Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.mft
File: 7VSy51k1UxJ457rRV8SMiuxD7ug.mft (raw, json)
Hash identifier: bYIxzBdlQ50c/SK1ZKWXWSU7lG4GQbSRrTMo8QWlvnQ=
Subject key identifier: B5:07:0A:FE:1B:B5:3A:9E:57:3A:0B:CD:3D:0C:3B:9B:86:92:5F:8E
Authority key identifier: ED:54:B2:E7:59:35:53:12:78:E7:BA:D1:57:C4:8C:8A:EC:43:EE:E8
Certificate issuer: /CN=ed54b2e75935531278e7bad157c48c8aec43eee8
Certificate serial: 0194BBCDB565DF30163CA403A4896266239E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VSy51k1UxJ457rRV8SMiuxD7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.mft
Manifest number: 040A
Signing time: Fri 31 Jan 2025 10:00:08 +0000
Manifest this update: Fri 31 Jan 2025 10:00:08 +0000
Manifest next update: Sat 01 Feb 2025 10:00:08 +0000
Files and hashes: 1: 7VSy51k1UxJ457rRV8SMiuxD7ug.crl (hash: C+G5negMLSBZkG30Pgk2zPq+z9bUx9LH4CNpiQgLZ90=)
2: lvckIph_fXtXurl5ym_WZRsaXmo.roa (hash: 5C1YRHd0ILljxfVn9Q8Mwd3r0vdxXZvngPftxEnCVwI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b5:65:df:30:16:3c:a4:03:a4:89:62:66:23:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed54b2e75935531278e7bad157c48c8aec43eee8
Validity
Not Before: Jan 31 10:00:08 2025 GMT
Not After : Feb 1 10:00:08 2025 GMT
Subject: CN=b5070afe1bb53a9e573a0bcd3d0c3b9b86925f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c8:ab:0d:f2:2c:a0:da:9b:7e:04:c9:2f:3a:
b2:a1:92:99:cd:47:07:b2:fd:1d:db:18:2b:2e:7a:
b1:3f:b6:0a:50:88:8f:71:2f:f1:5a:f2:d2:42:ed:
1e:81:79:94:db:53:2e:71:55:90:bf:59:c6:ad:03:
31:37:2d:50:db:de:3f:b7:31:dd:95:ee:cc:a3:da:
6d:7a:1c:8c:e3:56:92:60:54:76:03:53:34:43:8c:
10:2c:9f:e2:a1:62:27:f3:bd:e0:06:ba:b1:5e:f6:
ac:f7:23:5f:5e:9c:f4:6a:7e:4c:8a:fb:d9:58:f7:
f8:84:bb:ea:fb:a8:47:5f:00:e9:12:38:7b:57:34:
75:fe:09:e3:cb:ab:0d:9c:ec:e5:b3:c0:ca:4c:9c:
09:ea:fc:59:f8:9f:3a:f0:0e:ea:7a:fe:72:2a:23:
b4:66:97:b8:ba:88:88:b6:f5:be:b2:3e:ef:c4:1c:
52:24:75:80:e6:98:41:df:11:14:66:73:f0:14:b4:
6b:40:cd:1b:c6:22:73:c5:b6:b5:56:b8:d6:fd:23:
c4:96:4b:a4:2d:e2:bf:53:f2:81:3d:90:7b:35:23:
0b:07:9d:d3:3d:ab:01:63:be:c6:41:22:ec:0a:3c:
15:3f:46:73:fc:ef:04:03:5a:f3:e5:91:06:1f:ac:
80:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:07:0A:FE:1B:B5:3A:9E:57:3A:0B:CD:3D:0C:3B:9B:86:92:5F:8E
X509v3 Authority Key Identifier:
keyid:ED:54:B2:E7:59:35:53:12:78:E7:BA:D1:57:C4:8C:8A:EC:43:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VSy51k1UxJ457rRV8SMiuxD7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ed:20:20:7a:38:6d:31:6c:20:38:b9:e7:59:82:22:3d:7f:
54:83:3a:e5:5d:02:9b:a0:9e:c4:c9:50:32:22:cb:96:21:21:
e6:2c:d6:06:71:3f:25:4d:1e:1f:59:0e:2a:61:27:6a:55:c4:
4e:ab:8c:e4:14:ba:57:3f:a9:34:82:69:98:49:aa:f4:3c:05:
e7:56:88:aa:19:d4:43:44:72:b1:24:9b:be:3b:71:6f:5b:6f:
d1:79:c9:79:d1:a4:6b:98:f2:26:4c:2a:31:a8:38:57:22:b8:
d8:36:5d:05:28:81:61:9d:56:8d:98:8a:e6:12:0d:4e:9a:52:
d0:90:44:4f:4d:f1:a5:b0:30:b2:83:93:8e:87:89:59:b6:d3:
c2:53:48:bb:ca:25:6d:53:3c:3d:d3:6e:bc:ea:51:ba:70:8d:
b3:50:1e:ea:51:b2:67:98:ce:fd:07:58:e3:ff:cf:ad:da:50:
b8:09:90:ab:db:c6:6c:3d:ca:22:2c:09:05:a1:a6:2f:9e:96:
3c:34:8a:36:d1:8d:1f:70:e2:79:6a:bc:76:c6:2f:29:fc:85:
58:b7:e9:a5:ed:4f:db:cd:75:2a:10:bd:2b:37:e0:7b:1d:70:
27:b8:ad:cd:1f:4e:cc:db:b5:00:bb:da:2d:ba:e3:2b:9f:ad:
2d:d1:13:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zbVl3zAWPKQDpIliZiOeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNTRiMmU3NTkzNTUzMTI3OGU3YmFkMTU3YzQ4YzhhZWM0
M2VlZTgwHhcNMjUwMTMxMTAwMDA4WhcNMjUwMjAxMTAwMDA4WjAzMTEwLwYDVQQD
EyhiNTA3MGFmZTFiYjUzYTllNTczYTBiY2QzZDBjM2I5Yjg2OTI1ZjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcirDfIsoNqbfgTJLzqyoZKZzUcH
sv0d2xgrLnqxP7YKUIiPcS/xWvLSQu0egXmU21MucVWQv1nGrQMxNy1Q294/tzHd
le7Mo9ptehyM41aSYFR2A1M0Q4wQLJ/ioWIn873gBrqxXvas9yNfXpz0an5MivvZ
WPf4hLvq+6hHXwDpEjh7VzR1/gnjy6sNnOzls8DKTJwJ6vxZ+J868A7qev5yKiO0
Zpe4uoiItvW+sj7vxBxSJHWA5phB3xEUZnPwFLRrQM0bxiJzxba1VrjW/SPElkuk
LeK/U/KBPZB7NSMLB53TPasBY77GQSLsCjwVP0Zz/O8EA1rz5ZEGH6yABQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLUHCv4btTqeVzoLzT0MO5uGkl+OMB8GA1UdIwQY
MBaAFO1UsudZNVMSeOe60VfEjIrsQ+7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1ZTeTUxazFVeEo0NTdyUlY4U01pdXhEN3VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9mZWUwOTYtMzJiNy00ZjQ4LTg1NTAt
MTA0NTU3MjU3ZmI4LzEvN1ZTeTUxazFVeEo0NTdyUlY4U01pdXhEN3VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9mZWUwOTYtMzJiNy00ZjQ4LTg1NTAtMTA0NTU3MjU3ZmI4
LzEvN1ZTeTUxazFVeEo0NTdyUlY4U01pdXhEN3VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANO0gIHo4
bTFsIDi551mCIj1/VIM65V0Cm6CexMlQMiLLliEh5izWBnE/JU0eH1kOKmEnalXE
TquM5BS6Vz+pNIJpmEmq9DwF51aIqhnUQ0RysSSbvjtxb1tv0XnJedGka5jyJkwq
Mag4VyK42DZdBSiBYZ1WjZiK5hINTppS0JBET03xpbAwsoOTjoeJWbbTwlNIu8ol
bVM8PdNuvOpRunCNs1Ae6lGyZ5jO/QdY4//PrdpQuAmQq9vGbD3KIiwJBaGmL56W
PDSKNtGNH3DieWq8dsYvKfyFWLfppe1P2811KhC9Kzfgex1wJ7itzR9OzNu1ALva
LbrjK5+tLdETtA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:04:19 2025 by rpki-client