Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
File: 5SrPy9efIyxdcqVQvExm8REHoOI.mft (raw, json)
Hash identifier: yxkf8yNDLvouZSDumyEBavZeNPffE9FsR8XPB9EJV00=
Subject key identifier: 36:78:AE:1C:53:88:D7:75:5B:9D:8C:86:69:FE:55:26:50:28:49:64
Authority key identifier: E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2
Certificate issuer: /CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2
Certificate serial: 0194BD179EEE87CBA917C817B2285EE3D252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
Manifest number: 0148
Signing time: Fri 31 Jan 2025 16:00:29 +0000
Manifest this update: Fri 31 Jan 2025 16:00:29 +0000
Manifest next update: Sat 01 Feb 2025 16:00:29 +0000
Files and hashes: 1: 5SrPy9efIyxdcqVQvExm8REHoOI.crl (hash: +rG+K+Di0VWrPJtQpg9yplvu93rlGzeMQwKNq/+IcoE=)
2: GtnbuughA7lHebTG_DZyY-rxvp0.roa (hash: 0ytXaby9nsfJsM0kCLclgYx+EoqtC/Er8+W1ubhewEg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:9e:ee:87:cb:a9:17:c8:17:b2:28:5e:e3:d2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e52acfcbd79f232c5d72a550bc4c66f11107a0e2
Validity
Not Before: Jan 31 16:00:29 2025 GMT
Not After : Feb 1 16:00:29 2025 GMT
Subject: CN=3678ae1c5388d7755b9d8c8669fe552650284964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:be:65:d5:15:64:a1:29:6d:55:15:df:82:81:
2f:94:f3:13:10:cb:d8:91:83:9c:d3:0a:85:5d:c2:
8b:32:42:21:f3:90:53:82:79:85:e8:16:28:3b:4b:
3f:70:e3:2b:02:15:0a:3a:73:10:9d:89:a0:7d:54:
a1:b1:89:b3:81:c3:e1:f1:bf:11:63:de:2c:02:d8:
67:01:91:ea:c5:6e:2c:16:8d:b7:df:5d:82:c1:d4:
56:eb:46:3f:73:30:e6:9c:66:4c:79:ab:22:69:32:
c7:74:14:94:2f:3a:77:bf:ca:5c:9b:7e:bb:17:7e:
14:02:b1:7c:64:a5:85:68:41:66:fe:fd:90:de:6a:
95:42:5b:bc:90:57:da:7d:5b:36:9e:50:52:17:f3:
75:35:15:f2:1e:2c:55:45:4a:92:e5:05:16:a6:fa:
b4:c1:70:d8:1b:95:ba:d6:d0:e0:44:8a:0a:9e:34:
73:c5:95:2a:bc:5b:5d:28:c3:df:54:d1:50:75:60:
7a:12:55:d8:44:60:6c:70:2f:f9:b2:0a:2f:21:f2:
df:2a:b1:f6:0e:fb:3a:ce:86:d7:f3:51:12:a6:7b:
0d:1f:31:62:59:97:47:62:91:75:8d:c2:73:43:0e:
03:a2:d0:d7:77:32:fd:94:cb:22:2a:b3:88:18:1a:
12:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:78:AE:1C:53:88:D7:75:5B:9D:8C:86:69:FE:55:26:50:28:49:64
X509v3 Authority Key Identifier:
keyid:E5:2A:CF:CB:D7:9F:23:2C:5D:72:A5:50:BC:4C:66:F1:11:07:A0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SrPy9efIyxdcqVQvExm8REHoOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/42a193-b30b-403f-befe-3245450d3742/1/5SrPy9efIyxdcqVQvExm8REHoOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:cd:e3:20:88:0e:0d:7d:94:af:7d:6b:2f:88:cb:40:db:38:
40:cd:37:ca:73:10:34:02:d9:eb:f7:49:95:ff:6f:e3:f6:d6:
72:6c:f4:77:64:32:2b:68:93:fe:d8:87:6c:6d:12:4a:68:4c:
7b:68:3b:ec:d8:4b:67:ad:be:5f:6b:c3:7e:3a:59:90:e5:a7:
0c:65:b9:1b:fa:ec:a9:71:22:74:2f:de:94:76:30:31:53:10:
75:ea:d1:34:db:00:8d:67:92:51:b4:3b:76:ff:84:80:ee:cf:
6b:2a:d6:35:8d:79:5f:eb:0c:9a:59:a1:e0:19:86:8d:a2:bd:
35:87:0a:cc:18:1b:49:ca:86:49:ed:63:e9:d6:16:a5:82:71:
13:d0:58:57:95:1f:d3:d9:c8:1f:78:5d:9d:74:27:35:c6:50:
91:e5:97:aa:3a:49:6a:1a:9e:33:ef:e1:5a:a8:a7:6f:23:cd:
e7:1d:1e:04:44:89:35:a5:94:36:15:93:bf:19:3b:1b:d0:ce:
f2:06:8e:f5:fc:5b:95:89:4b:ce:e0:4c:30:31:bc:98:2d:46:
d7:90:dd:1d:a3:c6:57:a1:51:82:fd:1b:26:64:43:97:7f:89:
7a:63:cc:34:4c:aa:8e:39:42:b0:95:20:5b:ec:8a:ff:dd:be:
16:bd:4a:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F57uh8upF8gXsihe49JSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MmFjZmNiZDc5ZjIzMmM1ZDcyYTU1MGJjNGM2NmYxMTEw
N2EwZTIwHhcNMjUwMTMxMTYwMDI5WhcNMjUwMjAxMTYwMDI5WjAzMTEwLwYDVQQD
EygzNjc4YWUxYzUzODhkNzc1NWI5ZDhjODY2OWZlNTUyNjUwMjg0OTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl75l1RVkoSltVRXfgoEvlPMTEMvY
kYOc0wqFXcKLMkIh85BTgnmF6BYoO0s/cOMrAhUKOnMQnYmgfVShsYmzgcPh8b8R
Y94sAthnAZHqxW4sFo23312CwdRW60Y/czDmnGZMeasiaTLHdBSULzp3v8pcm367
F34UArF8ZKWFaEFm/v2Q3mqVQlu8kFfafVs2nlBSF/N1NRXyHixVRUqS5QUWpvq0
wXDYG5W61tDgRIoKnjRzxZUqvFtdKMPfVNFQdWB6ElXYRGBscC/5sgovIfLfKrH2
Dvs6zobX81ESpnsNHzFiWZdHYpF1jcJzQw4DotDXdzL9lMsiKrOIGBoSRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDZ4rhxTiNd1W52Mhmn+VSZQKElkMB8GA1UdIwQY
MBaAFOUqz8vXnyMsXXKlULxMZvERB6DiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVNyUHk5ZWZJeXhkY3FWUXZFeG04UkVIb09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80MmExOTMtYjMwYi00MDNmLWJlZmUt
MzI0NTQ1MGQzNzQyLzEvNVNyUHk5ZWZJeXhkY3FWUXZFeG04UkVIb09JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS80MmExOTMtYjMwYi00MDNmLWJlZmUtMzI0NTQ1MGQzNzQy
LzEvNVNyUHk5ZWZJeXhkY3FWUXZFeG04UkVIb09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV83jIIgO
DX2Ur31rL4jLQNs4QM03ynMQNALZ6/dJlf9v4/bWcmz0d2QyK2iT/tiHbG0SSmhM
e2g77NhLZ62+X2vDfjpZkOWnDGW5G/rsqXEidC/elHYwMVMQderRNNsAjWeSUbQ7
dv+EgO7PayrWNY15X+sMmlmh4BmGjaK9NYcKzBgbScqGSe1j6dYWpYJxE9BYV5Uf
09nIH3hdnXQnNcZQkeWXqjpJahqeM+/hWqinbyPN5x0eBESJNaWUNhWTvxk7G9DO
8gaO9fxblYlLzuBMMDG8mC1G15DdHaPGV6FRgv0bJmRDl3+JemPMNEyqjjlCsJUg
W+yK/92+Fr1KOA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:02:11 2025 by rpki-client