Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
File: 5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft (raw, json)
Hash identifier: wwSxJUxokT04eshkqaW4JEKfv9zZfg3WPnlGB1Xvu2Q=
Subject key identifier: C2:98:31:A6:05:2E:6B:A6:4D:E6:59:6A:39:36:81:B6:D9:8E:17:06
Authority key identifier: E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18
Certificate issuer: /CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
Certificate serial: 0194BBCF07FFFDE53C1F7ED9F1B67A2E26DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
Manifest number: 0DFD
Signing time: Fri 31 Jan 2025 10:01:34 +0000
Manifest this update: Fri 31 Jan 2025 10:01:34 +0000
Manifest next update: Sat 01 Feb 2025 10:01:34 +0000
Files and hashes: 1: 5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl (hash: WThvpc5ucTkBU6hn6nc3cBT4rUe5s1Lb41gZahnjOBk=)
2: FrjAEg86v5SV-4VLldw-NEA5C1M.roa (hash: Rm7Xoat+7nBF56KNvwJMCJ6wscvSb/PfpXRNxa3KAIc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:07:ff:fd:e5:3c:1f:7e:d9:f1:b6:7a:2e:26:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
Validity
Not Before: Jan 31 10:01:34 2025 GMT
Not After : Feb 1 10:01:34 2025 GMT
Subject: CN=c29831a6052e6ba64de6596a393681b6d98e1706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:43:68:fe:d6:45:71:75:5a:67:59:18:c3:6d:
6f:f0:65:25:b6:f4:74:c6:46:61:ff:c6:24:11:45:
19:e2:bd:a7:0e:de:83:00:46:2d:2f:cb:90:07:27:
20:3e:17:b6:e6:4a:d8:84:12:08:db:ad:e0:4c:11:
64:53:d2:37:ec:c4:c4:66:9f:94:6b:be:df:e6:75:
ad:bb:ac:12:d2:39:a2:17:a8:92:a5:66:9e:1e:e0:
42:b1:b1:56:a5:8b:44:da:29:c6:25:9d:d7:c9:a5:
81:16:3b:f9:e1:34:63:f1:f4:74:42:86:c1:fa:9f:
1c:d9:d9:13:17:5d:c7:81:c0:9f:62:30:82:50:e0:
02:1d:0e:77:03:e1:41:2d:d5:d3:6c:5f:d0:c3:e7:
e9:65:93:12:4d:75:cc:c1:b7:68:3b:2e:58:e7:6b:
80:28:db:00:94:e3:7e:f5:fe:25:0f:e5:99:45:26:
87:7e:c9:a7:a7:e9:b7:27:bd:75:3c:fe:7f:a9:48:
25:1d:f2:11:2a:13:63:d1:34:32:ad:13:33:d7:f7:
dd:a8:68:fc:2b:00:52:a9:99:3a:09:c7:5c:dd:30:
12:27:1c:6e:b4:cd:a7:6e:f5:d1:70:4e:9c:de:9d:
22:02:fc:f5:d9:11:59:13:3e:44:80:f0:aa:81:5e:
49:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:98:31:A6:05:2E:6B:A6:4D:E6:59:6A:39:36:81:B6:D9:8E:17:06
X509v3 Authority Key Identifier:
keyid:E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:db:91:60:ab:47:82:13:e9:9c:4a:84:57:54:77:46:35:82:
26:e7:28:4c:f1:4c:c7:c7:87:d0:cf:fa:08:b3:7f:dc:89:9a:
df:19:a8:c8:2e:32:1a:57:d0:fc:20:ec:2e:ac:d5:43:66:78:
3e:74:b3:94:6a:ed:5f:b0:6c:d2:5e:90:84:f2:c7:a9:9e:b0:
bb:c5:66:c8:44:c5:fb:bd:1b:55:bf:6c:19:6b:d2:4d:16:23:
ec:ec:87:d3:1e:8b:c2:20:7c:93:76:c8:46:92:a4:69:e5:da:
a0:4f:d8:f3:46:14:ab:91:81:3c:36:35:6b:1d:15:71:7a:ec:
ca:c5:6e:0f:0e:c8:45:71:91:63:59:e3:c8:0a:7d:93:7c:01:
a6:a5:26:34:a5:13:5d:b9:fd:e7:22:6f:be:52:e7:9b:41:8d:
da:7f:0a:dd:e6:4d:9c:c2:ec:0d:6f:b7:28:1d:c0:28:34:54:
a1:5b:d8:42:33:31:e7:30:1f:84:36:e1:ba:bd:44:05:34:02:
55:36:4f:39:95:2e:c8:1d:dc:28:50:ac:50:02:4b:6b:98:2d:
c0:2e:f3:a6:76:c9:84:75:1b:a4:6c:0c:12:fe:b0:3b:53:03:
6c:53:38:54:2c:24:8b:aa:bd:49:93:e7:bf:61:80:e4:9f:50:
b8:8b:78:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zwf//eU8H37Z8bZ6LibbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MTg1MTIwZTdhM2I5NjJiOWZmZTRhYmVkMTZkMGFhM2Ez
MjA1MTgwHhcNMjUwMTMxMTAwMTM0WhcNMjUwMjAxMTAwMTM0WjAzMTEwLwYDVQQD
EyhjMjk4MzFhNjA1MmU2YmE2NGRlNjU5NmEzOTM2ODFiNmQ5OGUxNzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUNo/tZFcXVaZ1kYw21v8GUltvR0
xkZh/8YkEUUZ4r2nDt6DAEYtL8uQBycgPhe25krYhBII263gTBFkU9I37MTEZp+U
a77f5nWtu6wS0jmiF6iSpWaeHuBCsbFWpYtE2inGJZ3XyaWBFjv54TRj8fR0QobB
+p8c2dkTF13HgcCfYjCCUOACHQ53A+FBLdXTbF/Qw+fpZZMSTXXMwbdoOy5Y52uA
KNsAlON+9f4lD+WZRSaHfsmnp+m3J711PP5/qUglHfIRKhNj0TQyrRMz1/fdqGj8
KwBSqZk6Ccdc3TASJxxutM2nbvXRcE6c3p0iAvz12RFZEz5EgPCqgV5JlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMKYMaYFLmumTeZZajk2gbbZjhcGMB8GA1UdIwQY
MBaAFOcYUSDno7liuf/kq+0W0Ko6MgUYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXhoUklPZWp1V0s1Xy1TcjdSYlFxam95QlJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84MDAwMWQtYjU4MS00NWZiLTkxMzgt
ODljNjQyMGQ2ZjM2LzEvNXhoUklPZWp1V0s1Xy1TcjdSYlFxam95QlJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84MDAwMWQtYjU4MS00NWZiLTkxMzgtODljNjQyMGQ2ZjM2
LzEvNXhoUklPZWp1V0s1Xy1TcjdSYlFxam95QlJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkduRYKtH
ghPpnEqEV1R3RjWCJucoTPFMx8eH0M/6CLN/3Ima3xmoyC4yGlfQ/CDsLqzVQ2Z4
PnSzlGrtX7Bs0l6QhPLHqZ6wu8VmyETF+70bVb9sGWvSTRYj7OyH0x6LwiB8k3bI
RpKkaeXaoE/Y80YUq5GBPDY1ax0VcXrsysVuDw7IRXGRY1njyAp9k3wBpqUmNKUT
Xbn95yJvvlLnm0GN2n8K3eZNnMLsDW+3KB3AKDRUoVvYQjMx5zAfhDbhur1EBTQC
VTZPOZUuyB3cKFCsUAJLa5gtwC7zpnbJhHUbpGwMEv6wO1MDbFM4VCwki6q9SZPn
v2GA5J9QuIt4rw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:18:02 2025 by rpki-client