Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
File: 5QwixmuF-smN6D12HvQkNDerA5M.mft (raw, json)
Hash identifier: UkkOTU/E70LZ+XgpwDhnxw/wV/PZoe9UKIqLa7/fpsM=
Subject key identifier: C9:AB:4C:AC:75:51:00:B3:85:D7:5E:65:41:6C:E4:BD:23:FE:35:8F
Authority key identifier: E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93
Certificate issuer: /CN=e50c22c66b85fac98de83d761ef4243437ab0393
Certificate serial: 0194BC3CA9BC2EC13DA541C7DAFA81EFA19E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
Manifest number: 10C6
Signing time: Fri 31 Jan 2025 12:01:19 +0000
Manifest this update: Fri 31 Jan 2025 12:01:19 +0000
Manifest next update: Sat 01 Feb 2025 12:01:19 +0000
Files and hashes: 1: 5QwixmuF-smN6D12HvQkNDerA5M.crl (hash: JOSknm8EHwYFzakWBcOa0HDWLaD7s55oUHWt6Mj8jtw=)
2: 5vvZLFuVzrlfVEjgWVSSvDzWzYc.roa (hash: d36pZwdlPn9b+lfJWHYLiYs9ysvYmjF2/rOLd55l7Go=)
3: yV2QuoCYFVjM2-OTmFDea8Z9hyw.roa (hash: Fm6HaS57Sk5HrIHo3AJdE4/OrtFAnjdqKcrhGRoXq3s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a9:bc:2e:c1:3d:a5:41:c7:da:fa:81:ef:a1:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50c22c66b85fac98de83d761ef4243437ab0393
Validity
Not Before: Jan 31 12:01:19 2025 GMT
Not After : Feb 1 12:01:19 2025 GMT
Subject: CN=c9ab4cac755100b385d75e65416ce4bd23fe358f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:10:b5:18:85:4f:42:ef:fa:f5:5c:74:3b:fe:
c4:ea:f0:43:d7:d8:bb:5c:c7:68:57:d5:97:91:02:
b5:9e:4b:35:8a:5a:17:97:3b:b8:82:a9:cb:f7:08:
f5:a6:0e:e0:8e:73:97:18:02:94:d9:6a:51:92:8a:
7b:58:b8:c4:8e:e4:02:06:07:16:f4:56:aa:55:66:
20:e9:38:10:c6:88:ce:8d:bc:63:f1:28:34:ba:d3:
ad:05:54:19:fe:d1:1c:5c:c9:5e:d1:2d:28:9d:62:
81:02:d8:3a:cb:03:41:0c:f0:e9:a0:ad:34:64:51:
59:9d:50:f6:04:ba:10:fe:f0:99:79:ca:51:27:d4:
b1:7a:a8:ee:99:78:5e:11:06:c0:f6:e7:f3:15:ba:
54:fa:4d:14:c7:23:37:ec:6a:c7:ff:f9:0a:18:be:
d6:92:32:08:48:92:ab:6e:82:bf:28:81:31:1e:6c:
f8:51:40:4a:fb:cb:9a:6a:66:a2:ea:32:6e:6a:90:
d3:37:7f:c1:f8:6a:a4:5a:ee:04:e0:a0:56:bf:61:
3a:40:ff:66:e9:aa:43:43:cf:e8:fb:d0:61:7a:93:
9d:a9:ac:3f:d5:e3:b2:e4:a4:a6:e6:41:3d:1e:ed:
76:bf:52:f4:6e:c6:2d:40:91:84:08:3a:7a:bf:5b:
1b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AB:4C:AC:75:51:00:B3:85:D7:5E:65:41:6C:E4:BD:23:FE:35:8F
X509v3 Authority Key Identifier:
keyid:E5:0C:22:C6:6B:85:FA:C9:8D:E8:3D:76:1E:F4:24:34:37:AB:03:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QwixmuF-smN6D12HvQkNDerA5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2b7fe9-2a87-4c57-b108-9214278108a8/1/5QwixmuF-smN6D12HvQkNDerA5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:cf:95:f3:25:3f:33:24:5b:71:6b:e1:28:fd:93:ae:dd:84:
26:ef:2e:6d:c0:72:fc:3b:d9:bf:83:82:d8:d6:90:37:a3:c2:
43:a5:55:c5:bc:7a:90:d8:cf:82:c1:a7:19:1c:09:f4:c4:94:
34:c3:27:f3:11:84:be:50:2f:20:5f:66:30:f5:7b:68:be:7c:
da:19:00:d3:3e:e7:db:9d:fc:f7:1a:2c:ce:16:77:7d:31:7e:
de:5b:b3:d5:7a:2f:0b:a7:10:22:04:43:01:ce:98:32:88:9d:
6a:00:04:3a:a9:af:d5:cb:07:8e:74:40:ee:31:fa:ff:57:78:
bf:60:a8:39:16:ae:c1:d7:46:8c:5c:54:b3:a1:a9:c9:a5:44:
84:71:1f:ff:7b:de:b7:38:36:d4:86:56:d6:bb:e9:61:ed:5b:
94:a1:70:0b:5c:3c:08:9b:bb:7c:b9:0a:c8:cd:ab:99:9a:18:
cc:51:1b:3c:75:07:2b:58:c4:02:43:3e:b2:3a:e2:ac:d2:5f:
3c:34:2d:12:06:24:54:f3:05:3a:19:51:b7:52:87:8c:32:e6:
be:73:dd:99:8b:be:e2:b9:c4:4f:f2:25:6f:d3:56:fb:24:4a:
b8:28:06:a6:55:0c:75:5a:9d:7d:0d:8c:ad:a2:10:c6:e8:a8:
5d:c4:0c:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PKm8LsE9pUHH2vqB76GeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MGMyMmM2NmI4NWZhYzk4ZGU4M2Q3NjFlZjQyNDM0Mzdh
YjAzOTMwHhcNMjUwMTMxMTIwMTE5WhcNMjUwMjAxMTIwMTE5WjAzMTEwLwYDVQQD
EyhjOWFiNGNhYzc1NTEwMGIzODVkNzVlNjU0MTZjZTRiZDIzZmUzNThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhC1GIVPQu/69Vx0O/7E6vBD19i7
XMdoV9WXkQK1nks1iloXlzu4gqnL9wj1pg7gjnOXGAKU2WpRkop7WLjEjuQCBgcW
9FaqVWYg6TgQxojOjbxj8Sg0utOtBVQZ/tEcXMle0S0onWKBAtg6ywNBDPDpoK00
ZFFZnVD2BLoQ/vCZecpRJ9SxeqjumXheEQbA9ufzFbpU+k0UxyM37GrH//kKGL7W
kjIISJKrboK/KIExHmz4UUBK+8uaamai6jJuapDTN3/B+GqkWu4E4KBWv2E6QP9m
6apDQ8/o+9BhepOdqaw/1eOy5KSm5kE9Hu12v1L0bsYtQJGECDp6v1sbgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMmrTKx1UQCzhddeZUFs5L0j/jWPMB8GA1UdIwQY
MBaAFOUMIsZrhfrJjeg9dh70JDQ3qwOTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVF3aXhtdUYtc21ONkQxMkh2UWtORGVyQTVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8yYjdmZTktMmE4Ny00YzU3LWIxMDgt
OTIxNDI3ODEwOGE4LzEvNVF3aXhtdUYtc21ONkQxMkh2UWtORGVyQTVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8yYjdmZTktMmE4Ny00YzU3LWIxMDgtOTIxNDI3ODEwOGE4
LzEvNVF3aXhtdUYtc21ONkQxMkh2UWtORGVyQTVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWs+V8yU/
MyRbcWvhKP2Trt2EJu8ubcBy/DvZv4OC2NaQN6PCQ6VVxbx6kNjPgsGnGRwJ9MSU
NMMn8xGEvlAvIF9mMPV7aL582hkA0z7n25389xoszhZ3fTF+3luz1XovC6cQIgRD
Ac6YMoidagAEOqmv1csHjnRA7jH6/1d4v2CoORauwddGjFxUs6GpyaVEhHEf/3ve
tzg21IZW1rvpYe1blKFwC1w8CJu7fLkKyM2rmZoYzFEbPHUHK1jEAkM+sjrirNJf
PDQtEgYkVPMFOhlRt1KHjDLmvnPdmYu+4rnET/Ilb9NW+yRKuCgGplUMdVqdfQ2M
raIQxuioXcQMTQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:34 2025 by rpki-client