Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
File: 05aWp2gOlVKR_q-h77qfvP8viIs.mft (raw, json)
Hash identifier: yTDiOvxyc21Saw40kk37Myl+NUMnPvjqsZg3hzfgqzo=
Subject key identifier: B8:04:4D:FB:BE:D5:86:76:72:4A:FF:48:CC:CE:CF:DE:67:AA:04:21
Authority key identifier: D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B
Certificate issuer: /CN=d39696a7680e955291feafa1efba9fbcff2f888b
Certificate serial: 0194BBCEDB425C5F50DB78EA081F44A6EA20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
Manifest number: 0F1B
Signing time: Fri 31 Jan 2025 10:01:23 +0000
Manifest this update: Fri 31 Jan 2025 10:01:23 +0000
Manifest next update: Sat 01 Feb 2025 10:01:23 +0000
Files and hashes: 1: 05aWp2gOlVKR_q-h77qfvP8viIs.crl (hash: qgGPIOJ9geh/PmEP4SZpEkFsFn+OdHO0Qk02jjm+taU=)
2: rB2INOwVRpDLnI62nHFRLMGjim8.roa (hash: 4e9dGvThW6tLmtEOnyeNLHSG2RRsUkaY7l6l90Sl8lc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:db:42:5c:5f:50:db:78:ea:08:1f:44:a6:ea:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d39696a7680e955291feafa1efba9fbcff2f888b
Validity
Not Before: Jan 31 10:01:23 2025 GMT
Not After : Feb 1 10:01:23 2025 GMT
Subject: CN=b8044dfbbed58676724aff48cccecfde67aa0421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:83:22:9e:59:8c:c2:17:6a:2d:15:7c:06:b5:
a9:1a:80:98:ee:88:b3:56:c9:28:44:4a:88:8d:cc:
c4:42:fc:67:01:34:c1:15:65:95:83:88:c0:83:76:
92:5b:c0:cf:3b:e9:fc:4a:ba:e1:94:50:1e:ea:ef:
ed:57:19:e6:d7:bc:97:27:9f:fd:e2:cb:ee:3e:6b:
0c:8b:86:62:10:e8:81:13:e3:5c:c9:e2:60:bc:2f:
52:f5:1e:ea:4a:49:74:c9:83:35:97:3e:c1:3a:86:
22:09:62:59:34:97:f2:4e:ec:61:47:11:13:e9:d5:
a3:f8:d7:82:ad:ce:0f:13:37:19:94:55:08:d9:7d:
c1:02:82:b2:3d:ff:da:a1:5a:6e:48:8e:3f:95:8d:
44:1a:ef:3c:47:e0:b8:1b:ff:50:3a:f1:60:57:d8:
a0:b7:5c:3e:5a:43:60:a8:c5:8d:db:cc:a2:9c:df:
56:a8:ae:63:41:b4:c8:fb:32:4c:7a:11:d4:5d:ea:
ce:b3:7b:fa:bd:45:ef:7c:e1:8d:b2:63:ed:cc:86:
3a:22:f3:7d:23:2e:08:b0:d4:e4:55:d6:70:b9:9c:
6a:62:b0:8e:6f:0d:0b:6d:08:f4:44:9b:50:f1:8a:
2e:4d:5c:53:1c:b7:b6:4d:e6:35:64:d6:c0:79:d4:
43:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:04:4D:FB:BE:D5:86:76:72:4A:FF:48:CC:CE:CF:DE:67:AA:04:21
X509v3 Authority Key Identifier:
keyid:D3:96:96:A7:68:0E:95:52:91:FE:AF:A1:EF:BA:9F:BC:FF:2F:88:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05aWp2gOlVKR_q-h77qfvP8viIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/68e857-e2e9-42d5-864e-cc7ad16d1b0c/1/05aWp2gOlVKR_q-h77qfvP8viIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:df:3c:5c:77:c7:e6:b6:31:9a:26:6f:ec:29:48:72:a6:38:
25:a9:99:a0:24:1d:db:d4:45:a3:3e:ac:eb:9f:f2:34:f1:f8:
fc:7e:1e:9a:74:51:57:91:e5:f9:fb:1d:4e:f1:49:d3:cf:ac:
8f:05:61:40:9d:18:af:bc:c9:b0:95:ba:e0:16:de:ab:e6:ad:
1f:27:40:79:5d:48:10:40:8f:99:e6:91:15:50:51:6d:5e:4c:
c3:b8:a7:c9:48:08:e8:23:13:98:39:f2:67:72:63:a2:f5:36:
e9:07:7f:26:a0:d7:78:32:99:40:d9:72:e9:91:12:77:d9:52:
b1:eb:6b:a8:e2:a5:a2:ec:3e:26:e6:3d:26:27:4f:a0:75:14:
6c:91:8b:5d:46:80:bc:9a:2a:33:a4:f9:dd:01:43:98:72:65:
90:41:e1:5f:bd:0e:4b:b0:3c:16:c9:d9:d4:c8:07:ad:bd:52:
f2:1c:f8:b9:45:c9:27:55:0f:11:83:8c:91:6a:6d:ad:f0:62:
eb:9b:cb:fc:a1:24:e1:13:8d:86:a9:47:61:80:d5:42:21:7e:
5e:01:7d:ac:81:ed:e1:b3:02:aa:5d:a7:e8:0e:51:20:ad:cf:
84:03:1a:7a:a3:de:e2:a6:d8:a0:b6:b6:7e:43:bc:d4:87:12:
7b:02:99:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zttCXF9Q23jqCB9EpuogMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzOTY5NmE3NjgwZTk1NTI5MWZlYWZhMWVmYmE5ZmJjZmYy
Zjg4OGIwHhcNMjUwMTMxMTAwMTIzWhcNMjUwMjAxMTAwMTIzWjAzMTEwLwYDVQQD
EyhiODA0NGRmYmJlZDU4Njc2NzI0YWZmNDhjY2NlY2ZkZTY3YWEwNDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooMinlmMwhdqLRV8BrWpGoCY7oiz
VskoREqIjczEQvxnATTBFWWVg4jAg3aSW8DPO+n8SrrhlFAe6u/tVxnm17yXJ5/9
4svuPmsMi4ZiEOiBE+NcyeJgvC9S9R7qSkl0yYM1lz7BOoYiCWJZNJfyTuxhRxET
6dWj+NeCrc4PEzcZlFUI2X3BAoKyPf/aoVpuSI4/lY1EGu88R+C4G/9QOvFgV9ig
t1w+WkNgqMWN28yinN9WqK5jQbTI+zJMehHUXerOs3v6vUXvfOGNsmPtzIY6IvN9
Iy4IsNTkVdZwuZxqYrCObw0LbQj0RJtQ8YouTVxTHLe2TeY1ZNbAedRDbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgETfu+1YZ2ckr/SMzOz95nqgQhMB8GA1UdIwQY
MBaAFNOWlqdoDpVSkf6voe+6n7z/L4iLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDVhV3AyZ09sVktSX3EtaDc3cWZ2UDh2aUlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy82OGU4NTctZTJlOS00MmQ1LTg2NGUt
Y2M3YWQxNmQxYjBjLzEvMDVhV3AyZ09sVktSX3EtaDc3cWZ2UDh2aUlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy82OGU4NTctZTJlOS00MmQ1LTg2NGUtY2M3YWQxNmQxYjBj
LzEvMDVhV3AyZ09sVktSX3EtaDc3cWZ2UDh2aUlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYt88XHfH
5rYxmiZv7ClIcqY4JamZoCQd29RFoz6s65/yNPH4/H4emnRRV5Hl+fsdTvFJ08+s
jwVhQJ0Yr7zJsJW64Bbeq+atHydAeV1IEECPmeaRFVBRbV5Mw7inyUgI6CMTmDny
Z3JjovU26Qd/JqDXeDKZQNly6ZESd9lSsetrqOKlouw+JuY9JidPoHUUbJGLXUaA
vJoqM6T53QFDmHJlkEHhX70OS7A8FsnZ1MgHrb1S8hz4uUXJJ1UPEYOMkWptrfBi
65vL/KEk4RONhqlHYYDVQiF+XgF9rIHt4bMCql2n6A5RIK3PhAMaeqPe4qbYoLa2
fkO81IcSewKZOw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:14 2025 by rpki-client