Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.mft
File: ds5jfUe3gATQzPrjceaBh2isP6U.mft (raw, json)
Hash identifier: VWNEBKEQ+hFOhVP4U3vv0FiPfAfyfh/mfkq0RplmYnI=
Subject key identifier: 6E:EC:5C:D0:32:26:68:6E:AD:FC:BD:8C:21:99:5B:E5:BD:B8:9D:76
Authority key identifier: 76:CE:63:7D:47:B7:80:04:D0:CC:FA:E3:71:E6:81:87:68:AC:3F:A5
Certificate issuer: /CN=76ce637d47b78004d0ccfae371e6818768ac3fa5
Certificate serial: 0194BCE0DEE64259DAF4EDBC59861C21EDB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ds5jfUe3gATQzPrjceaBh2isP6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.mft
Manifest number: 124C
Signing time: Fri 31 Jan 2025 15:00:41 +0000
Manifest this update: Fri 31 Jan 2025 15:00:41 +0000
Manifest next update: Sat 01 Feb 2025 15:00:41 +0000
Files and hashes: 1: 2v9WLSFviNLhCEs3PI8ghWfG43g.roa (hash: s4HF4L3IMaVI3bReAfOPFKeWOp26BrTGFcFThVgszh4=)
2: ds5jfUe3gATQzPrjceaBh2isP6U.crl (hash: UPB7Kkuk43e3eEVOYQjWt8m2e9jw2WOfzqSP6RmObcc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:de:e6:42:59:da:f4:ed:bc:59:86:1c:21:ed:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ce637d47b78004d0ccfae371e6818768ac3fa5
Validity
Not Before: Jan 31 15:00:41 2025 GMT
Not After : Feb 1 15:00:41 2025 GMT
Subject: CN=6eec5cd03226686eadfcbd8c21995be5bdb89d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:99:59:37:eb:ee:13:b5:20:df:f7:3e:93:6c:
df:7f:ec:e0:4a:6d:57:5d:be:a2:57:e7:4e:88:ce:
00:79:10:56:b7:c9:64:37:2b:17:1a:1b:0a:b0:53:
04:18:bb:9b:9b:15:25:2e:8f:ba:59:03:bc:2f:e8:
cc:f9:31:20:43:c1:27:cc:84:6d:0e:a6:e2:59:04:
08:b0:33:21:3d:2a:ed:40:4a:9f:07:6a:33:7b:09:
6b:c6:a0:d2:35:af:18:dc:bc:9f:52:55:ba:cc:ab:
14:f2:f6:9e:5a:7e:a0:2f:58:dc:41:43:64:36:bf:
57:1a:20:12:ad:f8:5a:6c:32:9a:f7:c4:b0:a2:3c:
e4:12:41:ca:b2:bb:e0:b1:f7:22:fb:2a:b0:b6:a2:
74:b2:85:df:c1:91:b2:d2:52:07:a3:1e:fc:e9:ed:
49:f7:bb:ca:4f:13:e0:b7:8b:5d:35:93:e4:6f:02:
2e:be:21:53:f8:9a:43:03:21:48:b4:ea:c9:42:6e:
82:04:d7:da:1b:6a:9f:5b:f0:1a:f5:f0:18:32:5c:
1b:38:dd:f3:0c:97:90:1a:15:7a:60:df:d5:c1:52:
79:ba:e2:18:8c:6c:6b:e4:08:83:d5:1a:09:ae:d6:
44:df:4a:95:66:4a:35:9a:28:18:d7:8d:56:99:7e:
95:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:EC:5C:D0:32:26:68:6E:AD:FC:BD:8C:21:99:5B:E5:BD:B8:9D:76
X509v3 Authority Key Identifier:
keyid:76:CE:63:7D:47:B7:80:04:D0:CC:FA:E3:71:E6:81:87:68:AC:3F:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ds5jfUe3gATQzPrjceaBh2isP6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/ds5jfUe3gATQzPrjceaBh2isP6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d0:5c:cb:3d:de:b6:d9:13:a9:27:b6:b3:c0:cb:40:f5:e4:
9a:55:a2:27:bb:a6:e4:7f:a4:c6:c7:98:44:1a:e5:51:cb:e2:
cd:bc:62:88:b9:1c:90:5f:c0:a5:a9:7a:3c:75:7b:5d:e0:f0:
f6:68:0d:5f:8d:70:0a:6d:47:0e:cf:00:fd:be:cc:fd:58:b7:
36:33:fe:7d:3d:f8:27:eb:58:67:d0:7b:52:6e:e1:9c:5a:1b:
3f:a1:c9:5f:40:06:ed:6f:85:b3:65:f7:e3:fc:31:8b:2e:7c:
10:31:c8:ab:87:d7:b0:16:df:bc:5c:c4:ad:d4:05:4d:8f:13:
61:ef:eb:d6:29:51:f0:e3:01:9a:ce:85:fd:d6:9a:41:57:60:
19:da:06:11:b1:2c:16:75:21:15:c3:ee:d6:02:0c:45:5a:64:
ba:32:84:4b:5e:f3:e0:b9:34:78:52:7d:e7:8e:3f:dc:1f:e3:
8f:26:29:03:a7:80:2a:35:4e:b1:e1:ae:09:4f:e2:e7:ad:de:
49:62:95:03:bb:c1:8a:9d:b0:a7:45:44:c6:1a:2f:0a:c2:2c:
b5:92:e9:f1:06:ce:99:d1:2a:93:e1:7c:41:8b:f5:8c:5a:69:
da:61:36:0d:b8:8b:a3:10:ca:06:cf:3e:e4:03:1f:6d:07:9f:
d8:ca:2f:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84N7mQlna9O28WYYcIe2zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2Y2U2MzdkNDdiNzgwMDRkMGNjZmFlMzcxZTY4MTg3Njhh
YzNmYTUwHhcNMjUwMTMxMTUwMDQxWhcNMjUwMjAxMTUwMDQxWjAzMTEwLwYDVQQD
Eyg2ZWVjNWNkMDMyMjY2ODZlYWRmY2JkOGMyMTk5NWJlNWJkYjg5ZDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5lZN+vuE7Ug3/c+k2zff+zgSm1X
Xb6iV+dOiM4AeRBWt8lkNysXGhsKsFMEGLubmxUlLo+6WQO8L+jM+TEgQ8EnzIRt
DqbiWQQIsDMhPSrtQEqfB2ozewlrxqDSNa8Y3LyfUlW6zKsU8vaeWn6gL1jcQUNk
Nr9XGiASrfhabDKa98SwojzkEkHKsrvgsfci+yqwtqJ0soXfwZGy0lIHox786e1J
97vKTxPgt4tdNZPkbwIuviFT+JpDAyFItOrJQm6CBNfaG2qfW/Aa9fAYMlwbON3z
DJeQGhV6YN/VwVJ5uuIYjGxr5AiD1RoJrtZE30qVZko1migY141WmX6VNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG7sXNAyJmhurfy9jCGZW+W9uJ12MB8GA1UdIwQY
MBaAFHbOY31Ht4AE0Mz643HmgYdorD+lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHM1amZVZTNnQVRRelByamNlYUJoMmlzUDZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83MzA5YTktNDZjOC00MjQwLWFmZWYt
ODQwODgxYTRkMzBkLzEvZHM1amZVZTNnQVRRelByamNlYUJoMmlzUDZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS83MzA5YTktNDZjOC00MjQwLWFmZWYtODQwODgxYTRkMzBk
LzEvZHM1amZVZTNnQVRRelByamNlYUJoMmlzUDZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNBcyz3e
ttkTqSe2s8DLQPXkmlWiJ7um5H+kxseYRBrlUcvizbxiiLkckF/Apal6PHV7XeDw
9mgNX41wCm1HDs8A/b7M/Vi3NjP+fT34J+tYZ9B7Um7hnFobP6HJX0AG7W+Fs2X3
4/wxiy58EDHIq4fXsBbfvFzErdQFTY8TYe/r1ilR8OMBms6F/daaQVdgGdoGEbEs
FnUhFcPu1gIMRVpkujKES17z4Lk0eFJ9544/3B/jjyYpA6eAKjVOseGuCU/i563e
SWKVA7vBip2wp0VExhovCsIstZLp8QbOmdEqk+F8QYv1jFpp2mE2DbiLoxDKBs8+
5AMfbQef2MovRg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:36 2025 by rpki-client