Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft
File: Si5_568rpaMEbhdkT6vo8Di0598.mft (raw, json)
Hash identifier: a58ao6NHVKexs34H9mMTVSaZjTnYRky1NK3ojVASjwk=
Subject key identifier: 4D:D0:BC:C5:8A:8A:18:B4:86:C4:C1:BE:E0:0B:F2:76:D2:07:34:00
Authority key identifier: 4A:2E:7F:E7:AF:2B:A5:A3:04:6E:17:64:4F:AB:E8:F0:38:B4:E7:DF
Certificate issuer: /CN=4a2e7fe7af2ba5a3046e17644fabe8f038b4e7df
Certificate serial: 0194BD17DDD19A99D3179B7965E2CE904FC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft
Manifest number: 0CAF
Signing time: Fri 31 Jan 2025 16:00:45 +0000
Manifest this update: Fri 31 Jan 2025 16:00:45 +0000
Manifest next update: Sat 01 Feb 2025 16:00:45 +0000
Files and hashes: 1: Si5_568rpaMEbhdkT6vo8Di0598.crl (hash: +C89YzR4Yfl3eQsNcIq8l+5TUD7JN+m3C3nyOveJYOk=)
2: x05kuSTQillWAvYC1VSvIsPJiaU.roa (hash: YaAmDXOkb7npVO3SgdzcRdFaOrP01AvggeHWb2jbRUk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:dd:d1:9a:99:d3:17:9b:79:65:e2:ce:90:4f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a2e7fe7af2ba5a3046e17644fabe8f038b4e7df
Validity
Not Before: Jan 31 16:00:45 2025 GMT
Not After : Feb 1 16:00:45 2025 GMT
Subject: CN=4dd0bcc58a8a18b486c4c1bee00bf276d2073400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:43:b2:af:e3:4d:b4:ae:95:df:79:3c:0c:f2:
43:68:e4:5b:a9:c3:cc:a4:2f:92:ce:40:96:5f:50:
64:fd:1a:1c:dc:c7:67:94:be:d3:06:d1:24:7a:50:
2b:14:c2:d0:42:b4:b7:40:d8:e4:0c:6a:13:a8:dd:
93:e4:ce:90:f8:67:31:9a:28:6c:eb:9a:42:77:c8:
80:87:53:be:ec:c2:ac:aa:59:6a:e5:42:00:22:61:
f9:8f:8c:2c:cc:c2:e1:96:ae:e4:21:ca:85:3e:f5:
97:c1:a1:3d:c3:06:5d:17:38:fb:5d:02:a1:10:c3:
8f:8e:58:62:60:40:64:c0:af:60:22:1c:6e:f0:35:
85:85:6f:a7:d3:b6:cb:d7:3e:db:d8:2c:38:b5:d5:
d6:39:95:24:a8:0d:b8:90:5f:85:cd:ec:e4:26:23:
b8:90:79:39:ff:6d:b8:fe:df:3a:67:dd:75:40:6e:
91:ed:0b:fa:96:2e:88:34:16:1f:a0:1b:c9:9e:75:
da:92:e3:fe:34:a2:08:fd:53:02:55:f2:a5:f6:80:
7d:1e:cc:12:55:0b:54:be:23:1c:87:e7:2c:56:c2:
00:b5:23:28:ce:11:20:10:c7:af:10:da:09:a4:62:
70:07:80:b6:e0:d8:c9:de:0a:e2:9e:68:48:fe:ea:
e2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D0:BC:C5:8A:8A:18:B4:86:C4:C1:BE:E0:0B:F2:76:D2:07:34:00
X509v3 Authority Key Identifier:
keyid:4A:2E:7F:E7:AF:2B:A5:A3:04:6E:17:64:4F:AB:E8:F0:38:B4:E7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Si5_568rpaMEbhdkT6vo8Di0598.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d9eeb8-7914-4047-b573-e670a2d47b86/1/Si5_568rpaMEbhdkT6vo8Di0598.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:65:8d:b9:d8:3b:ae:e4:1a:3f:a1:33:da:18:62:c2:4a:a2:
51:9b:2e:61:ab:da:77:9f:54:45:18:d3:fa:d3:3e:3a:3c:e5:
e9:2b:e0:9b:7b:ad:b5:ec:03:3a:86:5a:cf:00:0e:f4:12:ae:
c1:35:5c:34:e4:75:5a:6d:40:d9:01:2c:06:78:08:2f:d4:43:
a5:e7:30:99:fd:bd:20:8f:73:87:8f:90:b7:1b:16:2e:16:f0:
c9:07:fd:00:0b:dd:22:14:31:4a:ef:ae:09:05:2e:29:90:b0:
33:bc:b2:b8:a9:3f:7a:fb:48:71:d2:2e:88:39:e6:28:02:b4:
7f:30:50:16:fc:28:f3:6d:e1:8a:bd:73:38:b8:3d:81:f2:75:
fa:45:6f:12:81:71:43:49:a3:db:fb:a1:94:51:17:68:1a:ce:
c8:7e:54:08:2b:4b:b3:3e:60:a1:07:5e:41:fe:8f:4a:19:73:
f9:c6:f6:37:d3:ba:56:5e:ec:1d:0d:8d:32:58:2d:7a:4c:d2:
3a:eb:2f:90:b8:c3:7c:6c:58:68:83:b2:57:a9:3f:a2:d2:7c:
79:a2:a8:47:fd:05:6a:d9:13:cd:77:28:9d:be:4e:36:39:ef:
f1:53:ea:88:fd:95:0d:83:67:51:dd:3e:f2:57:6f:2c:24:69:
2b:14:3e:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F93RmpnTF5t5ZeLOkE/HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhMmU3ZmU3YWYyYmE1YTMwNDZlMTc2NDRmYWJlOGYwMzhi
NGU3ZGYwHhcNMjUwMTMxMTYwMDQ1WhcNMjUwMjAxMTYwMDQ1WjAzMTEwLwYDVQQD
Eyg0ZGQwYmNjNThhOGExOGI0ODZjNGMxYmVlMDBiZjI3NmQyMDczNDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUOyr+NNtK6V33k8DPJDaORbqcPM
pC+SzkCWX1Bk/Roc3MdnlL7TBtEkelArFMLQQrS3QNjkDGoTqN2T5M6Q+Gcxmihs
65pCd8iAh1O+7MKsqllq5UIAImH5j4wszMLhlq7kIcqFPvWXwaE9wwZdFzj7XQKh
EMOPjlhiYEBkwK9gIhxu8DWFhW+n07bL1z7b2Cw4tdXWOZUkqA24kF+FzezkJiO4
kHk5/224/t86Z911QG6R7Qv6li6INBYfoBvJnnXakuP+NKII/VMCVfKl9oB9HswS
VQtUviMch+csVsIAtSMozhEgEMevENoJpGJwB4C24NjJ3grinmhI/uriSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3QvMWKihi0hsTBvuAL8nbSBzQAMB8GA1UdIwQY
MBaAFEouf+evK6WjBG4XZE+r6PA4tOffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2k1XzU2OHJwYU1FYmhka1Q2dm84RGkwNTk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9kOWVlYjgtNzkxNC00MDQ3LWI1NzMt
ZTY3MGEyZDQ3Yjg2LzEvU2k1XzU2OHJwYU1FYmhka1Q2dm84RGkwNTk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9kOWVlYjgtNzkxNC00MDQ3LWI1NzMtZTY3MGEyZDQ3Yjg2
LzEvU2k1XzU2OHJwYU1FYmhka1Q2dm84RGkwNTk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtGWNudg7
ruQaP6Ez2hhiwkqiUZsuYavad59URRjT+tM+Ojzl6Svgm3uttewDOoZazwAO9BKu
wTVcNOR1Wm1A2QEsBngIL9RDpecwmf29II9zh4+QtxsWLhbwyQf9AAvdIhQxSu+u
CQUuKZCwM7yyuKk/evtIcdIuiDnmKAK0fzBQFvwo823hir1zOLg9gfJ1+kVvEoFx
Q0mj2/uhlFEXaBrOyH5UCCtLsz5goQdeQf6PShlz+cb2N9O6Vl7sHQ2NMlgtekzS
OusvkLjDfGxYaIOyV6k/otJ8eaKoR/0FatkTzXconb5ONjnv8VPqiP2VDYNnUd0+
8ldvLCRpKxQ+GA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:32 2025 by rpki-client