Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft
File: 5gSc-H3Y8f1MgCS1psnqlPF7b70.mft (raw, json)
Hash identifier: XD2grYL5yfl2+8UDToSfSR7iYUu02yH2Z4sevt/UXMY=
Subject key identifier: 56:CB:D5:CF:BA:93:59:DF:86:C4:4D:77:35:7F:C9:04:0B:2E:DB:BB
Authority key identifier: E6:04:9C:F8:7D:D8:F1:FD:4C:80:24:B5:A6:C9:EA:94:F1:7B:6F:BD
Certificate issuer: /CN=e6049cf87dd8f1fd4c8024b5a6c9ea94f17b6fbd
Certificate serial: 0194BBCE439475C8488EBBE551FE1CDCB6D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 10:00:44 +0000
Manifest this update: Fri 31 Jan 2025 10:00:44 +0000
Manifest next update: Sat 01 Feb 2025 10:00:44 +0000
Files and hashes: 1: 5gSc-H3Y8f1MgCS1psnqlPF7b70.crl (hash: VJbJdY27W/bxCsMNddnlWs06/PX/OsB4GP4sH+xpDCw=)
2: cu8xrGCLqiGHp1db_MgiG0UxHW8.roa (hash: giP9e0QpRuK7Urrt2Hhvj2cOHwVCXlF67CRutRL96MA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:43:94:75:c8:48:8e:bb:e5:51:fe:1c:dc:b6:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6049cf87dd8f1fd4c8024b5a6c9ea94f17b6fbd
Validity
Not Before: Jan 31 10:00:44 2025 GMT
Not After : Feb 1 10:00:44 2025 GMT
Subject: CN=56cbd5cfba9359df86c44d77357fc9040b2edbbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:88:2f:15:71:fa:0b:7d:77:0b:96:b2:c8:1d:
b0:16:aa:20:7c:39:78:7e:00:0e:4a:da:9a:9a:e9:
e8:06:bf:b0:50:69:1d:57:d9:bc:60:0b:f8:80:31:
2d:0c:c7:19:1d:28:4b:dc:0c:e6:93:8f:93:8b:70:
d7:b7:c6:b0:e7:44:68:6e:4a:50:0c:43:28:37:ab:
53:e8:f2:27:3f:a3:fd:82:b5:ed:b2:ef:4f:da:fc:
6a:89:a4:3b:1a:99:bb:c4:02:77:02:b9:a0:c2:da:
89:92:8a:75:3f:6c:fc:23:1b:dc:63:fe:74:27:eb:
83:d3:42:7d:d9:94:af:ae:fb:a2:da:da:da:be:4a:
e5:1c:35:f5:56:44:bc:d3:5f:45:ba:f9:02:cd:8d:
e7:65:69:6f:d4:80:a7:bd:90:44:e4:77:91:98:38:
74:89:ff:98:bc:ae:39:d7:c2:3a:b7:1e:4e:89:f5:
e7:65:e2:6c:57:a1:3b:bb:59:d7:a4:2b:f3:c4:91:
f1:43:e6:1b:27:44:be:fa:03:3f:93:26:aa:34:69:
e5:65:cc:cd:86:88:ec:d4:38:dd:f3:8e:66:d8:50:
10:a1:4a:9e:20:73:53:ac:06:42:d3:40:97:15:5b:
fa:19:cd:78:8c:0c:93:fd:a4:55:74:04:93:d8:1b:
ee:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:CB:D5:CF:BA:93:59:DF:86:C4:4D:77:35:7F:C9:04:0B:2E:DB:BB
X509v3 Authority Key Identifier:
keyid:E6:04:9C:F8:7D:D8:F1:FD:4C:80:24:B5:A6:C9:EA:94:F1:7B:6F:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c3:21:9a:67:5b:7a:ab:f1:df:b9:8e:9a:42:e0:60:f2:e4:
7a:cc:f5:27:7e:05:39:e1:8b:1a:a2:ac:09:14:c6:34:83:8a:
5c:08:5b:ee:fa:f2:ce:10:16:80:b2:e9:7d:f0:db:f9:19:f8:
39:59:57:b3:22:11:1d:18:9c:f6:45:b4:f8:28:56:6d:67:b7:
7e:ca:a1:3a:1d:c9:6e:c3:82:b2:7a:6b:90:14:6f:34:80:a3:
07:7e:3f:ef:7c:a6:8c:bc:9c:15:b0:ce:85:31:6d:b0:fc:ee:
25:43:12:83:be:22:2b:2c:a8:b0:9e:c3:29:b4:96:7b:bc:37:
6d:eb:3b:0c:a1:32:08:a9:bc:33:38:5f:e9:e3:b0:de:6b:20:
fb:e5:c6:a5:43:ba:7a:d9:d9:76:38:30:1b:9c:d7:cb:c9:15:
43:ab:fd:33:86:99:3b:ae:f2:17:7a:00:b5:fd:be:48:e5:b8:
30:f3:fd:4d:2e:a8:57:73:24:83:02:0f:06:48:79:90:5f:a4:
ef:d9:bb:83:28:16:64:59:03:46:c4:a8:91:90:41:72:6c:b3:
32:a3:17:c5:10:87:f9:69:22:ea:ad:34:3f:28:66:09:e7:ed:
89:2c:ba:db:20:4c:db:bb:e5:04:15:0f:d3:61:cd:5e:78:63:
73:8b:34:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zkOUdchIjrvlUf4c3LbRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MDQ5Y2Y4N2RkOGYxZmQ0YzgwMjRiNWE2YzllYTk0ZjE3
YjZmYmQwHhcNMjUwMTMxMTAwMDQ0WhcNMjUwMjAxMTAwMDQ0WjAzMTEwLwYDVQQD
Eyg1NmNiZDVjZmJhOTM1OWRmODZjNDRkNzczNTdmYzkwNDBiMmVkYmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4gvFXH6C313C5ayyB2wFqogfDl4
fgAOStqamunoBr+wUGkdV9m8YAv4gDEtDMcZHShL3Azmk4+Ti3DXt8aw50RobkpQ
DEMoN6tT6PInP6P9grXtsu9P2vxqiaQ7Gpm7xAJ3ArmgwtqJkop1P2z8IxvcY/50
J+uD00J92ZSvrvui2travkrlHDX1VkS8019FuvkCzY3nZWlv1ICnvZBE5HeRmDh0
if+YvK4518I6tx5OifXnZeJsV6E7u1nXpCvzxJHxQ+YbJ0S++gM/kyaqNGnlZczN
hojs1Djd845m2FAQoUqeIHNTrAZC00CXFVv6Gc14jAyT/aRVdAST2BvugwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFbL1c+6k1nfhsRNdzV/yQQLLtu7MB8GA1UdIwQY
MBaAFOYEnPh92PH9TIAktabJ6pTxe2+9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWdTYy1IM1k4ZjFNZ0NTMXBzbnFsUEY3YjcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wNjBjZWEtZTkyMC00MGRlLTkwZGEt
OGQ0OWViY2FlOWIzLzEvNWdTYy1IM1k4ZjFNZ0NTMXBzbnFsUEY3YjcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8wNjBjZWEtZTkyMC00MGRlLTkwZGEtOGQ0OWViY2FlOWIz
LzEvNWdTYy1IM1k4ZjFNZ0NTMXBzbnFsUEY3YjcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWsMhmmdb
eqvx37mOmkLgYPLkesz1J34FOeGLGqKsCRTGNIOKXAhb7vryzhAWgLLpffDb+Rn4
OVlXsyIRHRic9kW0+ChWbWe3fsqhOh3JbsOCsnprkBRvNICjB34/73ymjLycFbDO
hTFtsPzuJUMSg74iKyyosJ7DKbSWe7w3bes7DKEyCKm8Mzhf6eOw3msg++XGpUO6
etnZdjgwG5zXy8kVQ6v9M4aZO67yF3oAtf2+SOW4MPP9TS6oV3MkgwIPBkh5kF+k
79m7gygWZFkDRsSokZBBcmyzMqMXxRCH+Wki6q00PyhmCeftiSy62yBM27vlBBUP
02HNXnhjc4s0Wg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:25:25 2025 by rpki-client