Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
File: mSuGCVzlWNLpYYcopEIoonvpCY8.mft (raw, json)
Hash identifier: 7TNiTsw8taDN1BvSbpR0Qshput0KdYqUuW1VpqHyo6s=
Subject key identifier: 5B:7C:EA:D9:C3:C3:A0:F6:70:77:15:74:BD:61:1D:B1:5D:60:B3:BA
Authority key identifier: 99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
Certificate issuer: /CN=992b86095ce558d2e9618728a44228a27be9098f
Certificate serial: 0194BC72F3F9A6308436046CFD1E7AB2DBB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
Manifest number: 1452
Signing time: Fri 31 Jan 2025 13:00:37 +0000
Manifest this update: Fri 31 Jan 2025 13:00:37 +0000
Manifest next update: Sat 01 Feb 2025 13:00:37 +0000
Files and hashes: 1: BlYJMM4ls15zJ30iXM_Rv84I-d4.roa (hash: MRyw1DsxxSYF8y5F3ROkLuVWefJpMb00uWwfBxmnsGk=)
2: e2BcAV15shqdiU98OktC9_gXkUU.roa (hash: rZS4+9XjUiv9YzxM45CHUYZIhLrSaA9eZkuie33ePcg=)
3: mSuGCVzlWNLpYYcopEIoonvpCY8.crl (hash: gcAEntqRMzmJ3F4YAItO2L4T3608ZV5g3fvgfApXAkU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f3:f9:a6:30:84:36:04:6c:fd:1e:7a:b2:db:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992b86095ce558d2e9618728a44228a27be9098f
Validity
Not Before: Jan 31 13:00:37 2025 GMT
Not After : Feb 1 13:00:37 2025 GMT
Subject: CN=5b7cead9c3c3a0f670771574bd611db15d60b3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:04:ff:f4:de:e3:8e:13:5d:7f:b1:9e:b7:55:
64:0c:83:92:15:b3:37:99:30:7d:f9:95:d3:40:64:
38:8d:79:fa:5d:42:23:64:bc:6e:74:2d:5f:c9:db:
ec:57:1f:6e:a6:07:f5:c0:bc:3e:c4:c3:4b:22:bc:
20:74:b1:89:6b:66:09:05:c3:a3:2d:32:20:7c:89:
dc:f0:95:bd:c4:a6:1b:02:28:ec:38:dd:38:7e:b9:
d2:f0:c2:5c:2b:b8:e6:7d:5e:c6:73:11:41:34:1d:
c0:76:58:29:5f:92:de:7a:c6:3e:19:8e:f4:a0:14:
62:97:29:6a:5e:17:1e:79:54:a4:82:df:6a:f4:af:
51:72:6c:1e:c2:df:85:34:e1:a0:d6:15:ba:b5:88:
a1:5c:51:28:b9:48:68:0b:8b:1e:e8:af:59:4d:ce:
0f:64:d2:f2:e6:e9:0c:0b:ee:a7:d3:5a:39:34:e7:
4a:aa:82:91:bc:bc:ac:0c:1b:f1:36:e9:91:aa:02:
bb:8c:52:67:3a:bd:df:72:e1:6c:4b:95:86:97:15:
fc:63:78:2e:20:ad:4a:de:2d:3c:8a:b4:ec:ef:bc:
52:6d:e3:fb:79:fa:3c:c5:a3:19:e3:4a:6a:66:e7:
a8:6c:71:3f:56:a4:85:f0:cb:20:d8:e0:a0:a1:47:
7a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:7C:EA:D9:C3:C3:A0:F6:70:77:15:74:BD:61:1D:B1:5D:60:B3:BA
X509v3 Authority Key Identifier:
keyid:99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:14:e8:b9:9a:6c:f1:28:88:11:8c:ac:c9:7e:3b:74:93:71:
7e:85:6f:5d:a4:f5:d8:2c:f7:17:ee:0b:bf:b9:41:0d:7a:a6:
3a:5e:94:74:c6:ae:29:fc:71:b7:38:12:60:86:9c:cb:a2:d8:
c7:d6:ef:4f:51:e5:58:51:83:6a:ab:e1:fa:2d:7d:9e:4c:3c:
b0:09:7f:5a:ef:50:79:18:41:2d:44:44:ce:7e:79:f5:19:3e:
91:75:7a:11:57:1c:3b:db:68:ba:10:a9:da:cf:77:15:8e:03:
9a:b2:95:74:11:93:99:b4:80:a6:5d:0e:4d:16:e9:18:52:cc:
2a:8e:2b:d8:17:21:dc:be:2d:c5:54:c1:45:fe:b2:ba:2b:28:
80:d6:48:1f:7b:6d:30:22:99:5d:f2:82:72:15:e8:a7:e5:8e:
c2:65:42:70:92:61:98:d2:50:65:a5:c6:95:c7:b8:b3:ca:d8:
ce:77:8f:51:49:b0:3a:0f:6f:6e:ea:43:42:9d:c1:dd:a5:63:
da:b2:e0:a2:59:77:bf:ab:a2:82:33:2e:1a:9d:b0:a0:49:c2:
2b:4a:20:1d:64:c0:ea:6f:b9:2a:0f:34:1e:3c:25:6d:0b:3e:
1d:72:b2:a1:df:24:e6:ab:e0:02:97:39:26:ca:5b:17:77:94:
cd:dd:3e:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cvP5pjCENgRs/R56stuyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MmI4NjA5NWNlNTU4ZDJlOTYxODcyOGE0NDIyOGEyN2Jl
OTA5OGYwHhcNMjUwMTMxMTMwMDM3WhcNMjUwMjAxMTMwMDM3WjAzMTEwLwYDVQQD
Eyg1YjdjZWFkOWMzYzNhMGY2NzA3NzE1NzRiZDYxMWRiMTVkNjBiM2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQT/9N7jjhNdf7Get1VkDIOSFbM3
mTB9+ZXTQGQ4jXn6XUIjZLxudC1fydvsVx9upgf1wLw+xMNLIrwgdLGJa2YJBcOj
LTIgfInc8JW9xKYbAijsON04frnS8MJcK7jmfV7GcxFBNB3AdlgpX5LeesY+GY70
oBRilylqXhceeVSkgt9q9K9Rcmwewt+FNOGg1hW6tYihXFEouUhoC4se6K9ZTc4P
ZNLy5ukMC+6n01o5NOdKqoKRvLysDBvxNumRqgK7jFJnOr3fcuFsS5WGlxX8Y3gu
IK1K3i08irTs77xSbeP7efo8xaMZ40pqZueobHE/VqSF8Msg2OCgoUd6zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFt86tnDw6D2cHcVdL1hHbFdYLO6MB8GA1UdIwQY
MBaAFJkrhglc5VjS6WGHKKRCKKJ76QmPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVN1R0NWemxXTkxwWVljb3BFSW9vbnZwQ1k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS84ZWE5YjktM2I2ZS00ZmRmLWI1ZDEt
ZjA0ZmRjYzA5ZTUxLzEvbVN1R0NWemxXTkxwWVljb3BFSW9vbnZwQ1k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS84ZWE5YjktM2I2ZS00ZmRmLWI1ZDEtZjA0ZmRjYzA5ZTUx
LzEvbVN1R0NWemxXTkxwWVljb3BFSW9vbnZwQ1k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArhTouZps
8SiIEYysyX47dJNxfoVvXaT12Cz3F+4Lv7lBDXqmOl6UdMauKfxxtzgSYIacy6LY
x9bvT1HlWFGDaqvh+i19nkw8sAl/Wu9QeRhBLUREzn559Rk+kXV6EVccO9touhCp
2s93FY4DmrKVdBGTmbSApl0OTRbpGFLMKo4r2Bch3L4txVTBRf6yuisogNZIH3tt
MCKZXfKCchXop+WOwmVCcJJhmNJQZaXGlce4s8rYznePUUmwOg9vbupDQp3B3aVj
2rLgoll3v6uigjMuGp2woEnCK0ogHWTA6m+5Kg80HjwlbQs+HXKyod8k5qvgApc5
JspbF3eUzd0+UA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 19:53:48 2025 by rpki-client