Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
File: 5BqMQuzom1-_whDce1VMcupPNUQ.mft (raw, json)
Hash identifier: +ETvs23fjhGSsN1J/oH1QUetpPt7gNhXYvqt1Elz7YM=
Subject key identifier: 64:EA:BE:AF:5E:F8:9A:14:7B:A5:4E:CD:E2:F4:C1:F0:22:0A:74:7A
Authority key identifier: E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
Certificate issuer: /CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Certificate serial: 0194BC3C568935C592031E587F26D6BC1A6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:58 +0000
Manifest this update: Fri 31 Jan 2025 12:00:58 +0000
Manifest next update: Sat 01 Feb 2025 12:00:58 +0000
Files and hashes: 1: 5BqMQuzom1-_whDce1VMcupPNUQ.crl (hash: Xff/IPM6AelROyc0lvYTIUbgkG8OC7ZFQxfu7n6xrPs=)
2: HK-o-7NfDvPjOf99JzJL3ciySc8.roa (hash: DfwAR936JyRgw/jNJGOSmvyuLlvSXJeaVAPRyL2njSw=)
3: kgwU11d3qe3DvMPd4KzghnoM4QE.roa (hash: 0MoyLoDcxfk7RXOS/O1cJn5qfN2NIOBdRQnljfYhp5I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:56:89:35:c5:92:03:1e:58:7f:26:d6:bc:1a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Validity
Not Before: Jan 31 12:00:58 2025 GMT
Not After : Feb 1 12:00:58 2025 GMT
Subject: CN=64eabeaf5ef89a147ba54ecde2f4c1f0220a747a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:38:7f:b3:95:f4:5c:d5:92:a2:ed:d1:b4:61:
fd:8b:51:65:a6:4d:4f:9c:46:95:6a:dc:a5:85:8b:
3a:3e:f6:94:ea:1d:f7:d7:9d:90:1a:84:63:b6:ab:
78:f6:41:92:a7:cc:90:bb:6a:69:2d:cd:83:61:b5:
63:94:c7:05:5a:f4:98:cb:92:e8:c7:87:b1:90:fd:
14:79:26:80:3b:6a:46:be:69:b0:11:1f:61:5b:a0:
db:fb:c1:72:71:b6:a0:bc:2e:84:3f:e6:a7:f6:21:
9b:b5:25:ee:c4:4c:a3:7f:ee:e5:1f:50:be:ff:94:
ba:20:7c:99:5c:1e:21:c5:80:21:25:24:d1:c3:92:
15:1c:c2:59:b8:a0:98:ef:12:6e:9c:4c:55:22:1d:
63:ed:b2:92:bb:48:16:c5:75:04:33:66:bc:c6:b6:
b5:b2:0e:10:5d:4e:44:3d:0a:01:dd:9a:6c:48:74:
5e:43:9c:95:9c:78:d3:6c:86:46:9a:d2:7e:5b:c8:
9e:fc:c4:b9:bd:78:b9:a2:3a:22:d4:75:5c:a5:d7:
18:58:d1:52:1e:ee:2c:8d:3b:9b:20:67:c5:18:c3:
a0:a7:0c:c6:dc:00:05:8e:fb:c9:9d:9e:6e:35:a5:
38:b3:b5:97:6f:36:e8:e9:56:66:47:ed:77:2f:b2:
7d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:EA:BE:AF:5E:F8:9A:14:7B:A5:4E:CD:E2:F4:C1:F0:22:0A:74:7A
X509v3 Authority Key Identifier:
keyid:E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:01:30:28:2b:01:62:58:c2:e7:bf:44:4f:5f:1b:9e:11:94:
67:9d:42:98:ea:77:61:de:e5:b7:d4:b6:bc:2b:f7:63:92:d1:
70:fd:6a:fc:b9:b2:e5:89:b6:41:80:d8:4d:91:55:d7:fd:59:
76:f8:ba:e2:f6:4a:4f:e1:c4:74:5f:b9:10:f7:a3:1c:c8:d4:
a3:d9:3b:3e:bb:b8:7d:98:ff:17:56:82:05:d5:d9:d8:61:79:
13:d1:5b:f6:ab:c6:d0:38:80:a8:d4:e1:1f:66:df:9a:1c:59:
8c:2d:d5:e3:56:29:7f:2e:02:a7:9f:b0:51:56:5b:d7:81:a6:
ea:e5:8a:e3:14:27:7c:50:40:8f:8b:ff:98:b6:a5:94:db:dd:
b5:2f:b3:e8:d2:72:df:c9:eb:ea:05:bf:48:f8:95:c3:8d:08:
7d:59:54:55:ea:e7:38:de:79:d9:6c:fc:39:24:f0:59:7b:15:
ad:77:0b:4c:f6:76:68:9b:cd:95:eb:49:4e:c3:5b:99:71:9e:
f4:de:7c:6c:bd:2d:54:f7:e9:a0:9c:3c:92:93:6e:f0:61:c6:
ca:e4:cd:86:65:0a:e6:bb:8a:dc:17:2e:28:3b:35:73:1e:d0:
e4:0d:1f:38:11:71:80:a9:79:51:3a:2d:4f:12:50:10:0d:96:
91:02:6e:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PFaJNcWSAx5YfybWvBptMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0MWE4YzQyZWNlODliNWZiZmMyMTBkYzdiNTU0YzcyZWE0
ZjM1NDQwHhcNMjUwMTMxMTIwMDU4WhcNMjUwMjAxMTIwMDU4WjAzMTEwLwYDVQQD
Eyg2NGVhYmVhZjVlZjg5YTE0N2JhNTRlY2RlMmY0YzFmMDIyMGE3NDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzh/s5X0XNWSou3RtGH9i1Flpk1P
nEaVatylhYs6PvaU6h33152QGoRjtqt49kGSp8yQu2ppLc2DYbVjlMcFWvSYy5Lo
x4exkP0UeSaAO2pGvmmwER9hW6Db+8FycbagvC6EP+an9iGbtSXuxEyjf+7lH1C+
/5S6IHyZXB4hxYAhJSTRw5IVHMJZuKCY7xJunExVIh1j7bKSu0gWxXUEM2a8xra1
sg4QXU5EPQoB3ZpsSHReQ5yVnHjTbIZGmtJ+W8ie/MS5vXi5ojoi1HVcpdcYWNFS
Hu4sjTubIGfFGMOgpwzG3AAFjvvJnZ5uNaU4s7WXbzbo6VZmR+13L7J9+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGTqvq9e+JoUe6VOzeL0wfAiCnR6MB8GA1UdIwQY
MBaAFOQajELs6Jtfv8IQ3HtVTHLqTzVEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUJxTVF1em9tMS1fd2hEY2UxVk1jdXBQTlVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kMTljMmQtMzhjMy00NTI2LWE3Y2Yt
MWQ2NjZjNDIyYzZhLzEvNUJxTVF1em9tMS1fd2hEY2UxVk1jdXBQTlVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9kMTljMmQtMzhjMy00NTI2LWE3Y2YtMWQ2NjZjNDIyYzZh
LzEvNUJxTVF1em9tMS1fd2hEY2UxVk1jdXBQTlVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASwEwKCsB
YljC579ET18bnhGUZ51CmOp3Yd7lt9S2vCv3Y5LRcP1q/Lmy5Ym2QYDYTZFV1/1Z
dvi64vZKT+HEdF+5EPejHMjUo9k7Pru4fZj/F1aCBdXZ2GF5E9Fb9qvG0DiAqNTh
H2bfmhxZjC3V41Ypfy4Cp5+wUVZb14Gm6uWK4xQnfFBAj4v/mLallNvdtS+z6NJy
38nr6gW/SPiVw40IfVlUVernON552Wz8OSTwWXsVrXcLTPZ2aJvNletJTsNbmXGe
9N58bL0tVPfpoJw8kpNu8GHGyuTNhmUK5ruK3BcuKDs1cx7Q5A0fOBFxgKl5UTot
TxJQEA2WkQJujw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:50:35 2025 by rpki-client