Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
File: X5ZnbPOY05lMTdSilllGFN_1hsc.mft (raw, json)
Hash identifier: IrmrlIwM0QKBtyrB9zfNURTkC7Eu9ekms5tYeznV7dw=
Subject key identifier: F0:98:B4:11:C0:83:9F:A0:11:ED:03:B5:B0:CC:30:27:21:E9:28:39
Authority key identifier: 5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7
Certificate issuer: /CN=5f96676cf398d3994c4dd4a296594614dff586c7
Certificate serial: 0194BD17756B5A256635E4784719CAF3EC51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
Manifest number: 1442
Signing time: Fri 31 Jan 2025 16:00:18 +0000
Manifest this update: Fri 31 Jan 2025 16:00:18 +0000
Manifest next update: Sat 01 Feb 2025 16:00:18 +0000
Files and hashes: 1: 2zkARhYQi5MZVSVViedBzAUUfQU.roa (hash: DjES1xG44afB1DWsZff60m/UWnCi+Z0rElpzn4HCOqg=)
2: X5ZnbPOY05lMTdSilllGFN_1hsc.crl (hash: z9sHivhltphmwJG3qicDb+RRuP5cDy+0VEAESbRMod0=)
3: XyWUYm4k4aoyZu4exVkzUEY6NsM.roa (hash: nfbYF1NSykMyHcBytLNKjU++mQtuxfs2vY7BM12cSnY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:75:6b:5a:25:66:35:e4:78:47:19:ca:f3:ec:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f96676cf398d3994c4dd4a296594614dff586c7
Validity
Not Before: Jan 31 16:00:18 2025 GMT
Not After : Feb 1 16:00:18 2025 GMT
Subject: CN=f098b411c0839fa011ed03b5b0cc302721e92839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e8:3c:d5:8d:61:69:03:ec:31:6b:c7:92:5c:
e0:cd:23:b3:2e:9d:67:b6:26:09:4e:ab:23:56:5d:
1b:cf:f6:91:ae:91:87:5b:23:d4:7b:da:81:ba:c8:
8e:70:a2:20:97:68:fc:7b:84:85:2e:af:b3:a6:e4:
58:9e:48:dd:95:36:6f:b7:4f:30:23:37:14:d0:4b:
2a:32:36:bc:6b:2b:cc:2e:92:ac:09:d3:9f:af:55:
88:d7:fb:dc:9c:f2:53:ad:c7:5f:cd:ba:19:f1:f9:
36:1f:88:8d:84:fd:c5:58:1f:0e:d7:f0:6c:60:f5:
a5:8a:0e:81:45:4b:91:1a:34:41:ab:99:1e:ee:01:
bd:5e:63:09:96:20:3e:90:21:f2:1c:10:3d:2a:45:
2a:2a:7f:c9:dc:f0:7d:ae:cc:88:50:19:20:1d:22:
69:7b:52:12:a2:5c:6c:2b:28:73:d0:50:43:76:8e:
0c:b7:f6:b6:d9:29:94:60:0f:63:56:9f:84:5b:6a:
26:99:c1:0d:58:5b:25:c3:86:33:4f:72:79:30:c5:
13:56:5e:35:11:06:b4:b3:e3:3a:46:54:f7:5d:54:
da:d8:9f:fb:2d:58:b3:01:d1:ae:3b:5a:b0:db:bb:
12:2f:40:0f:cb:c1:82:89:19:a3:20:d0:cf:20:73:
21:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:98:B4:11:C0:83:9F:A0:11:ED:03:B5:B0:CC:30:27:21:E9:28:39
X509v3 Authority Key Identifier:
keyid:5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e6:cc:c3:05:e5:ca:c8:0a:10:5d:19:8e:1f:9d:76:6c:e4:
9c:7f:72:23:48:e0:73:a9:e7:1b:c5:4a:20:bd:fc:9d:72:45:
93:c3:ab:36:1e:d8:26:66:32:24:d4:e5:61:af:98:99:0c:0b:
0e:e7:87:8f:96:cc:4d:15:21:31:39:11:3d:58:c8:04:60:c7:
45:4b:76:df:b5:5e:eb:6d:ab:20:39:de:44:aa:79:c2:07:e5:
a7:2a:56:7c:c2:14:ce:34:85:67:5a:10:cd:b5:05:a7:aa:de:
0c:bb:34:37:ed:00:fc:74:3b:ef:62:35:1b:ae:78:7a:51:12:
52:ce:7f:2e:95:32:bc:85:8a:e0:ab:31:a0:75:87:22:d6:17:
1a:49:a0:c3:81:d3:d5:d2:ff:3d:c8:a5:25:ba:96:bb:f1:35:
22:9c:d5:65:78:c6:89:7c:4b:d9:bb:fa:fb:85:d1:54:c9:b0:
33:15:e1:66:2a:63:33:a6:6f:86:22:3c:74:82:db:63:04:f6:
5c:55:1f:c0:7a:07:de:f6:dd:00:27:03:8c:4b:2b:1f:eb:5b:
ed:33:36:e2:82:71:10:98:91:27:d3:39:87:b2:96:f9:83:7f:
71:ec:30:35:fc:31:80:60:6f:aa:01:f6:e1:7c:e0:49:d2:f6:
bf:64:b4:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F3VrWiVmNeR4RxnK8+xRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmOTY2NzZjZjM5OGQzOTk0YzRkZDRhMjk2NTk0NjE0ZGZm
NTg2YzcwHhcNMjUwMTMxMTYwMDE4WhcNMjUwMjAxMTYwMDE4WjAzMTEwLwYDVQQD
EyhmMDk4YjQxMWMwODM5ZmEwMTFlZDAzYjViMGNjMzAyNzIxZTkyODM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ug81Y1haQPsMWvHklzgzSOzLp1n
tiYJTqsjVl0bz/aRrpGHWyPUe9qBusiOcKIgl2j8e4SFLq+zpuRYnkjdlTZvt08w
IzcU0EsqMja8ayvMLpKsCdOfr1WI1/vcnPJTrcdfzboZ8fk2H4iNhP3FWB8O1/Bs
YPWlig6BRUuRGjRBq5ke7gG9XmMJliA+kCHyHBA9KkUqKn/J3PB9rsyIUBkgHSJp
e1ISolxsKyhz0FBDdo4Mt/a22SmUYA9jVp+EW2ommcENWFslw4YzT3J5MMUTVl41
EQa0s+M6RlT3XVTa2J/7LVizAdGuO1qw27sSL0APy8GCiRmjINDPIHMhsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPCYtBHAg5+gEe0DtbDMMCch6Sg5MB8GA1UdIwQY
MBaAFF+WZ2zzmNOZTE3UopZZRhTf9YbHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDVabmJQT1kwNWxNVGRTaWxsbEdGTl8xaHNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC82YTY4MDUtNWNlMC00MTI4LWEwNGMt
ZjYyZjM1YWY0MzcxLzEvWDVabmJQT1kwNWxNVGRTaWxsbEdGTl8xaHNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC82YTY4MDUtNWNlMC00MTI4LWEwNGMtZjYyZjM1YWY0Mzcx
LzEvWDVabmJQT1kwNWxNVGRTaWxsbEdGTl8xaHNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPubMwwXl
ysgKEF0Zjh+ddmzknH9yI0jgc6nnG8VKIL38nXJFk8OrNh7YJmYyJNTlYa+YmQwL
DueHj5bMTRUhMTkRPVjIBGDHRUt237Ve622rIDneRKp5wgflpypWfMIUzjSFZ1oQ
zbUFp6reDLs0N+0A/HQ772I1G654elESUs5/LpUyvIWK4KsxoHWHItYXGkmgw4HT
1dL/PcilJbqWu/E1IpzVZXjGiXxL2bv6+4XRVMmwMxXhZipjM6ZvhiI8dILbYwT2
XFUfwHoH3vbdACcDjEsrH+tb7TM24oJxEJiRJ9M5h7KW+YN/cewwNfwxgGBvqgH2
4XzgSdL2v2S0qA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 14:31:24 2025 by rpki-client