Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
File: bF5O9VFnmf_guxuDkxfb01W7eps.mft (raw, json)
Hash identifier: TpUsD4/jsMNodyRa1GbG+65/3G74fJeEIbvoQyf2ErM=
Subject key identifier: A8:DE:25:20:8F:18:F8:35:F8:A2:E7:F3:0C:BB:CC:CD:02:64:6C:08
Authority key identifier: 6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
Certificate issuer: /CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Certificate serial: 0194BBCE4668E616D25CFF5E87A4ADEAEEF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
Manifest number: 1434
Signing time: Fri 31 Jan 2025 10:00:45 +0000
Manifest this update: Fri 31 Jan 2025 10:00:45 +0000
Manifest next update: Sat 01 Feb 2025 10:00:45 +0000
Files and hashes: 1: 0wgL08QR2Tg8DD4ym9yl2cWgk4Y.roa (hash: qV9D4m0x0M6TJ4fUI73uoZNgwejKGUBXdkrfKOtrD44=)
2: bF5O9VFnmf_guxuDkxfb01W7eps.crl (hash: JSFNjlSa8Oc+jLv+zfrqihjnulzaRe8cFJOhQ7KGXEk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:46:68:e6:16:d2:5c:ff:5e:87:a4:ad:ea:ee:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Validity
Not Before: Jan 31 10:00:45 2025 GMT
Not After : Feb 1 10:00:45 2025 GMT
Subject: CN=a8de25208f18f835f8a2e7f30cbbcccd02646c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:96:7c:3b:56:d4:a7:0c:63:19:38:54:91:dc:
f6:c9:0b:9f:ad:41:92:be:88:c1:7f:af:82:e6:8d:
ef:0f:43:4d:12:39:9e:43:ed:8d:4f:af:c0:d5:2b:
a9:c7:7f:ec:9e:bc:5d:57:43:db:7d:0d:2f:12:a8:
b9:d5:cb:00:90:02:7b:fb:3d:42:85:45:66:e0:02:
5d:3a:ce:51:25:69:e2:04:2c:3a:e7:24:32:e6:ac:
f3:bc:cb:56:5e:6e:ee:63:e7:0a:29:5c:51:12:9c:
72:1b:2b:a3:e4:c1:dd:48:77:51:87:85:87:b2:53:
07:51:89:77:ec:c6:15:06:eb:f5:71:35:f7:e9:d8:
ee:26:08:24:17:a7:b2:b4:85:32:a0:cb:7a:2a:42:
d8:88:c0:4e:9c:46:06:0a:1c:9c:c0:96:08:6b:fc:
50:a9:24:55:4d:2a:14:86:bf:a7:e8:7c:89:4a:3c:
9b:c3:d3:7b:5a:e1:ab:69:6d:0b:73:84:f8:b8:51:
6d:f7:b4:4e:87:02:52:77:5d:2e:05:af:c8:06:a8:
76:55:3e:ef:fe:49:ef:f5:84:f1:52:76:21:59:c3:
7b:6f:00:b9:2b:74:5c:94:2d:b8:e4:58:05:28:54:
e0:51:63:b9:0f:07:a2:4c:05:30:0d:66:46:a9:85:
20:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DE:25:20:8F:18:F8:35:F8:A2:E7:F3:0C:BB:CC:CD:02:64:6C:08
X509v3 Authority Key Identifier:
keyid:6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:23:68:db:4f:f6:af:29:53:46:26:75:23:95:86:94:9d:3a:
24:a3:2b:5c:24:2b:68:ed:9e:31:9f:d5:6e:8e:b8:d3:e5:2d:
96:7e:48:97:53:e2:21:2e:99:32:96:11:6f:31:4d:cc:a2:c1:
6a:2a:ea:24:80:e8:ea:47:c4:55:ec:33:b4:c0:87:56:74:d1:
56:88:9b:92:5a:b9:b0:d5:ff:a1:2d:a8:a4:04:a8:17:a3:47:
97:5b:a5:2e:b6:69:b8:c2:34:9b:01:2a:3c:61:19:9a:5d:b5:
a8:f9:9c:2e:fb:6b:d9:f5:09:68:b5:bf:ae:24:b3:48:45:44:
ad:d4:d1:f3:d3:a4:39:2c:38:3a:7d:77:6b:bb:68:ce:d2:29:
72:16:2a:f1:6c:67:85:e0:e4:8d:1c:6d:e2:59:c3:39:2b:bc:
31:8a:a5:97:ca:f6:16:fd:2b:d3:ef:dc:91:ee:d2:dd:6e:69:
92:74:57:fd:1a:1a:65:38:2c:aa:e7:ea:05:64:87:e3:6c:be:
a9:b4:e0:53:aa:f1:93:01:03:bb:ff:8d:0a:c8:d3:7b:8d:01:
dc:10:43:10:e7:8f:97:cc:e2:e5:66:6e:e6:ff:20:39:b2:f6:
01:cb:f9:eb:65:00:9d:a5:e0:51:7e:03:29:14:cd:b1:f9:5e:
fa:48:09:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zkZo5hbSXP9eh6St6u73MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNWU0ZWY1NTE2Nzk5ZmZlMGJiMWI4MzkzMTdkYmQzNTVi
YjdhOWIwHhcNMjUwMTMxMTAwMDQ1WhcNMjUwMjAxMTAwMDQ1WjAzMTEwLwYDVQQD
EyhhOGRlMjUyMDhmMThmODM1ZjhhMmU3ZjMwY2JiY2NjZDAyNjQ2YzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZZ8O1bUpwxjGThUkdz2yQufrUGS
vojBf6+C5o3vD0NNEjmeQ+2NT6/A1Supx3/snrxdV0PbfQ0vEqi51csAkAJ7+z1C
hUVm4AJdOs5RJWniBCw65yQy5qzzvMtWXm7uY+cKKVxREpxyGyuj5MHdSHdRh4WH
slMHUYl37MYVBuv1cTX36djuJggkF6eytIUyoMt6KkLYiMBOnEYGChycwJYIa/xQ
qSRVTSoUhr+n6HyJSjybw9N7WuGraW0Lc4T4uFFt97ROhwJSd10uBa/IBqh2VT7v
/knv9YTxUnYhWcN7bwC5K3RclC245FgFKFTgUWO5DweiTAUwDWZGqYUgXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKjeJSCPGPg1+KLn8wy7zM0CZGwIMB8GA1UdIwQY
MBaAFGxeTvVRZ5n/4Lsbg5MX29NVu3qbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkY1TzlWRm5tZl9ndXh1RGt4ZmIwMVc3ZXBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS85ZDk2ODAtZmZiZi00M2QxLTljMDUt
MWJlNzUzZmFkMWJmLzEvYkY1TzlWRm5tZl9ndXh1RGt4ZmIwMVc3ZXBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS85ZDk2ODAtZmZiZi00M2QxLTljMDUtMWJlNzUzZmFkMWJm
LzEvYkY1TzlWRm5tZl9ndXh1RGt4ZmIwMVc3ZXBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoiNo20/2
rylTRiZ1I5WGlJ06JKMrXCQraO2eMZ/Vbo640+Utln5Il1PiIS6ZMpYRbzFNzKLB
airqJIDo6kfEVewztMCHVnTRVoibklq5sNX/oS2opASoF6NHl1ulLrZpuMI0mwEq
PGEZml21qPmcLvtr2fUJaLW/riSzSEVErdTR89OkOSw4On13a7toztIpchYq8Wxn
heDkjRxt4lnDOSu8MYqll8r2Fv0r0+/cke7S3W5pknRX/RoaZTgsqufqBWSH42y+
qbTgU6rxkwEDu/+NCsjTe40B3BBDEOePl8zi5WZu5v8gObL2Acv562UAnaXgUX4D
KRTNsfle+kgJFQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:39 2025 by rpki-client