Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
File: 5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft (raw, json)
Hash identifier: dAqX1OnGCz1V2CR2tgGv/QjaOLfOJ+jhxIz4czSznZs=
Subject key identifier: 42:DA:91:62:FF:93:B2:E9:7C:6B:11:0A:8C:25:1A:7C:78:E8:22:42
Authority key identifier: E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02
Certificate issuer: /CN=e5503498ff185d0c607353f43f55e911f62a6802
Certificate serial: 0194BD180285795B7414D8100A7502CFA8B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
Manifest number: 143B
Signing time: Fri 31 Jan 2025 16:00:54 +0000
Manifest this update: Fri 31 Jan 2025 16:00:54 +0000
Manifest next update: Sat 01 Feb 2025 16:00:54 +0000
Files and hashes: 1: 5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl (hash: pt62ubJzsLlcROigUw4zbh/EO7GzZn784hdxGwG1gBs=)
2: KZNT-sZZNOeQ3ZQO6BjaXLuoD9g.roa (hash: +2sZTVLc367S2ob/w+tSdpZn/g4nvkTyjPLtfOVjhN8=)
3: o-NtXLRHL-S0Y-O2GlCnHQAffNw.roa (hash: dxc+WfWonf57/frz8JHxuwGakdxRPwah5tbEWGWiZgY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:18:02:85:79:5b:74:14:d8:10:0a:75:02:cf:a8:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5503498ff185d0c607353f43f55e911f62a6802
Validity
Not Before: Jan 31 16:00:54 2025 GMT
Not After : Feb 1 16:00:54 2025 GMT
Subject: CN=42da9162ff93b2e97c6b110a8c251a7c78e82242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6a:cf:b2:25:58:35:e9:88:e9:de:57:cd:ad:
99:6d:05:e8:77:c7:c4:15:76:f2:06:0c:e6:3c:21:
18:a6:3e:51:06:c4:4d:7e:1d:19:7c:03:2a:a9:37:
37:83:37:b1:63:e5:a7:28:ef:65:6c:6e:c7:30:e8:
19:1e:eb:bc:9b:42:c4:75:9b:74:9f:98:8a:47:6d:
d0:02:70:b9:a0:20:48:0d:a7:4f:11:43:f3:f7:8d:
68:42:24:6d:41:0f:cc:6c:70:7a:7f:cb:26:ad:c4:
27:8b:ec:33:2a:46:73:76:06:87:84:23:37:36:09:
04:06:da:d7:fd:b4:09:07:57:22:b7:65:f9:8d:a2:
aa:53:99:95:32:91:5d:e2:f6:39:78:fa:5a:c2:e5:
45:0d:da:2a:87:ab:14:c5:44:b9:48:01:54:d7:a4:
8a:05:6a:de:5b:3c:7e:8d:5f:e4:30:4f:f4:e7:2f:
8f:8c:43:47:68:7e:ce:2c:d7:96:4b:39:ab:26:66:
32:7c:a9:6e:a8:d6:ca:2a:88:b0:b4:e2:6e:b3:9a:
56:4f:6e:9e:d4:ec:ff:38:d6:62:11:cc:4f:72:db:
f5:d3:13:23:29:ba:62:1f:9a:29:11:3f:33:ff:f1:
81:ed:f3:89:32:b7:5b:5a:35:95:ed:7f:73:fd:a7:
da:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DA:91:62:FF:93:B2:E9:7C:6B:11:0A:8C:25:1A:7C:78:E8:22:42
X509v3 Authority Key Identifier:
keyid:E5:50:34:98:FF:18:5D:0C:60:73:53:F4:3F:55:E9:11:F6:2A:68:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VA0mP8YXQxgc1P0P1XpEfYqaAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/97b0bc-f4f8-4f90-8554-1e279f7b6023/1/5VA0mP8YXQxgc1P0P1XpEfYqaAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:97:dd:07:77:d2:d1:57:fd:c1:3e:6f:51:a3:bd:bd:2b:7a:
82:11:b6:03:34:ae:35:7c:a0:ff:d9:23:1a:89:1f:e3:20:ae:
bb:83:d3:1a:eb:fb:11:35:6c:bc:2b:fe:33:3e:c7:f4:e1:18:
8c:31:92:82:36:62:0b:10:50:d6:5b:61:89:22:05:f9:6f:fb:
9f:57:09:e8:1e:d0:40:57:96:80:72:42:95:93:7e:36:14:3f:
ea:da:a5:b0:97:a4:88:e9:ac:07:d0:6a:0a:3e:5d:cd:53:c5:
cd:9a:fb:d0:ff:9e:78:aa:f8:93:cd:06:14:5a:77:53:60:3d:
a0:43:55:af:13:c4:a5:2d:37:0d:f1:d1:31:59:38:db:d3:87:
72:9f:90:15:9b:7f:4c:a8:c3:e6:70:d3:bf:75:49:55:c5:06:
a3:f1:04:c8:ac:71:9c:2d:fc:78:a1:63:21:34:65:08:df:14:
b7:09:0a:44:95:a8:10:87:72:4c:92:59:8c:e3:c9:ab:a4:b2:
4c:27:60:f1:3a:05:06:de:c7:4f:e6:4d:d2:a5:01:62:2e:1f:
c9:b3:df:32:ed:21:33:d9:49:3c:c2:39:f3:71:6f:6e:5e:60:
dd:ee:aa:3a:ca:47:bd:0c:05:5f:c0:70:47:81:d3:a2:bb:c6:
93:28:09:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9GAKFeVt0FNgQCnUCz6iyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NTAzNDk4ZmYxODVkMGM2MDczNTNmNDNmNTVlOTExZjYy
YTY4MDIwHhcNMjUwMTMxMTYwMDU0WhcNMjUwMjAxMTYwMDU0WjAzMTEwLwYDVQQD
Eyg0MmRhOTE2MmZmOTNiMmU5N2M2YjExMGE4YzI1MWE3Yzc4ZTgyMjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGrPsiVYNemI6d5Xza2ZbQXod8fE
FXbyBgzmPCEYpj5RBsRNfh0ZfAMqqTc3gzexY+WnKO9lbG7HMOgZHuu8m0LEdZt0
n5iKR23QAnC5oCBIDadPEUPz941oQiRtQQ/MbHB6f8smrcQni+wzKkZzdgaHhCM3
NgkEBtrX/bQJB1cit2X5jaKqU5mVMpFd4vY5ePpawuVFDdoqh6sUxUS5SAFU16SK
BWreWzx+jV/kME/05y+PjENHaH7OLNeWSzmrJmYyfKluqNbKKoiwtOJus5pWT26e
1Oz/ONZiEcxPctv10xMjKbpiH5opET8z//GB7fOJMrdbWjWV7X9z/afaKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELakWL/k7LpfGsRCowlGnx46CJCMB8GA1UdIwQY
MBaAFOVQNJj/GF0MYHNT9D9V6RH2KmgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVZBMG1QOFlYUXhnYzFQMFAxWHBFZllxYUFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC85N2IwYmMtZjRmOC00ZjkwLTg1NTQt
MWUyNzlmN2I2MDIzLzEvNVZBMG1QOFlYUXhnYzFQMFAxWHBFZllxYUFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC85N2IwYmMtZjRmOC00ZjkwLTg1NTQtMWUyNzlmN2I2MDIz
LzEvNVZBMG1QOFlYUXhnYzFQMFAxWHBFZllxYUFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU5fdB3fS
0Vf9wT5vUaO9vSt6ghG2AzSuNXyg/9kjGokf4yCuu4PTGuv7ETVsvCv+Mz7H9OEY
jDGSgjZiCxBQ1lthiSIF+W/7n1cJ6B7QQFeWgHJClZN+NhQ/6tqlsJekiOmsB9Bq
Cj5dzVPFzZr70P+eeKr4k80GFFp3U2A9oENVrxPEpS03DfHRMVk429OHcp+QFZt/
TKjD5nDTv3VJVcUGo/EEyKxxnC38eKFjITRlCN8UtwkKRJWoEIdyTJJZjOPJq6Sy
TCdg8ToFBt7HT+ZN0qUBYi4fybPfMu0hM9lJPMI583Fvbl5g3e6qOspHvQwFX8Bw
R4HTorvGkygJdQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:27:53 2025 by rpki-client