Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
File: 5mNquBo0Op_9glfqyx3exTiWaAQ.mft (raw, json)
Hash identifier: FSYmM04KmKgoUFeu7KgJI4M5IXKw4D73Bki+eeljTuc=
Subject key identifier: 2B:2B:7B:10:DB:97:E9:9C:BB:FB:4B:F3:1A:80:36:B5:55:B7:1B:CE
Authority key identifier: E6:63:6A:B8:1A:34:3A:9F:FD:82:57:EA:CB:1D:DE:C5:38:96:68:04
Certificate issuer: /CN=e6636ab81a343a9ffd8257eacb1ddec538966804
Certificate serial: 0194BCE0E8C1AC8FADD4B24A30512DFB83E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
Manifest number: 0EAF
Signing time: Fri 31 Jan 2025 15:00:43 +0000
Manifest this update: Fri 31 Jan 2025 15:00:43 +0000
Manifest next update: Sat 01 Feb 2025 15:00:43 +0000
Files and hashes: 1: 5mNquBo0Op_9glfqyx3exTiWaAQ.crl (hash: oCOcHQz3trG5NIIz5hzgBK821ocmjEf/bc5XSdtpg/w=)
2: qBH3YGMaFK7YFVrKhQ5pFdeSVI0.roa (hash: 0gWn80uN/F/B7m+caBdi8E0X9ChrpKW2B3Hw8j3IN30=)
3: vMTodOq6xsRuVpjojWIKyaTkK_Y.roa (hash: wkJrOUu2B+xH8ypfmdsSGQvJ0AuehbonV39UjaZS0FA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e8:c1:ac:8f:ad:d4:b2:4a:30:51:2d:fb:83:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6636ab81a343a9ffd8257eacb1ddec538966804
Validity
Not Before: Jan 31 15:00:43 2025 GMT
Not After : Feb 1 15:00:43 2025 GMT
Subject: CN=2b2b7b10db97e99cbbfb4bf31a8036b555b71bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f0:97:85:1e:0f:77:13:48:da:ac:97:4b:31:
3c:e3:3a:d1:35:a7:53:18:1a:93:0f:3c:9b:a5:11:
e3:be:42:fe:e9:37:3c:60:c2:3f:c2:b3:f2:49:9e:
b4:fc:f5:46:b0:5a:99:04:b2:58:85:2e:d0:f7:1b:
2a:2e:4a:ee:0a:fa:90:cd:42:e1:5e:76:f6:1d:ec:
30:c2:39:90:02:b8:b1:b9:f9:48:f3:87:29:44:48:
e1:c0:ad:f5:50:22:3a:61:5e:2b:9e:e8:63:e7:11:
fa:2d:33:3e:24:7a:e9:19:17:c4:b9:53:b2:df:c5:
80:2d:8c:73:50:12:50:75:11:aa:c9:9d:95:f9:08:
f3:c6:f6:ce:4f:00:83:11:fd:85:46:d8:82:cb:91:
66:87:83:d2:98:02:4e:1c:22:21:66:09:93:9f:50:
4c:38:0b:65:fb:ca:46:49:9a:8f:1e:18:47:bd:2f:
c5:42:c4:d9:ec:70:f4:c6:7c:6a:50:6e:59:6e:52:
78:b3:28:98:c6:ec:60:3c:47:74:07:1f:26:77:ca:
4e:65:cc:37:e8:3f:99:5c:65:f4:98:7c:ac:57:03:
aa:36:12:63:ba:85:e9:70:49:89:e3:4f:72:f5:7d:
72:4e:2e:5f:5c:3e:f8:9e:4e:96:5f:f9:69:b3:d2:
56:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2B:7B:10:DB:97:E9:9C:BB:FB:4B:F3:1A:80:36:B5:55:B7:1B:CE
X509v3 Authority Key Identifier:
keyid:E6:63:6A:B8:1A:34:3A:9F:FD:82:57:EA:CB:1D:DE:C5:38:96:68:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5mNquBo0Op_9glfqyx3exTiWaAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1455d2-724a-439e-96ed-9876aebbd2c9/1/5mNquBo0Op_9glfqyx3exTiWaAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:16:9d:45:f4:1f:ba:c3:16:a2:89:e1:ad:84:a5:a5:0d:ad:
4c:48:f0:a3:f1:01:d5:01:8f:7d:41:d3:8c:20:97:c5:e1:9a:
32:e7:72:de:ae:c3:30:e7:45:bb:30:f2:b8:66:59:9f:f4:85:
c8:5f:5e:ed:8a:04:c4:5f:1d:7a:dc:ec:71:5d:5a:d2:f6:26:
87:ac:00:51:13:8e:92:ec:40:90:7f:1a:1c:a6:ad:cc:63:25:
a5:f8:0f:6b:7b:27:1c:19:1d:82:c4:b4:82:13:44:7a:62:7f:
cb:88:ef:8d:12:21:50:a3:8a:c0:53:c8:7a:91:37:d7:b3:73:
ba:f0:fe:f9:86:8c:95:cd:15:f3:e4:a4:d3:8a:2e:d0:b1:c1:
1d:45:32:02:6c:29:58:36:49:a3:ef:d9:31:8a:a6:f7:fc:f5:
2b:f1:25:2c:fd:68:56:aa:78:eb:02:7b:ac:96:34:bd:73:f0:
53:7c:43:06:6e:42:a5:85:93:c8:f2:0e:eb:73:38:13:55:72:
87:cd:ed:f9:c5:e6:ca:94:b3:40:f1:9a:1c:1b:0b:bc:6c:f6:
46:22:35:f5:81:68:94:21:f5:b9:52:a7:ca:87:6b:15:6c:8c:
97:8e:3d:21:99:91:b1:85:80:05:97:a3:56:1c:a1:6f:94:79:
80:9c:5f:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84OjBrI+t1LJKMFEt+4PjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2NjM2YWI4MWEzNDNhOWZmZDgyNTdlYWNiMWRkZWM1Mzg5
NjY4MDQwHhcNMjUwMTMxMTUwMDQzWhcNMjUwMjAxMTUwMDQzWjAzMTEwLwYDVQQD
EygyYjJiN2IxMGRiOTdlOTljYmJmYjRiZjMxYTgwMzZiNTU1YjcxYmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfCXhR4PdxNI2qyXSzE84zrRNadT
GBqTDzybpRHjvkL+6Tc8YMI/wrPySZ60/PVGsFqZBLJYhS7Q9xsqLkruCvqQzULh
Xnb2HewwwjmQArixuflI84cpREjhwK31UCI6YV4rnuhj5xH6LTM+JHrpGRfEuVOy
38WALYxzUBJQdRGqyZ2V+QjzxvbOTwCDEf2FRtiCy5Fmh4PSmAJOHCIhZgmTn1BM
OAtl+8pGSZqPHhhHvS/FQsTZ7HD0xnxqUG5ZblJ4syiYxuxgPEd0Bx8md8pOZcw3
6D+ZXGX0mHysVwOqNhJjuoXpcEmJ409y9X1yTi5fXD74nk6WX/lps9JWwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCsrexDbl+mcu/tL8xqANrVVtxvOMB8GA1UdIwQY
MBaAFOZjargaNDqf/YJX6ssd3sU4lmgEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW1OcXVCbzBPcF85Z2xmcXl4M2V4VGlXYUFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8xNDU1ZDItNzI0YS00MzllLTk2ZWQt
OTg3NmFlYmJkMmM5LzEvNW1OcXVCbzBPcF85Z2xmcXl4M2V4VGlXYUFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8xNDU1ZDItNzI0YS00MzllLTk2ZWQtOTg3NmFlYmJkMmM5
LzEvNW1OcXVCbzBPcF85Z2xmcXl4M2V4VGlXYUFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlRadRfQf
usMWoonhrYSlpQ2tTEjwo/EB1QGPfUHTjCCXxeGaMudy3q7DMOdFuzDyuGZZn/SF
yF9e7YoExF8detzscV1a0vYmh6wAUROOkuxAkH8aHKatzGMlpfgPa3snHBkdgsS0
ghNEemJ/y4jvjRIhUKOKwFPIepE317NzuvD++YaMlc0V8+Sk04ou0LHBHUUyAmwp
WDZJo+/ZMYqm9/z1K/ElLP1oVqp46wJ7rJY0vXPwU3xDBm5CpYWTyPIO63M4E1Vy
h83t+cXmypSzQPGaHBsLvGz2RiI19YFolCH1uVKnyodrFWyMl449IZmRsYWABZej
Vhyhb5R5gJxfNQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:19 2025 by rpki-client