Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft
File: F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft (raw, json)
Hash identifier: WD8MKsDPWSqdowrKDNpkfV4uaEYGLnj+sKue2Y7cv5E=
Subject key identifier: EE:11:5B:EF:6B:12:BB:8A:2C:D4:E5:87:B0:F2:A3:26:F4:C3:FD:D7
Authority key identifier: 17:92:58:2A:A0:B1:8D:60:73:59:2F:12:1A:6E:56:3F:EC:42:46:72
Certificate issuer: /CN=1792582aa0b18d6073592f121a6e563fec424672
Certificate serial: 0194BCA9AD2606AB1CF56E9D999FF9A63ABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5JYKqCxjWBzWS8SGm5WP-xCRnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft
Manifest number: 04C9
Signing time: Fri 31 Jan 2025 14:00:23 +0000
Manifest this update: Fri 31 Jan 2025 14:00:23 +0000
Manifest next update: Sat 01 Feb 2025 14:00:23 +0000
Files and hashes: 1: F5JYKqCxjWBzWS8SGm5WP-xCRnI.crl (hash: eC66q9vHbWFJ7tbWrNNd7HN4HGD4xpcq93GyN+Qtjv0=)
2: X1Hk6Afe1QrSetXg0Fl8YXsPzIQ.roa (hash: XOR8QJ4EQ0MnwLrp2DnXgyEFhnN9pPQ9poUD3LAPUHw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ad:26:06:ab:1c:f5:6e:9d:99:9f:f9:a6:3a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1792582aa0b18d6073592f121a6e563fec424672
Validity
Not Before: Jan 31 14:00:23 2025 GMT
Not After : Feb 1 14:00:23 2025 GMT
Subject: CN=ee115bef6b12bb8a2cd4e587b0f2a326f4c3fdd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5c:43:e5:9c:32:05:20:4b:59:81:61:04:43:
3a:f7:f7:db:7d:b7:77:9c:27:4e:14:6b:42:b4:36:
43:58:2d:bc:51:72:29:2b:c1:30:79:de:03:41:5d:
79:b3:74:74:6c:f0:1f:63:91:f6:1f:22:eb:82:f1:
6d:10:2b:ef:7e:6e:b5:fe:67:7f:ee:12:d2:ef:4f:
e9:88:b3:e6:26:0b:0f:8a:b9:94:85:1d:51:c2:9d:
b5:52:36:ae:57:4d:0d:8a:2c:e2:2c:9b:e2:b8:e2:
63:03:4a:fa:f0:38:88:5d:ef:75:91:f5:03:44:35:
5c:d2:44:33:ac:f5:66:68:ef:43:e2:1c:47:3d:44:
7f:27:dc:bc:44:da:9b:28:ce:10:7e:a4:38:1d:41:
d3:4f:bf:5a:58:5c:d4:f2:1e:0e:29:97:1b:56:1b:
57:e6:78:ea:e5:c6:72:f1:21:aa:a2:6e:bd:fb:11:
1a:d4:39:59:15:6a:89:df:64:c7:96:54:98:7f:3c:
89:bd:2d:88:c6:5a:52:35:c0:75:4e:6d:7f:6d:33:
a6:05:c0:87:f5:91:39:ac:8e:4d:06:b8:b9:ab:7e:
a2:bb:72:07:bd:18:9f:e0:d8:be:9a:2b:c6:ce:04:
a6:dd:89:ce:7b:7e:a2:f9:a2:33:89:9b:ef:05:cd:
4b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:11:5B:EF:6B:12:BB:8A:2C:D4:E5:87:B0:F2:A3:26:F4:C3:FD:D7
X509v3 Authority Key Identifier:
keyid:17:92:58:2A:A0:B1:8D:60:73:59:2F:12:1A:6E:56:3F:EC:42:46:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5JYKqCxjWBzWS8SGm5WP-xCRnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2d3607-be58-4a05-9d68-e84f3b4927ad/1/F5JYKqCxjWBzWS8SGm5WP-xCRnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ba:a9:ba:d2:84:3b:3f:1e:bf:c5:95:ac:1e:1f:e9:54:3a:
01:f2:ac:ff:4e:a9:0f:2d:1c:ff:4b:99:cf:95:82:06:a6:90:
54:b4:eb:0b:c4:21:bb:6b:70:07:05:34:4c:7b:b2:5e:f3:d2:
e9:56:d3:f8:14:40:4e:1f:63:08:bc:c6:35:96:99:e2:6a:b3:
b2:5d:c4:63:60:c4:71:59:42:1a:52:21:aa:46:15:e9:f2:28:
92:94:bc:ab:e4:dd:ad:c9:21:ac:4e:1e:af:67:16:7e:9f:73:
e5:9c:2f:9e:5f:fa:81:56:d9:24:c2:7a:bd:06:88:fd:01:ea:
3d:6f:86:10:d8:a6:15:7f:68:56:a9:a3:af:64:b0:c1:82:a3:
14:ae:8e:87:b4:94:98:a5:b0:04:a1:7e:40:09:5f:c9:06:c5:
c4:55:e9:3c:cb:3e:49:91:50:d9:5c:80:94:a9:9b:75:f3:62:
1b:2c:01:3e:d3:ed:19:83:e3:67:28:c3:c9:22:fa:ac:35:77:
70:7d:f6:42:64:e7:28:c0:bf:76:28:a3:4b:a6:f5:cd:ab:06:
f1:0d:84:a3:85:ae:ca:3f:f0:db:a8:17:83:c5:8d:5b:a9:0f:
ec:16:48:60:e7:34:ae:26:24:cf:78:70:91:6d:ce:4c:b0:d3:
80:a4:3e:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qa0mBqsc9W6dmZ/5pjq7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3OTI1ODJhYTBiMThkNjA3MzU5MmYxMjFhNmU1NjNmZWM0
MjQ2NzIwHhcNMjUwMTMxMTQwMDIzWhcNMjUwMjAxMTQwMDIzWjAzMTEwLwYDVQQD
EyhlZTExNWJlZjZiMTJiYjhhMmNkNGU1ODdiMGYyYTMyNmY0YzNmZGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VxD5ZwyBSBLWYFhBEM69/fbfbd3
nCdOFGtCtDZDWC28UXIpK8Ewed4DQV15s3R0bPAfY5H2HyLrgvFtECvvfm61/md/
7hLS70/piLPmJgsPirmUhR1Rwp21UjauV00NiiziLJviuOJjA0r68DiIXe91kfUD
RDVc0kQzrPVmaO9D4hxHPUR/J9y8RNqbKM4QfqQ4HUHTT79aWFzU8h4OKZcbVhtX
5njq5cZy8SGqom69+xEa1DlZFWqJ32THllSYfzyJvS2IxlpSNcB1Tm1/bTOmBcCH
9ZE5rI5NBri5q36iu3IHvRif4Ni+mivGzgSm3YnOe36i+aIziZvvBc1LCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO4RW+9rEruKLNTlh7Dyoyb0w/3XMB8GA1UdIwQY
MBaAFBeSWCqgsY1gc1kvEhpuVj/sQkZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjVKWUtxQ3hqV0J6V1M4U0dtNVdQLXhDUm5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8yZDM2MDctYmU1OC00YTA1LTlkNjgt
ZTg0ZjNiNDkyN2FkLzEvRjVKWUtxQ3hqV0J6V1M4U0dtNVdQLXhDUm5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8yZDM2MDctYmU1OC00YTA1LTlkNjgtZTg0ZjNiNDkyN2Fk
LzEvRjVKWUtxQ3hqV0J6V1M4U0dtNVdQLXhDUm5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd7qputKE
Oz8ev8WVrB4f6VQ6AfKs/06pDy0c/0uZz5WCBqaQVLTrC8Qhu2twBwU0THuyXvPS
6VbT+BRATh9jCLzGNZaZ4mqzsl3EY2DEcVlCGlIhqkYV6fIokpS8q+TdrckhrE4e
r2cWfp9z5Zwvnl/6gVbZJMJ6vQaI/QHqPW+GENimFX9oVqmjr2SwwYKjFK6Oh7SU
mKWwBKF+QAlfyQbFxFXpPMs+SZFQ2VyAlKmbdfNiGywBPtPtGYPjZyjDySL6rDV3
cH32QmTnKMC/diijS6b1zasG8Q2Eo4Wuyj/w26gXg8WNW6kP7BZIYOc0riYkz3hw
kW3OTLDTgKQ+1g==
-----END CERTIFICATE-----
Generated at Mon Apr 28 18:05:34 2025 by rpki-client