Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
File: 00_-5-di-aBv4vR-eh5S2eun-v0.mft (raw, json)
Hash identifier: F8UZkHlqvymDgA9ekcjy5Uw3Bci8P4O7IPU+/UyzCSM=
Subject key identifier: F7:26:EE:68:39:86:2C:A5:58:66:D7:75:71:45:02:A0:5F:E5:A7:3A
Authority key identifier: D3:4F:FE:E7:E7:62:F9:A0:6F:E2:F4:7E:7A:1E:52:D9:EB:A7:FA:FD
Certificate issuer: /CN=d34ffee7e762f9a06fe2f47e7a1e52d9eba7fafd
Certificate serial: 0194BD176677391E583FCE3FCC51CB24517F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
Manifest number: 0E77
Signing time: Fri 31 Jan 2025 16:00:14 +0000
Manifest this update: Fri 31 Jan 2025 16:00:14 +0000
Manifest next update: Sat 01 Feb 2025 16:00:14 +0000
Files and hashes: 1: 00_-5-di-aBv4vR-eh5S2eun-v0.crl (hash: rhm1cI8nuI2kG1wLjlDQU+MY1WWoOC71LgaOFHQ+5cE=)
2: RTZF1pckQ5UHtLDFfMIz6CKlCQM.roa (hash: OSpIkZE/LwbO5i/Rwo6y7sjYoRsMMhhcextuc6NzOpA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:66:77:39:1e:58:3f:ce:3f:cc:51:cb:24:51:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34ffee7e762f9a06fe2f47e7a1e52d9eba7fafd
Validity
Not Before: Jan 31 16:00:14 2025 GMT
Not After : Feb 1 16:00:14 2025 GMT
Subject: CN=f726ee6839862ca55866d775714502a05fe5a73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3d:6f:67:9f:db:0c:43:a7:f3:0f:54:61:9d:
2a:02:bc:6f:2c:14:fa:a3:db:b6:4a:bb:2b:bc:4a:
62:f3:d0:e6:82:8d:9b:38:f6:4e:97:c3:a5:fc:d8:
37:95:62:3d:d4:52:dd:1c:19:47:96:33:20:f4:d9:
54:eb:83:3e:31:04:3e:01:ba:5e:2a:08:a0:68:88:
c6:a8:e9:d5:4e:82:a6:85:3e:4d:00:9d:53:ce:97:
20:ff:0c:d8:82:7e:f6:09:8e:c3:96:e7:e2:62:a8:
f6:12:4b:c5:69:fb:71:a6:13:8a:06:16:11:92:37:
f1:26:1f:ee:e6:2c:94:c1:18:3a:51:0d:db:cc:c7:
b9:61:ca:3e:eb:f5:cd:22:0c:00:f8:ca:83:b7:cc:
95:37:64:ed:c4:af:0c:f7:34:e6:07:d2:1a:00:8d:
6c:7e:8a:bf:40:f1:78:6b:18:de:65:f7:70:88:c2:
91:40:61:4b:6c:10:a6:91:16:24:ca:1c:fc:1a:41:
03:7f:8e:74:66:a0:e6:b0:72:b7:f5:8e:db:d2:35:
c3:72:38:86:cd:e6:2f:cd:e0:44:ae:76:60:3d:07:
f4:7f:24:4d:e7:3f:7f:70:07:2c:cb:dd:7d:61:16:
f5:9d:05:70:7e:28:79:d9:9f:14:68:e0:cd:67:87:
7a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:26:EE:68:39:86:2C:A5:58:66:D7:75:71:45:02:A0:5F:E5:A7:3A
X509v3 Authority Key Identifier:
keyid:D3:4F:FE:E7:E7:62:F9:A0:6F:E2:F4:7E:7A:1E:52:D9:EB:A7:FA:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ca:d3:df:7a:e0:54:c6:19:6a:72:df:ca:a5:3d:23:80:f0:
fd:8e:c5:4a:22:3e:28:9d:e7:0b:d4:28:98:c9:e6:04:09:f0:
e4:e6:a5:40:67:eb:85:a0:68:a8:18:bf:84:b8:39:d0:75:fb:
28:b7:f3:62:93:56:09:eb:0b:29:39:56:31:f8:38:55:45:8e:
0b:95:25:28:be:dc:da:e1:5c:4b:0c:f1:09:1f:66:35:d6:d5:
9f:23:58:30:3c:ce:21:fe:34:6e:e2:4a:1d:28:3b:19:61:d4:
72:61:0e:4e:cb:11:d6:84:1b:99:0f:de:75:15:5a:2d:26:84:
2b:2f:b8:11:5f:f1:cb:82:a3:e1:44:88:f2:1d:1d:93:d2:0b:
31:d7:5d:24:8f:e4:39:9a:aa:2f:16:c1:51:46:55:fa:6e:e5:
85:91:ce:95:9f:c0:5e:b2:8e:09:b8:22:99:c9:25:6a:00:35:
ad:b6:31:ee:a4:b6:e0:b8:38:fe:b6:c8:f0:3a:db:ae:ff:0e:
94:21:8f:bb:ac:78:46:6b:ef:84:0a:83:db:58:db:5e:ac:46:
d0:2b:df:09:c3:96:75:12:77:a1:31:9c:77:34:e6:dd:86:e6:
86:9b:9d:e0:98:cb:1c:3c:ef:88:51:01:d3:fb:e3:d1:f4:32:
5a:b5:29:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F2Z3OR5YP84/zFHLJFF/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNGZmZWU3ZTc2MmY5YTA2ZmUyZjQ3ZTdhMWU1MmQ5ZWJh
N2ZhZmQwHhcNMjUwMTMxMTYwMDE0WhcNMjUwMjAxMTYwMDE0WjAzMTEwLwYDVQQD
EyhmNzI2ZWU2ODM5ODYyY2E1NTg2NmQ3NzU3MTQ1MDJhMDVmZTVhNzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz1vZ5/bDEOn8w9UYZ0qArxvLBT6
o9u2SrsrvEpi89Dmgo2bOPZOl8Ol/Ng3lWI91FLdHBlHljMg9NlU64M+MQQ+Abpe
KgigaIjGqOnVToKmhT5NAJ1Tzpcg/wzYgn72CY7DlufiYqj2EkvFaftxphOKBhYR
kjfxJh/u5iyUwRg6UQ3bzMe5Yco+6/XNIgwA+MqDt8yVN2TtxK8M9zTmB9IaAI1s
foq/QPF4axjeZfdwiMKRQGFLbBCmkRYkyhz8GkEDf450ZqDmsHK39Y7b0jXDcjiG
zeYvzeBErnZgPQf0fyRN5z9/cAcsy919YRb1nQVwfih52Z8UaODNZ4d65QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcm7mg5hiylWGbXdXFFAqBf5ac6MB8GA1UdIwQY
MBaAFNNP/ufnYvmgb+L0fnoeUtnrp/r9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDBfLTUtZGktYUJ2NHZSLWVoNVMyZXVuLXYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xYjhkOTItZTE1Ny00MTQxLTgyYzkt
ODdlMWYzODY2MzYyLzEvMDBfLTUtZGktYUJ2NHZSLWVoNVMyZXVuLXYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8xYjhkOTItZTE1Ny00MTQxLTgyYzktODdlMWYzODY2MzYy
LzEvMDBfLTUtZGktYUJ2NHZSLWVoNVMyZXVuLXYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZsrT33rg
VMYZanLfyqU9I4Dw/Y7FSiI+KJ3nC9QomMnmBAnw5OalQGfrhaBoqBi/hLg50HX7
KLfzYpNWCesLKTlWMfg4VUWOC5UlKL7c2uFcSwzxCR9mNdbVnyNYMDzOIf40buJK
HSg7GWHUcmEOTssR1oQbmQ/edRVaLSaEKy+4EV/xy4Kj4USI8h0dk9ILMdddJI/k
OZqqLxbBUUZV+m7lhZHOlZ/AXrKOCbgimcklagA1rbYx7qS24Lg4/rbI8Drbrv8O
lCGPu6x4RmvvhAqD21jbXqxG0CvfCcOWdRJ3oTGcdzTm3Ybmhpud4JjLHDzviFEB
0/vj0fQyWrUplw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:25 2025 by rpki-client