Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
File: crvS-hgxljniX_v0vb-gCGYBWK4.mft (raw, json)
Hash identifier: ooP4q0wve0X+CclvJ5siysJK8e7HS92rWEKWKzCFovs=
Subject key identifier: FC:30:7D:29:A9:5D:58:FF:8F:E3:E6:2D:5C:A6:C2:23:D0:94:2B:5C
Authority key identifier: 72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
Certificate issuer: /CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Certificate serial: 0194BD85A2B3B6619ABA993BC2D3E5F9C3FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
Manifest number: 0536
Signing time: Fri 31 Jan 2025 18:00:39 +0000
Manifest this update: Fri 31 Jan 2025 18:00:39 +0000
Manifest next update: Sat 01 Feb 2025 18:00:39 +0000
Files and hashes: 1: 9B_nRxWCf-IC__yWPSp2TtcLH_U.roa (hash: HIni5u9YKsNdRHwljtSVtJZz+uwQKEAkuVEZPM74tyE=)
2: crvS-hgxljniX_v0vb-gCGYBWK4.crl (hash: tThtb6ey12FHEvqo38nerqrXFeKreUEF0IZqdK6XsXM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a2:b3:b6:61:9a:ba:99:3b:c2:d3:e5:f9:c3:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Validity
Not Before: Jan 31 18:00:39 2025 GMT
Not After : Feb 1 18:00:39 2025 GMT
Subject: CN=fc307d29a95d58ff8fe3e62d5ca6c223d0942b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ef:b7:ee:09:c1:93:4a:c1:d1:f4:0f:d0:6b:
d0:21:6e:74:43:3a:72:fc:58:3a:93:69:43:3a:12:
17:c2:94:b4:9e:67:d0:c2:75:60:1c:ec:a8:93:f0:
6e:73:bd:99:fb:fd:33:aa:34:a3:01:a2:21:ce:35:
ce:04:7a:19:0b:10:c6:c1:d9:5d:59:ac:a9:ab:6f:
a9:5c:14:35:a0:02:c4:da:32:52:68:21:e4:fe:b8:
03:60:91:8f:24:10:13:20:28:14:5e:ee:44:f5:70:
f8:68:c8:07:3e:ca:4f:be:96:83:ec:37:36:a3:0f:
89:39:58:1a:13:c5:1f:ad:99:73:6c:90:9a:70:f3:
bd:b2:4a:e0:f2:6b:a0:92:af:28:b6:ba:51:b3:13:
7e:be:9a:9b:41:24:89:ff:a1:91:73:5b:cf:5d:2e:
77:94:d0:db:22:ed:93:9d:e4:d1:b6:dc:fb:47:7d:
f6:fa:42:aa:3f:03:a2:24:eb:20:0d:e1:59:a6:40:
84:0c:a9:aa:55:34:7f:09:1c:f9:ed:6f:f0:7e:46:
76:5e:b4:3e:e4:69:1b:79:d5:9d:18:33:0e:5c:16:
81:5a:ed:f6:fe:e7:63:9f:96:52:2a:68:f7:da:11:
b7:ec:9b:00:c2:2a:29:f7:7b:5a:db:55:b0:e9:f7:
4a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:30:7D:29:A9:5D:58:FF:8F:E3:E6:2D:5C:A6:C2:23:D0:94:2B:5C
X509v3 Authority Key Identifier:
keyid:72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:38:ee:b5:ac:d6:6e:87:70:50:d5:2d:28:9e:35:e6:b2:a4:
3d:8d:61:31:d5:27:99:de:ed:ce:9c:81:d0:cf:79:7f:1d:24:
62:13:c8:d6:01:8c:9d:79:94:d6:3f:10:2c:96:16:35:55:ff:
f9:3f:77:39:64:e5:cf:9d:50:36:f2:84:b2:15:94:0a:cd:b4:
f3:64:46:0e:83:c9:2d:5a:8f:3d:55:42:d5:b2:f2:db:da:e1:
d2:05:66:82:c6:bb:2c:56:87:dd:0a:99:48:99:f7:bb:8e:0f:
31:54:1b:bc:27:aa:82:75:de:6d:9d:27:37:b8:b1:29:6d:c5:
2e:23:24:c3:f7:fd:d5:c3:52:5e:60:ca:d9:1a:e3:cc:3c:08:
6e:18:fb:91:dc:b4:e8:c9:2d:ba:aa:d3:23:cd:4f:7d:df:ef:
35:c1:8a:80:1f:90:65:71:2a:82:56:0d:5b:75:62:22:4b:eb:
c5:9f:d9:cf:a6:ed:7c:2f:cd:f8:d6:14:f1:c8:71:ef:89:01:
f7:0f:b2:65:8e:37:18:7e:d7:07:70:2b:e5:fb:41:81:98:09:
1b:f8:ad:05:4a:89:d3:39:1d:fb:fa:a1:16:96:28:54:43:ff:
01:b5:29:92:ab:98:48:c8:2d:c3:95:cc:13:82:2c:fb:ae:4d:
80:fa:39:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9haKztmGaupk7wtPl+cP6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYmJkMmZhMTgzMTk2MzllMjVmZmJmNGJkYmZhMDA4NjYw
MTU4YWUwHhcNMjUwMTMxMTgwMDM5WhcNMjUwMjAxMTgwMDM5WjAzMTEwLwYDVQQD
EyhmYzMwN2QyOWE5NWQ1OGZmOGZlM2U2MmQ1Y2E2YzIyM2QwOTQyYjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7O+37gnBk0rB0fQP0GvQIW50Qzpy
/Fg6k2lDOhIXwpS0nmfQwnVgHOyok/Buc72Z+/0zqjSjAaIhzjXOBHoZCxDGwdld
Waypq2+pXBQ1oALE2jJSaCHk/rgDYJGPJBATICgUXu5E9XD4aMgHPspPvpaD7Dc2
ow+JOVgaE8UfrZlzbJCacPO9skrg8mugkq8otrpRsxN+vpqbQSSJ/6GRc1vPXS53
lNDbIu2TneTRttz7R332+kKqPwOiJOsgDeFZpkCEDKmqVTR/CRz57W/wfkZ2XrQ+
5GkbedWdGDMOXBaBWu32/udjn5ZSKmj32hG37JsAwiop93ta21Ww6fdKwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwwfSmpXVj/j+PmLVymwiPQlCtcMB8GA1UdIwQY
MBaAFHK70voYMZY54l/79L2/oAhmAViuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3J2Uy1oZ3hsam5pWF92MHZiLWdDR1lCV0s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kYzQ0MjAtNDA2Mi00Nzc4LTkzNTgt
MGFmMmU1NDE2NDZjLzEvY3J2Uy1oZ3hsam5pWF92MHZiLWdDR1lCV0s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9kYzQ0MjAtNDA2Mi00Nzc4LTkzNTgtMGFmMmU1NDE2NDZj
LzEvY3J2Uy1oZ3hsam5pWF92MHZiLWdDR1lCV0s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdTjutazW
bodwUNUtKJ415rKkPY1hMdUnmd7tzpyB0M95fx0kYhPI1gGMnXmU1j8QLJYWNVX/
+T93OWTlz51QNvKEshWUCs2082RGDoPJLVqPPVVC1bLy29rh0gVmgsa7LFaH3QqZ
SJn3u44PMVQbvCeqgnXebZ0nN7ixKW3FLiMkw/f91cNSXmDK2RrjzDwIbhj7kdy0
6MktuqrTI81Pfd/vNcGKgB+QZXEqglYNW3ViIkvrxZ/Zz6btfC/N+NYU8chx74kB
9w+yZY43GH7XB3Ar5ftBgZgJG/itBUqJ0zkd+/qhFpYoVEP/AbUpkquYSMgtw5XM
E4Is+65NgPo51A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:31:36 2025 by rpki-client