Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft
File: 5XXe8Yp160XEQHcaziRsUOip0xY.mft (raw, json)
Hash identifier: avndSRkw3f51CBdcv+jTWl3Q6/a/mXWn2bFy8QBED7I=
Subject key identifier: 44:1E:F8:3E:D8:BE:98:22:D2:66:4D:14:61:E7:17:56:04:6C:0F:A6
Authority key identifier: E5:75:DE:F1:8A:75:EB:45:C4:40:77:1A:CE:24:6C:50:E8:A9:D3:16
Certificate issuer: /CN=e575def18a75eb45c440771ace246c50e8a9d316
Certificate serial: 0194BCE0B996D2905AA0718FB717DBAC132F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XXe8Yp160XEQHcaziRsUOip0xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft
Manifest number: 0734
Signing time: Fri 31 Jan 2025 15:00:31 +0000
Manifest this update: Fri 31 Jan 2025 15:00:31 +0000
Manifest next update: Sat 01 Feb 2025 15:00:31 +0000
Files and hashes: 1: 5XXe8Yp160XEQHcaziRsUOip0xY.crl (hash: piaA2aDGytaW/Nir+TyDR38yEy58dsnafpHZO6bAgRA=)
2: OSfCvRDn5rwH2xpcMtEUP0sV1D0.roa (hash: YJd7BM/YO/DejIANNT19DgGaGBCVl/athIJy3uYWmVc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b9:96:d2:90:5a:a0:71:8f:b7:17:db:ac:13:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e575def18a75eb45c440771ace246c50e8a9d316
Validity
Not Before: Jan 31 15:00:31 2025 GMT
Not After : Feb 1 15:00:31 2025 GMT
Subject: CN=441ef83ed8be9822d2664d1461e71756046c0fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1f:00:63:5a:f5:a3:2d:7e:4c:32:7a:d6:89:
a6:27:70:6d:10:07:20:55:23:09:36:7d:fc:88:84:
e3:61:cc:bd:0d:26:84:5c:cf:0b:13:fb:aa:40:33:
59:d1:b8:a7:72:16:1d:f4:2f:2a:b8:23:de:4d:b4:
af:17:ae:62:74:48:8b:6b:9a:11:33:9d:e4:93:0f:
6b:63:0e:b0:e9:c9:5f:b6:bd:9a:2c:d2:09:18:f2:
8c:92:95:d8:f3:03:70:4a:a1:a4:4e:98:d8:5a:c3:
cb:e2:b5:44:10:07:97:d9:d1:9e:04:94:35:5f:87:
67:8c:00:8a:7b:2b:7f:2e:63:aa:3e:a9:6f:32:54:
71:2c:59:17:5f:e5:4e:95:e6:2a:17:c5:15:bc:9b:
e3:d0:83:68:40:e1:c5:d7:8f:24:5d:81:80:4a:17:
17:ec:90:9a:6f:72:1b:00:3b:b0:48:05:5f:2a:d9:
20:c8:82:c7:7a:ce:ea:b1:c6:bb:17:a0:ae:ce:b1:
3c:80:e9:25:6e:2b:8e:69:2b:1d:fe:9b:81:04:9b:
00:3f:cd:56:4e:f8:75:83:5d:38:b1:8c:78:e7:2e:
02:11:a2:e5:65:8b:9a:23:69:41:cb:0e:6a:2e:1e:
d4:c2:4e:0b:0f:67:b3:41:81:cb:e9:59:7a:71:6f:
0a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:1E:F8:3E:D8:BE:98:22:D2:66:4D:14:61:E7:17:56:04:6C:0F:A6
X509v3 Authority Key Identifier:
keyid:E5:75:DE:F1:8A:75:EB:45:C4:40:77:1A:CE:24:6C:50:E8:A9:D3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XXe8Yp160XEQHcaziRsUOip0xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:5c:fc:51:ef:46:99:71:67:72:73:f2:b1:02:df:1f:37:d1:
b3:0f:e1:60:01:c1:74:f2:83:1b:c4:ca:17:19:5c:02:0b:08:
17:57:f9:7e:3b:b0:c1:3a:a1:77:bf:29:ed:3d:3c:2f:85:ef:
0e:66:f4:2c:80:ba:4e:ec:94:2e:4a:e5:a2:65:03:ed:56:d2:
9e:36:27:c3:83:ab:d2:51:da:85:dd:c2:e4:40:a3:77:d1:bf:
86:e7:db:2c:76:a2:e8:ef:ce:d7:ce:fa:e4:04:4a:d6:d9:aa:
8b:5b:3b:3c:9b:ee:4e:1f:6a:05:bb:3d:be:ef:3e:62:6f:83:
8f:07:2f:08:ab:8c:4e:2a:50:53:e2:f3:d9:56:12:50:de:c8:
9b:67:a7:e7:3c:00:b8:88:bc:5e:5a:00:56:35:85:6b:9d:93:
21:11:bf:40:8f:83:7a:53:09:31:cb:f9:99:4c:03:1d:ab:13:
65:8c:cc:f9:c5:a2:3e:9a:4c:fe:14:e1:ea:3e:4e:53:e1:a0:
78:bc:b4:5d:dc:41:ad:4b:65:26:80:6c:69:51:49:6e:11:c0:
fc:0b:56:ee:f4:d0:e3:e9:8f:80:90:8d:b6:97:e1:7c:83:0d:
39:c3:04:bf:d8:5f:fa:b8:b1:1c:8f:df:fc:03:94:88:63:48:
c9:c8:ef:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84LmW0pBaoHGPtxfbrBMvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NzVkZWYxOGE3NWViNDVjNDQwNzcxYWNlMjQ2YzUwZThh
OWQzMTYwHhcNMjUwMTMxMTUwMDMxWhcNMjUwMjAxMTUwMDMxWjAzMTEwLwYDVQQD
Eyg0NDFlZjgzZWQ4YmU5ODIyZDI2NjRkMTQ2MWU3MTc1NjA0NmMwZmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx8AY1r1oy1+TDJ61ommJ3BtEAcg
VSMJNn38iITjYcy9DSaEXM8LE/uqQDNZ0binchYd9C8quCPeTbSvF65idEiLa5oR
M53kkw9rYw6w6clftr2aLNIJGPKMkpXY8wNwSqGkTpjYWsPL4rVEEAeX2dGeBJQ1
X4dnjACKeyt/LmOqPqlvMlRxLFkXX+VOleYqF8UVvJvj0INoQOHF148kXYGAShcX
7JCab3IbADuwSAVfKtkgyILHes7qsca7F6CuzrE8gOklbiuOaSsd/puBBJsAP81W
Tvh1g104sYx45y4CEaLlZYuaI2lByw5qLh7Uwk4LD2ezQYHL6Vl6cW8K5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQe+D7Yvpgi0mZNFGHnF1YEbA+mMB8GA1UdIwQY
MBaAFOV13vGKdetFxEB3Gs4kbFDoqdMWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVhYZThZcDE2MFhFUUhjYXppUnNVT2lwMHhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9jYTA4OTgtMjk3OS00M2FlLThiODkt
ZmI5NzQxMzU5NzI3LzEvNVhYZThZcDE2MFhFUUhjYXppUnNVT2lwMHhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9jYTA4OTgtMjk3OS00M2FlLThiODktZmI5NzQxMzU5NzI3
LzEvNVhYZThZcDE2MFhFUUhjYXppUnNVT2lwMHhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiVz8Ue9G
mXFncnPysQLfHzfRsw/hYAHBdPKDG8TKFxlcAgsIF1f5fjuwwTqhd78p7T08L4Xv
Dmb0LIC6TuyULkrlomUD7VbSnjYnw4Or0lHahd3C5ECjd9G/hufbLHai6O/O1876
5ARK1tmqi1s7PJvuTh9qBbs9vu8+Ym+DjwcvCKuMTipQU+Lz2VYSUN7Im2en5zwA
uIi8XloAVjWFa52TIRG/QI+DelMJMcv5mUwDHasTZYzM+cWiPppM/hTh6j5OU+Gg
eLy0XdxBrUtlJoBsaVFJbhHA/AtW7vTQ4+mPgJCNtpfhfIMNOcMEv9hf+rixHI/f
/AOUiGNIycjvWg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:24 2025 by rpki-client