Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
File: 5qTLdM9STBgSHVO1MsA8BvSta-Y.mft (raw, json)
Hash identifier: sqM4Mzd3OMwF97y/SpL64iSFE/3C8aYipHXy4Ti7YZ4=
Subject key identifier: DD:D1:0B:A4:66:80:3B:EF:8C:FA:CE:62:CA:16:9D:F4:D6:40:D2:63
Authority key identifier: E6:A4:CB:74:CF:52:4C:18:12:1D:53:B5:32:C0:3C:06:F4:AD:6B:E6
Certificate issuer: /CN=e6a4cb74cf524c18121d53b532c03c06f4ad6be6
Certificate serial: 0194BC72DA85346FD59BCF10BC2B3DDE0E77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
Manifest number: 0E24
Signing time: Fri 31 Jan 2025 13:00:31 +0000
Manifest this update: Fri 31 Jan 2025 13:00:31 +0000
Manifest next update: Sat 01 Feb 2025 13:00:31 +0000
Files and hashes: 1: 5qTLdM9STBgSHVO1MsA8BvSta-Y.crl (hash: G9ZcDBOcSVRlKH0TmbbHjFWQIY6N5JnKGxAvKguXGyE=)
2: FXr_S2B4fxLM9qAbLsO0vh-M550.roa (hash: XI0iDABL8ODtA8iq4rY+TAYyWpnlmsL+6qt8rzYOd/w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:da:85:34:6f:d5:9b:cf:10:bc:2b:3d:de:0e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a4cb74cf524c18121d53b532c03c06f4ad6be6
Validity
Not Before: Jan 31 13:00:31 2025 GMT
Not After : Feb 1 13:00:31 2025 GMT
Subject: CN=ddd10ba466803bef8cface62ca169df4d640d263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:95:40:15:e2:59:9f:af:1b:0b:5c:92:de:52:
c2:b3:b1:5d:79:ea:11:02:e4:a7:23:66:47:c5:15:
79:4c:d3:c8:a4:21:fe:bb:57:1a:78:6f:23:72:77:
a2:65:b0:83:fc:ba:85:1d:f8:64:ba:0b:17:7e:2a:
c4:c7:94:60:d8:bb:51:d6:e4:44:7a:1f:39:34:c7:
ec:70:c4:53:47:a4:1a:73:4a:92:08:4d:77:a6:15:
0e:92:2c:f2:4c:b0:1e:dd:67:90:0e:df:43:35:cb:
28:13:74:c2:4c:7a:77:77:53:99:e8:d0:ea:28:da:
56:f5:28:f3:a8:be:44:e2:a5:55:db:b7:b0:7b:e6:
90:35:07:4a:8c:dc:b1:4a:a8:37:51:da:0c:e4:c8:
39:66:d0:78:ea:3d:1e:58:2a:48:c2:63:a2:93:a7:
8d:b5:7a:35:2a:a3:c0:52:af:fd:43:94:f1:a0:77:
56:83:15:7c:49:a0:62:0b:6e:0b:1d:d7:98:c9:7d:
a1:3a:4b:51:69:45:6e:8a:b4:12:80:2a:e3:c6:32:
d0:1a:82:de:23:0b:10:68:e4:2a:cb:87:3a:4e:38:
69:46:2f:26:00:5a:33:62:fd:70:d0:bc:7b:1c:40:
c8:d8:94:b8:da:59:f9:26:62:2f:41:d6:95:92:02:
7b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D1:0B:A4:66:80:3B:EF:8C:FA:CE:62:CA:16:9D:F4:D6:40:D2:63
X509v3 Authority Key Identifier:
keyid:E6:A4:CB:74:CF:52:4C:18:12:1D:53:B5:32:C0:3C:06:F4:AD:6B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qTLdM9STBgSHVO1MsA8BvSta-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/f9f773-121e-450d-b606-98bf4289df3b/1/5qTLdM9STBgSHVO1MsA8BvSta-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a0:d9:d1:fc:b4:4e:4d:f7:64:00:33:f4:e7:6b:4b:d6:97:
87:e7:06:4b:86:44:c9:1b:87:6a:8d:73:c1:e6:dd:00:8b:fc:
79:13:71:b6:a4:22:32:38:32:9f:f5:e8:a0:db:3b:6c:6c:fb:
21:01:6e:13:5e:3f:b2:3f:95:68:d1:5d:9f:37:eb:95:f9:d9:
5f:4e:da:fd:48:38:9a:90:41:1b:85:b2:85:6d:98:76:85:60:
25:fd:bf:9d:8f:e7:b9:1e:a3:3e:f8:a3:e1:ad:45:8f:ca:e7:
ed:9a:aa:d7:3b:24:29:b2:f9:68:1e:0f:bc:d2:a6:b1:03:76:
d9:08:87:d5:ad:3f:91:de:a8:57:77:e6:14:b3:5b:bb:a5:10:
c4:1b:c3:ad:03:26:b7:dd:a7:9f:10:47:2d:c0:e0:a3:e9:b1:
3a:27:86:ae:fe:d5:49:dc:5b:04:6a:b3:00:64:a5:a5:cf:66:
b9:b2:23:13:b1:1b:68:78:04:fb:07:ba:9e:f7:1e:6e:84:b4:
47:9e:7c:f7:e9:1b:a5:69:ef:5f:e2:bb:87:7e:be:0f:4f:ad:
b3:fd:f4:0d:c1:8d:99:b8:25:b6:88:24:d5:39:d2:b0:bb:56:
89:6f:05:78:a5:e5:39:b7:7a:41:40:73:ce:a0:89:83:7a:d9:
92:8b:7d:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8ctqFNG/Vm88QvCs93g53MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YTRjYjc0Y2Y1MjRjMTgxMjFkNTNiNTMyYzAzYzA2ZjRh
ZDZiZTYwHhcNMjUwMTMxMTMwMDMxWhcNMjUwMjAxMTMwMDMxWjAzMTEwLwYDVQQD
EyhkZGQxMGJhNDY2ODAzYmVmOGNmYWNlNjJjYTE2OWRmNGQ2NDBkMjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZVAFeJZn68bC1yS3lLCs7FdeeoR
AuSnI2ZHxRV5TNPIpCH+u1caeG8jcneiZbCD/LqFHfhkugsXfirEx5Rg2LtR1uRE
eh85NMfscMRTR6Qac0qSCE13phUOkizyTLAe3WeQDt9DNcsoE3TCTHp3d1OZ6NDq
KNpW9SjzqL5E4qVV27ewe+aQNQdKjNyxSqg3UdoM5Mg5ZtB46j0eWCpIwmOik6eN
tXo1KqPAUq/9Q5TxoHdWgxV8SaBiC24LHdeYyX2hOktRaUVuirQSgCrjxjLQGoLe
IwsQaOQqy4c6TjhpRi8mAFozYv1w0Lx7HEDI2JS42ln5JmIvQdaVkgJ7UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3RC6RmgDvvjPrOYsoWnfTWQNJjMB8GA1UdIwQY
MBaAFOaky3TPUkwYEh1TtTLAPAb0rWvmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXFUTGRNOVNUQmdTSFZPMU1zQThCdlN0YS1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mOWY3NzMtMTIxZS00NTBkLWI2MDYt
OThiZjQyODlkZjNiLzEvNXFUTGRNOVNUQmdTSFZPMU1zQThCdlN0YS1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mOWY3NzMtMTIxZS00NTBkLWI2MDYtOThiZjQyODlkZjNi
LzEvNXFUTGRNOVNUQmdTSFZPMU1zQThCdlN0YS1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd6DZ0fy0
Tk33ZAAz9OdrS9aXh+cGS4ZEyRuHao1zwebdAIv8eRNxtqQiMjgyn/XooNs7bGz7
IQFuE14/sj+VaNFdnzfrlfnZX07a/Ug4mpBBG4WyhW2YdoVgJf2/nY/nuR6jPvij
4a1Fj8rn7Zqq1zskKbL5aB4PvNKmsQN22QiH1a0/kd6oV3fmFLNbu6UQxBvDrQMm
t92nnxBHLcDgo+mxOieGrv7VSdxbBGqzAGSlpc9mubIjE7EbaHgE+we6nvceboS0
R5589+kbpWnvX+K7h36+D0+ts/30DcGNmbgltogk1TnSsLtWiW8FeKXlObd6QUBz
zqCJg3rZkot9+A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:58 2025 by rpki-client