Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
File: 2518V3FO9A_bAWXcGYRYDOHVkGs.mft (raw, json)
Hash identifier: 1clpwpqn3+TVtfvuMGfJz4ftaJnAg8OhnsizGtNBd+Q=
Subject key identifier: 89:5A:6C:78:53:0A:C4:FA:43:72:19:13:AA:61:A7:33:DB:90:C5:39
Authority key identifier: DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
Certificate issuer: /CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Certificate serial: 0194BC72D02B7EA4CB78AE9640AB0984DD62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
Manifest number: 054F
Signing time: Fri 31 Jan 2025 13:00:28 +0000
Manifest this update: Fri 31 Jan 2025 13:00:28 +0000
Manifest next update: Sat 01 Feb 2025 13:00:28 +0000
Files and hashes: 1: 2518V3FO9A_bAWXcGYRYDOHVkGs.crl (hash: JfI8qFUGi0Ul0BMxPCmPz08KMl1v/fMhziwE22lcNRU=)
2: ZCxXOfPObH4boT7reY7sJ5pWUzU.roa (hash: Tbh3eBRkhC/IgUecypI3j1+I4M5Pu1MDDQCmicyE7ec=)
3: rxFd7eqhMDq90CR2tb_lKkld3Lk.roa (hash: wqrxOaDhbmrdzLDEWz1pB4UyOw4VsIT4K3MNi4YvwdU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d0:2b:7e:a4:cb:78:ae:96:40:ab:09:84:dd:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d7c57714ef40fdb0165dc1984580ce1d5906b
Validity
Not Before: Jan 31 13:00:28 2025 GMT
Not After : Feb 1 13:00:28 2025 GMT
Subject: CN=895a6c78530ac4fa43721913aa61a733db90c539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ee:ca:a5:27:14:f1:97:4c:75:c5:c5:a7:ac:
92:30:29:d9:56:05:68:07:4b:74:c9:13:c7:f4:f9:
17:40:b6:28:2c:e4:89:c2:2d:52:a7:a5:43:f5:cd:
b7:3f:c3:91:e7:1f:a0:54:0d:9c:8e:a3:fa:71:76:
c2:b7:79:53:44:58:f6:bb:cb:85:7c:3b:0e:6f:b9:
e3:59:26:76:0f:22:08:af:81:b1:2b:25:b2:5a:19:
b2:4d:cd:81:b3:ce:fe:eb:de:94:f5:09:af:5f:be:
b7:ed:ae:f4:f3:1b:7c:a8:cb:6a:0e:42:ab:1d:85:
72:df:63:f4:8b:bd:b0:b3:0e:d5:d5:19:ea:d6:b3:
08:f0:a5:6e:bd:2f:a0:78:79:33:38:b7:8a:20:09:
37:6a:f6:d6:0d:34:0e:e4:7b:d1:db:d0:8f:e9:f2:
23:64:40:72:2e:bb:e9:77:c1:0a:30:55:77:02:16:
0d:b2:df:0b:fd:57:b5:2f:96:ca:48:8e:ee:8d:31:
25:96:ca:bc:88:ce:b3:ad:3f:5f:0c:c0:df:9f:62:
2d:7c:0d:49:23:c8:43:e3:89:7e:47:fd:05:ae:3f:
50:35:24:c1:51:13:1b:b3:3f:5d:1e:52:c2:27:0d:
e3:7e:6d:67:d5:bc:45:06:59:0a:10:bd:03:3e:93:
b2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5A:6C:78:53:0A:C4:FA:43:72:19:13:AA:61:A7:33:DB:90:C5:39
X509v3 Authority Key Identifier:
keyid:DB:9D:7C:57:71:4E:F4:0F:DB:01:65:DC:19:84:58:0C:E1:D5:90:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2518V3FO9A_bAWXcGYRYDOHVkGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e76fc-14a6-4269-8245-f0781a63e440/1/2518V3FO9A_bAWXcGYRYDOHVkGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:25:61:49:e4:2b:d5:d1:f6:5b:11:1e:5c:86:d9:91:a9:ab:
4a:98:48:2e:7d:89:6e:12:51:9c:4e:da:30:cf:1c:17:29:25:
15:89:67:2e:df:4f:cf:ed:65:aa:e2:c1:75:56:44:43:64:e0:
56:71:77:aa:69:8e:24:ef:d3:6e:15:55:21:1a:3d:d5:70:14:
b7:ea:3a:81:22:b1:36:ac:c7:de:7b:4e:6a:da:0f:bb:8a:9e:
d3:b9:b9:d2:91:fa:74:e1:9f:4e:6c:e5:00:f7:af:75:06:fb:
ee:00:c2:dc:0e:4b:84:a1:ce:a7:31:5a:7a:3f:26:13:18:83:
37:a2:72:91:04:c5:8a:f8:2a:53:e7:15:0d:3c:e1:f2:14:11:
d6:e5:9f:ab:3d:30:87:a3:98:2f:b2:e2:d1:90:b1:38:d5:3c:
81:98:1f:2b:fc:12:e0:76:c8:84:76:f3:f6:51:22:64:f7:88:
4f:43:5f:0a:52:96:d3:3c:ed:cf:59:cd:ec:13:72:16:bf:4c:
99:98:a1:c2:6c:43:c7:36:15:fa:35:0e:d1:ae:f2:ce:5d:4b:
d6:d8:48:4a:f4:86:91:f8:11:7e:e8:1d:92:f9:f8:ef:ac:b4:
a2:86:0c:15:fb:ce:55:b9:65:2a:78:85:f0:86:e7:2d:de:0b:
f9:34:ae:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8ctArfqTLeK6WQKsJhN1iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOWQ3YzU3NzE0ZWY0MGZkYjAxNjVkYzE5ODQ1ODBjZTFk
NTkwNmIwHhcNMjUwMTMxMTMwMDI4WhcNMjUwMjAxMTMwMDI4WjAzMTEwLwYDVQQD
Eyg4OTVhNmM3ODUzMGFjNGZhNDM3MjE5MTNhYTYxYTczM2RiOTBjNTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzu7KpScU8ZdMdcXFp6ySMCnZVgVo
B0t0yRPH9PkXQLYoLOSJwi1Sp6VD9c23P8OR5x+gVA2cjqP6cXbCt3lTRFj2u8uF
fDsOb7njWSZ2DyIIr4GxKyWyWhmyTc2Bs87+696U9QmvX7637a708xt8qMtqDkKr
HYVy32P0i72wsw7V1Rnq1rMI8KVuvS+geHkzOLeKIAk3avbWDTQO5HvR29CP6fIj
ZEByLrvpd8EKMFV3AhYNst8L/Ve1L5bKSI7ujTEllsq8iM6zrT9fDMDfn2ItfA1J
I8hD44l+R/0Frj9QNSTBURMbsz9dHlLCJw3jfm1n1bxFBlkKEL0DPpOyDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIlabHhTCsT6Q3IZE6phpzPbkMU5MB8GA1UdIwQY
MBaAFNudfFdxTvQP2wFl3BmEWAzh1ZBrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjUxOFYzRk85QV9iQVdYY0dZUllET0hWa0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My83ZTc2ZmMtMTRhNi00MjY5LTgyNDUt
ZjA3ODFhNjNlNDQwLzEvMjUxOFYzRk85QV9iQVdYY0dZUllET0hWa0dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My83ZTc2ZmMtMTRhNi00MjY5LTgyNDUtZjA3ODFhNjNlNDQw
LzEvMjUxOFYzRk85QV9iQVdYY0dZUllET0hWa0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdiVhSeQr
1dH2WxEeXIbZkamrSphILn2JbhJRnE7aMM8cFyklFYlnLt9Pz+1lquLBdVZEQ2Tg
VnF3qmmOJO/TbhVVIRo91XAUt+o6gSKxNqzH3ntOatoPu4qe07m50pH6dOGfTmzl
APevdQb77gDC3A5LhKHOpzFaej8mExiDN6JykQTFivgqU+cVDTzh8hQR1uWfqz0w
h6OYL7Li0ZCxONU8gZgfK/wS4HbIhHbz9lEiZPeIT0NfClKW0zztz1nN7BNyFr9M
mZihwmxDxzYV+jUO0a7yzl1L1thISvSGkfgRfugdkvn476y0ooYMFfvOVbllKniF
8IbnLd4L+TSuew==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:32 2025 by rpki-client