Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
File: H5_9juMrPjV5eNnLmSFszoE3oyQ.mft (raw, json)
Hash identifier: 0c7w8xETaei63JlNmsv78cMvsd3TFqFnF1Szl8MAJ70=
Subject key identifier: E1:E7:CA:B6:34:7F:F3:3B:9C:6F:62:41:EE:98:C2:03:C3:DA:5D:6B
Authority key identifier: 1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24
Certificate issuer: /CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
Certificate serial: 0194BD4E3B29C3985F8901C35258AE4B1BF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
Manifest number: 13BE
Signing time: Fri 31 Jan 2025 17:00:08 +0000
Manifest this update: Fri 31 Jan 2025 17:00:08 +0000
Manifest next update: Sat 01 Feb 2025 17:00:08 +0000
Files and hashes: 1: GYb1F3991igV-Xs-ZoTKTm-Vg7M.roa (hash: oDfsrWpPRTbFkqWOBaawHb+IseXIbMKYHakcvEvzdXQ=)
2: H5_9juMrPjV5eNnLmSFszoE3oyQ.crl (hash: oyQ3QZiPxXCM5iIsl8zPLZj3glE1BRT6s7RzBHpss60=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:3b:29:c3:98:5f:89:01:c3:52:58:ae:4b:1b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
Validity
Not Before: Jan 31 17:00:08 2025 GMT
Not After : Feb 1 17:00:08 2025 GMT
Subject: CN=e1e7cab6347ff33b9c6f6241ee98c203c3da5d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b3:48:f9:33:bd:96:3e:fa:1d:b3:81:ec:01:
27:31:40:2b:f5:5f:9f:55:e6:9e:0f:dd:44:af:99:
ca:2d:77:27:ec:80:c7:35:87:53:06:27:f5:c2:e1:
30:06:e6:47:17:fe:f4:8f:5c:6d:3a:15:55:ed:76:
93:de:25:c9:c2:03:31:e1:d3:d6:9d:f9:3a:26:4e:
23:74:6c:45:13:53:32:cf:fd:6c:20:9c:8a:78:d5:
27:70:8b:d6:89:84:f1:9b:5d:c3:85:1f:f7:49:06:
b0:23:e8:2a:b6:62:a6:9c:c6:8e:bb:98:4e:c1:a6:
63:35:fa:00:fe:95:e3:8b:bc:86:ff:73:87:53:e7:
e4:b9:b0:3f:2b:80:e7:97:29:b4:c9:a9:5b:09:57:
61:59:91:b2:3d:ed:23:9d:53:7a:f5:6d:ac:45:cd:
41:13:14:1c:17:01:bb:82:63:da:4e:72:1e:54:8e:
3a:25:a8:61:5a:6e:d8:b2:92:0c:0c:bc:f8:3a:16:
8d:44:9f:03:b7:56:85:16:22:1e:b7:76:64:cc:dd:
1e:5a:d9:a7:52:d0:2b:51:1d:bb:c3:fd:cb:e0:93:
ea:2f:1a:fc:c4:c7:69:4d:d9:42:1f:1c:d1:d1:8c:
97:f2:2f:9e:0c:34:f6:4d:b5:98:0d:cf:a3:1f:9e:
65:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E7:CA:B6:34:7F:F3:3B:9C:6F:62:41:EE:98:C2:03:C3:DA:5D:6B
X509v3 Authority Key Identifier:
keyid:1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:5d:c3:5d:17:17:3c:ab:35:d5:b9:59:2a:00:ad:4e:80:46:
48:32:8b:f7:72:f4:bf:a1:fb:ac:23:6d:af:e1:ee:b7:96:be:
71:ac:37:81:ff:cb:c6:7e:c6:02:c9:b0:ba:ab:86:4a:22:c8:
d6:82:5b:fe:1d:3f:15:97:19:e1:1c:88:41:fa:e2:69:25:4b:
12:f9:fe:d0:d5:2c:3c:c8:dd:f4:5b:a0:93:2b:68:c9:d6:21:
fd:7b:fe:ff:bc:23:64:89:3d:4d:88:e9:3b:58:89:a2:a1:93:
b7:7c:2a:f1:97:fb:2f:bf:97:91:cb:d9:90:ef:33:07:67:d2:
ac:f9:13:dc:63:63:0e:7e:3d:a6:8f:9d:94:a6:ee:ba:6e:f4:
69:ec:42:85:da:c4:95:05:12:26:d4:b4:5c:38:22:a0:83:c3:
0c:ea:20:d0:87:ad:db:50:b1:a9:b1:18:14:c9:51:30:e6:00:
21:74:16:c9:74:f6:c9:0e:fd:80:80:0b:b8:dc:dc:9b:59:31:
22:b8:df:5e:b2:bf:70:db:35:38:1f:09:5f:40:47:02:ec:10:
aa:f0:3b:f1:cb:19:97:99:72:2d:5a:0d:14:84:73:9e:e1:45:
bf:42:b0:57:e5:80:b8:a3:5f:c0:74:b3:ab:9e:74:13:14:c4:
04:4b:c8:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tjspw5hfiQHDUliuSxv0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmOWZmZDhlZTMyYjNlMzU3OTc4ZDljYjk5MjE2Y2NlODEz
N2EzMjQwHhcNMjUwMTMxMTcwMDA4WhcNMjUwMjAxMTcwMDA4WjAzMTEwLwYDVQQD
EyhlMWU3Y2FiNjM0N2ZmMzNiOWM2ZjYyNDFlZTk4YzIwM2MzZGE1ZDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rNI+TO9lj76HbOB7AEnMUAr9V+f
VeaeD91Er5nKLXcn7IDHNYdTBif1wuEwBuZHF/70j1xtOhVV7XaT3iXJwgMx4dPW
nfk6Jk4jdGxFE1Myz/1sIJyKeNUncIvWiYTxm13DhR/3SQawI+gqtmKmnMaOu5hO
waZjNfoA/pXji7yG/3OHU+fkubA/K4Dnlym0yalbCVdhWZGyPe0jnVN69W2sRc1B
ExQcFwG7gmPaTnIeVI46JahhWm7YspIMDLz4OhaNRJ8Dt1aFFiIet3ZkzN0eWtmn
UtArUR27w/3L4JPqLxr8xMdpTdlCHxzR0YyX8i+eDDT2TbWYDc+jH55lGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHnyrY0f/M7nG9iQe6YwgPD2l1rMB8GA1UdIwQY
MBaAFB+f/Y7jKz41eXjZy5khbM6BN6MkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDVfOWp1TXJQalY1ZU5uTG1TRnN6b0Uzb3lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8wM2ZmZDAtN2U4Yi00M2ZlLThlZWUt
YWFlNjM4ZGJiMWMxLzEvSDVfOWp1TXJQalY1ZU5uTG1TRnN6b0Uzb3lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8wM2ZmZDAtN2U4Yi00M2ZlLThlZWUtYWFlNjM4ZGJiMWMx
LzEvSDVfOWp1TXJQalY1ZU5uTG1TRnN6b0Uzb3lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqF3DXRcX
PKs11blZKgCtToBGSDKL93L0v6H7rCNtr+Hut5a+caw3gf/Lxn7GAsmwuquGSiLI
1oJb/h0/FZcZ4RyIQfriaSVLEvn+0NUsPMjd9FugkytoydYh/Xv+/7wjZIk9TYjp
O1iJoqGTt3wq8Zf7L7+XkcvZkO8zB2fSrPkT3GNjDn49po+dlKbuum70aexChdrE
lQUSJtS0XDgioIPDDOog0Iet21CxqbEYFMlRMOYAIXQWyXT2yQ79gIALuNzcm1kx
IrjfXrK/cNs1OB8JX0BHAuwQqvA78csZl5lyLVoNFIRznuFFv0KwV+WAuKNfwHSz
q550ExTEBEvIkg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:41:01 2025 by rpki-client