Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
File: 51hSRFn5E1C_OnC93qArt_GY9ic.mft (raw, json)
Hash identifier: GFJ/MGCHWNPW7nwzm5gIlhuke5tdvtJ5X4YhjHFEkAs=
Subject key identifier: 47:05:6C:1D:F2:1F:5E:64:33:9E:42:83:21:4B:28:DF:A7:C2:C1:B4
Authority key identifier: E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27
Certificate issuer: /CN=e758524459f91350bf3a70bddea02bb7f198f627
Certificate serial: 0194BCA9AB3066A3B32952B04B8E1CF4D65F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
Manifest number: 0756
Signing time: Fri 31 Jan 2025 14:00:23 +0000
Manifest this update: Fri 31 Jan 2025 14:00:23 +0000
Manifest next update: Sat 01 Feb 2025 14:00:23 +0000
Files and hashes: 1: 51hSRFn5E1C_OnC93qArt_GY9ic.crl (hash: 42UBBAuPnX8G0z2SlcRXFj+FOP4nRsQHN68IH8DtgOY=)
2: u8kNkanORsDCeI7FqQBLJUQbyJw.roa (hash: UqvKDmRhZ+jIbQfoF72uxEu+VLwPbUG7YO497EELblU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ab:30:66:a3:b3:29:52:b0:4b:8e:1c:f4:d6:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e758524459f91350bf3a70bddea02bb7f198f627
Validity
Not Before: Jan 31 14:00:23 2025 GMT
Not After : Feb 1 14:00:23 2025 GMT
Subject: CN=47056c1df21f5e64339e4283214b28dfa7c2c1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fb:6a:4e:f5:25:b0:aa:79:9b:1e:1e:6a:40:
bc:c3:dd:2a:4f:67:ca:60:46:fa:cc:6a:dc:09:b5:
86:b5:c3:10:8a:88:06:a3:8e:0a:c6:c4:29:ab:cf:
20:98:3f:95:43:82:43:8d:4f:9e:82:f6:6e:39:5f:
bb:ca:47:19:ec:14:41:63:88:9c:b6:d3:be:e8:01:
97:55:c9:4a:3d:f8:68:35:94:5e:f1:a7:a8:e8:d1:
f6:e5:de:cb:0e:d6:47:94:49:e5:0c:10:e4:1b:a7:
96:0e:76:90:09:99:52:aa:cc:9a:85:05:be:64:62:
0d:e9:1c:81:8f:8a:53:99:63:1f:0b:d0:af:e9:b6:
ee:70:17:1d:e6:b6:b7:46:d4:10:33:2b:18:a6:1b:
ec:1f:15:95:5e:7c:75:4e:33:96:d6:ed:84:9f:a9:
7c:d4:f1:1c:cf:8a:ec:eb:17:bf:7d:e3:8f:9b:38:
86:88:00:35:12:20:ee:76:8c:15:5c:71:a5:d6:8d:
59:48:35:a3:14:28:23:5d:56:a1:8b:55:96:0e:82:
61:12:f4:cf:4f:05:55:bc:f1:9c:5f:dd:5e:a9:61:
48:33:d2:66:01:1e:c7:bd:c9:6a:d9:0a:02:6a:f2:
a1:9b:ae:06:50:6b:8c:4a:c1:c5:44:69:d5:39:40:
e2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:05:6C:1D:F2:1F:5E:64:33:9E:42:83:21:4B:28:DF:A7:C2:C1:B4
X509v3 Authority Key Identifier:
keyid:E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d6:f5:da:5b:ab:9a:e3:9e:a2:a3:1e:07:56:b3:d8:d6:12:
42:57:de:6b:e7:95:2e:fd:40:57:25:5c:39:ce:9e:98:7e:68:
27:aa:97:26:c1:66:b4:b9:24:f7:cd:25:cc:fa:da:84:18:3c:
44:bc:92:ce:38:ac:3b:62:8a:40:9c:ff:79:15:85:b8:85:ba:
b9:82:e3:40:a3:69:7d:2c:1f:f9:4c:5f:db:93:6c:bd:f7:9f:
ee:84:1d:4f:c3:b9:fc:54:f4:cc:45:23:d4:f4:62:96:fd:d4:
ec:cf:45:d1:d2:6c:ff:f1:a9:0f:e9:b1:42:4b:2e:2d:09:a7:
1e:b0:ca:d3:17:64:d0:1a:81:b4:0b:57:5c:24:dc:cc:f8:0f:
48:77:40:97:03:b7:66:ca:63:06:b8:fb:fe:d8:b7:e7:c8:1a:
a9:69:2a:e0:47:8d:4e:0d:17:ef:50:9f:66:b3:24:eb:bb:a4:
cb:7c:e6:f6:85:30:44:7c:e2:95:9f:13:a8:63:27:f0:91:1e:
c3:0d:b5:84:89:6f:28:10:8e:6d:b3:55:1c:1e:be:32:83:04:
e7:68:4f:cb:3e:a2:82:16:97:ab:34:20:4c:87:5f:e1:32:ff:
79:e2:2b:bd:f4:e2:0a:79:d3:12:33:8e:96:18:30:b1:09:11:
9f:fc:aa:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qaswZqOzKVKwS44c9NZfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NTg1MjQ0NTlmOTEzNTBiZjNhNzBiZGRlYTAyYmI3ZjE5
OGY2MjcwHhcNMjUwMTMxMTQwMDIzWhcNMjUwMjAxMTQwMDIzWjAzMTEwLwYDVQQD
Eyg0NzA1NmMxZGYyMWY1ZTY0MzM5ZTQyODMyMTRiMjhkZmE3YzJjMWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/tqTvUlsKp5mx4eakC8w90qT2fK
YEb6zGrcCbWGtcMQiogGo44KxsQpq88gmD+VQ4JDjU+egvZuOV+7ykcZ7BRBY4ic
ttO+6AGXVclKPfhoNZRe8aeo6NH25d7LDtZHlEnlDBDkG6eWDnaQCZlSqsyahQW+
ZGIN6RyBj4pTmWMfC9Cv6bbucBcd5ra3RtQQMysYphvsHxWVXnx1TjOW1u2En6l8
1PEcz4rs6xe/feOPmziGiAA1EiDudowVXHGl1o1ZSDWjFCgjXVahi1WWDoJhEvTP
TwVVvPGcX91eqWFIM9JmAR7Hvclq2QoCavKhm64GUGuMSsHFRGnVOUDiawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEcFbB3yH15kM55CgyFLKN+nwsG0MB8GA1UdIwQY
MBaAFOdYUkRZ+RNQvzpwvd6gK7fxmPYnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTFoU1JGbjVFMUNfT25DOTNxQXJ0X0dZOWljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lNWE2MjktOGY2OC00MzJlLTllNWEt
YzQxOWU3MTI5OTI4LzEvNTFoU1JGbjVFMUNfT25DOTNxQXJ0X0dZOWljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9lNWE2MjktOGY2OC00MzJlLTllNWEtYzQxOWU3MTI5OTI4
LzEvNTFoU1JGbjVFMUNfT25DOTNxQXJ0X0dZOWljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdNb12lur
muOeoqMeB1az2NYSQlfea+eVLv1AVyVcOc6emH5oJ6qXJsFmtLkk980lzPrahBg8
RLySzjisO2KKQJz/eRWFuIW6uYLjQKNpfSwf+Uxf25Nsvfef7oQdT8O5/FT0zEUj
1PRilv3U7M9F0dJs//GpD+mxQksuLQmnHrDK0xdk0BqBtAtXXCTczPgPSHdAlwO3
ZspjBrj7/ti358gaqWkq4EeNTg0X71CfZrMk67uky3zm9oUwRHzilZ8TqGMn8JEe
ww21hIlvKBCObbNVHB6+MoME52hPyz6ighaXqzQgTIdf4TL/eeIrvfTiCnnTEjOO
lhgwsQkRn/yqFA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:50 2025 by rpki-client