Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
File: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft (raw, json)
Hash identifier: Dge/nw6UZ+4xFCCgvthO4DhEs84dqcMHv8s265xWOrw=
Subject key identifier: AE:5D:E5:BB:20:F9:54:E6:F3:3B:43:02:57:23:5B:FC:DE:BC:D7:25
Authority key identifier: E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
Certificate issuer: /CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Certificate serial: 0194BCE0C520FC7AD3229A307222DF9AF15A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
Manifest number: 1022
Signing time: Fri 31 Jan 2025 15:00:34 +0000
Manifest this update: Fri 31 Jan 2025 15:00:34 +0000
Manifest next update: Sat 01 Feb 2025 15:00:34 +0000
Files and hashes: 1: 5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl (hash: uaYuIZ6jHuzL0zBVMkeRNuyrM68uoEn61lNlcMsjUPU=)
2: a4ymEjMsJhtXkcAJ6G7kVnIhTYw.roa (hash: UnNO09ZwmXFienrwUtifAF5dtre8Vto8PtqszYxfGtk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c5:20:fc:7a:d3:22:9a:30:72:22:df:9a:f1:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6135d639768a3a63ed9c5ff40af5ed01df741cb
Validity
Not Before: Jan 31 15:00:34 2025 GMT
Not After : Feb 1 15:00:34 2025 GMT
Subject: CN=ae5de5bb20f954e6f33b430257235bfcdebcd725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:15:67:0e:36:b0:d2:a1:c8:5b:48:f5:15:75:
1d:3e:7d:cb:24:4c:f5:1f:43:0a:e4:70:66:b0:42:
c5:cc:c7:23:6e:44:97:0a:38:14:9a:b8:af:0d:aa:
d0:2f:8a:f0:bc:84:1b:8b:30:90:95:b2:a3:98:98:
4a:2b:ce:7d:9d:34:61:9a:9f:75:3f:63:a2:6e:0f:
6c:3f:e1:fe:cc:55:3d:6e:5e:43:23:71:41:d1:11:
29:a6:06:f9:65:db:8a:ed:6b:c1:5b:86:0c:ed:c4:
1d:be:d1:af:20:fc:38:ba:a8:d7:aa:41:48:71:17:
1b:a2:30:d5:33:55:46:f3:c7:72:a9:6e:ae:92:8e:
f1:57:1a:86:d7:cc:42:73:24:2e:1b:de:bd:4d:4a:
bc:cb:6c:1b:cc:d5:8a:b3:1f:02:14:15:e8:8a:ad:
93:de:f9:09:3c:91:b0:48:a9:2f:b1:d8:1e:66:86:
04:6b:fc:5f:17:49:bd:a4:ec:bf:24:12:b4:06:ca:
25:5f:79:1c:87:5c:0f:c0:0c:c1:57:3a:92:44:be:
cd:fc:56:a2:65:da:9d:5b:a2:15:50:79:aa:fd:a7:
84:6e:00:ce:69:af:fa:f6:a6:4c:38:c6:e2:bc:8d:
b9:de:3f:e6:13:0d:b9:9f:90:2d:39:7f:fa:f4:4a:
ec:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5D:E5:BB:20:F9:54:E6:F3:3B:43:02:57:23:5B:FC:DE:BC:D7:25
X509v3 Authority Key Identifier:
keyid:E6:13:5D:63:97:68:A3:A6:3E:D9:C5:FF:40:AF:5E:D0:1D:F7:41:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hNdY5doo6Y-2cX_QK9e0B33Qcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/746a75-d361-4e91-873a-0a770f0c7608/1/5hNdY5doo6Y-2cX_QK9e0B33Qcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:71:8c:55:7f:61:43:07:58:20:3d:bf:db:5c:b2:79:1b:04:
e8:a0:ac:d7:da:4d:60:47:38:aa:c8:65:c5:fc:93:b8:75:46:
92:87:d0:8b:17:9c:46:98:34:3b:b7:93:10:8c:75:63:b3:26:
16:d4:91:09:b7:83:fd:8b:f8:63:e5:3a:70:aa:af:ff:ba:93:
d6:18:66:49:f3:12:96:08:95:72:d6:78:5c:66:d6:57:7e:a0:
7c:74:fd:74:18:e5:da:f9:d9:4b:dd:7a:d9:b1:af:0a:dc:79:
24:c3:0a:21:78:af:c3:64:be:85:ba:a4:6c:c4:bb:c6:70:8d:
6e:37:c9:44:1b:32:42:88:4a:56:0e:6f:1f:ab:8c:c5:0c:25:
2e:ba:6f:95:d6:cd:74:ad:fe:80:38:d4:91:0d:bd:22:cc:f9:
d9:ce:e6:77:cd:21:df:46:e0:e5:17:d8:b6:0b:bf:ba:10:b4:
6d:e4:1d:32:8e:54:5c:d4:0b:f9:52:7b:34:ec:af:74:e5:b2:
c5:50:2d:e1:b7:08:89:c2:b9:38:5d:19:dc:d7:27:3d:00:41:
93:3a:7f:17:65:33:23:f2:82:82:b2:54:f4:7f:81:c3:52:70:
42:3d:e9:ef:bf:59:98:e7:d9:9a:51:4a:45:6a:52:99:31:03:
5a:62:09:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84MUg/HrTIpowciLfmvFaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MTM1ZDYzOTc2OGEzYTYzZWQ5YzVmZjQwYWY1ZWQwMWRm
NzQxY2IwHhcNMjUwMTMxMTUwMDM0WhcNMjUwMjAxMTUwMDM0WjAzMTEwLwYDVQQD
EyhhZTVkZTViYjIwZjk1NGU2ZjMzYjQzMDI1NzIzNWJmY2RlYmNkNzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBVnDjaw0qHIW0j1FXUdPn3LJEz1
H0MK5HBmsELFzMcjbkSXCjgUmrivDarQL4rwvIQbizCQlbKjmJhKK859nTRhmp91
P2Oibg9sP+H+zFU9bl5DI3FB0REppgb5ZduK7WvBW4YM7cQdvtGvIPw4uqjXqkFI
cRcbojDVM1VG88dyqW6uko7xVxqG18xCcyQuG969TUq8y2wbzNWKsx8CFBXoiq2T
3vkJPJGwSKkvsdgeZoYEa/xfF0m9pOy/JBK0BsolX3kch1wPwAzBVzqSRL7N/Fai
ZdqdW6IVUHmq/aeEbgDOaa/69qZMOMbivI253j/mEw25n5AtOX/69ErsmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5d5bsg+VTm8ztDAlcjW/zevNclMB8GA1UdIwQY
MBaAFOYTXWOXaKOmPtnF/0CvXtAd90HLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWhOZFk1ZG9vNlktMmNYX1FLOWUwQjMzUWNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS83NDZhNzUtZDM2MS00ZTkxLTg3M2Et
MGE3NzBmMGM3NjA4LzEvNWhOZFk1ZG9vNlktMmNYX1FLOWUwQjMzUWNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS83NDZhNzUtZDM2MS00ZTkxLTg3M2EtMGE3NzBmMGM3NjA4
LzEvNWhOZFk1ZG9vNlktMmNYX1FLOWUwQjMzUWNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOnGMVX9h
QwdYID2/21yyeRsE6KCs19pNYEc4qshlxfyTuHVGkofQixecRpg0O7eTEIx1Y7Mm
FtSRCbeD/Yv4Y+U6cKqv/7qT1hhmSfMSlgiVctZ4XGbWV36gfHT9dBjl2vnZS916
2bGvCtx5JMMKIXivw2S+hbqkbMS7xnCNbjfJRBsyQohKVg5vH6uMxQwlLrpvldbN
dK3+gDjUkQ29Isz52c7md80h30bg5RfYtgu/uhC0beQdMo5UXNQL+VJ7NOyvdOWy
xVAt4bcIicK5OF0Z3NcnPQBBkzp/F2UzI/KCgrJU9H+Bw1JwQj3p779ZmOfZmlFK
RWpSmTEDWmIJ+g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:00 2025 by rpki-client