Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft
File: 5cN18687kSQJ3YNgp0CRNVaTcUE.mft (raw, json)
Hash identifier: OGJYtvwSWYEqqaPcKB+0DhPLdzuCL7KZFw98QFj6EA8=
Subject key identifier: 2F:AC:1B:54:D6:4A:C9:87:E1:34:EB:43:BB:87:86:8C:17:C7:32:BD
Authority key identifier: E5:C3:75:F3:AF:3B:91:24:09:DD:83:60:A7:40:91:35:56:93:71:41
Certificate issuer: /CN=e5c375f3af3b912409dd8360a740913556937141
Certificate serial: 0194BD17E6F28B21CE2097A3164525CFCBAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cN18687kSQJ3YNgp0CRNVaTcUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft
Manifest number: 0367
Signing time: Fri 31 Jan 2025 16:00:47 +0000
Manifest this update: Fri 31 Jan 2025 16:00:47 +0000
Manifest next update: Sat 01 Feb 2025 16:00:47 +0000
Files and hashes: 1: 5cN18687kSQJ3YNgp0CRNVaTcUE.crl (hash: XL9iABKXSybc/W4p+YeuEL9FP+MmmRFCe70aLcPwQxg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e6:f2:8b:21:ce:20:97:a3:16:45:25:cf:cb:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c375f3af3b912409dd8360a740913556937141
Validity
Not Before: Jan 31 16:00:47 2025 GMT
Not After : Feb 1 16:00:47 2025 GMT
Subject: CN=2fac1b54d64ac987e134eb43bb87868c17c732bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a7:bc:44:54:37:f7:4f:63:f5:7b:66:3a:61:
dd:e2:3f:2b:21:29:c0:8d:71:2e:9e:62:b4:87:ff:
8e:0b:38:63:9d:e8:06:72:ee:92:44:d9:51:c5:af:
c4:ba:6a:83:f4:3e:a1:44:81:c2:6b:cc:56:c3:f2:
66:07:5d:ea:03:13:7d:b6:2f:4f:67:db:fa:04:fa:
8b:38:28:6c:36:f5:c0:cd:9d:e4:27:67:35:83:38:
97:18:0e:44:03:57:61:94:8c:c2:1b:76:26:c2:53:
06:52:f2:c8:54:67:d0:ad:bc:0e:ff:c2:7a:ff:7a:
22:13:b6:d1:48:84:d6:fb:58:51:ee:db:39:56:f5:
7a:bc:91:f2:6c:52:88:a6:6a:fa:1b:4e:5a:f5:f3:
ed:41:df:5f:f4:d6:42:f0:e9:a0:fe:05:68:39:9c:
48:78:f8:2c:0f:b2:f8:be:00:45:6a:68:9a:2b:21:
e3:a4:0e:29:a4:27:93:a4:d8:f3:b7:53:fd:ee:f8:
16:dd:10:91:ba:04:ce:d4:e5:70:34:f6:c9:cb:95:
2b:9c:39:e2:ba:c3:b0:ae:29:51:8a:51:84:09:60:
6a:a2:36:f3:ea:33:3f:53:9f:7e:5b:f8:87:97:08:
d3:cd:8d:cf:df:f2:ad:66:fd:ad:78:21:01:ed:59:
c9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AC:1B:54:D6:4A:C9:87:E1:34:EB:43:BB:87:86:8C:17:C7:32:BD
X509v3 Authority Key Identifier:
keyid:E5:C3:75:F3:AF:3B:91:24:09:DD:83:60:A7:40:91:35:56:93:71:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cN18687kSQJ3YNgp0CRNVaTcUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8d00c2-71db-4fee-b6cb-c75c6d20d32c/1/5cN18687kSQJ3YNgp0CRNVaTcUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:7a:18:0f:05:a6:07:f0:ee:c5:ae:49:e6:8b:71:1e:0e:fc:
7c:b3:86:da:86:18:3c:b3:de:4f:ad:74:1f:ed:31:42:09:82:
46:b6:26:7a:d8:09:f2:db:b8:39:59:42:15:11:58:81:b5:b5:
dc:a1:cc:a2:4b:09:f0:e5:e0:23:3b:f9:1d:a7:6a:de:13:9e:
12:f5:7a:72:0c:b3:b5:fb:13:36:ff:85:8b:ad:d9:cf:4f:55:
93:c7:77:63:1b:33:55:07:d7:46:e7:bc:3d:dc:a2:73:8a:51:
b5:ee:ca:b5:1b:e1:a1:7e:43:6e:e5:d1:6a:57:58:9f:d0:17:
02:5c:0b:8d:7d:12:88:75:75:e0:46:03:66:66:67:d4:4a:67:
97:95:91:12:b6:6c:d4:36:fa:e0:4d:52:a0:9f:4e:57:97:1b:
da:f4:92:e4:e2:5e:e1:38:36:3b:3f:d2:95:ab:f5:43:41:a2:
63:60:09:74:e5:ae:09:84:7e:4a:47:07:e2:2a:0f:12:20:9d:
63:29:5c:2f:25:56:88:0f:09:cc:22:33:4b:10:8f:c4:83:14:
6d:cb:74:47:cb:af:4f:17:55:b8:c9:53:90:10:a9:02:1a:db:
f6:6c:0b:71:13:91:28:92:19:a6:03:9e:9d:16:6f:19:42:09:
25:d7:f0:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F+byiyHOIJejFkUlz8usMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YzM3NWYzYWYzYjkxMjQwOWRkODM2MGE3NDA5MTM1NTY5
MzcxNDEwHhcNMjUwMTMxMTYwMDQ3WhcNMjUwMjAxMTYwMDQ3WjAzMTEwLwYDVQQD
EygyZmFjMWI1NGQ2NGFjOTg3ZTEzNGViNDNiYjg3ODY4YzE3YzczMmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArae8RFQ3909j9XtmOmHd4j8rISnA
jXEunmK0h/+OCzhjnegGcu6SRNlRxa/EumqD9D6hRIHCa8xWw/JmB13qAxN9ti9P
Z9v6BPqLOChsNvXAzZ3kJ2c1gziXGA5EA1dhlIzCG3YmwlMGUvLIVGfQrbwO/8J6
/3oiE7bRSITW+1hR7ts5VvV6vJHybFKIpmr6G05a9fPtQd9f9NZC8Omg/gVoOZxI
ePgsD7L4vgBFamiaKyHjpA4ppCeTpNjzt1P97vgW3RCRugTO1OVwNPbJy5UrnDni
usOwrilRilGECWBqojbz6jM/U59+W/iHlwjTzY3P3/KtZv2teCEB7VnJMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+sG1TWSsmH4TTrQ7uHhowXxzK9MB8GA1UdIwQY
MBaAFOXDdfOvO5EkCd2DYKdAkTVWk3FBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWNOMTg2ODdrU1FKM1lOZ3AwQ1JOVmFUY1VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy84ZDAwYzItNzFkYi00ZmVlLWI2Y2It
Yzc1YzZkMjBkMzJjLzEvNWNOMTg2ODdrU1FKM1lOZ3AwQ1JOVmFUY1VFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy84ZDAwYzItNzFkYi00ZmVlLWI2Y2ItYzc1YzZkMjBkMzJj
LzEvNWNOMTg2ODdrU1FKM1lOZ3AwQ1JOVmFUY1VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANnoYDwWm
B/Duxa5J5otxHg78fLOG2oYYPLPeT610H+0xQgmCRrYmetgJ8tu4OVlCFRFYgbW1
3KHMoksJ8OXgIzv5Hadq3hOeEvV6cgyztfsTNv+Fi63Zz09Vk8d3YxszVQfXRue8
Pdyic4pRte7KtRvhoX5DbuXRaldYn9AXAlwLjX0SiHV14EYDZmZn1Epnl5WRErZs
1Db64E1SoJ9OV5cb2vSS5OJe4Tg2Oz/Slav1Q0GiY2AJdOWuCYR+SkcH4ioPEiCd
YylcLyVWiA8JzCIzSxCPxIMUbct0R8uvTxdVuMlTkBCpAhrb9mwLcRORKJIZpgOe
nRZvGUIJJdfwcA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:42 2025 by rpki-client