Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.mft
File: 5qirioB4uztX5W_3wL1Npj7oLIs.mft (raw, json)
Hash identifier: Xm8Nx6yRv6iOgQXlx8fa8HUTKq2L0UdUWRxVwEBUt8o=
Subject key identifier: 72:F0:A5:BF:45:66:3B:80:8D:98:34:48:44:5E:2A:B0:7B:21:CF:F9
Authority key identifier: E6:A8:AB:8A:80:78:BB:3B:57:E5:6F:F7:C0:BD:4D:A6:3E:E8:2C:8B
Certificate issuer: /CN=e6a8ab8a8078bb3b57e56ff7c0bd4da63ee82c8b
Certificate serial: 0194BD4EA1D4C8C7861A4A39A8C5F16388AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qirioB4uztX5W_3wL1Npj7oLIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.mft
Manifest number: 0F37
Signing time: Fri 31 Jan 2025 17:00:34 +0000
Manifest this update: Fri 31 Jan 2025 17:00:34 +0000
Manifest next update: Sat 01 Feb 2025 17:00:34 +0000
Files and hashes: 1: 5qirioB4uztX5W_3wL1Npj7oLIs.crl (hash: PcLdfnfYanmMmOusfJXOJjGvZF8n2aAEdOva9tFzQAo=)
2: j26ZaXDJ5u5_sXZ9DSYkPEGDdBg.roa (hash: N0zCU+Z5cgt4Feyzz51pQWAD1vkYoFo87UGHCmMmAQ0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a1:d4:c8:c7:86:1a:4a:39:a8:c5:f1:63:88:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a8ab8a8078bb3b57e56ff7c0bd4da63ee82c8b
Validity
Not Before: Jan 31 17:00:34 2025 GMT
Not After : Feb 1 17:00:34 2025 GMT
Subject: CN=72f0a5bf45663b808d983448445e2ab07b21cff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:67:ad:54:ee:49:25:ee:6e:a9:51:d1:4c:f6:
84:ec:5b:f7:5f:f1:bd:8b:73:a9:32:09:1d:7f:26:
27:88:98:1e:5d:2f:88:a5:99:55:a3:5a:83:82:35:
5b:fe:87:86:97:42:06:35:a5:40:cf:05:a4:c2:ec:
74:56:df:a2:38:5d:5a:ba:6e:f9:dc:5f:b6:51:ca:
c0:44:7f:5b:4b:3a:69:16:60:41:8b:10:86:ec:be:
c7:ee:af:e1:fd:57:b7:e5:9b:b9:4b:da:fa:30:47:
b3:64:92:2d:b9:c1:8d:dc:a0:45:f2:e8:a3:b4:94:
b1:20:c0:85:af:b2:48:e5:3b:2b:4f:07:c0:3b:f6:
be:0d:f9:28:fd:83:bf:e6:9a:6a:cb:05:ce:1b:d3:
14:a2:6d:0b:ff:98:b7:13:db:d9:ac:33:63:41:b2:
e2:5a:a4:81:ff:8c:f8:3e:e4:38:d6:cc:23:51:26:
36:26:71:a2:ad:e3:09:fd:dc:3e:fa:7f:cb:35:52:
41:18:86:c0:05:64:09:f8:63:87:40:fc:25:27:e8:
99:a7:f5:bc:bc:ff:d2:7a:5c:29:d9:02:1a:6d:5d:
99:70:71:1e:c9:03:f3:39:1f:9d:88:e1:fd:ea:bf:
bc:77:e6:de:6d:2e:0f:93:23:4e:66:9c:9a:fb:4f:
70:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F0:A5:BF:45:66:3B:80:8D:98:34:48:44:5E:2A:B0:7B:21:CF:F9
X509v3 Authority Key Identifier:
keyid:E6:A8:AB:8A:80:78:BB:3B:57:E5:6F:F7:C0:BD:4D:A6:3E:E8:2C:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qirioB4uztX5W_3wL1Npj7oLIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:7b:95:e6:91:a4:16:80:63:94:a5:dc:8a:b3:6d:b6:8d:e2:
82:70:08:86:2f:f4:47:b2:31:98:64:17:bc:e0:43:6a:b7:bd:
78:d9:ab:91:00:30:e9:a9:cf:c4:e2:ba:51:73:c6:2e:5e:e0:
89:ab:ad:00:64:25:42:e8:90:14:11:34:fa:a0:e7:48:e7:6d:
a6:84:9a:40:e4:43:9f:71:c2:94:9a:08:34:fd:02:f8:62:16:
76:8c:33:4f:a7:93:22:23:a8:58:4e:48:fc:33:dc:6e:0a:f1:
86:c0:30:14:48:15:f2:4b:60:29:68:95:29:08:94:f3:cd:d4:
0b:22:a6:78:b6:cf:fe:3e:f7:bd:7e:04:95:71:7f:33:14:5c:
ad:a2:62:b5:eb:de:5e:59:81:35:95:3f:2d:1a:7e:20:67:09:
68:72:5b:71:01:cb:f5:96:da:01:ab:a3:4d:2a:aa:9f:bc:58:
04:c5:ce:de:57:53:17:c5:84:5f:58:cc:63:ce:d4:78:54:da:
cb:2e:2d:29:a5:06:d3:02:84:3c:1c:6b:8d:74:c2:ce:3d:b3:
dc:51:c3:41:11:ec:39:97:34:43:a9:e8:df:db:a3:c6:8b:57:
de:f8:d4:07:f4:70:fa:a6:16:03:ff:77:55:e5:08:f4:fc:0c:
50:ee:d2:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TqHUyMeGGko5qMXxY4iqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YThhYjhhODA3OGJiM2I1N2U1NmZmN2MwYmQ0ZGE2M2Vl
ODJjOGIwHhcNMjUwMTMxMTcwMDM0WhcNMjUwMjAxMTcwMDM0WjAzMTEwLwYDVQQD
Eyg3MmYwYTViZjQ1NjYzYjgwOGQ5ODM0NDg0NDVlMmFiMDdiMjFjZmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA72etVO5JJe5uqVHRTPaE7Fv3X/G9
i3OpMgkdfyYniJgeXS+IpZlVo1qDgjVb/oeGl0IGNaVAzwWkwux0Vt+iOF1aum75
3F+2UcrARH9bSzppFmBBixCG7L7H7q/h/Ve35Zu5S9r6MEezZJItucGN3KBF8uij
tJSxIMCFr7JI5TsrTwfAO/a+Dfko/YO/5ppqywXOG9MUom0L/5i3E9vZrDNjQbLi
WqSB/4z4PuQ41swjUSY2JnGireMJ/dw++n/LNVJBGIbABWQJ+GOHQPwlJ+iZp/W8
vP/Selwp2QIabV2ZcHEeyQPzOR+diOH96r+8d+bebS4PkyNOZpya+09w3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLwpb9FZjuAjZg0SEReKrB7Ic/5MB8GA1UdIwQY
MBaAFOaoq4qAeLs7V+Vv98C9TaY+6CyLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXFpcmlvQjR1enRYNVdfM3dMMU5wajdvTElzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8yMjhlMTYtZjgwOC00NDcxLWE5ODQt
MzY0ZWUyODU5ZjJjLzEvNXFpcmlvQjR1enRYNVdfM3dMMU5wajdvTElzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8yMjhlMTYtZjgwOC00NDcxLWE5ODQtMzY0ZWUyODU5ZjJj
LzEvNXFpcmlvQjR1enRYNVdfM3dMMU5wajdvTElzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJHuV5pGk
FoBjlKXcirNtto3ignAIhi/0R7IxmGQXvOBDare9eNmrkQAw6anPxOK6UXPGLl7g
iautAGQlQuiQFBE0+qDnSOdtpoSaQORDn3HClJoINP0C+GIWdowzT6eTIiOoWE5I
/DPcbgrxhsAwFEgV8ktgKWiVKQiU883UCyKmeLbP/j73vX4ElXF/MxRcraJiteve
XlmBNZU/LRp+IGcJaHJbcQHL9ZbaAaujTSqqn7xYBMXO3ldTF8WEX1jMY87UeFTa
yy4tKaUG0wKEPBxrjXTCzj2z3FHDQRHsOZc0Q6no39ujxotX3vjUB/Rw+qYWA/93
VeUI9PwMUO7SgQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:49 2025 by rpki-client