Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft
File: 5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft (raw, json)
Hash identifier: SPd4sZWr7nUVpK/bo6NZHnLtE2DGQ6UHoKI1TmGrL9c=
Subject key identifier: 91:18:EF:87:06:78:25:DE:31:F4:75:33:89:96:A5:2E:77:57:4F:AF
Authority key identifier: E4:67:3E:6D:6E:1C:F6:F6:01:15:E3:05:08:BE:15:BB:BF:E5:EA:AD
Certificate issuer: /CN=e4673e6d6e1cf6f60115e30508be15bbbfe5eaad
Certificate serial: 0194BD858B5EA1746A2624591D8E0788280C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 18:00:33 +0000
Manifest this update: Fri 31 Jan 2025 18:00:33 +0000
Manifest next update: Sat 01 Feb 2025 18:00:33 +0000
Files and hashes: 1: 2OeHcKfmsEyG-2LRs0NWXFV5C60.roa (hash: jZteFmx9inEQsnxXi9EJKFlZraBJ0Xs80P+ZZvDXyxY=)
2: 5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.crl (hash: q2rdCUi8MUR3r4g5//LWfCMDlkhk2BOxs9D6DKkjmec=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8b:5e:a1:74:6a:26:24:59:1d:8e:07:88:28:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4673e6d6e1cf6f60115e30508be15bbbfe5eaad
Validity
Not Before: Jan 31 18:00:33 2025 GMT
Not After : Feb 1 18:00:33 2025 GMT
Subject: CN=9118ef87067825de31f475338996a52e77574faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:86:b7:2d:83:67:4c:d2:60:ef:ee:46:75:6b:
4f:32:a6:62:57:c6:46:86:4e:aa:7e:b9:64:0f:69:
1c:8c:63:ff:03:4e:e0:bc:b7:d1:b7:25:3e:96:16:
89:6d:84:1f:9a:15:12:60:a8:ca:cf:59:92:40:ac:
a3:8e:a4:5a:11:14:c0:02:b4:ad:4a:d2:db:04:95:
05:57:e0:e4:40:b7:01:0e:9e:d4:af:76:99:b6:f8:
4c:76:a5:c6:ef:65:09:1e:d6:2e:1d:38:f1:b4:d8:
9d:dc:b7:f9:87:d7:21:48:9f:91:31:b0:2b:6b:eb:
67:1a:7c:34:b5:f2:8a:e5:9d:aa:8b:da:76:a4:df:
34:60:7a:64:aa:68:09:ec:6c:45:5a:7a:69:89:b2:
94:75:17:70:99:12:40:16:f0:18:dc:dc:50:bb:c7:
34:21:b8:3e:99:98:06:46:71:90:28:8b:62:44:56:
7c:72:86:1b:24:c7:5d:a6:87:26:40:de:5e:c6:18:
6d:e4:8c:1c:fa:0c:c1:18:f7:1d:74:49:50:33:6d:
5a:7c:ad:44:c2:29:95:73:dc:9e:30:ce:18:9e:16:
3a:1c:67:85:35:b3:94:e5:c3:1c:17:1c:9d:52:97:
20:e1:dd:82:b7:09:df:b6:a2:c2:57:99:0c:0e:76:
00:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:18:EF:87:06:78:25:DE:31:F4:75:33:89:96:A5:2E:77:57:4F:AF
X509v3 Authority Key Identifier:
keyid:E4:67:3E:6D:6E:1C:F6:F6:01:15:E3:05:08:BE:15:BB:BF:E5:EA:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:6f:3b:8e:51:f8:da:9e:36:5d:56:8b:77:f8:6f:45:d9:53:
d4:61:69:28:d4:45:64:58:2d:e5:5f:55:8e:ce:db:4f:18:ee:
c5:8f:18:83:fc:4c:80:2e:7f:61:54:f1:d9:d2:1e:5c:d3:f8:
b4:af:9c:1c:3f:e3:bf:62:e1:e7:c4:e7:5c:b2:92:7b:e5:f5:
3d:85:a9:99:5c:df:75:74:aa:bf:0c:81:17:65:04:86:29:66:
ae:f7:0f:2e:b8:7a:10:58:7f:8f:2a:09:48:4d:29:33:04:13:
a3:85:ba:28:d2:7c:64:5b:15:0e:20:99:8c:c1:b4:33:c4:41:
43:15:e6:99:22:c0:14:40:d2:e9:3b:3a:11:81:f2:6b:b2:22:
43:82:ed:a9:bc:16:27:ce:b3:24:74:92:45:83:19:df:5d:ab:
d8:b4:96:bc:1a:26:96:23:fa:42:b2:e6:6e:4c:06:b5:27:7e:
11:89:87:46:e7:11:ff:f6:53:63:0d:b0:b0:81:77:b2:ba:0e:
8d:57:c9:a1:19:1b:bf:bd:d2:af:e6:b1:ec:a7:3f:e8:f5:43:
e5:09:3a:ab:20:55:a1:ff:c2:e8:8d:d3:d2:d7:ac:19:e4:86:
24:da:70:c9:22:78:c0:6a:95:1b:9c:16:ce:50:2d:db:1b:d3:
ab:1a:cc:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hYteoXRqJiRZHY4HiCgMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NjczZTZkNmUxY2Y2ZjYwMTE1ZTMwNTA4YmUxNWJiYmZl
NWVhYWQwHhcNMjUwMTMxMTgwMDMzWhcNMjUwMjAxMTgwMDMzWjAzMTEwLwYDVQQD
Eyg5MTE4ZWY4NzA2NzgyNWRlMzFmNDc1MzM4OTk2YTUyZTc3NTc0ZmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oa3LYNnTNJg7+5GdWtPMqZiV8ZG
hk6qfrlkD2kcjGP/A07gvLfRtyU+lhaJbYQfmhUSYKjKz1mSQKyjjqRaERTAArSt
StLbBJUFV+DkQLcBDp7Ur3aZtvhMdqXG72UJHtYuHTjxtNid3Lf5h9chSJ+RMbAr
a+tnGnw0tfKK5Z2qi9p2pN80YHpkqmgJ7GxFWnppibKUdRdwmRJAFvAY3NxQu8c0
Ibg+mZgGRnGQKItiRFZ8coYbJMddpocmQN5exhht5Iwc+gzBGPcddElQM21afK1E
wimVc9yeMM4YnhY6HGeFNbOU5cMcFxydUpcg4d2CtwnftqLCV5kMDnYAMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJEY74cGeCXeMfR1M4mWpS53V0+vMB8GA1UdIwQY
MBaAFORnPm1uHPb2ARXjBQi+Fbu/5eqtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUdjLWJXNGM5dllCRmVNRkNMNFZ1N19sNnEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8xYjUzMDEtZTgwNy00Nzk1LWI5OGMt
YzE1OTRmNjA5NjhlLzEvNUdjLWJXNGM5dllCRmVNRkNMNFZ1N19sNnEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8xYjUzMDEtZTgwNy00Nzk1LWI5OGMtYzE1OTRmNjA5Njhl
LzEvNUdjLWJXNGM5dllCRmVNRkNMNFZ1N19sNnEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADW87jlH4
2p42XVaLd/hvRdlT1GFpKNRFZFgt5V9Vjs7bTxjuxY8Yg/xMgC5/YVTx2dIeXNP4
tK+cHD/jv2Lh58TnXLKSe+X1PYWpmVzfdXSqvwyBF2UEhilmrvcPLrh6EFh/jyoJ
SE0pMwQTo4W6KNJ8ZFsVDiCZjMG0M8RBQxXmmSLAFEDS6Ts6EYHya7IiQ4LtqbwW
J86zJHSSRYMZ312r2LSWvBomliP6QrLmbkwGtSd+EYmHRucR//ZTYw2wsIF3sroO
jVfJoRkbv73Sr+ax7Kc/6PVD5Qk6qyBVof/C6I3T0tesGeSGJNpwySJ4wGqVG5wW
zlAt2xvTqxrM1w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:44:19 2025 by rpki-client