Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
File: 5H78nMPZxL0porvBVVH4LyXPEbo.mft (raw, json)
Hash identifier: gutv0kiqU8t/zClPLvUGjrgo1+Kgb7EuAtVDycDC+V0=
Subject key identifier: BE:38:F9:2B:01:28:24:DA:E7:34:8C:B4:AA:9B:A6:DC:85:29:FC:D6
Authority key identifier: E4:7E:FC:9C:C3:D9:C4:BD:29:A2:BB:C1:55:51:F8:2F:25:CF:11:BA
Certificate issuer: /CN=e47efc9cc3d9c4bd29a2bbc15551f82f25cf11ba
Certificate serial: 0194BCAA486FF6A9D5E51207DBC81E144E0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
Manifest number: 0BDD
Signing time: Fri 31 Jan 2025 14:01:03 +0000
Manifest this update: Fri 31 Jan 2025 14:01:03 +0000
Manifest next update: Sat 01 Feb 2025 14:01:03 +0000
Files and hashes: 1: 5H78nMPZxL0porvBVVH4LyXPEbo.crl (hash: ZLDv+plb2E6Mnu2bwI9GZ7EHpsSzVaZwWgVsq8WUscw=)
2: SOdbfA4k2rHns_9FeEf2o6kdRPA.roa (hash: UCxkRGVqhqrA5LNMsKBYYs+r3jtWXwOD0Dbnu0MtoW4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:48:6f:f6:a9:d5:e5:12:07:db:c8:1e:14:4e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47efc9cc3d9c4bd29a2bbc15551f82f25cf11ba
Validity
Not Before: Jan 31 14:01:03 2025 GMT
Not After : Feb 1 14:01:03 2025 GMT
Subject: CN=be38f92b012824dae7348cb4aa9ba6dc8529fcd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9a:e1:1c:75:98:a9:2b:2b:93:21:6d:9d:f4:
fe:0a:c4:fb:11:88:78:bd:23:12:b3:c5:fa:83:e1:
88:0f:5c:e5:5d:40:14:13:b0:82:46:69:a5:05:cd:
a3:f2:e7:22:79:cd:8c:22:a3:89:4d:fa:03:66:b7:
c9:09:f3:94:17:11:6e:a6:93:a9:e2:ba:3f:cf:fc:
dc:7a:ed:7f:56:ea:a8:b4:68:81:6b:5d:81:12:df:
be:63:21:6e:54:f7:2d:0d:a6:81:8b:b5:66:cd:c9:
66:89:76:7f:8a:29:4d:50:cb:7f:53:30:1a:79:43:
d1:5c:d9:d1:7e:cd:4c:39:e6:ed:f1:0a:a3:7c:85:
4a:0b:29:04:06:28:ad:d8:92:c6:1b:a2:88:64:c6:
8a:5c:65:fd:1b:e1:aa:46:78:1a:7d:8e:b5:32:1d:
d0:e8:2a:df:c9:15:6c:11:64:84:0f:c9:b2:77:dc:
28:9a:bc:a5:13:e9:bb:45:a0:0f:77:77:4d:fd:af:
9e:59:f3:1c:25:f7:87:9d:76:a7:74:23:b7:88:fe:
99:8e:e8:fe:37:d0:c2:b5:a7:16:e5:8c:e0:2b:1d:
15:60:91:4c:84:fb:99:81:d8:94:f2:a4:b0:89:66:
5b:6e:9e:0e:fd:b6:1a:ff:49:d5:56:89:10:ca:18:
88:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:38:F9:2B:01:28:24:DA:E7:34:8C:B4:AA:9B:A6:DC:85:29:FC:D6
X509v3 Authority Key Identifier:
keyid:E4:7E:FC:9C:C3:D9:C4:BD:29:A2:BB:C1:55:51:F8:2F:25:CF:11:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:dd:49:58:73:41:d4:6e:3d:39:ac:35:41:83:f7:8a:f1:98:
fc:53:2d:2c:8b:55:dd:b4:3d:b9:c0:ae:d4:2e:45:ae:ca:d5:
82:57:9e:90:42:2d:52:42:2b:86:70:c1:49:02:54:51:65:9e:
d9:a3:d6:99:fc:b8:ca:1f:62:ec:dc:f6:e4:19:75:2c:8f:a0:
e1:36:df:a4:a6:fa:90:81:7d:ce:5a:83:ba:8b:ed:42:51:68:
14:03:a9:7f:98:80:b4:91:6b:8f:8d:75:a7:cd:d7:96:64:1d:
e8:9e:d8:f5:dd:fa:0c:86:18:e0:2a:55:24:ae:b2:80:d2:b7:
61:18:f6:a9:2e:63:fb:fd:f5:c7:e7:7c:d3:46:a7:42:2a:c8:
72:7c:e8:0f:dc:6c:89:69:5b:ea:e2:09:55:e6:b1:9a:8c:70:
61:8d:af:63:df:94:4b:07:b6:d7:85:2f:da:59:b9:54:36:2c:
89:99:a1:03:c4:d9:5d:16:f8:90:cc:8c:bc:b8:68:8d:46:77:
a6:13:0d:da:57:4f:42:a5:f3:0c:a1:7c:c6:ea:19:be:0d:f0:
e7:14:19:16:9e:5d:6c:33:13:2b:3b:67:98:ba:7b:dd:79:3e:
c4:6c:26:9c:74:2f:25:a2:3f:35:80:0c:9f:aa:6b:ed:8f:51:
a4:3f:aa:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qkhv9qnV5RIH28geFE4OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0N2VmYzljYzNkOWM0YmQyOWEyYmJjMTU1NTFmODJmMjVj
ZjExYmEwHhcNMjUwMTMxMTQwMTAzWhcNMjUwMjAxMTQwMTAzWjAzMTEwLwYDVQQD
EyhiZTM4ZjkyYjAxMjgyNGRhZTczNDhjYjRhYTliYTZkYzg1MjlmY2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJrhHHWYqSsrkyFtnfT+CsT7EYh4
vSMSs8X6g+GID1zlXUAUE7CCRmmlBc2j8uciec2MIqOJTfoDZrfJCfOUFxFuppOp
4ro/z/zceu1/VuqotGiBa12BEt++YyFuVPctDaaBi7VmzclmiXZ/iilNUMt/UzAa
eUPRXNnRfs1MOebt8QqjfIVKCykEBiit2JLGG6KIZMaKXGX9G+GqRngafY61Mh3Q
6CrfyRVsEWSED8myd9womrylE+m7RaAPd3dN/a+eWfMcJfeHnXandCO3iP6Zjuj+
N9DCtacW5YzgKx0VYJFMhPuZgdiU8qSwiWZbbp4O/bYa/0nVVokQyhiIgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL44+SsBKCTa5zSMtKqbptyFKfzWMB8GA1UdIwQY
MBaAFOR+/JzD2cS9KaK7wVVR+C8lzxG6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUg3OG5NUFp4TDBwb3J2QlZWSDRMeVhQRWJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8yNDgxMzMtODY3MC00MTY3LWExOTUt
NmUyZjU4OGMwYzdlLzEvNUg3OG5NUFp4TDBwb3J2QlZWSDRMeVhQRWJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8yNDgxMzMtODY3MC00MTY3LWExOTUtNmUyZjU4OGMwYzdl
LzEvNUg3OG5NUFp4TDBwb3J2QlZWSDRMeVhQRWJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApt1JWHNB
1G49Oaw1QYP3ivGY/FMtLItV3bQ9ucCu1C5FrsrVgleekEItUkIrhnDBSQJUUWWe
2aPWmfy4yh9i7Nz25Bl1LI+g4TbfpKb6kIF9zlqDuovtQlFoFAOpf5iAtJFrj411
p83XlmQd6J7Y9d36DIYY4CpVJK6ygNK3YRj2qS5j+/31x+d800anQirIcnzoD9xs
iWlb6uIJVeaxmoxwYY2vY9+USwe214Uv2lm5VDYsiZmhA8TZXRb4kMyMvLhojUZ3
phMN2ldPQqXzDKF8xuoZvg3w5xQZFp5dbDMTKztnmLp73Xk+xGwmnHQvJaI/NYAM
n6pr7Y9RpD+q7Q==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:27:16 2025 by rpki-client