Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
File: CASs5pRvtwG7LEXjCsr-pm2sL3o.mft (raw, json)
Hash identifier: JHgoAwjmfg7AYKQ9Int5KKzA37vMJ9pgzPc6Ud9K1L4=
Subject key identifier: F6:1D:22:56:9C:77:C1:29:69:F6:A3:86:A2:7F:5C:E7:3F:91:D8:BF
Authority key identifier: 08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A
Certificate issuer: /CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
Certificate serial: 0194BCA9EC7BF9E0239B5777B7C230D6B0A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
Manifest number: 0526
Signing time: Fri 31 Jan 2025 14:00:40 +0000
Manifest this update: Fri 31 Jan 2025 14:00:40 +0000
Manifest next update: Sat 01 Feb 2025 14:00:40 +0000
Files and hashes: 1: CASs5pRvtwG7LEXjCsr-pm2sL3o.crl (hash: inQWzLlgzrqSAS0ov+kJFsuCM3rDPV6/tpM1chS/vxg=)
2: CepTD_sRHzQKM1km_XqGFUiFw_A.roa (hash: 6VmSpRvYGLL0kNu4j1w0e4FEukjB/A4DJqf8FlG66dI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ec:7b:f9:e0:23:9b:57:77:b7:c2:30:d6:b0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0804ace6946fb701bb2c45e30acafea66dac2f7a
Validity
Not Before: Jan 31 14:00:40 2025 GMT
Not After : Feb 1 14:00:40 2025 GMT
Subject: CN=f61d22569c77c12969f6a386a27f5ce73f91d8bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:53:7d:37:62:cb:1a:c2:9e:c9:76:84:0a:89:
49:0a:24:7a:f0:06:92:23:85:4f:87:56:d9:79:02:
5f:1a:d3:f5:b2:8b:d5:60:8b:3e:8c:9a:93:9f:45:
2a:54:3d:99:7f:38:3b:d3:d2:47:13:c1:ee:00:f2:
f4:6b:fa:94:ff:23:68:0e:fb:a6:fd:40:50:a9:29:
0c:b7:17:5f:46:fa:90:26:e3:ae:46:bc:9f:d0:71:
e9:43:f0:09:2a:2b:6c:78:cb:5a:f8:b0:c2:1a:76:
63:ad:72:23:a0:a9:84:fc:ec:a3:8e:87:41:62:10:
2e:ee:c7:e1:03:7b:3e:fe:f7:74:a1:29:2f:13:ac:
43:d6:dc:10:34:4c:0b:6a:56:38:9f:c9:57:41:15:
a0:b5:59:c1:cb:fa:c4:a8:23:b1:40:25:3a:6c:e3:
e9:33:a2:0f:4e:b4:47:f0:5d:20:a6:cb:d7:39:06:
9f:ac:25:c9:07:ef:53:7e:be:b6:d9:ce:76:64:36:
88:5d:bd:33:83:26:4b:04:76:99:55:a5:1f:3c:83:
aa:1a:59:da:7c:28:fb:2e:ae:58:ca:63:7f:85:e0:
e9:e5:af:b6:5c:3c:25:53:42:d0:20:5e:cd:cb:60:
a9:21:e2:24:1b:cf:6f:33:ac:c3:ad:d9:d9:81:02:
2e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1D:22:56:9C:77:C1:29:69:F6:A3:86:A2:7F:5C:E7:3F:91:D8:BF
X509v3 Authority Key Identifier:
keyid:08:04:AC:E6:94:6F:B7:01:BB:2C:45:E3:0A:CA:FE:A6:6D:AC:2F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CASs5pRvtwG7LEXjCsr-pm2sL3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5bcee0-512e-41f4-8d6b-95d16364dbb9/1/CASs5pRvtwG7LEXjCsr-pm2sL3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:f5:3e:6e:fd:24:46:1f:e5:d3:24:12:d6:56:ba:a5:bd:90:
84:87:c7:27:0c:eb:52:c8:71:39:7a:aa:96:74:59:64:98:9f:
75:58:ce:57:68:ab:dd:bd:4b:8f:81:84:2c:7a:3d:ff:75:cd:
12:f6:c0:ad:9f:42:dc:09:54:21:69:49:6c:77:c7:36:a1:c1:
3a:35:44:8d:3e:0d:43:b6:cf:16:f4:09:33:80:d1:3f:68:b9:
15:e7:d9:3e:43:00:fd:94:99:92:d8:34:7a:b9:1c:00:30:c0:
c0:ce:ab:a2:93:e9:95:89:74:99:50:5d:69:4d:c7:01:b8:e2:
3d:85:f4:30:47:29:78:a5:49:d0:81:a0:ff:e3:56:96:90:a9:
d8:a3:b5:2e:38:ae:ac:99:fa:17:99:86:5b:10:08:0f:54:41:
1d:b5:a1:63:cf:87:8c:0a:a0:f7:7b:94:b4:f7:d0:95:63:2e:
b9:81:fa:08:48:16:32:ac:01:cd:2e:f8:80:ec:e5:33:5f:4d:
ba:70:03:28:37:e8:99:76:eb:d3:62:dc:96:57:6d:eb:72:1e:
04:d9:4a:35:97:3d:7a:1b:8e:d9:79:5e:8d:6e:21:30:af:af:
00:62:16:15:ab:a7:f5:13:29:3b:80:b6:a9:c8:b2:26:e8:f4:
05:dd:ba:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qex7+eAjm1d3t8Iw1rClMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MDRhY2U2OTQ2ZmI3MDFiYjJjNDVlMzBhY2FmZWE2NmRh
YzJmN2EwHhcNMjUwMTMxMTQwMDQwWhcNMjUwMjAxMTQwMDQwWjAzMTEwLwYDVQQD
EyhmNjFkMjI1NjljNzdjMTI5NjlmNmEzODZhMjdmNWNlNzNmOTFkOGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1N9N2LLGsKeyXaEColJCiR68AaS
I4VPh1bZeQJfGtP1sovVYIs+jJqTn0UqVD2Zfzg709JHE8HuAPL0a/qU/yNoDvum
/UBQqSkMtxdfRvqQJuOuRryf0HHpQ/AJKitseMta+LDCGnZjrXIjoKmE/OyjjodB
YhAu7sfhA3s+/vd0oSkvE6xD1twQNEwLalY4n8lXQRWgtVnBy/rEqCOxQCU6bOPp
M6IPTrRH8F0gpsvXOQafrCXJB+9Tfr622c52ZDaIXb0zgyZLBHaZVaUfPIOqGlna
fCj7Lq5YymN/heDp5a+2XDwlU0LQIF7Ny2CpIeIkG89vM6zDrdnZgQIulQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYdIlacd8EpafajhqJ/XOc/kdi/MB8GA1UdIwQY
MBaAFAgErOaUb7cBuyxF4wrK/qZtrC96MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0FTczVwUnZ0d0c3TEVYakNzci1wbTJzTDNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81YmNlZTAtNTEyZS00MWY0LThkNmIt
OTVkMTYzNjRkYmI5LzEvQ0FTczVwUnZ0d0c3TEVYakNzci1wbTJzTDNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC81YmNlZTAtNTEyZS00MWY0LThkNmItOTVkMTYzNjRkYmI5
LzEvQ0FTczVwUnZ0d0c3TEVYakNzci1wbTJzTDNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApPU+bv0k
Rh/l0yQS1la6pb2QhIfHJwzrUshxOXqqlnRZZJifdVjOV2ir3b1Lj4GELHo9/3XN
EvbArZ9C3AlUIWlJbHfHNqHBOjVEjT4NQ7bPFvQJM4DRP2i5FefZPkMA/ZSZktg0
erkcADDAwM6ropPplYl0mVBdaU3HAbjiPYX0MEcpeKVJ0IGg/+NWlpCp2KO1Ljiu
rJn6F5mGWxAID1RBHbWhY8+HjAqg93uUtPfQlWMuuYH6CEgWMqwBzS74gOzlM19N
unADKDfomXbr02Lclldt63IeBNlKNZc9ehuO2XlejW4hMK+vAGIWFaun9RMpO4C2
qciyJuj0Bd263A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:07 2025 by rpki-client