Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
File: 1s5JJV9AanJVk8YuHECHeVhtVu8.mft (raw, json)
Hash identifier: 7LaoWELkygd0dOf8rGglIe/Y4F/g63laEZTPtGnyHTk=
Subject key identifier: 3B:12:F6:C8:CB:F7:B4:2D:61:B1:B1:B2:C5:6A:36:70:9D:C1:0C:73
Authority key identifier: D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF
Certificate issuer: /CN=d6ce49255f406a725593c62e1c408779586d56ef
Certificate serial: 0194BC04B48BD56F5D7F9CA58765FBC19F3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
Manifest number: 0987
Signing time: Fri 31 Jan 2025 11:00:12 +0000
Manifest this update: Fri 31 Jan 2025 11:00:12 +0000
Manifest next update: Sat 01 Feb 2025 11:00:12 +0000
Files and hashes: 1: 1s5JJV9AanJVk8YuHECHeVhtVu8.crl (hash: ATf4NqusvNdozt2iJvQqC6Sz/8SN+P1//NDPuWIH+r8=)
2: CK8FwiyJmMBb-zg5kXzIAY_6FI0.roa (hash: XErrRj96RGdiXdkf0Z1TwKUF+3V+yB+0bX3FZbrkGHY=)
3: EJfhhxSKJku019QQkt99LIZFHTw.roa (hash: SjUIL6Kbq6N31Fxq4qDA2LJmnHYs1GWAH6ODttxmcK8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b4:8b:d5:6f:5d:7f:9c:a5:87:65:fb:c1:9f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6ce49255f406a725593c62e1c408779586d56ef
Validity
Not Before: Jan 31 11:00:12 2025 GMT
Not After : Feb 1 11:00:12 2025 GMT
Subject: CN=3b12f6c8cbf7b42d61b1b1b2c56a36709dc10c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e3:a6:a2:c3:3f:8b:70:9f:7b:1f:3d:ff:ca:
a8:38:7a:10:9d:ce:7a:56:80:38:31:f5:11:95:39:
20:e3:9f:a2:dc:46:ec:1b:28:89:5b:ae:0c:46:00:
0a:a2:df:97:9a:9f:87:f8:43:05:83:ab:47:2d:b3:
2f:79:6d:ee:c5:82:6a:59:02:74:00:67:dc:b8:6a:
e3:cd:8e:11:b3:87:b0:bf:cb:81:a4:74:83:6c:ae:
3e:17:f0:e3:ea:c1:4d:9a:97:c3:8a:e5:68:b5:c1:
59:8b:db:81:30:33:74:f7:50:cc:95:dd:f4:17:1c:
eb:b6:a7:c8:15:d0:72:2c:b8:00:07:1f:15:31:d9:
d8:2d:0f:bb:09:01:4a:0e:ed:ac:1c:ab:f9:5b:67:
08:a9:41:c7:e5:d5:c9:5a:2d:8a:f2:be:56:10:4a:
f9:36:06:cf:6f:12:74:b2:a3:44:c9:cf:6f:2f:f9:
d2:26:0f:bc:c8:11:be:17:61:77:98:8f:a3:ee:b3:
42:60:ff:2a:69:ab:97:a4:c7:ee:71:e4:ee:f9:57:
36:8c:c4:ca:af:98:3a:e3:45:27:ca:26:21:e1:b6:
cc:f9:c5:d4:66:dd:36:d4:69:eb:f2:86:18:2e:28:
60:f1:81:03:81:0e:86:ac:e4:45:af:23:03:d0:25:
ae:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:12:F6:C8:CB:F7:B4:2D:61:B1:B1:B2:C5:6A:36:70:9D:C1:0C:73
X509v3 Authority Key Identifier:
keyid:D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:9f:72:9c:77:7b:d6:b8:9e:80:68:10:40:a9:2e:8a:44:3d:
c7:3c:72:3f:aa:6f:6d:a8:bc:9f:a1:02:7a:32:31:77:eb:63:
c2:2d:68:33:e2:da:64:bf:c3:42:02:b0:41:e3:54:a3:7e:13:
70:de:ff:b7:99:78:0e:af:97:68:ad:dc:02:44:7a:e5:e6:52:
05:a0:1c:8a:88:ca:12:09:c1:ed:b8:56:e9:84:e6:26:9d:a6:
0b:a6:7d:0e:d0:c2:a9:37:20:15:a2:13:36:7c:a0:29:ca:58:
c2:5e:0b:c6:49:f1:31:d8:43:b9:ba:81:0f:c3:ae:61:d4:0a:
7a:b7:a4:3c:2c:10:70:3a:1e:db:c4:a6:b5:ba:99:ae:6e:40:
d5:10:16:1d:82:08:d8:0a:6a:7d:41:44:81:69:5f:4a:c9:78:
b9:f0:fb:6a:16:75:f3:44:21:ab:a1:fc:0b:51:12:36:54:6b:
99:9f:86:61:33:43:ff:ec:ca:90:39:39:aa:d7:79:ce:8b:6a:
64:1f:7c:3e:b0:23:38:39:b0:f8:1e:56:29:9f:4b:1c:21:9c:
fa:e4:d0:44:17:53:66:ca:1d:14:14:0e:51:67:4f:2c:13:85:
44:c8:5d:f6:50:84:fd:e6:5d:77:69:1d:1b:1b:2b:7c:68:b7:
37:c2:05:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BLSL1W9df5ylh2X7wZ87MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2Y2U0OTI1NWY0MDZhNzI1NTkzYzYyZTFjNDA4Nzc5NTg2
ZDU2ZWYwHhcNMjUwMTMxMTEwMDEyWhcNMjUwMjAxMTEwMDEyWjAzMTEwLwYDVQQD
EygzYjEyZjZjOGNiZjdiNDJkNjFiMWIxYjJjNTZhMzY3MDlkYzEwYzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreOmosM/i3Cfex89/8qoOHoQnc56
VoA4MfURlTkg45+i3EbsGyiJW64MRgAKot+Xmp+H+EMFg6tHLbMveW3uxYJqWQJ0
AGfcuGrjzY4Rs4ewv8uBpHSDbK4+F/Dj6sFNmpfDiuVotcFZi9uBMDN091DMld30
FxzrtqfIFdByLLgABx8VMdnYLQ+7CQFKDu2sHKv5W2cIqUHH5dXJWi2K8r5WEEr5
NgbPbxJ0sqNEyc9vL/nSJg+8yBG+F2F3mI+j7rNCYP8qaauXpMfuceTu+Vc2jMTK
r5g640UnyiYh4bbM+cXUZt021Gnr8oYYLihg8YEDgQ6GrORFryMD0CWuTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDsS9sjL97QtYbGxssVqNnCdwQxzMB8GA1UdIwQY
MBaAFNbOSSVfQGpyVZPGLhxAh3lYbVbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXM1SkpWOUFhbkpWazhZdUhFQ0hlVmh0VnU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84YjUzMmYtNjc4Mi00MDQ0LTllZmIt
NjcyNWQ5ODE5NmM2LzEvMXM1SkpWOUFhbkpWazhZdUhFQ0hlVmh0VnU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84YjUzMmYtNjc4Mi00MDQ0LTllZmItNjcyNWQ5ODE5NmM2
LzEvMXM1SkpWOUFhbkpWazhZdUhFQ0hlVmh0VnU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjZ9ynHd7
1riegGgQQKkuikQ9xzxyP6pvbai8n6ECejIxd+tjwi1oM+LaZL/DQgKwQeNUo34T
cN7/t5l4Dq+XaK3cAkR65eZSBaAciojKEgnB7bhW6YTmJp2mC6Z9DtDCqTcgFaIT
NnygKcpYwl4LxknxMdhDubqBD8OuYdQKerekPCwQcDoe28SmtbqZrm5A1RAWHYII
2ApqfUFEgWlfSsl4ufD7ahZ180Qhq6H8C1ESNlRrmZ+GYTND/+zKkDk5qtd5zotq
ZB98PrAjODmw+B5WKZ9LHCGc+uTQRBdTZsodFBQOUWdPLBOFRMhd9lCE/eZdd2kd
GxsrfGi3N8IF+Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:08 2025 by rpki-client