:da:60:96:51:ee:47:60:78:4c:6f:39:
37:20:b8:22:69:84:57:95:df:54:1e:7c:96:f1:8d:99:3e:da:
9f:ac:72:83:ca:1f:17:31:c2:ce:68:3b:11:84:ad:d8:b7:81:
0c:88:e4:a7:e4:0c:a8:f5:8b:89:38:d3:b3:39:08:31:4f:fc:
94:2d:dc:8c:8e:ed:91:46:58:d0:cf:6e:c5:0a:39:f3:7e:5c:
7a:45:ed:f7:ff:3e:60:4f:2e:30:51:b6:04:98:65:a7:f5:6d:
5c:b9:8a:c9:36:5c:e7:40:c6:db:d4:4e:1a:17:03:8b:3f:b4:
73:39:5e:d0:ad:df:09:89:fa:19:b0:3d:b6:cb:d1:cd:cc:52:
36:e7:e8:d2:05:78:ce:c4:6d:7a:a4:57:39:4d:ce:54:71:56:
c8:6f:a0:71:4e:4b:43:d1:1a:5b:d2:b6:04:92:23:dd:73:28:
dc:f5:67:3c:17:a8:d4:cc:27:43:f5:e6:8d:56:f5:2a:79:a4:
ca:54:fb:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PDKkYlsxwf+bo6kMlMiDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NmIzZDYxZmU0M2FiNjgwNGI2ZjFlMzI5N2E4Y2RjYzI2
YjlkNmMwHhcNMjUwMTMxMTIwMDQ5WhcNMjUwMjAxMTIwMDQ5WjAzMTEwLwYDVQQD
EyhhMGEzOTc4YjQ3NWEwNmM5NjY2OTZiODA0ZDhkOWM0MDBmZmJmZTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PP2DhSmnBRGuc5R9GFPlblpavWE
4nHjY3XmvQUjdULC23WVqPf5A+lR0jSxWc6KAYkCVHraqYXA0aNUDXUMMwA9kA0H
jNWkg4O8qq8VWkWWbghgQhRFagj0pIYQL7IgKvBkE+x83o5FYltp+FR7QdF4lTXg
4gK1UH4H5JGs966zx2v1J5BPbwjf8jP3GVqqTytKR2QBhcditki8iDep3Q2UhVDS
o8rIuE8eNhRAWwWGcJUzAKLbeTgI8nr0cfP5go9/b+2gC8HVy7SasWvqlvbGywSs
tBLG2b98iTILuV4grX2/6nqKfjFerKcDGSGt+EQjdnKfLzkxRQfY76EyjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKCjl4tHWgbJZmlrgE2NnEAP+/5/MB8GA1UdIwQY
MBaAFORrPWH+Q6toBLbx4yl6jNzCa51sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUdzOVlmNURxMmdFdHZIaktYcU0zTUpybld3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8xYTAyNGMtNmI3NS00YWQ4LWI1OWQt
YWY5YmIzZDEyNWQ4LzEvNUdzOVlmNURxMmdFdHZIaktYcU0zTUpybld3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8xYTAyNGMtNmI3NS00YWQ4LWI1OWQtYWY5YmIzZDEyNWQ4
LzEvNUdzOVlmNURxMmdFdHZIaktYcU0zTUpybld3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh4XN2x0A
vctgoeTyLeGCSVrCXAlLngdvX4UgIa+O68eK6QZif3/Bg6VMUAQAW+DZigfji2qm
WdpJBV3ZstpgllHuR2B4TG85NyC4ImmEV5XfVB58lvGNmT7an6xyg8ofFzHCzmg7
EYSt2LeBDIjkp+QMqPWLiTjTszkIMU/8lC3cjI7tkUZY0M9uxQo5835cekXt9/8+
YE8uMFG2BJhlp/VtXLmKyTZc50DG29ROGhcDiz+0czle0K3fCYn6GbA9tsvRzcxS
Nufo0gV4zsRteqRXOU3OVHFWyG+gcU5LQ9EaW9K2BJIj3XMo3PVnPBeo1MwnQ/Xm
jVb1KnmkylT7Rw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:24:52 2025 by rpki-client