Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft
File: rsr5Su3_76Q2a8or65GZLB2zTMw.mft (raw, json)
Hash identifier: OJBqqxXETMl1aTCKD6JDsET8owS/2F9HZrXuVYO3Gmc=
Subject key identifier: 5A:4A:9D:DF:48:4B:57:1C:36:85:8D:9C:CB:B1:C4:FE:6A:49:E0:1C
Authority key identifier: AE:CA:F9:4A:ED:FF:EF:A4:36:6B:CA:2B:EB:91:99:2C:1D:B3:4C:CC
Certificate issuer: /CN=aecaf94aedffefa4366bca2beb91992c1db34ccc
Certificate serial: 0194BCAA2B96D3F5C33DDD73B20E333BA955
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft
Manifest number: 07C2
Signing time: Fri 31 Jan 2025 14:00:56 +0000
Manifest this update: Fri 31 Jan 2025 14:00:56 +0000
Manifest next update: Sat 01 Feb 2025 14:00:56 +0000
Files and hashes: 1: rsr5Su3_76Q2a8or65GZLB2zTMw.crl (hash: QDBGvBSX6i1OMKWGJWHuq34HcZkXFGQzlJk8wv9lRPA=)
2: ycsxAxwfvi_ZHCMIh-H72E7BXeY.roa (hash: 5XrkDdaM3UebECdsSy+x2CvwywLxmUspYKKtB6gwnm0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2b:96:d3:f5:c3:3d:dd:73:b2:0e:33:3b:a9:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecaf94aedffefa4366bca2beb91992c1db34ccc
Validity
Not Before: Jan 31 14:00:56 2025 GMT
Not After : Feb 1 14:00:56 2025 GMT
Subject: CN=5a4a9ddf484b571c36858d9ccbb1c4fe6a49e01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d4:72:bb:38:3f:db:25:42:a4:20:e7:6d:7c:
ed:bc:7c:c3:1e:15:24:26:59:bf:b4:5c:63:20:3f:
00:a1:a8:81:bd:df:9e:8d:f2:38:27:f2:d9:e6:de:
b7:c1:0f:75:5e:75:52:5c:05:00:a6:c3:a5:94:28:
15:b5:35:01:5b:cf:91:06:ea:7c:29:27:53:a3:ff:
97:33:6e:93:1c:8e:49:6c:45:05:de:2e:8a:05:15:
12:b4:55:3d:65:88:e6:71:b2:aa:93:42:58:fd:78:
f4:d1:5e:35:04:fe:36:8b:56:13:48:5c:3c:37:d0:
3d:59:e1:b4:a1:d6:f0:35:73:49:90:4c:71:42:a8:
44:a8:e7:e6:cc:ab:7b:24:54:bc:2e:c9:22:40:f1:
77:39:db:81:be:98:1c:0a:7e:0d:80:16:c6:04:e1:
1e:73:ab:9d:18:13:23:db:20:a1:80:20:33:2a:d6:
cf:da:13:aa:af:60:c4:8b:11:71:0e:48:bd:a5:b8:
c4:35:3d:26:4d:3a:47:aa:72:e8:35:e3:f4:0b:98:
c8:10:91:0e:1c:45:15:ab:b2:a3:b1:7e:5e:97:f5:
19:51:bb:b3:a6:55:02:68:28:5f:76:e5:28:cc:37:
e7:b7:8e:e2:80:f3:c6:74:f9:7d:68:ed:06:aa:db:
d4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4A:9D:DF:48:4B:57:1C:36:85:8D:9C:CB:B1:C4:FE:6A:49:E0:1C
X509v3 Authority Key Identifier:
keyid:AE:CA:F9:4A:ED:FF:EF:A4:36:6B:CA:2B:EB:91:99:2C:1D:B3:4C:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsr5Su3_76Q2a8or65GZLB2zTMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/047dec-d844-467a-a01a-fc03ef794718/1/rsr5Su3_76Q2a8or65GZLB2zTMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b1:cd:fa:70:3e:d2:52:29:23:76:18:f1:bd:05:83:19:a4:
da:32:2e:36:c4:b6:d9:dc:52:b6:f9:b3:b1:19:93:47:d2:eb:
14:6f:fc:96:ec:ff:5e:d2:55:21:84:a8:cd:71:18:ac:1c:af:
13:63:c2:37:b0:81:3f:d5:88:ae:33:5b:94:4c:68:08:1b:9e:
1f:d2:07:40:38:e7:d3:11:0e:01:24:e3:26:2a:2d:15:47:fc:
55:e2:c3:e0:25:e6:48:74:11:ba:d0:45:a0:4f:d7:9d:d2:43:
f5:11:81:b8:6e:ef:6f:7d:90:7d:85:0a:04:62:9b:b8:27:50:
9a:a5:3e:57:8d:3b:eb:61:01:1c:6d:98:84:c7:51:63:ac:0e:
04:f6:5e:6f:4a:40:aa:aa:d6:fc:2e:a3:21:ab:0b:bb:18:41:
a8:35:0f:17:44:fc:e1:ff:9f:be:7e:5e:42:1a:fd:40:c9:af:
6d:a9:10:d8:1a:e0:d7:3c:6b:37:aa:7c:70:37:74:56:36:d3:
9b:67:ef:2b:3e:85:df:dd:d8:89:90:13:40:32:31:b4:19:53:
5c:d5:d3:31:8f:57:12:e3:ce:02:0e:8a:97:14:f1:1f:7a:e3:
bc:c9:40:87:e1:d6:b0:20:a8:bc:28:c5:c3:65:32:de:d3:2d:
93:bf:d6:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qiuW0/XDPd1zsg4zO6lVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlY2FmOTRhZWRmZmVmYTQzNjZiY2EyYmViOTE5OTJjMWRi
MzRjY2MwHhcNMjUwMTMxMTQwMDU2WhcNMjUwMjAxMTQwMDU2WjAzMTEwLwYDVQQD
Eyg1YTRhOWRkZjQ4NGI1NzFjMzY4NThkOWNjYmIxYzRmZTZhNDllMDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndRyuzg/2yVCpCDnbXztvHzDHhUk
Jlm/tFxjID8AoaiBvd+ejfI4J/LZ5t63wQ91XnVSXAUApsOllCgVtTUBW8+RBup8
KSdTo/+XM26THI5JbEUF3i6KBRUStFU9ZYjmcbKqk0JY/Xj00V41BP42i1YTSFw8
N9A9WeG0odbwNXNJkExxQqhEqOfmzKt7JFS8LskiQPF3OduBvpgcCn4NgBbGBOEe
c6udGBMj2yChgCAzKtbP2hOqr2DEixFxDki9pbjENT0mTTpHqnLoNeP0C5jIEJEO
HEUVq7KjsX5el/UZUbuzplUCaChfduUozDfnt47igPPGdPl9aO0GqtvUkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpKnd9IS1ccNoWNnMuxxP5qSeAcMB8GA1UdIwQY
MBaAFK7K+Urt/++kNmvKK+uRmSwds0zMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnNyNVN1M183NlEyYThvcjY1R1pMQjJ6VE13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8wNDdkZWMtZDg0NC00NjdhLWEwMWEt
ZmMwM2VmNzk0NzE4LzEvcnNyNVN1M183NlEyYThvcjY1R1pMQjJ6VE13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8wNDdkZWMtZDg0NC00NjdhLWEwMWEtZmMwM2VmNzk0NzE4
LzEvcnNyNVN1M183NlEyYThvcjY1R1pMQjJ6VE13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhbHN+nA+
0lIpI3YY8b0Fgxmk2jIuNsS22dxStvmzsRmTR9LrFG/8luz/XtJVIYSozXEYrByv
E2PCN7CBP9WIrjNblExoCBueH9IHQDjn0xEOASTjJiotFUf8VeLD4CXmSHQRutBF
oE/XndJD9RGBuG7vb32QfYUKBGKbuCdQmqU+V40762EBHG2YhMdRY6wOBPZeb0pA
qqrW/C6jIasLuxhBqDUPF0T84f+fvn5eQhr9QMmvbakQ2Brg1zxrN6p8cDd0VjbT
m2fvKz6F393YiZATQDIxtBlTXNXTMY9XEuPOAg6KlxTxH3rjvMlAh+HWsCCovCjF
w2Uy3tMtk7/WAw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:13:57 2025 by rpki-client