Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
File: 5cePoZk9RRL-JDa4ztqL_JKdZX0.mft (raw, json)
Hash identifier: vJjZKSmJbjOuiQm+IRbFQ8o5cI8lipbWl2MRAXLb2VM=
Subject key identifier: B2:73:9B:3F:42:D5:3A:A5:97:9C:45:35:F9:5F:55:54:BF:AD:84:07
Authority key identifier: E5:C7:8F:A1:99:3D:45:12:FE:24:36:B8:CE:DA:8B:FC:92:9D:65:7D
Certificate issuer: /CN=e5c78fa1993d4512fe2436b8ceda8bfc929d657d
Certificate serial: 0194BCA9DE437E62DDCCE050ACF3D8A57E36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
Manifest number: 076A
Signing time: Fri 31 Jan 2025 14:00:36 +0000
Manifest this update: Fri 31 Jan 2025 14:00:36 +0000
Manifest next update: Sat 01 Feb 2025 14:00:36 +0000
Files and hashes: 1: 5cePoZk9RRL-JDa4ztqL_JKdZX0.crl (hash: nPSHMwUcqgA+bIsIaIR59gzAk24aUvXVrogjiynCn3Y=)
2: sxXzCHmD4CxDgty1OLpDx0DtMMI.roa (hash: /ld9Wsyv6zrLHEXivfqQOk2cQ1fruSCWz5YkqZ+WXCE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:de:43:7e:62:dd:cc:e0:50:ac:f3:d8:a5:7e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c78fa1993d4512fe2436b8ceda8bfc929d657d
Validity
Not Before: Jan 31 14:00:36 2025 GMT
Not After : Feb 1 14:00:36 2025 GMT
Subject: CN=b2739b3f42d53aa5979c4535f95f5554bfad8407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:cb:f9:5a:17:e7:8c:b3:ef:35:af:aa:01:e9:
89:9a:23:da:bc:b1:82:0e:06:cb:c8:5f:0a:b3:37:
68:3f:ff:44:6c:4f:21:60:c9:9f:fe:da:c4:6f:d6:
4f:31:c7:bd:14:66:ac:6c:52:fd:7b:33:9b:51:e6:
c8:c2:3b:33:b7:e0:35:92:0f:55:0c:06:73:79:f1:
9e:dc:92:08:f9:7b:6b:2a:2f:05:6d:e9:86:74:bd:
59:a6:53:2e:e8:60:1a:5c:4d:d9:e3:dd:ee:a5:bd:
79:0c:0c:02:e6:fa:c8:e9:4d:6b:5d:c2:25:c1:38:
f6:11:7b:0f:40:d0:54:27:27:e3:ef:59:32:fa:59:
25:c0:fb:c0:39:84:5b:83:e6:f8:b9:e2:ae:b9:04:
3a:4c:c8:fd:9f:14:82:32:e5:28:2e:68:c8:19:37:
b4:8c:f2:43:28:39:69:30:89:2b:1d:1c:af:af:ab:
34:0e:1e:fe:40:42:d1:b9:45:a2:51:17:1a:9c:06:
57:67:0f:49:7a:c9:e1:d1:8c:3c:80:72:89:4b:35:
c5:72:42:bf:f2:6e:c5:93:8f:35:8a:0b:2b:61:ab:
b2:2a:66:7c:81:9b:6f:b3:82:e3:ce:f9:c3:37:e0:
ea:ae:c1:24:fa:8f:94:4a:21:dd:a4:15:ae:ee:85:
2e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:73:9B:3F:42:D5:3A:A5:97:9C:45:35:F9:5F:55:54:BF:AD:84:07
X509v3 Authority Key Identifier:
keyid:E5:C7:8F:A1:99:3D:45:12:FE:24:36:B8:CE:DA:8B:FC:92:9D:65:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cePoZk9RRL-JDa4ztqL_JKdZX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5bb1d0-634e-46fc-a75a-0c9aa6696b49/1/5cePoZk9RRL-JDa4ztqL_JKdZX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:7f:0d:62:7c:52:43:2b:af:d4:74:26:e1:8d:49:cc:75:af:
4c:72:03:ca:ea:af:80:b3:cb:71:8e:34:e1:96:db:ce:de:dc:
75:05:e2:b7:ec:07:42:32:48:e3:1b:63:a3:b1:d7:c8:b3:d2:
57:20:e0:27:8b:9b:9f:53:b8:1f:3b:b4:af:cd:a0:b1:85:bb:
2f:bc:e6:db:1c:0c:76:e5:9b:68:1b:a5:94:aa:64:bd:b9:b1:
cf:fd:d8:04:53:8e:b1:fb:ba:a1:b8:f2:e9:50:d9:7c:48:a6:
aa:95:bf:48:c9:d6:eb:2c:5d:e5:bc:ea:f8:b2:30:84:83:43:
41:3c:45:ff:9a:f7:97:e0:41:3a:57:0f:89:ed:9a:5a:e0:e0:
73:07:9a:25:51:26:f5:96:40:62:89:20:90:6d:e9:3d:6a:b8:
ff:aa:0c:fa:7e:3f:63:bc:35:93:ec:16:cc:fe:8b:69:bb:89:
f9:46:2c:f3:4c:e2:11:af:4d:61:6e:9b:ed:1c:74:f4:df:77:
31:b9:d0:7b:00:91:4d:4b:73:27:95:13:ae:5c:d0:1a:06:83:
fe:6b:16:8d:88:a1:64:70:dc:11:82:c8:dd:dd:a8:86:bd:83:
aa:4f:1b:3d:72:fa:7d:d8:3f:dd:5a:7e:da:fa:90:15:7c:9c:
08:42:52:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qd5DfmLdzOBQrPPYpX42MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1Yzc4ZmExOTkzZDQ1MTJmZTI0MzZiOGNlZGE4YmZjOTI5
ZDY1N2QwHhcNMjUwMTMxMTQwMDM2WhcNMjUwMjAxMTQwMDM2WjAzMTEwLwYDVQQD
EyhiMjczOWIzZjQyZDUzYWE1OTc5YzQ1MzVmOTVmNTU1NGJmYWQ4NDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5cv5WhfnjLPvNa+qAemJmiPavLGC
DgbLyF8KszdoP/9EbE8hYMmf/trEb9ZPMce9FGasbFL9ezObUebIwjszt+A1kg9V
DAZzefGe3JII+XtrKi8FbemGdL1ZplMu6GAaXE3Z493upb15DAwC5vrI6U1rXcIl
wTj2EXsPQNBUJyfj71ky+lklwPvAOYRbg+b4ueKuuQQ6TMj9nxSCMuUoLmjIGTe0
jPJDKDlpMIkrHRyvr6s0Dh7+QELRuUWiURcanAZXZw9Jesnh0Yw8gHKJSzXFckK/
8m7Fk481igsrYauyKmZ8gZtvs4LjzvnDN+DqrsEk+o+USiHdpBWu7oUuHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJzmz9C1Tqll5xFNflfVVS/rYQHMB8GA1UdIwQY
MBaAFOXHj6GZPUUS/iQ2uM7ai/ySnWV9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWNlUG9aazlSUkwtSkRhNHp0cUxfSktkWlgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy81YmIxZDAtNjM0ZS00NmZjLWE3NWEt
MGM5YWE2Njk2YjQ5LzEvNWNlUG9aazlSUkwtSkRhNHp0cUxfSktkWlgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy81YmIxZDAtNjM0ZS00NmZjLWE3NWEtMGM5YWE2Njk2YjQ5
LzEvNWNlUG9aazlSUkwtSkRhNHp0cUxfSktkWlgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYH8NYnxS
Qyuv1HQm4Y1JzHWvTHIDyuqvgLPLcY404Zbbzt7cdQXit+wHQjJI4xtjo7HXyLPS
VyDgJ4ubn1O4Hzu0r82gsYW7L7zm2xwMduWbaBullKpkvbmxz/3YBFOOsfu6objy
6VDZfEimqpW/SMnW6yxd5bzq+LIwhINDQTxF/5r3l+BBOlcPie2aWuDgcweaJVEm
9ZZAYokgkG3pPWq4/6oM+n4/Y7w1k+wWzP6LabuJ+UYs80ziEa9NYW6b7Rx09N93
MbnQewCRTUtzJ5UTrlzQGgaD/msWjYihZHDcEYLI3d2ohr2Dqk8bPXL6fdg/3Vp+
2vqQFXycCEJSFQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:15:24 2025 by rpki-client