Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/65cf0a-ade3-40b1-9987-8c34e4cf9026/1/h5WLpmHENczSXCBgRi72ANJxnuA.mft
File: h5WLpmHENczSXCBgRi72ANJxnuA.mft (raw, json)
Hash identifier: 4ysKU+cGaOMHjuielc2eVqBoBsm/XPTyj9iXOK04jNU=
Subject key identifier: EC:4E:9C:13:C7:94:00:E8:79:4E:87:42:17:8E:D6:58:84:29:BF:C3
Authority key identifier: 87:95:8B:A6:61:C4:35:CC:D2:5C:20:60:46:2E:F6:00:D2:71:9E:E0
Certificate issuer: /CN=87958ba661c435ccd25c2060462ef600d2719ee0
Certificate serial: 0194BC3C26B59D42924C1F9F9888BFA05B6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5WLpmHENczSXCBgRi72ANJxnuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/65cf0a-ade3-40b1-9987-8c34e4cf9026/1/h5WLpmHENczSXCBgRi72ANJxnuA.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:46 +0000
Manifest this update: Fri 31 Jan 2025 12:00:46 +0000
Manifest next update: Sat 01 Feb 2025 12:00:46 +0000
Files and hashes: 1: h5WLpmHENczSXCBgRi72ANJxnuA.crl (hash: q69s9gldSwBqKjuwMDWTVE6duNEgN07Y8Ip8i2iVOyw=)
2: jQqQfOrb2tEbgL6-n1pYKtKDCGI.roa (hash: urbNu0k2kZWVDcdCEYQ210AYS3ke0pUxaEecPK2agnE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:26:b5:9d:42:92:4c:1f:9f:98:88:bf:a0:5b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87958ba661c435ccd25c2060462ef600d2719ee0
Validity
Not Before: Jan 31 12:00:46 2025 GMT
Not After : Feb 1 12:00:46 2025 GMT
Subject: CN=ec4e9c13c79400e8794e8742178ed6588429bfc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c9:0f:f3:7f:35:8d:e0:fd:a9:89:90:6a:92:
b0:ab:9b:71:88:64:5b:ce:1b:9b:e3:e1:d7:fc:ff:
e8:d4:d6:e7:1e:7b:47:31:cb:70:89:49:f8:a7:d8:
43:2b:1e:8f:03:02:b9:67:bc:d2:4c:b9:35:5b:53:
70:68:3c:6c:e3:c5:61:83:b8:f6:d8:fc:d7:e9:64:
06:16:62:77:fe:7f:61:e9:62:cb:8d:bb:62:89:0d:
ce:cf:84:d9:b6:61:ca:00:d1:65:b7:ca:aa:b4:13:
35:10:45:f4:25:d2:33:9b:49:22:35:3e:b3:b9:e4:
43:e0:0a:86:c7:45:d0:ce:12:70:34:31:bc:36:37:
fd:76:7f:21:9a:91:60:6b:18:f6:1b:52:e1:6e:4c:
1b:82:fa:64:66:b3:e6:f9:04:be:00:7c:ad:7f:7b:
20:0e:88:37:ea:ea:70:9b:d8:12:f6:c6:31:42:5c:
dd:8a:5c:e7:81:63:9d:da:9d:58:ff:f3:7d:c2:26:
f7:55:5e:84:04:39:33:b6:5a:f6:5e:4f:25:00:7a:
6d:cf:2a:6b:e8:31:83:f0:e3:f3:98:e6:b1:cd:10:
b4:77:1c:69:12:89:28:54:e9:b4:94:86:74:42:ec:
32:b5:87:08:50:c8:5d:6a:a2:c6:86:bb:ef:ea:78:
44:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4E:9C:13:C7:94:00:E8:79:4E:87:42:17:8E:D6:58:84:29:BF:C3
X509v3 Authority Key Identifier:
keyid:87:95:8B:A6:61:C4:35:CC:D2:5C:20:60:46:2E:F6:00:D2:71:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5WLpmHENczSXCBgRi72ANJxnuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/65cf0a-ade3-40b1-9987-8c34e4cf9026/1/h5WLpmHENczSXCBgRi72ANJxnuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/65cf0a-ade3-40b1-9987-8c34e4cf9026/1/h5WLpmHENczSXCBgRi72ANJxnuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d3:6d:98:04:f3:6f:5b:4c:a0:a8:7f:08:5d:fc:b9:b4:ea:
13:4d:49:91:eb:8a:4a:33:b4:8d:0d:f2:35:6f:ed:37:d6:b0:
01:04:a3:a6:e9:59:d5:47:bc:5b:b9:d6:e6:f2:61:3e:55:cc:
28:5e:7f:35:b7:33:bb:3f:03:c0:86:f1:23:21:77:20:d8:2e:
d0:a4:cb:7d:b7:e5:10:82:27:a7:37:1c:9d:da:76:7d:d1:22:
f0:23:73:41:c8:4c:62:d7:6b:94:a5:c6:10:73:c4:b8:be:0f:
ea:0d:1c:4b:42:55:57:cd:ca:7b:2b:fe:25:2b:b8:c6:fb:74:
0b:90:14:76:7b:b5:b1:05:df:da:18:be:9f:f9:c5:7e:57:58:
1f:6a:a4:35:8a:0f:cf:50:4e:e1:69:84:ca:4d:87:c7:5e:89:
b0:85:a8:a3:a6:5b:3e:fc:7c:72:74:a3:e5:4a:42:f3:34:01:
cb:d5:da:00:9a:c9:02:e7:b1:59:ad:c6:19:6e:8d:87:d8:18:
28:93:fc:39:58:48:8b:1e:17:9e:b6:c2:48:7d:ed:c1:0a:13:
86:bf:74:be:29:2c:a3:13:d5:21:de:67:ba:c6:9b:62:71:c3:
b9:6a:0a:36:7b:06:d4:90:6d:95:63:ba:e5:54:79:ba:ee:74:
16:95:be:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PCa1nUKSTB+fmIi/oFtuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3OTU4YmE2NjFjNDM1Y2NkMjVjMjA2MDQ2MmVmNjAwZDI3
MTllZTAwHhcNMjUwMTMxMTIwMDQ2WhcNMjUwMjAxMTIwMDQ2WjAzMTEwLwYDVQQD
EyhlYzRlOWMxM2M3OTQwMGU4Nzk0ZTg3NDIxNzhlZDY1ODg0MjliZmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8kP8381jeD9qYmQapKwq5txiGRb
zhub4+HX/P/o1NbnHntHMctwiUn4p9hDKx6PAwK5Z7zSTLk1W1NwaDxs48Vhg7j2
2PzX6WQGFmJ3/n9h6WLLjbtiiQ3Oz4TZtmHKANFlt8qqtBM1EEX0JdIzm0kiNT6z
ueRD4AqGx0XQzhJwNDG8Njf9dn8hmpFgaxj2G1LhbkwbgvpkZrPm+QS+AHytf3sg
Dog36upwm9gS9sYxQlzdilzngWOd2p1Y//N9wib3VV6EBDkztlr2Xk8lAHptzypr
6DGD8OPzmOaxzRC0dxxpEokoVOm0lIZ0QuwytYcIUMhdaqLGhrvv6nhE1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxOnBPHlADoeU6HQheO1liEKb/DMB8GA1UdIwQY
MBaAFIeVi6ZhxDXM0lwgYEYu9gDScZ7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDVXTHBtSEVOY3pTWENCZ1JpNzJBTkp4bnVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82NWNmMGEtYWRlMy00MGIxLTk5ODct
OGMzNGU0Y2Y5MDI2LzEvaDVXTHBtSEVOY3pTWENCZ1JpNzJBTkp4bnVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni82NWNmMGEtYWRlMy00MGIxLTk5ODctOGMzNGU0Y2Y5MDI2
LzEvaDVXTHBtSEVOY3pTWENCZ1JpNzJBTkp4bnVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWtNtmATz
b1tMoKh/CF38ubTqE01JkeuKSjO0jQ3yNW/tN9awAQSjpulZ1Ue8W7nW5vJhPlXM
KF5/Nbczuz8DwIbxIyF3INgu0KTLfbflEIInpzccndp2fdEi8CNzQchMYtdrlKXG
EHPEuL4P6g0cS0JVV83Keyv+JSu4xvt0C5AUdnu1sQXf2hi+n/nFfldYH2qkNYoP
z1BO4WmEyk2Hx16JsIWoo6ZbPvx8cnSj5UpC8zQBy9XaAJrJAuexWa3GGW6Nh9gY
KJP8OVhIix4XnrbCSH3twQoThr90viksoxPVId5nusabYnHDuWoKNnsG1JBtlWO6
5VR5uu50FpW+xA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 16:50:29 2025 by rpki-client