Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
File: 5-QyokmU5XnrJJmh9vNMZSEY40Q.mft (raw, json)
Hash identifier: j/obZ8d5PlCRIcaKoIYoyWI+vLlePYrtKiMnB3s9Fek=
Subject key identifier: 2F:59:C6:C0:F4:B7:3C:9E:13:B7:3F:90:C4:8F:B0:2E:A2:48:BA:6A
Authority key identifier: E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44
Certificate issuer: /CN=e7e432a24994e579eb2499a1f6f34c652118e344
Certificate serial: 0194BBCDEBC9986D1A806D59323FD5C6121E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 10:00:22 +0000
Manifest this update: Fri 31 Jan 2025 10:00:22 +0000
Manifest next update: Sat 01 Feb 2025 10:00:22 +0000
Files and hashes: 1: 1ap-zhjP2xlpcyvljzd4At-hRqs.roa (hash: vy++CPahIzqV0ojk71CI64hyqugiBwjMnM2TKCrxcDM=)
2: 5-QyokmU5XnrJJmh9vNMZSEY40Q.crl (hash: 3zRt5ICI9C3Mmg6i0BEHX6+/AY2bnKqO0alkdus4Gkc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:eb:c9:98:6d:1a:80:6d:59:32:3f:d5:c6:12:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7e432a24994e579eb2499a1f6f34c652118e344
Validity
Not Before: Jan 31 10:00:22 2025 GMT
Not After : Feb 1 10:00:22 2025 GMT
Subject: CN=2f59c6c0f4b73c9e13b73f90c48fb02ea248ba6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d2:e8:0c:72:ff:43:a0:c4:98:19:05:95:54:
31:af:7a:71:d1:6a:3e:c1:1d:35:6f:b2:67:ed:4a:
ce:e8:da:63:f8:cb:73:0a:0c:62:50:f5:55:2d:fc:
15:97:e9:a8:e7:33:18:68:95:ff:3a:9a:89:77:d1:
6f:e9:7a:26:be:08:24:a2:a4:a0:a2:0c:04:b4:92:
a1:a3:6e:56:6b:8f:b6:18:e8:70:b2:08:58:32:ef:
1b:60:d4:4f:31:fd:47:b1:04:3e:96:ba:17:ca:d7:
58:34:a9:23:b8:b1:2b:0b:b5:98:69:f4:62:03:8f:
80:30:7b:d8:6e:4c:95:66:41:a4:50:08:9f:89:ae:
d9:b4:df:6e:2f:13:23:ce:71:08:d1:e5:56:ce:62:
4d:d2:fb:0c:e0:e2:88:cc:ff:c0:01:a5:a1:0b:ea:
21:e5:97:f6:ee:81:6e:7f:9a:aa:9a:6c:02:0d:61:
8f:29:25:d3:bd:5e:e0:fd:41:72:7c:90:2c:7d:ba:
7e:a3:f1:50:29:16:f6:fa:1c:ec:74:67:32:9b:d9:
f4:21:6f:4b:26:7f:e5:82:b6:36:bc:ff:71:94:a6:
c7:89:e4:d9:48:63:cb:09:70:de:88:88:fb:6b:97:
c8:20:fd:de:69:c4:51:23:ca:21:09:0f:d0:b5:ae:
c4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:59:C6:C0:F4:B7:3C:9E:13:B7:3F:90:C4:8F:B0:2E:A2:48:BA:6A
X509v3 Authority Key Identifier:
keyid:E7:E4:32:A2:49:94:E5:79:EB:24:99:A1:F6:F3:4C:65:21:18:E3:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-QyokmU5XnrJJmh9vNMZSEY40Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/063ebe-67f0-40e9-bbff-a409ca37a3ea/1/5-QyokmU5XnrJJmh9vNMZSEY40Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f4:66:da:c0:2e:d1:8b:b7:65:e2:71:f4:ae:ed:11:0f:f7:
8c:96:3b:b6:a3:f7:b3:1d:72:13:bb:08:19:94:49:38:f5:b6:
73:30:db:91:a7:59:b4:24:58:60:c9:97:59:26:de:43:b8:cd:
44:4e:55:19:3c:50:9b:a0:94:99:59:7e:c4:d2:51:d4:92:8c:
7b:e1:bf:4e:f1:a4:bf:73:a9:9c:98:40:b5:a8:09:c9:3f:1f:
80:99:f1:e2:d0:49:94:03:59:5d:f5:01:1d:a0:2d:a1:5f:61:
51:8d:4b:5d:af:24:87:f0:ad:51:2e:60:6a:b4:6c:64:f6:d1:
89:21:44:fd:63:29:f3:a7:b2:55:5d:2d:b9:6d:87:25:a2:76:
3d:a1:0b:ad:43:c0:de:5f:cf:06:a0:35:6a:3b:38:23:28:88:
71:10:5f:ab:f3:af:5a:99:a8:1c:d7:b4:95:8e:f8:3f:4f:7c:
fd:7a:16:a9:33:bc:73:b3:ba:36:94:06:bf:62:4d:c5:66:28:
53:ff:cf:c0:42:05:12:3a:da:f8:c1:0e:07:c1:b8:a4:49:69:
99:7c:dd:ba:c8:22:12:c9:10:9b:a7:7b:7d:11:6a:fe:b4:3c:
e6:b6:75:37:68:32:53:4d:58:0f:df:bf:90:06:fd:a2:b6:20:
d9:82:7b:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zevJmG0agG1ZMj/VxhIeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZTQzMmEyNDk5NGU1NzllYjI0OTlhMWY2ZjM0YzY1MjEx
OGUzNDQwHhcNMjUwMTMxMTAwMDIyWhcNMjUwMjAxMTAwMDIyWjAzMTEwLwYDVQQD
EygyZjU5YzZjMGY0YjczYzllMTNiNzNmOTBjNDhmYjAyZWEyNDhiYTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNLoDHL/Q6DEmBkFlVQxr3px0Wo+
wR01b7Jn7UrO6Npj+MtzCgxiUPVVLfwVl+mo5zMYaJX/OpqJd9Fv6XomvggkoqSg
ogwEtJKho25Wa4+2GOhwsghYMu8bYNRPMf1HsQQ+lroXytdYNKkjuLErC7WYafRi
A4+AMHvYbkyVZkGkUAifia7ZtN9uLxMjznEI0eVWzmJN0vsM4OKIzP/AAaWhC+oh
5Zf27oFuf5qqmmwCDWGPKSXTvV7g/UFyfJAsfbp+o/FQKRb2+hzsdGcym9n0IW9L
Jn/lgrY2vP9xlKbHieTZSGPLCXDeiIj7a5fIIP3eacRRI8ohCQ/Qta7E2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC9ZxsD0tzyeE7c/kMSPsC6iSLpqMB8GA1UdIwQY
MBaAFOfkMqJJlOV56ySZofbzTGUhGONEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNS1ReW9rbVU1WG5ySkptaDl2Tk1aU0VZNDBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wNjNlYmUtNjdmMC00MGU5LWJiZmYt
YTQwOWNhMzdhM2VhLzEvNS1ReW9rbVU1WG5ySkptaDl2Tk1aU0VZNDBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8wNjNlYmUtNjdmMC00MGU5LWJiZmYtYTQwOWNhMzdhM2Vh
LzEvNS1ReW9rbVU1WG5ySkptaDl2Tk1aU0VZNDBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/Rm2sAu
0Yu3ZeJx9K7tEQ/3jJY7tqP3sx1yE7sIGZRJOPW2czDbkadZtCRYYMmXWSbeQ7jN
RE5VGTxQm6CUmVl+xNJR1JKMe+G/TvGkv3OpnJhAtagJyT8fgJnx4tBJlANZXfUB
HaAtoV9hUY1LXa8kh/CtUS5garRsZPbRiSFE/WMp86eyVV0tuW2HJaJ2PaELrUPA
3l/PBqA1ajs4IyiIcRBfq/OvWpmoHNe0lY74P098/XoWqTO8c7O6NpQGv2JNxWYo
U//PwEIFEjra+MEOB8G4pElpmXzdusgiEskQm6d7fRFq/rQ85rZ1N2gyU01YD9+/
kAb9orYg2YJ76A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:46 2025 by rpki-client