Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
File: mR5LF54JU7nsxYWtmFmgC-NWgAE.mft (raw, json)
Hash identifier: IaLhqR+Nu/X0fELUEOeHmSv8Piuo+kiQ4DZWmWo/X90=
Subject key identifier: C1:16:62:EA:66:98:65:E5:56:9A:CD:F4:84:A6:F2:8D:91:47:01:62
Authority key identifier: 99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
Certificate issuer: /CN=991e4b179e0953b9ecc585ad9859a00be3568001
Certificate serial: 0194BBCEEB6A1CE0261C6834E37D03CC9962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:01:27 +0000
Manifest this update: Fri 31 Jan 2025 10:01:27 +0000
Manifest next update: Sat 01 Feb 2025 10:01:27 +0000
Files and hashes: 1: 963pl4kMqERhlH5zQNINJ9q-oB4.roa (hash: BOAkYmCmSJL+jWIjxEb3nC4tx8Y5C6plreJ8j+irwHk=)
2: 9nSaJxHrbQ3QEW5mfZiYPpI-ugo.roa (hash: wy2LzSvu/dsXfdQ3akCDVPoEcY+5eaESxs8S9jGdusU=)
3: mR5LF54JU7nsxYWtmFmgC-NWgAE.crl (hash: 7CtSl/Q9e8YmJiPzAJ83lwmTczJMHKdwtI2HrCoiJpk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:eb:6a:1c:e0:26:1c:68:34:e3:7d:03:cc:99:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991e4b179e0953b9ecc585ad9859a00be3568001
Validity
Not Before: Jan 31 10:01:27 2025 GMT
Not After : Feb 1 10:01:27 2025 GMT
Subject: CN=c11662ea669865e5569acdf484a6f28d91470162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ae:63:fd:9e:cd:10:cb:08:75:4d:cc:99:a5:
6a:a7:e8:e1:f8:5e:2c:5c:0e:41:df:8f:82:6e:84:
6a:89:54:26:31:a5:1d:d8:2a:e1:5d:0d:2c:bb:39:
7a:79:26:c4:42:5a:a0:79:ea:92:f1:7a:2e:1b:f9:
5c:a2:78:cc:54:90:18:cc:27:21:0b:b7:0f:19:60:
6e:70:c4:09:08:2b:97:32:03:16:7c:66:ae:8a:5d:
a0:60:23:89:8f:e8:35:f5:79:61:e7:71:fc:b4:7a:
ce:a5:10:04:de:2b:05:74:53:cc:d2:f8:87:9c:1e:
f3:e5:5b:69:75:ba:50:03:b8:6e:51:e2:e1:44:33:
d2:24:01:ef:fc:aa:2a:20:bb:cc:fc:ef:90:12:e8:
e5:b8:26:ff:df:87:ac:d9:93:7c:8f:a5:4d:7f:7d:
ba:3b:ff:8b:74:95:5b:9c:3e:50:79:e2:73:0c:20:
3f:53:37:70:ac:df:49:63:73:41:c8:2f:5b:a8:a0:
6f:e4:29:43:a8:5e:a4:67:a1:52:ac:55:cf:c7:5c:
36:60:5a:be:b6:7a:9f:4f:a0:f7:46:de:6e:f7:df:
50:e1:66:a0:b4:9e:2d:29:8d:8b:55:62:00:7e:5c:
80:04:0d:48:59:d6:60:95:f0:a3:a2:9b:c0:b3:ee:
57:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:16:62:EA:66:98:65:E5:56:9A:CD:F4:84:A6:F2:8D:91:47:01:62
X509v3 Authority Key Identifier:
keyid:99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e8:fa:ca:1f:6f:dc:40:b6:6d:a4:a8:3a:31:aa:5c:a4:e8:
80:53:19:16:f6:20:61:3e:9c:33:3a:6b:73:41:c8:49:c6:cb:
c8:4e:cd:7c:d2:88:42:92:59:82:8f:42:71:94:89:82:8e:0f:
81:fa:20:51:34:1a:cc:42:df:f7:8d:bd:e4:e5:69:48:1e:be:
ec:22:2c:77:42:a7:9a:59:3d:59:89:35:34:94:07:2c:78:f6:
65:98:05:11:80:62:55:3a:16:89:d8:e3:ee:83:85:1c:c2:ec:
3b:32:ae:dc:75:e6:81:71:01:d4:82:df:3e:24:c4:61:4b:55:
c0:f0:0a:56:83:3e:bc:41:3f:cd:1f:45:9d:5b:26:0c:04:5d:
86:19:40:19:dd:62:2e:1f:17:8a:46:fb:04:e5:d6:30:0b:61:
cd:72:b8:8d:e6:16:c7:a0:0f:fb:86:1a:89:6b:77:61:ac:7e:
79:b4:ec:71:f6:90:92:8d:db:78:5b:b5:52:8a:04:9d:c6:c5:
5e:77:0d:de:b3:53:9c:17:88:5e:bb:84:d0:37:1e:a6:60:1b:
62:8f:73:cc:2b:b6:95:9e:bf:32:9e:29:6e:16:78:3c:1a:a8:
13:8a:d8:48:50:ed:1a:0e:64:0d:99:17:58:9d:a6:d4:69:0f:
29:d6:3a:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zutqHOAmHGg0430DzJliMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MWU0YjE3OWUwOTUzYjllY2M1ODVhZDk4NTlhMDBiZTM1
NjgwMDEwHhcNMjUwMTMxMTAwMTI3WhcNMjUwMjAxMTAwMTI3WjAzMTEwLwYDVQQD
EyhjMTE2NjJlYTY2OTg2NWU1NTY5YWNkZjQ4NGE2ZjI4ZDkxNDcwMTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxa5j/Z7NEMsIdU3MmaVqp+jh+F4s
XA5B34+CboRqiVQmMaUd2CrhXQ0suzl6eSbEQlqgeeqS8XouG/lconjMVJAYzCch
C7cPGWBucMQJCCuXMgMWfGauil2gYCOJj+g19Xlh53H8tHrOpRAE3isFdFPM0viH
nB7z5VtpdbpQA7huUeLhRDPSJAHv/KoqILvM/O+QEujluCb/34es2ZN8j6VNf326
O/+LdJVbnD5QeeJzDCA/UzdwrN9JY3NByC9bqKBv5ClDqF6kZ6FSrFXPx1w2YFq+
tnqfT6D3Rt5u999Q4WagtJ4tKY2LVWIAflyABA1IWdZglfCjopvAs+5XRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMEWYupmmGXlVprN9ISm8o2RRwFiMB8GA1UdIwQY
MBaAFJkeSxeeCVO57MWFrZhZoAvjVoABMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVI1TEY1NEpVN25zeFlXdG1GbWdDLU5XZ0FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iZmRkYTktMjc0Mi00YjJmLTg1YjYt
ZWY5Yzk1Mjc2OTMyLzEvbVI1TEY1NEpVN25zeFlXdG1GbWdDLU5XZ0FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9iZmRkYTktMjc0Mi00YjJmLTg1YjYtZWY5Yzk1Mjc2OTMy
LzEvbVI1TEY1NEpVN25zeFlXdG1GbWdDLU5XZ0FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeej6yh9v
3EC2baSoOjGqXKTogFMZFvYgYT6cMzprc0HIScbLyE7NfNKIQpJZgo9CcZSJgo4P
gfogUTQazELf94295OVpSB6+7CIsd0Knmlk9WYk1NJQHLHj2ZZgFEYBiVToWidjj
7oOFHMLsOzKu3HXmgXEB1ILfPiTEYUtVwPAKVoM+vEE/zR9FnVsmDARdhhlAGd1i
Lh8Xikb7BOXWMAthzXK4jeYWx6AP+4YaiWt3Yax+ebTscfaQko3beFu1UooEncbF
XncN3rNTnBeIXruE0DcepmAbYo9zzCu2lZ6/Mp4pbhZ4PBqoE4rYSFDtGg5kDZkX
WJ2m1GkPKdY6Sw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:29 2025 by rpki-client