Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
File: 5wb8lykDS_sEZN1MmF8UuiEOgeM.mft (raw, json)
Hash identifier: qr8oTSvmBqLHdezkG3OuAntt2kuFWMlyTERoaDLbJig=
Subject key identifier: 41:8F:34:E9:C6:32:A0:E9:1F:3D:27:40:81:30:12:5C:99:C2:7E:EA
Authority key identifier: E7:06:FC:97:29:03:4B:FB:04:64:DD:4C:98:5F:14:BA:21:0E:81:E3
Certificate issuer: /CN=e706fc9729034bfb0464dd4c985f14ba210e81e3
Certificate serial: 0194BC04FB4057D3460B1CDD1A9384383D06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
Manifest number: 11E7
Signing time: Fri 31 Jan 2025 11:00:30 +0000
Manifest this update: Fri 31 Jan 2025 11:00:30 +0000
Manifest next update: Sat 01 Feb 2025 11:00:30 +0000
Files and hashes: 1: 5wb8lykDS_sEZN1MmF8UuiEOgeM.crl (hash: M8WH0+PP7tlqpPIr5MpMcCqdasgl6cSNQfazZuEAmyw=)
2: b37_mvewRVwCg1bn4EBDzO-L-T4.roa (hash: Se2kErf9iBL4UpQAgg1UiulAV/XRVJ5FdDxPc7oRHW0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:fb:40:57:d3:46:0b:1c:dd:1a:93:84:38:3d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e706fc9729034bfb0464dd4c985f14ba210e81e3
Validity
Not Before: Jan 31 11:00:30 2025 GMT
Not After : Feb 1 11:00:30 2025 GMT
Subject: CN=418f34e9c632a0e91f3d27408130125c99c27eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:24:51:ce:c0:55:6d:91:ca:81:55:e5:ac:2d:
65:81:41:b6:76:77:51:52:be:86:e1:34:0f:15:9c:
86:4d:08:fc:ea:22:05:39:d7:83:7c:9a:bb:35:5f:
8d:c8:c2:fa:a6:f2:58:c0:ec:cf:79:ad:39:51:8e:
74:7f:d1:bb:c4:f7:3d:21:81:e2:ec:c8:e5:bc:f9:
c2:45:4d:53:3c:42:f1:29:17:5e:0b:a5:e0:3c:b8:
a0:a6:58:36:9c:c3:fe:e4:49:3e:f0:74:75:7f:b6:
73:a3:4e:ac:7e:bc:78:05:3a:62:b9:ad:9d:11:15:
ec:a9:a2:65:ac:92:58:a1:90:05:d5:8e:7c:d0:34:
1e:1f:1a:f8:68:df:60:73:07:45:5e:8c:7d:40:d6:
15:55:ef:12:70:14:3b:bf:fc:f4:22:82:0b:4c:5b:
23:18:8d:79:41:49:90:f1:65:5b:55:54:76:e5:b6:
52:70:e8:2c:91:b4:a8:ee:04:c7:ef:4f:40:af:b3:
19:c4:01:e9:2e:d2:ea:6e:ee:ba:a1:fe:ac:d6:5a:
9c:24:a8:98:c5:fd:84:d5:be:98:6b:a1:06:a4:04:
1a:1a:85:f4:8b:d4:10:b3:7c:69:09:93:11:cb:fb:
e8:3d:7d:e5:2a:08:31:09:39:59:dc:66:1a:11:02:
9c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8F:34:E9:C6:32:A0:E9:1F:3D:27:40:81:30:12:5C:99:C2:7E:EA
X509v3 Authority Key Identifier:
keyid:E7:06:FC:97:29:03:4B:FB:04:64:DD:4C:98:5F:14:BA:21:0E:81:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:3f:c7:30:ab:12:f4:fa:53:29:2f:86:f7:b0:b4:18:27:f3:
f3:ec:8d:97:5b:a7:5d:b8:0e:f8:65:68:0c:9e:0f:84:32:81:
59:81:7a:3f:e0:aa:fd:ac:15:9d:09:0c:49:4b:53:56:cb:43:
de:21:e0:7b:10:71:d5:ee:1c:8e:e8:0b:a9:d0:f2:a0:71:d7:
ee:e5:2c:0d:f8:a9:a6:e0:01:c3:e6:c4:61:82:7c:b9:dc:2b:
2d:b1:9d:60:8a:74:bf:8c:4f:dd:7a:44:87:80:0e:04:19:5a:
9c:82:0e:1c:34:7b:63:a6:07:ba:88:d6:66:88:93:62:3c:1c:
fe:4f:09:9a:f6:56:60:a3:8d:ab:c8:d5:22:8f:b8:2c:aa:68:
68:43:3d:c0:88:18:3e:24:73:bc:60:1c:49:52:d3:29:fc:29:
09:71:a6:54:46:b4:4a:1a:1c:2c:37:e3:f9:ec:58:cc:f9:e0:
ff:23:85:65:35:08:ba:73:5e:b5:f6:a0:e6:0e:2d:6c:25:e9:
b3:48:39:93:eb:0d:2b:10:03:bc:9e:e2:e3:f7:f9:d9:e7:97:
25:4f:c5:77:fd:96:c8:a0:e6:38:fc:1c:f9:2c:19:d6:83:a4:
c2:c2:38:8b:cf:45:52:08:94:be:00:62:e0:78:ea:b8:b0:39:
b2:69:6c:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BPtAV9NGCxzdGpOEOD0GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MDZmYzk3MjkwMzRiZmIwNDY0ZGQ0Yzk4NWYxNGJhMjEw
ZTgxZTMwHhcNMjUwMTMxMTEwMDMwWhcNMjUwMjAxMTEwMDMwWjAzMTEwLwYDVQQD
Eyg0MThmMzRlOWM2MzJhMGU5MWYzZDI3NDA4MTMwMTI1Yzk5YzI3ZWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iRRzsBVbZHKgVXlrC1lgUG2dndR
Ur6G4TQPFZyGTQj86iIFOdeDfJq7NV+NyML6pvJYwOzPea05UY50f9G7xPc9IYHi
7MjlvPnCRU1TPELxKRdeC6XgPLigplg2nMP+5Ek+8HR1f7Zzo06sfrx4BTpiua2d
ERXsqaJlrJJYoZAF1Y580DQeHxr4aN9gcwdFXox9QNYVVe8ScBQ7v/z0IoILTFsj
GI15QUmQ8WVbVVR25bZScOgskbSo7gTH709Ar7MZxAHpLtLqbu66of6s1lqcJKiY
xf2E1b6Ya6EGpAQaGoX0i9QQs3xpCZMRy/voPX3lKggxCTlZ3GYaEQKckwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGPNOnGMqDpHz0nQIEwElyZwn7qMB8GA1UdIwQY
MBaAFOcG/JcpA0v7BGTdTJhfFLohDoHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXdiOGx5a0RTX3NFWk4xTW1GOFV1aUVPZ2VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80NzYzODMtZjZkYS00ZTBlLThlMTIt
ZDJkY2YwNWQzMzc2LzEvNXdiOGx5a0RTX3NFWk4xTW1GOFV1aUVPZ2VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC80NzYzODMtZjZkYS00ZTBlLThlMTItZDJkY2YwNWQzMzc2
LzEvNXdiOGx5a0RTX3NFWk4xTW1GOFV1aUVPZ2VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASD/HMKsS
9PpTKS+G97C0GCfz8+yNl1unXbgO+GVoDJ4PhDKBWYF6P+Cq/awVnQkMSUtTVstD
3iHgexBx1e4cjugLqdDyoHHX7uUsDfippuABw+bEYYJ8udwrLbGdYIp0v4xP3XpE
h4AOBBlanIIOHDR7Y6YHuojWZoiTYjwc/k8JmvZWYKONq8jVIo+4LKpoaEM9wIgY
PiRzvGAcSVLTKfwpCXGmVEa0ShocLDfj+exYzPng/yOFZTUIunNetfag5g4tbCXp
s0g5k+sNKxADvJ7i4/f52eeXJU/Fd/2WyKDmOPwc+SwZ1oOkwsI4i89FUgiUvgBi
4HjquLA5smls7Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:35 2025 by rpki-client