Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.mft
File: 5EV2NuWtZuHw-7LBDfKQleY-mS8.mft (raw, json)
Hash identifier: Uoso5wPiv6s0d2rxrp3xvKZcVLr6co4GxnPiNqmaZaI=
Subject key identifier: 2F:DF:38:A6:1D:75:BE:56:FB:BA:2E:B4:A8:6B:4A:7E:D3:7C:5B:6D
Authority key identifier: E4:45:76:36:E5:AD:66:E1:F0:FB:B2:C1:0D:F2:90:95:E6:3E:99:2F
Certificate issuer: /CN=e4457636e5ad66e1f0fbb2c10df29095e63e992f
Certificate serial: 0194BD17D5B50B121AA2AD5447B949FD0DB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5EV2NuWtZuHw-7LBDfKQleY-mS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.mft
Manifest number: 0DB0
Signing time: Fri 31 Jan 2025 16:00:43 +0000
Manifest this update: Fri 31 Jan 2025 16:00:43 +0000
Manifest next update: Sat 01 Feb 2025 16:00:43 +0000
Files and hashes: 1: 5EV2NuWtZuHw-7LBDfKQleY-mS8.crl (hash: ovGq+r0/gn5hdp0sT3eKFlx4AJVk7EJ3RwC285+az0w=)
2: 7dpbzZX7eYfnBG7vQSonxLufldI.roa (hash: MAdnQYRbZ0ATJEdytmIxDRxyJPZ/GK0bSNF0Uiu38tw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d5:b5:0b:12:1a:a2:ad:54:47:b9:49:fd:0d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4457636e5ad66e1f0fbb2c10df29095e63e992f
Validity
Not Before: Jan 31 16:00:43 2025 GMT
Not After : Feb 1 16:00:43 2025 GMT
Subject: CN=2fdf38a61d75be56fbba2eb4a86b4a7ed37c5b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:42:26:79:49:d5:70:9c:29:11:92:da:13:d7:
90:8e:d1:10:14:3c:0f:f0:f6:18:c7:76:df:29:45:
96:9d:33:d9:8c:35:e7:3f:92:b5:3e:69:ac:05:db:
36:a2:b2:66:c2:c5:13:ec:38:20:8c:b8:ff:33:9e:
2d:74:5f:d4:72:75:c7:9a:55:0d:a9:99:22:7b:81:
32:96:c0:7f:23:53:53:e4:e3:5c:86:9a:84:83:57:
5c:33:0e:0b:03:b2:e0:99:e7:cd:03:1b:45:14:66:
20:9d:b3:3a:63:ec:bd:b5:94:9d:3b:c8:43:cf:a0:
6b:4a:a8:5d:6c:fc:cd:ae:5d:20:82:fc:61:29:72:
35:1f:a6:d1:d6:18:06:b7:f6:e1:18:5c:f1:7e:71:
d2:26:5c:c5:18:b5:00:ac:bf:e9:a4:37:29:62:98:
36:da:e8:ab:0f:55:dc:91:d3:4d:80:50:f0:cb:7d:
f7:40:ba:ae:a8:4a:6a:ea:b4:00:79:7b:eb:56:3c:
2b:7a:55:20:64:1d:9d:d3:f3:0e:19:71:1b:c0:35:
5c:07:7b:3a:66:f2:27:83:b1:2e:73:be:be:c7:e8:
90:95:51:fc:2a:1b:aa:b6:09:fa:a5:14:b6:45:d6:
fa:55:83:2e:40:47:8c:40:a8:44:ee:16:79:f3:6e:
a4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DF:38:A6:1D:75:BE:56:FB:BA:2E:B4:A8:6B:4A:7E:D3:7C:5B:6D
X509v3 Authority Key Identifier:
keyid:E4:45:76:36:E5:AD:66:E1:F0:FB:B2:C1:0D:F2:90:95:E6:3E:99:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5EV2NuWtZuHw-7LBDfKQleY-mS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8c9f19-a700-4832-be21-b0d5e8be853c/1/5EV2NuWtZuHw-7LBDfKQleY-mS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:4a:22:b9:67:4d:82:01:67:d2:5f:c9:7a:1c:61:3b:d3:35:
86:76:b7:bd:0f:4f:d3:8f:bf:2a:97:b9:d5:64:ed:1c:79:d3:
23:ab:fc:21:22:f0:c2:49:c6:6d:3d:1f:99:f2:36:8f:2b:62:
40:54:5f:08:e1:ce:30:46:c1:34:4e:ad:90:44:3a:43:8e:ea:
b1:e8:cf:23:8a:ba:1e:5f:ab:2f:69:c4:84:71:4d:6f:dd:b2:
a0:4f:1b:2c:a6:1f:44:c1:d0:6f:5c:3b:a4:d3:3b:3f:b0:7b:
84:b9:44:8b:e8:2d:9d:74:96:75:f0:39:21:8c:46:7d:4e:11:
70:c5:8f:77:52:52:03:13:12:ba:d3:6a:35:56:50:82:cd:b2:
03:a9:22:74:22:01:be:ee:a3:bd:0e:53:4c:b3:8e:cb:c5:e7:
cd:0e:ac:fb:41:22:32:da:4d:45:18:89:bf:e0:0f:87:3f:eb:
6f:09:49:a7:e1:6f:05:33:ac:5b:e3:a5:bb:f5:43:25:c7:ef:
18:b8:7d:9e:95:dc:a2:a4:e1:73:da:a4:c6:eb:ae:f1:72:42:
ec:b1:e2:4a:3f:72:02:24:9f:28:10:9b:3e:86:50:92:91:2a:
7d:c8:5b:9e:cc:3f:f3:b1:31:51:6b:9b:eb:1b:90:98:f7:62:
0f:cb:71:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F9W1CxIaoq1UR7lJ/Q2xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NDU3NjM2ZTVhZDY2ZTFmMGZiYjJjMTBkZjI5MDk1ZTYz
ZTk5MmYwHhcNMjUwMTMxMTYwMDQzWhcNMjUwMjAxMTYwMDQzWjAzMTEwLwYDVQQD
EygyZmRmMzhhNjFkNzViZTU2ZmJiYTJlYjRhODZiNGE3ZWQzN2M1YjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkImeUnVcJwpEZLaE9eQjtEQFDwP
8PYYx3bfKUWWnTPZjDXnP5K1PmmsBds2orJmwsUT7DggjLj/M54tdF/UcnXHmlUN
qZkie4EylsB/I1NT5ONchpqEg1dcMw4LA7LgmefNAxtFFGYgnbM6Y+y9tZSdO8hD
z6BrSqhdbPzNrl0ggvxhKXI1H6bR1hgGt/bhGFzxfnHSJlzFGLUArL/ppDcpYpg2
2uirD1XckdNNgFDwy333QLquqEpq6rQAeXvrVjwrelUgZB2d0/MOGXEbwDVcB3s6
ZvIng7Euc76+x+iQlVH8Khuqtgn6pRS2Rdb6VYMuQEeMQKhE7hZ5826kPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC/fOKYddb5W+7outKhrSn7TfFttMB8GA1UdIwQY
MBaAFORFdjblrWbh8PuywQ3ykJXmPpkvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUVWMk51V3RadUh3LTdMQkRmS1FsZVktbVM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS84YzlmMTktYTcwMC00ODMyLWJlMjEt
YjBkNWU4YmU4NTNjLzEvNUVWMk51V3RadUh3LTdMQkRmS1FsZVktbVM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS84YzlmMTktYTcwMC00ODMyLWJlMjEtYjBkNWU4YmU4NTNj
LzEvNUVWMk51V3RadUh3LTdMQkRmS1FsZVktbVM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAckoiuWdN
ggFn0l/JehxhO9M1hna3vQ9P04+/Kpe51WTtHHnTI6v8ISLwwknGbT0fmfI2jyti
QFRfCOHOMEbBNE6tkEQ6Q47qsejPI4q6Hl+rL2nEhHFNb92yoE8bLKYfRMHQb1w7
pNM7P7B7hLlEi+gtnXSWdfA5IYxGfU4RcMWPd1JSAxMSutNqNVZQgs2yA6kidCIB
vu6jvQ5TTLOOy8XnzQ6s+0EiMtpNRRiJv+APhz/rbwlJp+FvBTOsW+Olu/VDJcfv
GLh9npXcoqThc9qkxuuu8XJC7LHiSj9yAiSfKBCbPoZQkpEqfchbnsw/87ExUWub
6xuQmPdiD8txwQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:57 2025 by rpki-client