Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft
File: ctjb6kAj1p9H-JvSCC__skZt0qU.mft (raw, json)
Hash identifier: Knun0/XvhiOi8pjBC/Fj0aK6Hc6BxgBQwFSzAWaAHzM=
Subject key identifier: F5:D7:7E:16:FC:F2:7F:9D:5E:C2:3A:A4:25:00:D6:2C:82:0D:F1:68
Authority key identifier: 72:D8:DB:EA:40:23:D6:9F:47:F8:9B:D2:08:2F:FF:B2:46:6D:D2:A5
Certificate issuer: /CN=72d8dbea4023d69f47f89bd2082fffb2466dd2a5
Certificate serial: 0194BCA9F3B18B41DE57D3E6661A36BE7010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctjb6kAj1p9H-JvSCC__skZt0qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft
Manifest number: 05E9
Signing time: Fri 31 Jan 2025 14:00:42 +0000
Manifest this update: Fri 31 Jan 2025 14:00:42 +0000
Manifest next update: Sat 01 Feb 2025 14:00:42 +0000
Files and hashes: 1: Egv_COpkQ4qE0m0lj_BQmNwIMRA.roa (hash: 7o6c3PTeF8AIq/25Q6USnosQEeLS7MscdEHZbwRxm6I=)
2: ctjb6kAj1p9H-JvSCC__skZt0qU.crl (hash: xGsPOtqVwJwvbnRE947wKE9aF3fIvbOtwOxYG/yRLnk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f3:b1:8b:41:de:57:d3:e6:66:1a:36:be:70:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72d8dbea4023d69f47f89bd2082fffb2466dd2a5
Validity
Not Before: Jan 31 14:00:42 2025 GMT
Not After : Feb 1 14:00:42 2025 GMT
Subject: CN=f5d77e16fcf27f9d5ec23aa42500d62c820df168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:04:08:de:d6:7a:16:07:2b:10:98:f5:fe:03:
ef:01:37:1c:e9:65:a9:df:28:2d:07:c4:a6:60:6f:
32:0b:a2:b8:de:6d:15:b0:7b:cc:5a:a3:1b:0a:e5:
51:37:4f:5e:7b:67:b9:0a:39:f3:5a:f6:53:08:60:
2e:b8:fc:8e:c9:d8:b0:58:58:63:f9:ea:60:0e:5b:
43:6a:66:9f:33:bb:eb:05:65:dc:e8:5f:e3:67:6c:
7d:ec:ad:31:af:11:73:23:fa:6e:44:03:e3:60:3d:
55:82:7d:65:43:0b:5b:1d:72:94:34:e1:cd:9f:6e:
aa:6d:a5:70:cb:ae:be:f9:34:74:ad:80:f8:da:32:
8d:8c:25:39:7d:1c:3b:0d:53:f2:c9:ea:a8:de:50:
f3:81:03:4a:8a:72:d9:10:e8:7c:30:3a:74:93:b1:
f7:16:67:19:28:c7:e0:f0:80:e8:59:8e:fe:27:79:
50:f6:70:51:2b:c0:aa:e6:24:9c:6f:8f:0d:60:f5:
22:2d:d8:39:23:40:eb:23:c0:6d:81:99:ac:e7:24:
ff:56:2d:39:69:bc:f2:a6:68:d7:1a:00:b3:bf:ff:
c1:c4:9d:d4:1c:16:97:bb:dc:5b:f5:ca:61:dd:b0:
50:c2:53:f9:8b:93:c5:aa:0a:bf:9c:d0:66:7c:29:
26:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D7:7E:16:FC:F2:7F:9D:5E:C2:3A:A4:25:00:D6:2C:82:0D:F1:68
X509v3 Authority Key Identifier:
keyid:72:D8:DB:EA:40:23:D6:9F:47:F8:9B:D2:08:2F:FF:B2:46:6D:D2:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctjb6kAj1p9H-JvSCC__skZt0qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a9091f-27a2-42a3-952b-9ed1804f3282/1/ctjb6kAj1p9H-JvSCC__skZt0qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:f1:c0:ab:8e:84:8e:09:15:b5:ea:d2:13:67:28:4a:3d:fa:
b8:25:5c:c1:1e:71:51:bd:c1:d7:c6:42:89:11:03:3a:2a:f3:
ba:16:04:f6:72:ed:1b:d2:34:3b:2d:13:b1:f5:91:47:12:47:
f9:be:52:f8:9d:e2:31:4d:4f:3e:c2:94:31:04:1b:18:46:92:
89:e3:97:95:30:7a:5a:04:68:88:e3:7d:68:4a:ab:ee:21:9d:
d2:e1:db:52:28:18:8b:b5:59:05:e6:b4:20:0b:f1:f8:46:f6:
0f:e6:21:81:d0:1e:48:2e:bc:27:6a:5f:60:d8:99:c8:b7:a7:
ad:4b:7c:ff:4a:99:00:1e:fe:e4:ff:99:85:21:9a:1c:09:5e:
ee:86:95:28:84:af:0a:41:b2:39:ee:a1:15:66:38:28:8d:00:
17:ce:53:3a:4b:9c:0a:38:a2:81:a6:fc:67:d3:5e:93:68:be:
f2:72:d8:3b:f2:90:f8:ba:b2:4c:c5:bc:8a:37:5f:3e:05:d2:
a6:ff:b7:b9:6f:a8:62:f9:2a:94:ac:08:11:c0:2b:06:8a:6c:
e0:ff:3a:42:55:da:dc:8d:2a:43:95:61:40:b1:0f:d4:21:1d:
80:ba:2e:68:42:c3:ae:ba:4e:65:9d:0a:b1:4e:eb:c0:92:70:
b2:f6:51:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qfOxi0HeV9PmZho2vnAQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZDhkYmVhNDAyM2Q2OWY0N2Y4OWJkMjA4MmZmZmIyNDY2
ZGQyYTUwHhcNMjUwMTMxMTQwMDQyWhcNMjUwMjAxMTQwMDQyWjAzMTEwLwYDVQQD
EyhmNWQ3N2UxNmZjZjI3ZjlkNWVjMjNhYTQyNTAwZDYyYzgyMGRmMTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQQI3tZ6FgcrEJj1/gPvATcc6WWp
3ygtB8SmYG8yC6K43m0VsHvMWqMbCuVRN09ee2e5CjnzWvZTCGAuuPyOydiwWFhj
+epgDltDamafM7vrBWXc6F/jZ2x97K0xrxFzI/puRAPjYD1Vgn1lQwtbHXKUNOHN
n26qbaVwy66++TR0rYD42jKNjCU5fRw7DVPyyeqo3lDzgQNKinLZEOh8MDp0k7H3
FmcZKMfg8IDoWY7+J3lQ9nBRK8Cq5iScb48NYPUiLdg5I0DrI8BtgZms5yT/Vi05
abzypmjXGgCzv//BxJ3UHBaXu9xb9cph3bBQwlP5i5PFqgq/nNBmfCkmhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPXXfhb88n+dXsI6pCUA1iyCDfFoMB8GA1UdIwQY
MBaAFHLY2+pAI9afR/ib0ggv/7JGbdKlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3RqYjZrQWoxcDlILUp2U0NDX19za1p0MHFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9hOTA5MWYtMjdhMi00MmEzLTk1MmIt
OWVkMTgwNGYzMjgyLzEvY3RqYjZrQWoxcDlILUp2U0NDX19za1p0MHFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9hOTA5MWYtMjdhMi00MmEzLTk1MmItOWVkMTgwNGYzMjgy
LzEvY3RqYjZrQWoxcDlILUp2U0NDX19za1p0MHFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnPHAq46E
jgkVterSE2coSj36uCVcwR5xUb3B18ZCiREDOirzuhYE9nLtG9I0Oy0TsfWRRxJH
+b5S+J3iMU1PPsKUMQQbGEaSieOXlTB6WgRoiON9aEqr7iGd0uHbUigYi7VZBea0
IAvx+Eb2D+YhgdAeSC68J2pfYNiZyLenrUt8/0qZAB7+5P+ZhSGaHAle7oaVKISv
CkGyOe6hFWY4KI0AF85TOkucCjiigab8Z9Nek2i+8nLYO/KQ+LqyTMW8ijdfPgXS
pv+3uW+oYvkqlKwIEcArBops4P86QlXa3I0qQ5VhQLEP1CEdgLouaELDrrpOZZ0K
sU7rwJJwsvZR3Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:53 2025 by rpki-client