Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/E5yjeZVTueGA0zREIyMANRNIXi0.mft
File: E5yjeZVTueGA0zREIyMANRNIXi0.mft (raw, json)
Hash identifier: 00+y/tgo1mWZWiWxakICCHxRMJyBmyNQ55je48wZCmc=
Subject key identifier: 77:65:AF:4F:C8:CB:B3:43:9D:05:38:5E:F9:43:AF:B5:AC:CC:1D:8E
Authority key identifier: 13:9C:A3:79:95:53:B9:E1:80:D3:34:44:23:23:00:35:13:48:5E:2D
Certificate issuer: /CN=139ca3799553b9e180d334442323003513485e2d
Certificate serial: 0194BC72C6011475C92B3B48C5D94CE7491D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5yjeZVTueGA0zREIyMANRNIXi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/E5yjeZVTueGA0zREIyMANRNIXi0.mft
Manifest number: 13FA
Signing time: Fri 31 Jan 2025 13:00:25 +0000
Manifest this update: Fri 31 Jan 2025 13:00:25 +0000
Manifest next update: Sat 01 Feb 2025 13:00:25 +0000
Files and hashes: 1: E5yjeZVTueGA0zREIyMANRNIXi0.crl (hash: P4HmVKq5bNSosXQXF5f30UI3iZX62TEroFhmxgC4Zxw=)
2: VuytbJWnX4HD7PpdwN7icMORJow.roa (hash: BrUMMRwqEQ5pwpgROK+rfe5Glg3t81keS5wtXfQUg74=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c6:01:14:75:c9:2b:3b:48:c5:d9:4c:e7:49:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=139ca3799553b9e180d334442323003513485e2d
Validity
Not Before: Jan 31 13:00:25 2025 GMT
Not After : Feb 1 13:00:25 2025 GMT
Subject: CN=7765af4fc8cbb3439d05385ef943afb5accc1d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:89:36:d5:1d:ac:6d:3c:a5:ce:da:d3:74:86:
de:7b:58:f4:39:d6:2d:b4:e5:53:89:26:45:dc:58:
2a:d4:45:f4:ce:0f:fe:c4:39:a2:a0:ad:80:43:8f:
7f:a7:9e:9e:8f:52:fa:ce:c1:d7:9d:72:fb:db:9c:
38:35:c3:2f:be:cb:fc:f9:d2:5f:1d:68:53:8d:59:
51:b6:b1:96:5b:64:09:e1:0b:cf:c0:c1:a4:d2:9e:
ff:98:f2:9a:e8:1b:f9:67:9a:b7:d9:25:b2:15:c6:
dd:a8:8a:28:08:09:06:1b:0b:51:38:0c:ec:98:a8:
10:02:3c:3d:9a:e9:52:22:25:ca:91:a8:30:10:94:
cc:2d:f1:65:9b:28:d4:87:eb:ae:21:15:85:b1:f4:
1d:a7:a0:75:49:70:58:cc:8d:d5:8e:40:f0:cb:99:
ea:ba:12:53:0b:55:79:4f:cc:bd:8f:6b:9b:81:a7:
a1:36:c9:df:e4:c7:09:da:ac:4f:ce:90:2c:e9:df:
0e:11:bb:f4:66:15:17:71:c2:2d:dd:78:f7:78:15:
5c:c8:27:74:15:f8:b3:bc:47:f4:ae:cf:b2:7d:18:
75:6d:01:69:dd:0b:a8:f9:5c:12:1c:dc:0f:7f:1c:
18:23:7f:5c:e7:83:aa:c6:66:21:80:b3:de:c3:e7:
53:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:65:AF:4F:C8:CB:B3:43:9D:05:38:5E:F9:43:AF:B5:AC:CC:1D:8E
X509v3 Authority Key Identifier:
keyid:13:9C:A3:79:95:53:B9:E1:80:D3:34:44:23:23:00:35:13:48:5E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5yjeZVTueGA0zREIyMANRNIXi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/E5yjeZVTueGA0zREIyMANRNIXi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b8c0cc-7a67-4ac9-bc81-a5fe484616ad/1/E5yjeZVTueGA0zREIyMANRNIXi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:5a:07:27:c2:4f:95:ad:4b:cf:f6:db:db:be:c5:d7:92:ce:
8d:45:c6:34:76:7b:35:11:d0:58:84:0f:cd:d0:4f:ea:9e:86:
d9:70:30:26:35:24:02:9d:71:fa:0f:2f:a9:21:ed:ad:b9:a0:
36:cb:a6:4c:bd:df:90:94:af:63:65:09:9e:05:5d:b6:14:de:
c7:e8:0d:f4:57:2b:9a:0b:46:c5:03:0e:56:ae:9b:a6:ac:fc:
c3:d3:3f:8c:0c:f2:59:42:7d:a0:d9:55:a0:4d:07:cd:05:31:
83:8e:31:25:24:16:92:90:df:22:f5:69:32:07:fc:db:da:21:
33:85:4e:2b:79:53:f6:27:d9:1c:68:52:a0:79:28:c7:9b:86:
02:2a:80:4b:d9:85:db:4d:3b:06:66:a8:47:d7:b6:ba:ff:4b:
15:34:c1:19:97:1b:2e:d6:ff:27:d0:28:aa:da:62:6c:a7:69:
3c:ae:56:0f:37:4d:ba:1d:58:2d:7b:d5:2a:d1:6b:12:c3:2f:
ee:71:d3:74:5a:fe:04:70:41:ba:48:d6:db:4a:89:e4:00:53:
45:73:20:08:b6:3b:99:10:37:fd:72:8c:83:3f:e4:7f:34:51:
c4:30:1f:54:4f:57:11:5d:69:72:4d:83:eb:cf:46:8a:13:18:
7e:fa:6d:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8csYBFHXJKztIxdlM50kdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzOWNhMzc5OTU1M2I5ZTE4MGQzMzQ0NDIzMjMwMDM1MTM0
ODVlMmQwHhcNMjUwMTMxMTMwMDI1WhcNMjUwMjAxMTMwMDI1WjAzMTEwLwYDVQQD
Eyg3NzY1YWY0ZmM4Y2JiMzQzOWQwNTM4NWVmOTQzYWZiNWFjY2MxZDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4k21R2sbTylztrTdIbee1j0OdYt
tOVTiSZF3Fgq1EX0zg/+xDmioK2AQ49/p56ej1L6zsHXnXL725w4NcMvvsv8+dJf
HWhTjVlRtrGWW2QJ4QvPwMGk0p7/mPKa6Bv5Z5q32SWyFcbdqIooCAkGGwtROAzs
mKgQAjw9mulSIiXKkagwEJTMLfFlmyjUh+uuIRWFsfQdp6B1SXBYzI3VjkDwy5nq
uhJTC1V5T8y9j2ubgaehNsnf5McJ2qxPzpAs6d8OEbv0ZhUXccIt3Xj3eBVcyCd0
FfizvEf0rs+yfRh1bQFp3Quo+VwSHNwPfxwYI39c54OqxmYhgLPew+dTzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHdlr0/Iy7NDnQU4XvlDr7WszB2OMB8GA1UdIwQY
MBaAFBOco3mVU7nhgNM0RCMjADUTSF4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTV5amVaVlR1ZUdBMHpSRUl5TUFOUk5JWGkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iOGMwY2MtN2E2Ny00YWM5LWJjODEt
YTVmZTQ4NDYxNmFkLzEvRTV5amVaVlR1ZUdBMHpSRUl5TUFOUk5JWGkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iOGMwY2MtN2E2Ny00YWM5LWJjODEtYTVmZTQ4NDYxNmFk
LzEvRTV5amVaVlR1ZUdBMHpSRUl5TUFOUk5JWGkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATFoHJ8JP
la1Lz/bb277F15LOjUXGNHZ7NRHQWIQPzdBP6p6G2XAwJjUkAp1x+g8vqSHtrbmg
NsumTL3fkJSvY2UJngVdthTex+gN9FcrmgtGxQMOVq6bpqz8w9M/jAzyWUJ9oNlV
oE0HzQUxg44xJSQWkpDfIvVpMgf829ohM4VOK3lT9ifZHGhSoHkox5uGAiqAS9mF
2007BmaoR9e2uv9LFTTBGZcbLtb/J9AoqtpibKdpPK5WDzdNuh1YLXvVKtFrEsMv
7nHTdFr+BHBBukjW20qJ5ABTRXMgCLY7mRA3/XKMgz/kfzRRxDAfVE9XEV1pck2D
689GihMYfvptyw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:37:19 2025 by rpki-client