Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
File: 5XRVuKiwV21vlPfgFPazTVqmxNc.mft (raw, json)
Hash identifier: I/luF2wEy25N07/QdDZHp9o72yd07+pHsAjRDtv3rIk=
Subject key identifier: 66:0A:87:0F:B4:1D:68:C8:E5:30:4C:34:FE:E3:C9:A4:E6:E9:56:38
Authority key identifier: E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
Certificate issuer: /CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Certificate serial: 0194BD4EB4CD2E90328918B3EBB2DEFB1390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
Manifest number: E4
Signing time: Fri 31 Jan 2025 17:00:39 +0000
Manifest this update: Fri 31 Jan 2025 17:00:39 +0000
Manifest next update: Sat 01 Feb 2025 17:00:39 +0000
Files and hashes: 1: 5XRVuKiwV21vlPfgFPazTVqmxNc.crl (hash: 37houkOjPlzvcnpcbqewjGaRNwwzZ2L85Mb7lZFO8Pc=)
2: G1CrAOOUPvyOGO4Vql-2-rT1nVU.roa (hash: CDahFDyxeYD+jrtMUR5mOx6DNugSU2LZoNFW5kfO9s4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b4:cd:2e:90:32:89:18:b3:eb:b2:de:fb:13:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e57455b8a8b0576d6f94f7e014f6b34d5aa6c4d7
Validity
Not Before: Jan 31 17:00:39 2025 GMT
Not After : Feb 1 17:00:39 2025 GMT
Subject: CN=660a870fb41d68c8e5304c34fee3c9a4e6e95638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e2:55:67:6a:68:1e:0a:2c:ee:04:e9:6e:69:
f5:f9:4a:c5:46:72:a0:f9:c9:3b:ad:51:b2:0f:15:
22:04:6a:77:19:c2:0e:40:a7:e5:bf:bd:c5:1c:d1:
77:c2:8c:c1:cb:19:1a:ea:44:6a:47:58:36:f7:b5:
18:9c:3c:68:41:49:19:7a:6e:b7:e1:7b:a3:85:04:
7c:49:3f:76:ba:1d:cd:b4:2a:27:c2:53:b1:89:71:
0b:9b:11:ac:10:c9:2d:16:6b:85:35:70:8d:9b:26:
3b:e9:06:62:ee:c7:aa:fe:4f:4f:42:6e:e9:1d:47:
72:a0:78:16:cf:bd:d6:7a:1a:9a:fe:6e:ea:a5:b4:
23:5a:d9:76:28:c7:09:63:c5:dc:06:39:b5:c1:b1:
03:27:ae:71:aa:b6:1c:35:73:02:d0:69:b8:8f:d7:
f3:43:91:84:d3:63:3f:5f:9d:dd:03:3c:d5:f6:6d:
93:e2:ea:ae:bb:84:f8:e1:92:30:67:86:24:89:cb:
53:c5:2d:0a:f8:03:d9:79:33:ef:2b:b5:e3:06:d9:
69:5e:e0:67:5e:6e:3e:c7:88:4c:23:dd:d9:df:21:
0d:60:6f:8b:d3:b4:83:fe:3f:e7:a6:49:90:44:94:
6a:5b:8a:be:d9:57:f7:1f:c1:23:01:9b:c0:6b:6f:
bf:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0A:87:0F:B4:1D:68:C8:E5:30:4C:34:FE:E3:C9:A4:E6:E9:56:38
X509v3 Authority Key Identifier:
keyid:E5:74:55:B8:A8:B0:57:6D:6F:94:F7:E0:14:F6:B3:4D:5A:A6:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XRVuKiwV21vlPfgFPazTVqmxNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d498e3-0ea9-4314-9849-00233ae50b52/1/5XRVuKiwV21vlPfgFPazTVqmxNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:74:00:0c:7d:01:dc:96:9c:5e:9a:e3:97:c4:4a:37:e0:d2:
65:03:a9:1e:cf:b1:01:0d:77:d6:ad:f7:e7:bd:0d:52:e9:9a:
94:ca:a2:d8:b7:00:04:58:c3:a1:8f:54:09:1c:f5:81:fa:6b:
8b:ee:0c:f0:73:cd:f1:19:a9:60:0a:16:7e:71:66:6c:4a:1e:
00:90:86:3c:f5:dc:79:20:86:ee:c1:55:49:db:17:6b:ea:ee:
03:e0:fa:aa:78:a5:cb:99:a7:e0:90:fd:88:8c:e7:76:cc:08:
d1:75:d8:3b:39:b1:ef:56:27:8b:c2:d5:84:2a:10:54:2e:ef:
96:ca:9c:ca:d3:26:73:ff:64:69:7f:b4:62:e3:48:5c:14:93:
97:27:b1:9a:07:9e:76:25:9d:89:b9:6e:8b:6c:fa:a0:bc:57:
35:42:12:97:15:b8:60:69:f3:5b:76:86:12:e6:a8:85:c3:b8:
01:75:95:fe:03:8a:f5:22:eb:8e:a4:e9:32:8d:e2:ce:c4:fe:
3d:53:c4:80:27:7e:60:5b:ce:de:c0:6a:3b:92:09:e8:10:e3:
f5:a7:03:c5:22:85:dd:d4:4f:01:a0:98:97:5b:78:d4:fe:ca:
8f:c2:14:2d:1d:6d:8d:49:cc:8d:77:c7:40:46:c0:54:5e:fb:
9d:b8:da:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TrTNLpAyiRiz67Le+xOQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NzQ1NWI4YThiMDU3NmQ2Zjk0ZjdlMDE0ZjZiMzRkNWFh
NmM0ZDcwHhcNMjUwMTMxMTcwMDM5WhcNMjUwMjAxMTcwMDM5WjAzMTEwLwYDVQQD
Eyg2NjBhODcwZmI0MWQ2OGM4ZTUzMDRjMzRmZWUzYzlhNGU2ZTk1NjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuJVZ2poHgos7gTpbmn1+UrFRnKg
+ck7rVGyDxUiBGp3GcIOQKflv73FHNF3wozByxka6kRqR1g297UYnDxoQUkZem63
4XujhQR8ST92uh3NtConwlOxiXELmxGsEMktFmuFNXCNmyY76QZi7seq/k9PQm7p
HUdyoHgWz73Wehqa/m7qpbQjWtl2KMcJY8XcBjm1wbEDJ65xqrYcNXMC0Gm4j9fz
Q5GE02M/X53dAzzV9m2T4uquu4T44ZIwZ4YkictTxS0K+APZeTPvK7XjBtlpXuBn
Xm4+x4hMI93Z3yENYG+L07SD/j/npkmQRJRqW4q+2Vf3H8EjAZvAa2+/1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYKhw+0HWjI5TBMNP7jyaTm6VY4MB8GA1UdIwQY
MBaAFOV0VbiosFdtb5T34BT2s01apsTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVhSVnVLaXdWMjF2bFBmZ0ZQYXpUVnFteE5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kNDk4ZTMtMGVhOS00MzE0LTk4NDkt
MDAyMzNhZTUwYjUyLzEvNVhSVnVLaXdWMjF2bFBmZ0ZQYXpUVnFteE5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kNDk4ZTMtMGVhOS00MzE0LTk4NDktMDAyMzNhZTUwYjUy
LzEvNVhSVnVLaXdWMjF2bFBmZ0ZQYXpUVnFteE5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAnQADH0B
3JacXprjl8RKN+DSZQOpHs+xAQ131q33570NUumalMqi2LcABFjDoY9UCRz1gfpr
i+4M8HPN8RmpYAoWfnFmbEoeAJCGPPXceSCG7sFVSdsXa+ruA+D6qnily5mn4JD9
iIzndswI0XXYOzmx71Yni8LVhCoQVC7vlsqcytMmc/9kaX+0YuNIXBSTlyexmgee
diWdiblui2z6oLxXNUISlxW4YGnzW3aGEuaohcO4AXWV/gOK9SLrjqTpMo3izsT+
PVPEgCd+YFvO3sBqO5IJ6BDj9acDxSKF3dRPAaCYl1t41P7Kj8IULR1tjUnMjXfH
QEbAVF77nbjavQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:03:28 2025 by rpki-client