Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.mft
File: 05SToXmX0x6NWqbMyaa9dX8VwDA.mft (raw, json)
Hash identifier: YMGcvlQPEHb7ubC6KB/WQLtfpfwSNODfixTzHIRJW8Y=
Subject key identifier: D7:1B:E1:B4:24:20:D8:35:61:5B:70:EC:44:75:B2:A4:43:7E:4F:AC
Authority key identifier: D3:94:93:A1:79:97:D3:1E:8D:5A:A6:CC:C9:A6:BD:75:7F:15:C0:30
Certificate issuer: /CN=d39493a17997d31e8d5aa6ccc9a6bd757f15c030
Certificate serial: 0194BCE091E8606628602E3A303394AD71DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05SToXmX0x6NWqbMyaa9dX8VwDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:21 +0000
Manifest this update: Fri 31 Jan 2025 15:00:21 +0000
Manifest next update: Sat 01 Feb 2025 15:00:21 +0000
Files and hashes: 1: 05SToXmX0x6NWqbMyaa9dX8VwDA.crl (hash: WmPzBbg4mAdLDfqEn+Tu/hz+C1Kc6gb8PMRNFr/56AY=)
2: 0FFuSWeP_xnZLwOhaaaPqbHXLc4.roa (hash: R/kohk8zDnLTG4mp1rru94qAndg3iws6yZ+eZfkkPz4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:91:e8:60:66:28:60:2e:3a:30:33:94:ad:71:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d39493a17997d31e8d5aa6ccc9a6bd757f15c030
Validity
Not Before: Jan 31 15:00:21 2025 GMT
Not After : Feb 1 15:00:21 2025 GMT
Subject: CN=d71be1b42420d835615b70ec4475b2a4437e4fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fd:b7:a5:66:3f:af:05:88:ac:67:da:95:e8:
7a:65:2f:5d:95:af:d5:44:1e:f8:48:aa:c4:56:ef:
3f:97:c2:55:b8:7d:03:d9:26:10:a7:4b:a4:34:4f:
1a:3f:ef:38:1e:02:07:a7:75:7c:3c:52:b7:bf:7b:
98:c3:b0:47:36:02:70:ca:46:06:3d:1e:bf:f5:17:
1c:ea:30:9c:6a:8b:02:a9:fa:30:ea:b4:32:e4:82:
df:42:96:1e:a9:9b:ec:c0:91:a1:c0:67:7c:5b:ee:
61:df:3f:e2:4e:9d:23:f8:0e:42:cc:e8:f3:22:a7:
d2:56:a8:4f:3d:8f:4f:11:2e:7e:63:5f:63:a6:5c:
32:21:42:43:41:6d:b3:7c:b3:e5:23:a5:3b:73:15:
a3:d8:5d:81:ba:41:42:35:89:49:f2:b0:ac:fc:b3:
f3:6e:6b:27:0e:1d:13:54:41:86:b2:da:47:b7:ef:
94:27:77:b4:96:9a:fe:9f:0a:5f:20:95:d6:b7:5c:
1b:7f:29:4d:33:28:62:5e:74:66:48:52:54:05:d7:
2d:64:3a:48:b0:99:d7:83:cb:a0:15:d5:a1:b6:f7:
d0:5c:e1:c6:3a:57:d4:8d:84:e4:61:3b:c5:86:a3:
7c:49:0d:4c:4c:ef:25:ec:1a:04:69:a5:b0:bd:73:
b9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1B:E1:B4:24:20:D8:35:61:5B:70:EC:44:75:B2:A4:43:7E:4F:AC
X509v3 Authority Key Identifier:
keyid:D3:94:93:A1:79:97:D3:1E:8D:5A:A6:CC:C9:A6:BD:75:7F:15:C0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05SToXmX0x6NWqbMyaa9dX8VwDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e804e4-7f30-4049-948b-97923297cda7/1/05SToXmX0x6NWqbMyaa9dX8VwDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:8b:c6:8f:a9:8f:95:2a:f7:3e:8f:8c:58:09:74:9b:37:4a:
7b:b9:ba:b7:80:be:9c:49:4c:2e:6d:ae:03:f7:93:78:db:29:
da:f2:d0:53:e8:2b:3d:bb:de:f1:b5:fa:16:f8:8a:e3:3d:29:
46:44:33:2b:6c:b9:c2:92:c6:00:e0:17:c9:29:6c:18:e6:d6:
fd:a1:ee:ef:7b:ea:6f:e8:51:27:27:87:e4:63:cb:9a:e6:40:
81:95:ac:23:42:20:06:09:7d:8b:79:59:6a:ac:7d:1a:cd:99:
28:ae:d9:9f:ad:88:a3:40:62:38:9a:c1:db:e2:90:d0:6b:5f:
f5:07:48:0a:c6:67:16:0e:f0:b6:38:f8:cf:bb:ca:3d:dc:c0:
34:08:43:0c:d1:ce:04:75:05:97:47:45:56:5d:fa:78:72:1b:
b1:9b:b6:ef:18:c8:1c:6d:5f:86:b4:1b:ce:2a:26:f8:09:fc:
a1:8c:c1:74:4e:6d:df:0c:6d:48:0e:64:dd:b4:68:35:f4:95:
1a:a3:c9:04:1e:97:47:f3:93:c5:90:60:8c:0b:d7:e5:59:39:
78:60:b3:3f:fe:ab:31:5a:04:45:95:06:d8:d9:fb:57:8a:4a:
3d:d9:8c:b6:6a:bc:e0:ad:ee:19:96:95:9a:e5:0c:89:d6:30:
c1:d4:a7:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84JHoYGYoYC46MDOUrXHdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzOTQ5M2ExNzk5N2QzMWU4ZDVhYTZjY2M5YTZiZDc1N2Yx
NWMwMzAwHhcNMjUwMTMxMTUwMDIxWhcNMjUwMjAxMTUwMDIxWjAzMTEwLwYDVQQD
EyhkNzFiZTFiNDI0MjBkODM1NjE1YjcwZWM0NDc1YjJhNDQzN2U0ZmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxv23pWY/rwWIrGfaleh6ZS9dla/V
RB74SKrEVu8/l8JVuH0D2SYQp0ukNE8aP+84HgIHp3V8PFK3v3uYw7BHNgJwykYG
PR6/9Rcc6jCcaosCqfow6rQy5ILfQpYeqZvswJGhwGd8W+5h3z/iTp0j+A5CzOjz
IqfSVqhPPY9PES5+Y19jplwyIUJDQW2zfLPlI6U7cxWj2F2BukFCNYlJ8rCs/LPz
bmsnDh0TVEGGstpHt++UJ3e0lpr+nwpfIJXWt1wbfylNMyhiXnRmSFJUBdctZDpI
sJnXg8ugFdWhtvfQXOHGOlfUjYTkYTvFhqN8SQ1MTO8l7BoEaaWwvXO5/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNcb4bQkINg1YVtw7ER1sqRDfk+sMB8GA1UdIwQY
MBaAFNOUk6F5l9MejVqmzMmmvXV/FcAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDVTVG9YbVgweDZOV3FiTXlhYTlkWDhWd0RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lODA0ZTQtN2YzMC00MDQ5LTk0OGIt
OTc5MjMyOTdjZGE3LzEvMDVTVG9YbVgweDZOV3FiTXlhYTlkWDhWd0RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lODA0ZTQtN2YzMC00MDQ5LTk0OGItOTc5MjMyOTdjZGE3
LzEvMDVTVG9YbVgweDZOV3FiTXlhYTlkWDhWd0RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr4vGj6mP
lSr3Po+MWAl0mzdKe7m6t4C+nElMLm2uA/eTeNsp2vLQU+grPbve8bX6FviK4z0p
RkQzK2y5wpLGAOAXySlsGObW/aHu73vqb+hRJyeH5GPLmuZAgZWsI0IgBgl9i3lZ
aqx9Gs2ZKK7Zn62Io0BiOJrB2+KQ0Gtf9QdICsZnFg7wtjj4z7vKPdzANAhDDNHO
BHUFl0dFVl36eHIbsZu27xjIHG1fhrQbziom+An8oYzBdE5t3wxtSA5k3bRoNfSV
GqPJBB6XR/OTxZBgjAvX5Vk5eGCzP/6rMVoERZUG2Nn7V4pKPdmMtmq84K3uGZaV
muUMidYwwdSnBA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:59 2025 by rpki-client