Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/5gu-C-d8Ti8FeReG6tzIJ2smG4w.mft
File: 5gu-C-d8Ti8FeReG6tzIJ2smG4w.mft (raw, json)
Hash identifier: FlYiPokpI1aLA2vItMzpJMQedQnon/2snbDLEkCl21A=
Subject key identifier: 9D:21:14:99:2E:6C:F8:37:79:41:8F:C5:CA:FF:09:C4:03:70:AA:1B
Authority key identifier: E6:0B:BE:0B:E7:7C:4E:2F:05:79:17:86:EA:DC:C8:27:6B:26:1B:8C
Certificate issuer: /CN=e60bbe0be77c4e2f05791786eadcc8276b261b8c
Certificate serial: 0194BC04B87D7273B6FF1CB96E5FE3B3F021
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gu-C-d8Ti8FeReG6tzIJ2smG4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/5gu-C-d8Ti8FeReG6tzIJ2smG4w.mft
Manifest number: 0C9D
Signing time: Fri 31 Jan 2025 11:00:13 +0000
Manifest this update: Fri 31 Jan 2025 11:00:13 +0000
Manifest next update: Sat 01 Feb 2025 11:00:13 +0000
Files and hashes: 1: 5gu-C-d8Ti8FeReG6tzIJ2smG4w.crl (hash: 6q0RPUhg4LZRl/YlEVaiT3I6QsRv5eX1UOJxjc0sPsk=)
2: by1TgAx4hrtTz7uWAEk79-VVTJs.roa (hash: X41Ff9+/jE9hdX58NTuSaIYDfgJkUlcWlA+qHpWSACc=)
3: w0MGxtWzNh-Wg8RBcln32CLcNqo.roa (hash: H0A/C+iiSZpPUmhK9SIg9MZWz78n+gyc/aBSLoyD6VQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b8:7d:72:73:b6:ff:1c:b9:6e:5f:e3:b3:f0:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e60bbe0be77c4e2f05791786eadcc8276b261b8c
Validity
Not Before: Jan 31 11:00:13 2025 GMT
Not After : Feb 1 11:00:13 2025 GMT
Subject: CN=9d2114992e6cf83779418fc5caff09c40370aa1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:48:af:3a:68:f0:1c:f3:93:28:e8:79:24:29:
e8:45:71:b0:79:1c:e0:af:36:b0:7f:f6:3b:14:5a:
1a:2f:a5:73:f1:65:71:6b:1a:fd:57:6d:5d:7c:17:
85:93:11:ad:51:fd:c3:f9:b5:32:25:fe:04:92:36:
af:e7:b1:f8:df:09:a7:1d:01:6c:68:21:2c:f0:83:
86:a6:6d:f3:5e:35:77:03:e9:79:ad:c1:20:55:dd:
c0:8c:5e:19:98:48:0b:e7:9a:43:60:0e:ae:91:ec:
01:d3:65:e9:00:61:8f:79:b9:d8:81:30:34:f1:8c:
97:37:b9:14:ef:f9:b5:11:9e:99:a1:7d:93:7a:69:
79:6f:4d:4c:f7:9b:14:51:75:de:bd:47:d9:88:c7:
07:82:4a:6a:f8:d2:8d:59:25:4d:d0:c4:13:07:9b:
01:ab:12:20:5f:02:63:db:df:83:7a:52:63:44:55:
8e:2c:e5:c1:27:b1:7a:55:83:7f:73:f2:34:85:67:
27:03:a8:df:1a:4b:44:a2:a8:95:ca:4d:8a:28:48:
4e:50:b6:4e:df:d0:3d:7e:da:ea:52:42:a3:40:cf:
70:59:b2:78:da:cd:b4:58:67:a4:8e:1e:49:d2:a4:
1c:79:39:e4:be:a8:b4:af:e5:40:b2:d9:41:a0:12:
39:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:21:14:99:2E:6C:F8:37:79:41:8F:C5:CA:FF:09:C4:03:70:AA:1B
X509v3 Authority Key Identifier:
keyid:E6:0B:BE:0B:E7:7C:4E:2F:05:79:17:86:EA:DC:C8:27:6B:26:1B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gu-C-d8Ti8FeReG6tzIJ2smG4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/5gu-C-d8Ti8FeReG6tzIJ2smG4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/5gu-C-d8Ti8FeReG6tzIJ2smG4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f6:ae:fb:90:06:34:96:38:3b:ec:11:a6:4c:a9:d3:6b:ae:
0d:f3:67:75:55:ba:6e:d3:5a:c7:61:e5:4f:f4:c3:f5:91:7c:
61:6f:33:03:95:24:6e:61:89:c0:66:84:e6:0c:a8:e4:7a:67:
58:65:1a:b0:2d:fb:e9:47:30:00:50:ad:73:90:41:b0:f5:60:
78:a1:4b:46:b7:22:0b:5c:d7:16:b8:95:86:2a:11:79:8c:17:
f1:ec:3c:d9:3d:99:51:65:7d:65:7d:4c:2a:18:72:2f:fb:a4:
6f:c2:41:42:33:79:2e:be:32:46:bd:f8:56:d7:79:16:49:c9:
62:ea:bc:fc:ba:21:dc:e0:87:67:11:8b:31:9a:13:ee:07:ed:
07:03:5a:4a:54:a2:68:5e:16:1a:85:a9:c4:56:e3:f9:8d:3c:
eb:f2:fe:a7:70:2a:64:e7:07:ce:c2:40:2c:62:e1:03:c1:d3:
01:23:aa:cd:b9:95:46:7e:c3:90:c6:6a:17:dd:a9:1a:70:f5:
c7:de:8b:4c:8b:42:60:2c:ef:c1:0e:53:b4:09:e4:8d:5c:cd:
85:16:cb:c5:0b:a3:8f:f8:fc:a2:ec:d7:18:c3:e6:3e:72:2c:
e5:e3:f4:1a:91:b9:68:53:88:64:d7:76:3b:61:73:ae:18:0b:
bc:ab:46:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BLh9cnO2/xy5bl/js/AhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MGJiZTBiZTc3YzRlMmYwNTc5MTc4NmVhZGNjODI3NmIy
NjFiOGMwHhcNMjUwMTMxMTEwMDEzWhcNMjUwMjAxMTEwMDEzWjAzMTEwLwYDVQQD
Eyg5ZDIxMTQ5OTJlNmNmODM3Nzk0MThmYzVjYWZmMDljNDAzNzBhYTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukivOmjwHPOTKOh5JCnoRXGweRzg
rzawf/Y7FFoaL6Vz8WVxaxr9V21dfBeFkxGtUf3D+bUyJf4Ekjav57H43wmnHQFs
aCEs8IOGpm3zXjV3A+l5rcEgVd3AjF4ZmEgL55pDYA6ukewB02XpAGGPebnYgTA0
8YyXN7kU7/m1EZ6ZoX2Teml5b01M95sUUXXevUfZiMcHgkpq+NKNWSVN0MQTB5sB
qxIgXwJj29+DelJjRFWOLOXBJ7F6VYN/c/I0hWcnA6jfGktEoqiVyk2KKEhOULZO
39A9ftrqUkKjQM9wWbJ42s20WGekjh5J0qQceTnkvqi0r+VAstlBoBI5gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0hFJkubPg3eUGPxcr/CcQDcKobMB8GA1UdIwQY
MBaAFOYLvgvnfE4vBXkXhurcyCdrJhuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWd1LUMtZDhUaThGZVJlRzZ0eklKMnNtRzR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9iZTRhNGMtZjhjNi00ODVkLWEzMjgt
YTNjZTk5NjQzOTQ3LzEvNWd1LUMtZDhUaThGZVJlRzZ0eklKMnNtRzR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9iZTRhNGMtZjhjNi00ODVkLWEzMjgtYTNjZTk5NjQzOTQ3
LzEvNWd1LUMtZDhUaThGZVJlRzZ0eklKMnNtRzR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbvau+5AG
NJY4O+wRpkyp02uuDfNndVW6btNax2HlT/TD9ZF8YW8zA5UkbmGJwGaE5gyo5Hpn
WGUasC376UcwAFCtc5BBsPVgeKFLRrciC1zXFriVhioReYwX8ew82T2ZUWV9ZX1M
KhhyL/ukb8JBQjN5Lr4yRr34Vtd5FknJYuq8/Loh3OCHZxGLMZoT7gftBwNaSlSi
aF4WGoWpxFbj+Y086/L+p3AqZOcHzsJALGLhA8HTASOqzbmVRn7DkMZqF92pGnD1
x96LTItCYCzvwQ5TtAnkjVzNhRbLxQujj/j8ouzXGMPmPnIs5eP0GpG5aFOIZNd2
O2FzrhgLvKtGmw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:21 2025 by rpki-client