Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
File: 1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft (raw, json)
Hash identifier: BBWXFyP9Y/kAMVvVlW6cfoyfL3vAmaZo8GNtGLa4awM=
Subject key identifier: 5A:D5:67:90:11:BF:DB:A6:C0:C7:66:1D:14:15:44:85:E5:75:46:C5
Authority key identifier: FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
Certificate issuer: /CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Certificate serial: 0194BCAA0CE4FBC5A4A85BE9353D989AF6F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 14:00:48 +0000
Manifest this update: Fri 31 Jan 2025 14:00:48 +0000
Manifest next update: Sat 01 Feb 2025 14:00:48 +0000
Files and hashes: 1: 1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl (hash: V35KUhOcKN4GXHFAj+iepncfRJkgmSTLLZ1noosMOtM=)
2: 39JKIfKrg-FtnGzVEc-4CP0zYyw.roa (hash: Im00znI9YGKHOr4RaKPPD+/nog1aDzKpzBikMvxHIzM=)
3: FFxk-BcPBkUgJFwE14_BuXHfh6w.roa (hash: 9SK+9whhVgM4K8SPp7ixcuhtvspcdI8sVfJA0hKgVC4=)
4: nJAiq-PWagml6U0XgPLvEMeetqY.roa (hash: slEmYICQOiKGbuOd4bkjw5nPBfad31ZvqqX336YhZsY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:0c:e4:fb:c5:a4:a8:5b:e9:35:3d:98:9a:f6:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Validity
Not Before: Jan 31 14:00:48 2025 GMT
Not After : Feb 1 14:00:48 2025 GMT
Subject: CN=5ad5679011bfdba6c0c7661d14154485e57546c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f9:4f:6b:4a:54:d7:80:d3:e0:57:98:12:43:
e0:81:8c:1f:86:78:6f:d1:53:9b:e0:a4:4f:5f:35:
f4:73:6e:ec:9d:28:f7:78:0f:8c:02:50:f2:67:de:
b1:bf:f2:69:d5:94:13:a2:ae:f0:9a:cb:47:ed:05:
08:ec:19:fc:7a:cd:65:0a:43:06:cc:fb:44:6b:62:
ba:c6:44:cb:e7:5e:c8:3c:03:49:3c:ab:91:9e:d0:
a2:54:8f:14:50:ca:ac:c6:4a:6b:cb:a4:da:a1:16:
c3:58:5d:5c:c4:f3:4a:4d:81:e5:f1:09:4f:97:75:
13:c4:bb:42:24:a0:aa:7b:f8:e9:37:84:c4:b5:3c:
9e:ac:fb:77:fe:f4:3b:e3:06:e8:42:c0:7e:04:94:
51:ed:82:b1:51:df:f7:b2:50:92:5c:4c:7f:5c:ea:
04:0c:ec:f6:7d:16:e8:3f:55:c0:fd:af:3b:69:fa:
52:05:ea:93:df:5e:28:e7:90:74:b4:f6:13:64:31:
5e:48:ef:33:88:14:8b:96:2d:26:df:0d:3e:cc:7c:
d9:be:ed:f1:9d:d8:de:7f:f5:0b:a1:1f:2f:3b:85:
89:3b:57:fc:26:e0:8d:84:20:b2:bd:83:51:e0:95:
cd:f5:27:d4:6d:f8:b7:2c:49:88:c7:c2:4c:e6:e5:
b3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D5:67:90:11:BF:DB:A6:C0:C7:66:1D:14:15:44:85:E5:75:46:C5
X509v3 Authority Key Identifier:
keyid:FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:0b:e2:a5:c8:b9:ff:3c:f5:fd:0e:91:c0:6a:fc:4b:c8:63:
1e:fa:dc:6f:73:f6:52:1d:d6:14:c9:53:76:21:76:b4:47:7e:
cf:53:f1:9a:bc:18:d0:b1:ed:7c:10:44:5c:83:c8:c4:75:67:
df:9a:06:08:3a:99:d6:d9:42:2a:5b:9b:93:af:2f:a3:89:f2:
08:2e:39:4d:4c:f4:4a:89:3f:ce:0c:65:5c:a3:a3:84:65:6e:
03:a2:c1:7b:70:99:6b:d9:ef:34:12:26:93:81:aa:0b:6e:9b:
05:4e:9a:64:f9:a5:99:80:a4:16:30:5f:59:05:63:03:95:0c:
b3:45:a8:ea:46:26:de:03:34:9a:5e:db:30:b5:c1:c2:b4:07:
72:e7:a8:a5:7d:11:c2:80:97:d6:59:80:87:0f:0a:f6:86:32:
5c:7f:56:a4:ea:69:e6:45:8b:db:5d:9d:cb:e3:5e:0c:fd:8a:
cb:aa:69:ef:36:76:19:e6:05:2e:6e:a6:75:4d:a8:2b:5f:d2:
64:6c:f6:84:4c:5a:57:b3:47:e8:52:68:63:8f:9f:69:a8:31:
35:30:b1:e5:cc:e6:80:ea:3f:34:04:58:6b:43:59:97:a6:5e:
1f:d9:1e:dc:28:b0:ad:ba:e3:75:b6:4b:27:55:ef:94:c3:8e:
8c:1d:51:3d
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZS8qgzk+8WkqFvpNT2Ymvb1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMWU5YjRlOGRjNDliZTNhYmE1OTc0MjVhZWZkOGIzYTUz
NjJmZmMwHhcNMjUwMTMxMTQwMDQ4WhcNMjUwMjAxMTQwMDQ4WjAzMTEwLwYDVQQD
Eyg1YWQ1Njc5MDExYmZkYmE2YzBjNzY2MWQxNDE1NDQ4NWU1NzU0NmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovlPa0pU14DT4FeYEkPggYwfhnhv
0VOb4KRPXzX0c27snSj3eA+MAlDyZ96xv/Jp1ZQToq7wmstH7QUI7Bn8es1lCkMG
zPtEa2K6xkTL517IPANJPKuRntCiVI8UUMqsxkpry6TaoRbDWF1cxPNKTYHl8QlP
l3UTxLtCJKCqe/jpN4TEtTyerPt3/vQ74wboQsB+BJRR7YKxUd/3slCSXEx/XOoE
DOz2fRboP1XA/a87afpSBeqT314o55B0tPYTZDFeSO8ziBSLli0m3w0+zHzZvu3x
ndjef/ULoR8vO4WJO1f8JuCNhCCyvYNR4JXN9SfUbfi3LEmIx8JM5uWz9QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFrVZ5ARv9umwMdmHRQVRIXldUbFMB8GA1UdIwQY
MBaAFPoem06NxJvjq6WXQlrv2LOlNi/8MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1oNmJUbzNFbS1PcnBaZENXdV9ZczZVMkxfdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvNDcwN2I0LTAwMzItNGFjNy1iY2M3
LTQwYzFhNzI3MDJlZi8xLzEtaDZiVG8zRW0tT3JwWmRDV3VfWXM2VTJMX3cubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2M1LzQ3MDdiNC0wMDMyLTRhYzctYmNjNy00MGMxYTcyNzAy
ZWYvMS8xLWg2YlRvM0VtLU9ycFpkQ1d1X1lzNlUyTF93LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuQvi
pci5/zz1/Q6RwGr8S8hjHvrcb3P2Uh3WFMlTdiF2tEd+z1PxmrwY0LHtfBBEXIPI
xHVn35oGCDqZ1tlCKlubk68vo4nyCC45TUz0Sok/zgxlXKOjhGVuA6LBe3CZa9nv
NBImk4GqC26bBU6aZPmlmYCkFjBfWQVjA5UMs0Wo6kYm3gM0ml7bMLXBwrQHcueo
pX0RwoCX1lmAhw8K9oYyXH9WpOpp5kWL212dy+NeDP2Ky6pp7zZ2GeYFLm6mdU2o
K1/SZGz2hExaV7NH6FJoY4+faagxNTCx5czmgOo/NARYa0NZl6ZeH9ke3Ciwrbrj
dbZLJ1XvlMOOjB1RPQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:25 2025 by rpki-client