Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
File: cspFbK0jiDCzjs1NJnys-lzV8fE.mft (raw, json)
Hash identifier: 1AqG99/V//ACmI1eaay0NPHDutRHmqmd4Dcr6XdSXR8=
Subject key identifier: A5:AF:A1:7D:97:4B:10:BB:8C:8C:A5:50:51:5E:D1:76:EF:8F:A0:FA
Authority key identifier: 72:CA:45:6C:AD:23:88:30:B3:8E:CD:4D:26:7C:AC:FA:5C:D5:F1:F1
Certificate issuer: /CN=72ca456cad238830b38ecd4d267cacfa5cd5f1f1
Certificate serial: 0194BBCE0207253305EF437C96F764EAABC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:27 +0000
Manifest this update: Fri 31 Jan 2025 10:00:27 +0000
Manifest next update: Sat 01 Feb 2025 10:00:27 +0000
Files and hashes: 1: 9qsPYE67U8LKJS5RPyzpaJjKAjw.roa (hash: ate2+ga4mYDOeR+5DaCdTzRa6tHIKsrgVcrNBTn+5LQ=)
2: cspFbK0jiDCzjs1NJnys-lzV8fE.crl (hash: DGQ/4zrt75ccG2lQRx8/RjxAeQs5PyhiIeINKJR/pv8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:02:07:25:33:05:ef:43:7c:96:f7:64:ea:ab:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ca456cad238830b38ecd4d267cacfa5cd5f1f1
Validity
Not Before: Jan 31 10:00:27 2025 GMT
Not After : Feb 1 10:00:27 2025 GMT
Subject: CN=a5afa17d974b10bb8c8ca550515ed176ef8fa0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4c:0a:3a:4e:f8:af:18:21:2a:ce:bb:77:a8:
68:35:1f:f3:3d:0c:c2:bc:81:60:d0:48:54:e9:b3:
ef:d1:96:31:1b:d8:3d:0e:fd:8a:03:07:9c:d2:3d:
b0:f1:3e:06:2c:65:60:a4:26:43:6b:92:98:f1:da:
fe:e0:a0:9e:7e:4e:b3:93:b7:2b:e5:a4:ca:9c:f2:
4d:9b:cf:03:3e:9d:fb:84:7d:7f:9a:d8:ec:fb:76:
14:34:d2:e3:7e:4c:56:86:9e:0b:e3:cb:e1:84:96:
82:93:ac:fc:36:f3:50:aa:50:d3:e8:a3:2d:54:9a:
da:fc:d0:61:e9:f6:3e:a9:17:49:c5:6b:c7:c0:c1:
ad:8b:cb:75:72:54:a8:3c:bd:26:e8:bd:c2:73:5c:
db:d2:b9:17:e4:d4:62:e5:77:53:fc:a9:a9:41:e8:
8e:18:d5:e3:91:10:88:e5:b6:fe:6d:f3:c1:9a:e7:
95:5b:30:17:2d:06:7c:78:47:e6:a2:d7:5e:5f:33:
ea:71:e1:c4:82:12:e3:0e:db:5c:6a:ad:48:93:55:
15:88:73:06:22:36:e5:a2:52:bd:cd:b0:8a:91:60:
b0:84:95:30:1a:42:7d:e3:07:4b:27:dd:1d:86:cc:
d0:e3:f6:36:9a:af:27:bf:a6:33:02:23:5e:20:94:
a4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AF:A1:7D:97:4B:10:BB:8C:8C:A5:50:51:5E:D1:76:EF:8F:A0:FA
X509v3 Authority Key Identifier:
keyid:72:CA:45:6C:AD:23:88:30:B3:8E:CD:4D:26:7C:AC:FA:5C:D5:F1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cspFbK0jiDCzjs1NJnys-lzV8fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5731f3-b180-4054-8acb-2ca13dd1db63/1/cspFbK0jiDCzjs1NJnys-lzV8fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f6:dd:4a:b9:a7:1a:22:20:28:97:a5:3d:20:84:ce:67:67:
fc:88:32:22:3e:19:9e:7e:c8:db:74:28:8f:07:f4:9f:15:c4:
57:8a:d5:8b:80:ba:42:2a:fc:bd:ba:42:4a:2e:59:35:9f:5b:
e8:bf:6f:b1:82:6e:de:e3:b4:ae:aa:ce:f1:8e:97:53:26:97:
91:6a:62:d6:f1:6a:d3:1f:6e:cf:c9:45:00:93:d8:e2:62:5e:
c3:ba:67:86:13:56:00:73:c3:70:28:c6:e2:7f:1b:14:99:cc:
a0:b0:aa:89:99:fd:42:71:2a:6d:d9:e2:68:16:4e:7e:f8:52:
3d:5c:03:a3:e4:2f:cb:86:78:d2:0a:a3:b6:df:2b:fc:b8:39:
01:be:b6:9f:97:58:a2:b8:fa:af:f4:fc:3e:2c:0f:95:5a:e8:
67:64:4a:e7:fe:ed:d8:f7:6c:01:cb:bd:0d:11:df:10:51:ce:
02:e8:17:a3:11:04:35:08:0b:8d:de:4d:d9:8b:56:cc:d4:83:
03:29:0e:a8:52:46:e6:35:1c:55:f7:ee:18:ab:5b:f4:02:49:
69:c8:ba:c4:94:ab:be:22:66:ad:78:2f:0c:ff:8d:36:51:92:
c0:bd:ae:9b:dc:23:60:4d:bb:c6:30:23:07:91:4c:32:b3:0f:
5e:19:2e:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zgIHJTMF70N8lvdk6qvIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyY2E0NTZjYWQyMzg4MzBiMzhlY2Q0ZDI2N2NhY2ZhNWNk
NWYxZjEwHhcNMjUwMTMxMTAwMDI3WhcNMjUwMjAxMTAwMDI3WjAzMTEwLwYDVQQD
EyhhNWFmYTE3ZDk3NGIxMGJiOGM4Y2E1NTA1MTVlZDE3NmVmOGZhMGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0wKOk74rxghKs67d6hoNR/zPQzC
vIFg0EhU6bPv0ZYxG9g9Dv2KAwec0j2w8T4GLGVgpCZDa5KY8dr+4KCefk6zk7cr
5aTKnPJNm88DPp37hH1/mtjs+3YUNNLjfkxWhp4L48vhhJaCk6z8NvNQqlDT6KMt
VJra/NBh6fY+qRdJxWvHwMGti8t1clSoPL0m6L3Cc1zb0rkX5NRi5XdT/KmpQeiO
GNXjkRCI5bb+bfPBmueVWzAXLQZ8eEfmotdeXzPqceHEghLjDttcaq1Ik1UViHMG
IjblolK9zbCKkWCwhJUwGkJ94wdLJ90dhszQ4/Y2mq8nv6YzAiNeIJSkBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKWvoX2XSxC7jIylUFFe0Xbvj6D6MB8GA1UdIwQY
MBaAFHLKRWytI4gws47NTSZ8rPpc1fHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3NwRmJLMGppREN6anMxTkpueXMtbHpWOGZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81NzMxZjMtYjE4MC00MDU0LThhY2It
MmNhMTNkZDFkYjYzLzEvY3NwRmJLMGppREN6anMxTkpueXMtbHpWOGZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi81NzMxZjMtYjE4MC00MDU0LThhY2ItMmNhMTNkZDFkYjYz
LzEvY3NwRmJLMGppREN6anMxTkpueXMtbHpWOGZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlfbdSrmn
GiIgKJelPSCEzmdn/IgyIj4Znn7I23Qojwf0nxXEV4rVi4C6Qir8vbpCSi5ZNZ9b
6L9vsYJu3uO0rqrO8Y6XUyaXkWpi1vFq0x9uz8lFAJPY4mJew7pnhhNWAHPDcCjG
4n8bFJnMoLCqiZn9QnEqbdniaBZOfvhSPVwDo+Qvy4Z40gqjtt8r/Lg5Ab62n5dY
orj6r/T8PiwPlVroZ2RK5/7t2PdsAcu9DRHfEFHOAugXoxEENQgLjd5N2YtWzNSD
AykOqFJG5jUcVffuGKtb9AJJaci6xJSrviJmrXgvDP+NNlGSwL2um9wjYE27xjAj
B5FMMrMPXhkukw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:39:53 2025 by rpki-client