Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
File: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft (raw, json)
Hash identifier: vTpwxj9dua8wIkkF9pABEkLIfk7J+Ww1cOBGTZ/FVLE=
Subject key identifier: FA:36:B1:B9:1D:99:0F:72:18:89:76:D5:3D:20:82:C3:22:D5:3B:ED
Authority key identifier: 09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
Certificate issuer: /CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Certificate serial: 0194BD4E984284B4A9807EF314B1ED942872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
Manifest number: 0573
Signing time: Fri 31 Jan 2025 17:00:31 +0000
Manifest this update: Fri 31 Jan 2025 17:00:31 +0000
Manifest next update: Sat 01 Feb 2025 17:00:31 +0000
Files and hashes: 1: 5OdHvHOcZkrao-9cj9p2twVtXj0.roa (hash: XE/cbPsbZGNTjgltCjh6PwbFsSQa/FeH5vMG4ogZQBU=)
2: BxevXOZBdFUOOljteOuO-Rxt-CY.roa (hash: 3iKh9PQRS6dYBM+vLpV5Vh4W7QUExMRDQ5j2EO0fnVo=)
3: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl (hash: S+7Oe8ndAB1qFfNZkaaI6V65+DNuZiQW+y3+HnECbc4=)
4: dxDHiWZSI0UaIHekmjGJ3sxW6wY.roa (hash: miwDVBoTIblNIC6j43ewfXiSRHSZo0go2veqU8bISQ4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:98:42:84:b4:a9:80:7e:f3:14:b1:ed:94:28:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Validity
Not Before: Jan 31 17:00:31 2025 GMT
Not After : Feb 1 17:00:31 2025 GMT
Subject: CN=fa36b1b91d990f72188976d53d2082c322d53bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2f:fe:02:b2:9f:e5:f2:9c:d4:bc:14:70:f6:
c7:ca:b9:6e:0c:0d:dc:7e:56:b7:54:4c:2d:b1:f1:
6e:f5:8e:de:36:1d:aa:36:90:04:75:0e:4f:e0:9d:
9c:08:f3:91:a0:82:9d:6e:7a:c7:77:c8:56:84:dd:
2c:a3:39:70:6d:2d:c7:57:2a:80:d0:da:46:bd:b0:
2d:0f:8e:7b:0a:23:6f:48:ba:e5:5f:55:c6:0a:56:
58:30:89:14:8b:98:83:f2:45:fb:2f:2d:7d:c0:da:
06:05:84:ad:51:1b:ad:8a:91:ac:26:5a:c0:8d:43:
4f:fa:d4:71:1b:6f:3a:69:44:08:4e:f1:a7:1a:e4:
02:1f:c9:a9:52:72:af:2e:da:af:b0:04:01:df:b8:
b3:d8:5e:58:4b:65:69:85:0f:8c:6f:0a:ee:68:f5:
1a:81:4f:64:11:16:f5:69:bd:e6:c7:57:31:24:3e:
aa:b2:9a:b6:31:b5:4d:60:ce:a5:34:d1:68:89:13:
06:ed:c5:4a:66:33:f1:c4:a6:97:89:39:40:3b:62:
7d:b8:63:40:df:63:70:a5:24:d8:2b:34:69:59:cc:
63:4d:19:75:af:89:e3:8e:1c:cb:93:d7:c7:2a:c7:
2b:11:7e:40:c2:18:7a:d6:b2:57:55:bc:be:83:b8:
5b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:36:B1:B9:1D:99:0F:72:18:89:76:D5:3D:20:82:C3:22:D5:3B:ED
X509v3 Authority Key Identifier:
keyid:09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:12:81:bb:95:4e:0a:f0:70:f4:6c:27:64:81:6a:23:1f:c6:
f5:a1:07:21:7b:b6:05:40:81:ba:28:74:4d:8a:bc:0c:a2:b8:
b5:da:80:2b:78:47:ee:15:12:0a:18:1a:69:1e:95:5d:c7:1f:
59:ee:b0:17:55:0b:a8:ca:b1:c9:cc:84:01:ba:27:e8:36:c1:
ca:25:b3:16:9a:46:3b:ce:79:d2:19:34:18:54:f0:11:33:af:
95:6b:74:42:c5:76:52:99:e9:b5:51:4f:df:11:9b:39:f6:34:
8a:f8:6b:4c:6a:ee:a6:ee:78:25:de:37:f9:8e:9b:ce:c9:9e:
ad:e9:a2:31:7c:b0:a4:93:1f:43:bd:14:c3:cf:0c:9a:46:40:
0d:53:5e:7b:72:06:92:42:9c:2a:9c:e8:15:0c:1c:ee:71:0c:
ad:4d:84:71:48:5a:d6:8e:07:f5:1b:fa:09:cf:ce:02:36:b8:
b4:e0:5f:f1:c8:a4:7c:45:e6:be:e5:2c:16:f7:00:7c:72:0f:
92:ad:df:b3:05:2b:5d:46:3a:d7:13:13:b7:4a:3c:30:0f:7d:
dd:b0:a7:97:70:6e:9f:d6:b4:de:36:79:cf:91:d2:a5:9f:ee:
b6:09:9d:7a:d1:22:d5:dc:75:92:ce:16:bc:5a:d7:75:70:1c:
24:67:de:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TphChLSpgH7zFLHtlChyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZWU3ZWUwZjc1YjcxNjRhYzc1OTYxOTdjN2YxMjFkNmZj
YTE1NzYwHhcNMjUwMTMxMTcwMDMxWhcNMjUwMjAxMTcwMDMxWjAzMTEwLwYDVQQD
EyhmYTM2YjFiOTFkOTkwZjcyMTg4OTc2ZDUzZDIwODJjMzIyZDUzYmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyy/+ArKf5fKc1LwUcPbHyrluDA3c
fla3VEwtsfFu9Y7eNh2qNpAEdQ5P4J2cCPORoIKdbnrHd8hWhN0sozlwbS3HVyqA
0NpGvbAtD457CiNvSLrlX1XGClZYMIkUi5iD8kX7Ly19wNoGBYStURutipGsJlrA
jUNP+tRxG286aUQITvGnGuQCH8mpUnKvLtqvsAQB37iz2F5YS2VphQ+MbwruaPUa
gU9kERb1ab3mx1cxJD6qspq2MbVNYM6lNNFoiRMG7cVKZjPxxKaXiTlAO2J9uGNA
32NwpSTYKzRpWcxjTRl1r4njjhzLk9fHKscrEX5Awhh61rJXVby+g7hbswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPo2sbkdmQ9yGIl21T0ggsMi1TvtMB8GA1UdIwQY
MBaAFAnufuD3W3FkrHWWGXx/Eh1vyhV2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2U1LTRQZGJjV1NzZFpZWmZIOFNIV19LRlhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kYmU1MGEtMmNhMS00MzYyLWI1ZTct
NjY4M2M4ZmM5ZTViLzEvQ2U1LTRQZGJjV1NzZFpZWmZIOFNIV19LRlhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9kYmU1MGEtMmNhMS00MzYyLWI1ZTctNjY4M2M4ZmM5ZTVi
LzEvQ2U1LTRQZGJjV1NzZFpZWmZIOFNIV19LRlhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAORKBu5VO
CvBw9GwnZIFqIx/G9aEHIXu2BUCBuih0TYq8DKK4tdqAK3hH7hUSChgaaR6VXccf
We6wF1ULqMqxycyEAbon6DbByiWzFppGO8550hk0GFTwETOvlWt0QsV2UpnptVFP
3xGbOfY0ivhrTGrupu54Jd43+Y6bzsmeremiMXywpJMfQ70Uw88MmkZADVNee3IG
kkKcKpzoFQwc7nEMrU2EcUha1o4H9Rv6Cc/OAja4tOBf8cikfEXmvuUsFvcAfHIP
kq3fswUrXUY61xMTt0o8MA993bCnl3Bun9a03jZ5z5HSpZ/utgmdetEi1dx1ks4W
vFrXdXAcJGfefw==
-----END CERTIFICATE-----
Generated at Thu May 1 08:20:45 2025 by rpki-client