Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
File: 5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft (raw, json)
Hash identifier: q12bxget8/pkLhJKsdvRLfICPJwKoeSIl2zV6yVLX1k=
Subject key identifier: AA:45:4E:0A:F3:56:0A:63:DC:06:69:4D:29:E8:D9:AC:29:76:E8:EC
Authority key identifier: E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
Certificate issuer: /CN=e4a9308742e7eb66506219d829d86185899a1e34
Certificate serial: 0194BCA9A819090347C88BB89CF0478A8FC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
Manifest number: 148B
Signing time: Fri 31 Jan 2025 14:00:22 +0000
Manifest this update: Fri 31 Jan 2025 14:00:22 +0000
Manifest next update: Sat 01 Feb 2025 14:00:22 +0000
Files and hashes: 1: 5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl (hash: hVhreZLRMBw34sStx7CuuoWCpdBW7FhH8vflw0uJSu4=)
2: LtEdF2byV3S0KV16id0qQajWGMY.roa (hash: H1jt9hYwyd1BT6+zQNRmdfqdpllU7bgVglwLAp5kPr8=)
3: SXG-e2hHIIAl-yj4qBi6FUi9wGY.roa (hash: +fTL7yItTRc/AAESJMlIEyzwJCD39qE6Ysoda7xR64c=)
4: w7Fbo3W0AkoJQABo1dgJ37JPic8.roa (hash: gD8RrhuF7+lyzMsNkWMV653nJuELIlwIESwEiuq+hP0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a8:19:09:03:47:c8:8b:b8:9c:f0:47:8a:8f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9308742e7eb66506219d829d86185899a1e34
Validity
Not Before: Jan 31 14:00:22 2025 GMT
Not After : Feb 1 14:00:22 2025 GMT
Subject: CN=aa454e0af3560a63dc06694d29e8d9ac2976e8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8d:6d:f9:4e:93:1c:36:fd:ea:19:8d:ba:a4:
8a:b1:3b:31:63:4b:b4:e9:ec:bd:25:7a:05:f3:c7:
58:3c:e4:d8:90:a6:d1:d9:df:28:73:54:75:ef:75:
c8:d9:f6:6a:c9:d4:26:b3:c2:26:26:86:73:11:93:
f7:f8:1c:b8:2b:91:66:10:44:8a:9d:46:82:37:1b:
3c:af:31:87:80:3e:db:bc:6a:cc:7b:2b:27:bb:8e:
09:c2:31:76:74:b5:2a:cf:ba:a4:4c:7c:be:dd:b7:
30:64:7e:79:03:44:51:18:44:b4:9a:6e:1b:72:e4:
99:fb:b1:0c:05:f6:43:1a:d6:75:73:73:9c:21:80:
47:60:f9:4d:1f:ac:a2:f3:f3:ec:d8:7c:7b:7a:4f:
9f:69:05:48:8e:0f:92:59:34:6a:65:cc:7e:da:19:
52:56:55:2b:73:d6:cf:76:f6:13:0b:28:e1:0b:f9:
28:92:fb:4b:25:ba:3b:42:8d:fa:07:67:41:af:05:
9f:f7:ab:b3:b8:5e:e9:c9:15:04:9c:23:ad:2e:cf:
ea:19:1a:d0:1b:56:91:e8:37:de:d9:b9:86:9e:3b:
6b:75:42:94:e8:b3:3b:8b:34:92:4e:13:7e:58:0c:
9d:01:b6:e0:a6:dd:2e:9a:96:90:62:1c:c0:9d:3c:
62:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:45:4E:0A:F3:56:0A:63:DC:06:69:4D:29:E8:D9:AC:29:76:E8:EC
X509v3 Authority Key Identifier:
keyid:E4:A9:30:87:42:E7:EB:66:50:62:19:D8:29:D8:61:85:89:9A:1E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1c9dbb-052c-4eea-ade6-ec5b88d0138a/1/5Kkwh0Ln62ZQYhnYKdhhhYmaHjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:33:37:fc:c2:04:d7:29:8d:6e:bc:09:c0:dd:c7:87:91:1b:
cd:d0:a7:02:69:27:70:19:e3:82:89:1e:5b:0e:64:e3:9e:e5:
bc:62:3b:3f:d2:79:6e:87:2e:92:0e:1e:d9:23:20:25:51:fd:
36:83:19:cf:64:2d:be:cf:5b:97:72:29:50:0b:f4:1e:7c:68:
e9:6e:55:d0:8b:a7:e4:2e:6f:6e:7a:d9:f8:b9:1b:f4:b0:77:
ae:8e:87:69:00:67:01:51:c7:a3:4e:f1:7c:7a:4b:dc:d0:19:
4a:71:5e:ee:8b:7f:16:6e:88:08:65:45:48:8d:b9:fb:4a:57:
52:12:72:13:56:e1:a7:95:87:97:a2:76:4a:15:a6:02:63:ac:
12:d4:2d:63:2b:2f:28:01:b6:e6:31:b4:fa:ab:4b:74:4f:b6:
6c:90:07:d3:a7:1a:bb:27:fa:49:f3:29:0e:df:86:8e:8a:34:
52:a4:32:19:6b:8e:a6:21:d0:14:a8:29:89:f7:84:09:c8:61:
84:08:14:fb:7c:94:5d:71:32:31:15:16:73:27:c0:22:33:c1:
04:67:62:74:e8:bb:ce:98:db:ef:e9:a5:b5:3c:60:1f:b6:3b:
e7:f6:69:0c:d4:17:bc:6b:99:94:9b:4e:5e:6d:d3:e1:8d:4c:
45:3b:1a:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qagZCQNHyIu4nPBHio/FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YTkzMDg3NDJlN2ViNjY1MDYyMTlkODI5ZDg2MTg1ODk5
YTFlMzQwHhcNMjUwMTMxMTQwMDIyWhcNMjUwMjAxMTQwMDIyWjAzMTEwLwYDVQQD
EyhhYTQ1NGUwYWYzNTYwYTYzZGMwNjY5NGQyOWU4ZDlhYzI5NzZlOGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz41t+U6THDb96hmNuqSKsTsxY0u0
6ey9JXoF88dYPOTYkKbR2d8oc1R173XI2fZqydQms8ImJoZzEZP3+By4K5FmEESK
nUaCNxs8rzGHgD7bvGrMeysnu44JwjF2dLUqz7qkTHy+3bcwZH55A0RRGES0mm4b
cuSZ+7EMBfZDGtZ1c3OcIYBHYPlNH6yi8/Ps2Hx7ek+faQVIjg+SWTRqZcx+2hlS
VlUrc9bPdvYTCyjhC/kokvtLJbo7Qo36B2dBrwWf96uzuF7pyRUEnCOtLs/qGRrQ
G1aR6Dfe2bmGnjtrdUKU6LM7izSSThN+WAydAbbgpt0umpaQYhzAnTxidQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpFTgrzVgpj3AZpTSno2awpdujsMB8GA1UdIwQY
MBaAFOSpMIdC5+tmUGIZ2CnYYYWJmh40MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUtrd2gwTG42MlpRWWhuWUtkaGhoWW1hSGpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xYzlkYmItMDUyYy00ZWVhLWFkZTYt
ZWM1Yjg4ZDAxMzhhLzEvNUtrd2gwTG42MlpRWWhuWUtkaGhoWW1hSGpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8xYzlkYmItMDUyYy00ZWVhLWFkZTYtZWM1Yjg4ZDAxMzhh
LzEvNUtrd2gwTG42MlpRWWhuWUtkaGhoWW1hSGpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACjM3/MIE
1ymNbrwJwN3Hh5EbzdCnAmkncBnjgokeWw5k457lvGI7P9J5bocukg4e2SMgJVH9
NoMZz2Qtvs9bl3IpUAv0Hnxo6W5V0Iun5C5vbnrZ+Lkb9LB3ro6HaQBnAVHHo07x
fHpL3NAZSnFe7ot/Fm6ICGVFSI25+0pXUhJyE1bhp5WHl6J2ShWmAmOsEtQtYysv
KAG25jG0+qtLdE+2bJAH06cauyf6SfMpDt+Gjoo0UqQyGWuOpiHQFKgpifeECchh
hAgU+3yUXXEyMRUWcyfAIjPBBGdidOi7zpjb7+mltTxgH7Y75/ZpDNQXvGuZlJtO
Xm3T4Y1MRTsaOg==
-----END CERTIFICATE-----
Generated at Thu May 1 12:58:20 2025 by rpki-client