Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
File: 5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft (raw, json)
Hash identifier: 5gMTjtoyGI0An5U2sglDJ+xwOwKpsoucwKWEl3GcSno=
Subject key identifier: 40:4F:6B:3A:67:A3:58:1D:94:DE:B5:B2:D2:64:55:E4:52:79:12:B8
Authority key identifier: E7:3C:F9:43:3E:B8:0F:E9:02:70:84:52:9A:25:41:2D:DF:E5:BD:01
Certificate issuer: /CN=e73cf9433eb80fe9027084529a25412ddfe5bd01
Certificate serial: 0194BBCE0F2E17CDFBFBF5767941B4BCE3A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:31 +0000
Manifest this update: Fri 31 Jan 2025 10:00:31 +0000
Manifest next update: Sat 01 Feb 2025 10:00:31 +0000
Files and hashes: 1: 5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl (hash: 02f8TWkm3G2+1JkHFSK00BpCzhGTVoGt2G0fc4E05aE=)
2: JN_wI5WUBHJd5ainOqfE_dFkzKI.roa (hash: Qg99ezuBzQl9b8N0K6IHfY7xyiyA9XJB6h6HAFx4kIY=)
3: ZFu4lqiYHSirnX-2qpigJJIGgUY.roa (hash: CjUjCiBLDugMPp8rVEARJ3kaatRRwCnXYdU38UIlE5w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0f:2e:17:cd:fb:fb:f5:76:79:41:b4:bc:e3:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73cf9433eb80fe9027084529a25412ddfe5bd01
Validity
Not Before: Jan 31 10:00:31 2025 GMT
Not After : Feb 1 10:00:31 2025 GMT
Subject: CN=404f6b3a67a3581d94deb5b2d26455e4527912b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:04:a2:6b:12:0f:cb:8a:a5:f6:45:db:4a:da:
17:31:78:e5:df:24:d1:fc:9d:6a:ee:d3:c2:41:d4:
11:4c:00:de:04:49:fb:75:1b:0d:26:9a:39:5d:3d:
bb:b1:48:f7:9b:eb:a5:88:71:b8:08:52:4f:7f:0f:
b9:cc:f1:92:d3:4b:d2:1d:86:00:c7:16:f9:64:ef:
de:fa:23:d5:b4:f8:e3:cc:c3:46:07:15:47:75:19:
47:ec:93:c8:94:ce:02:f6:df:ea:d9:c4:18:63:82:
81:ec:6a:1e:40:58:9f:c7:c4:5c:89:e3:0e:11:19:
71:ca:41:23:f0:7a:c1:1f:7d:0e:48:51:95:ac:63:
ef:20:b2:32:09:95:8a:10:2d:6a:ab:b3:3c:b8:4c:
a5:5c:87:1b:c2:29:08:67:a1:6e:b3:15:49:88:f1:
3f:1c:c8:9c:14:df:7d:52:9a:6c:7f:62:ec:4f:74:
69:0c:c2:e4:2c:18:1c:ee:55:a6:b2:f3:97:3f:8a:
e7:04:d4:34:bb:d0:a8:57:e3:f2:4f:7a:33:17:21:
b1:6e:54:2e:17:3f:c1:83:57:0b:ce:a3:56:16:fd:
e5:5d:55:95:a1:fc:b8:b5:12:8a:fb:11:9b:40:e1:
d5:ea:24:8d:41:4e:b9:b1:f0:14:cd:f6:92:b7:7a:
00:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:4F:6B:3A:67:A3:58:1D:94:DE:B5:B2:D2:64:55:E4:52:79:12:B8
X509v3 Authority Key Identifier:
keyid:E7:3C:F9:43:3E:B8:0F:E9:02:70:84:52:9A:25:41:2D:DF:E5:BD:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:51:82:86:44:c2:dc:1a:8b:26:eb:2d:34:57:b9:5c:f0:88:
6f:b2:50:05:e1:65:ec:b8:61:60:08:0f:4d:f5:a0:97:19:ed:
b8:ae:cf:ab:6e:4d:6d:5e:ac:31:cf:e5:99:bc:a4:7f:d0:0c:
eb:0c:be:8c:cb:c5:72:54:98:d3:48:3f:cf:6e:b0:54:43:94:
4b:16:00:61:1a:de:2b:4b:37:43:aa:7a:0d:b9:ca:7b:7b:53:
94:0b:b9:29:fd:b6:be:ea:8b:4b:be:9f:a0:b8:09:f3:7b:aa:
a6:1d:24:59:66:1a:85:82:22:84:d1:7b:06:b1:3a:55:54:a8:
bc:9f:ac:bf:8f:4f:60:51:1d:1e:65:72:4c:6b:31:2d:a9:4f:
91:dc:b2:ce:5f:45:90:2e:9e:d0:cb:1e:5a:3b:6b:e9:c5:b5:
fa:6c:a9:93:dd:13:e4:50:4f:3c:d3:e6:28:dd:c1:a9:3f:07:
62:24:08:e0:32:fa:b3:00:f6:59:cd:53:78:00:b7:41:b2:e0:
f7:7e:21:11:7b:35:51:90:c6:df:89:68:67:bb:59:36:51:6b:
9b:39:58:55:e0:fd:83:6d:43:5e:cb:1c:fb:18:c4:db:a2:84:
49:04:99:4b:39:c2:45:ed:71:59:5d:12:fc:f0:79:57:55:50:
dd:4d:ea:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zg8uF837+/V2eUG0vOOiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3M2NmOTQzM2ViODBmZTkwMjcwODQ1MjlhMjU0MTJkZGZl
NWJkMDEwHhcNMjUwMTMxMTAwMDMxWhcNMjUwMjAxMTAwMDMxWjAzMTEwLwYDVQQD
Eyg0MDRmNmIzYTY3YTM1ODFkOTRkZWI1YjJkMjY0NTVlNDUyNzkxMmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wSiaxIPy4ql9kXbStoXMXjl3yTR
/J1q7tPCQdQRTADeBEn7dRsNJpo5XT27sUj3m+uliHG4CFJPfw+5zPGS00vSHYYA
xxb5ZO/e+iPVtPjjzMNGBxVHdRlH7JPIlM4C9t/q2cQYY4KB7GoeQFifx8RcieMO
ERlxykEj8HrBH30OSFGVrGPvILIyCZWKEC1qq7M8uEylXIcbwikIZ6FusxVJiPE/
HMicFN99Uppsf2LsT3RpDMLkLBgc7lWmsvOXP4rnBNQ0u9CoV+PyT3ozFyGxblQu
Fz/Bg1cLzqNWFv3lXVWVofy4tRKK+xGbQOHV6iSNQU65sfAUzfaSt3oAJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEBPazpno1gdlN61stJkVeRSeRK4MB8GA1UdIwQY
MBaAFOc8+UM+uA/pAnCEUpolQS3f5b0BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXp6NVF6NjRELWtDY0lSU21pVkJMZF9sdlFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni84MTdjMTQtYjgwMC00YzE1LWE4OWUt
NzA0ZjI2MzM4OWUyLzEvNXp6NVF6NjRELWtDY0lSU21pVkJMZF9sdlFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni84MTdjMTQtYjgwMC00YzE1LWE4OWUtNzA0ZjI2MzM4OWUy
LzEvNXp6NVF6NjRELWtDY0lSU21pVkJMZF9sdlFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs1GChkTC
3BqLJustNFe5XPCIb7JQBeFl7LhhYAgPTfWglxntuK7Pq25NbV6sMc/lmbykf9AM
6wy+jMvFclSY00g/z26wVEOUSxYAYRreK0s3Q6p6DbnKe3tTlAu5Kf22vuqLS76f
oLgJ83uqph0kWWYahYIihNF7BrE6VVSovJ+sv49PYFEdHmVyTGsxLalPkdyyzl9F
kC6e0MseWjtr6cW1+mypk90T5FBPPNPmKN3BqT8HYiQI4DL6swD2Wc1TeAC3QbLg
934hEXs1UZDG34loZ7tZNlFrmzlYVeD9g21DXssc+xjE26KESQSZSznCRe1xWV0S
/PB5V1VQ3U3qkA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:03 2025 by rpki-client