Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
File: 5lAiAKbmP3Y5etuU39g0wRaAm58.mft (raw, json)
Hash identifier: NS9WvTAJiARRSMn9D6Rr8Il/d66uooMGfqwcL7+bwvY=
Subject key identifier: 32:B4:CD:64:E8:20:9B:52:33:BC:E5:10:44:DC:2B:88:CF:6C:BF:BD
Authority key identifier: E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
Certificate issuer: /CN=e6502200a6e63f76397adb94dfd834c116809b9f
Certificate serial: 0194BC731C463E50156FB40E43B66F159FF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
Manifest number: 0AB7
Signing time: Fri 31 Jan 2025 13:00:47 +0000
Manifest this update: Fri 31 Jan 2025 13:00:47 +0000
Manifest next update: Sat 01 Feb 2025 13:00:47 +0000
Files and hashes: 1: 5lAiAKbmP3Y5etuU39g0wRaAm58.crl (hash: mrdhHBV/HNWCMSsj1vo+ApUs6Sl5MHzWYxi5unYRkiY=)
2: PPydfwM1qrJ_5LEP2Lu7pEc74lg.roa (hash: pMnth1QdrHrp1n0i0bRqhdBwVaon4su5sBWJ9WYdSts=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:1c:46:3e:50:15:6f:b4:0e:43:b6:6f:15:9f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6502200a6e63f76397adb94dfd834c116809b9f
Validity
Not Before: Jan 31 13:00:47 2025 GMT
Not After : Feb 1 13:00:47 2025 GMT
Subject: CN=32b4cd64e8209b5233bce51044dc2b88cf6cbfbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:df:f3:dd:30:49:81:63:38:ed:3b:08:cc:94:
bb:5f:68:1c:22:7e:fa:ff:fb:7c:6e:b1:b2:c7:26:
44:09:1f:62:06:7e:a1:98:9c:25:56:10:4b:ae:36:
32:a4:86:40:89:8c:6a:4f:8c:38:7a:cb:22:94:a1:
09:c0:c2:9c:ff:49:60:7d:6e:22:62:37:bb:8d:2a:
23:c9:27:69:48:93:4b:94:68:61:5d:3e:2c:c1:c1:
f0:f4:99:83:05:2f:9c:ad:73:ba:40:e0:c3:e8:6a:
e1:48:8e:e2:24:b7:04:94:7f:1c:01:f3:bc:6a:01:
1c:1d:6e:1e:15:e8:12:60:d7:b6:cf:6f:3c:c3:ff:
4d:63:93:97:f6:32:4f:ca:fa:6c:d6:c8:19:77:46:
da:21:d1:49:af:5c:9f:f1:a3:bd:e9:bc:dc:32:f4:
03:ca:d3:5b:c7:e4:43:df:55:d9:9f:5a:aa:15:d5:
a2:6f:db:d5:90:20:4b:4c:88:ec:5b:44:e0:4d:81:
0a:3f:93:a7:b1:a2:8d:b1:14:d0:00:3a:af:e0:ad:
07:e2:4f:68:2d:c5:74:99:09:eb:46:10:64:3b:dd:
39:f3:5b:49:d9:67:6f:1c:64:c7:a1:72:2b:04:39:
c7:9b:3a:22:d5:d3:a3:70:e8:c2:9f:a0:f2:90:df:
1f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B4:CD:64:E8:20:9B:52:33:BC:E5:10:44:DC:2B:88:CF:6C:BF:BD
X509v3 Authority Key Identifier:
keyid:E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:23:fa:11:ba:6a:9a:16:30:82:6a:40:ff:10:a0:78:0b:37:
0e:84:e9:a4:0a:6c:3a:9c:35:05:7c:14:7c:ee:4b:80:24:b7:
cf:b0:8e:09:8b:6b:8b:2d:11:90:23:9d:ee:a7:93:28:2e:e4:
62:81:a1:0b:47:a4:1c:66:f9:ed:19:4a:d2:03:ea:ae:79:fc:
c0:82:9d:82:c3:b5:0a:49:b3:07:d8:4d:10:bd:90:cc:c6:c2:
25:27:41:06:7b:53:32:1f:1b:38:86:57:6f:49:40:b3:4d:39:
a0:5f:fc:18:ef:47:fa:4d:f2:6b:d0:1b:4a:63:b4:48:2b:dd:
e7:99:ec:b1:7a:74:bb:ad:42:42:1d:bb:62:e1:a4:74:9d:6b:
2f:24:dd:fb:be:5e:ff:e9:68:4d:63:bf:a9:e0:34:a7:22:ed:
6d:82:31:3a:24:f4:51:d0:0a:68:4b:08:09:86:a6:39:e0:67:
f0:74:a2:40:fe:fe:b3:37:ff:1d:7b:f5:34:9b:38:a2:38:4c:
72:77:27:1d:77:a0:36:60:c3:ea:02:17:7b:fb:9e:37:4b:e3:
43:ab:25:9f:f2:08:21:43:5d:d7:41:25:e4:2a:26:ac:70:59:
42:fe:be:87:3b:5b:b1:87:ac:11:51:49:26:5e:4a:12:21:ef:
07:56:0d:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cxxGPlAVb7QOQ7ZvFZ/4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2NTAyMjAwYTZlNjNmNzYzOTdhZGI5NGRmZDgzNGMxMTY4
MDliOWYwHhcNMjUwMTMxMTMwMDQ3WhcNMjUwMjAxMTMwMDQ3WjAzMTEwLwYDVQQD
EygzMmI0Y2Q2NGU4MjA5YjUyMzNiY2U1MTA0NGRjMmI4OGNmNmNiZmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9/z3TBJgWM47TsIzJS7X2gcIn76
//t8brGyxyZECR9iBn6hmJwlVhBLrjYypIZAiYxqT4w4essilKEJwMKc/0lgfW4i
Yje7jSojySdpSJNLlGhhXT4swcHw9JmDBS+crXO6QODD6GrhSI7iJLcElH8cAfO8
agEcHW4eFegSYNe2z288w/9NY5OX9jJPyvps1sgZd0baIdFJr1yf8aO96bzcMvQD
ytNbx+RD31XZn1qqFdWib9vVkCBLTIjsW0TgTYEKP5OnsaKNsRTQADqv4K0H4k9o
LcV0mQnrRhBkO90581tJ2WdvHGTHoXIrBDnHmzoi1dOjcOjCn6DykN8f2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDK0zWToIJtSM7zlEETcK4jPbL+9MB8GA1UdIwQY
MBaAFOZQIgCm5j92OXrblN/YNMEWgJufMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWxBaUFLYm1QM1k1ZXR1VTM5ZzB3UmFBbTU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy85ZmY2MDItYjBiZC00YzNmLWFmOTQt
MmZjMzRhZDlkZDQ3LzEvNWxBaUFLYm1QM1k1ZXR1VTM5ZzB3UmFBbTU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy85ZmY2MDItYjBiZC00YzNmLWFmOTQtMmZjMzRhZDlkZDQ3
LzEvNWxBaUFLYm1QM1k1ZXR1VTM5ZzB3UmFBbTU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMSP6Ebpq
mhYwgmpA/xCgeAs3DoTppApsOpw1BXwUfO5LgCS3z7COCYtriy0RkCOd7qeTKC7k
YoGhC0ekHGb57RlK0gPqrnn8wIKdgsO1CkmzB9hNEL2QzMbCJSdBBntTMh8bOIZX
b0lAs005oF/8GO9H+k3ya9AbSmO0SCvd55nssXp0u61CQh27YuGkdJ1rLyTd+75e
/+loTWO/qeA0pyLtbYIxOiT0UdAKaEsICYamOeBn8HSiQP7+szf/HXv1NJs4ojhM
cncnHXegNmDD6gIXe/ueN0vjQ6sln/IIIUNd10El5ComrHBZQv6+hztbsYesEVFJ
Jl5KEiHvB1YNow==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:52:02 2025 by rpki-client