Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft
File: D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft (raw, json)
Hash identifier: O+TO+X+DahjyxEXQJnZX45xmb3sA7TGQCfwLuSOc434=
Subject key identifier: 64:46:7D:57:6C:E0:62:02:04:36:A8:31:97:CF:AD:DC:AD:D9:92:E1
Authority key identifier: 0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB
Certificate issuer: /CN=0f92c52f86009879c177092f7cd83418b4df8cab
Certificate serial: 0194BBCE96FC3212FBE115CF5750840E7AD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 10:01:05 +0000
Manifest this update: Fri 31 Jan 2025 10:01:05 +0000
Manifest next update: Sat 01 Feb 2025 10:01:05 +0000
Files and hashes: 1: D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl (hash: vT79OQtTll25dSqWYLuN5etVpROKFbUT69zeBkn7+pU=)
2: HUHlNiQYgJ4Q8Qh3sAD_OVXJBhA.roa (hash: OPxk8KCEOkzaDriX+1Y8hLRMwmqx3zDs8p9mPqnsEt0=)
3: PajWCIMvcFk4AhOAYqjPPCoKGSM.roa (hash: YLRXPcoHiAKu8WSdD1lhP04YPthD74gG0Yhmp7yGgeI=)
4: wkRan0gCCPqjhSya1MCejtYVUwQ.roa (hash: CcC9CLeeg2oAb+UFqiFxA3SwU8cWbyT2GAOTTlHtPbo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:96:fc:32:12:fb:e1:15:cf:57:50:84:0e:7a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f92c52f86009879c177092f7cd83418b4df8cab
Validity
Not Before: Jan 31 10:01:05 2025 GMT
Not After : Feb 1 10:01:05 2025 GMT
Subject: CN=64467d576ce062020436a83197cfaddcadd992e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:11:89:7b:5e:41:43:51:46:80:51:9b:75:1e:
4e:80:e7:0b:10:b3:c4:e6:c0:89:07:eb:67:11:c4:
65:22:0b:80:5e:79:79:ae:cf:c8:41:f9:c2:ae:05:
63:2b:6c:12:a4:68:52:84:f0:0a:3f:e2:d8:e5:53:
c1:97:de:d6:02:e9:a1:4b:25:f5:c1:17:0f:7c:6f:
39:a7:ca:04:2a:e8:55:4c:fc:36:33:af:95:58:fa:
74:60:47:89:06:8a:c6:2b:d2:a2:bf:61:15:eb:80:
35:c7:24:92:06:8f:b0:82:8e:c1:62:39:39:86:9d:
c1:1d:84:23:42:2a:09:1d:26:75:3f:5b:b7:9a:f8:
1e:34:27:c3:f5:74:6a:22:6a:f4:21:d2:bc:4d:02:
b4:d4:a8:67:49:c2:79:2d:c9:2b:bc:e1:3c:6d:57:
95:7d:b7:6a:c1:b0:f3:f4:a6:6b:00:04:ab:f5:ca:
f7:b2:c2:a5:8a:ee:d5:56:fd:f6:82:f1:38:cc:85:
77:0d:d3:4e:c2:8e:f9:1c:6c:20:09:11:70:93:5b:
e9:d3:d6:74:07:4f:0a:62:2f:b3:a6:f3:b4:78:af:
20:a9:37:ad:2b:97:86:be:97:6a:c7:f6:f7:5e:e0:
5f:81:23:69:54:fd:b1:8b:8e:69:18:a8:b7:79:39:
a2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:46:7D:57:6C:E0:62:02:04:36:A8:31:97:CF:AD:DC:AD:D9:92:E1
X509v3 Authority Key Identifier:
keyid:0F:92:C5:2F:86:00:98:79:C1:77:09:2F:7C:D8:34:18:B4:DF:8C:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5LFL4YAmHnBdwkvfNg0GLTfjKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e8c287-f049-4595-86eb-0be209ffbaec/1/D5LFL4YAmHnBdwkvfNg0GLTfjKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:3b:39:fa:ba:3f:fb:bc:a5:c7:39:35:62:89:9e:27:48:e4:
aa:70:98:fd:a4:2d:6e:e4:a5:a2:97:eb:d7:62:71:3c:02:fc:
60:be:58:54:c4:9b:a4:87:bd:43:7d:ed:1f:4a:83:41:48:3f:
53:4b:0c:33:a9:83:c0:33:9b:27:44:0b:6d:e8:78:bd:b1:92:
7c:24:1c:80:79:ee:af:85:5f:cd:64:9d:c9:b4:32:29:e3:f6:
59:62:4c:2a:32:04:17:7a:7b:bd:cb:4c:47:d8:c9:36:6b:ee:
a3:94:c3:96:62:90:d1:66:9e:39:33:d3:4f:d5:13:9e:5e:99:
61:27:c1:51:2d:b0:a2:0e:20:41:2e:93:42:98:59:00:8f:b6:
b1:f1:ed:8c:18:27:ea:c0:2d:79:fe:f7:94:74:e1:81:9e:35:
8e:5f:02:e5:16:a0:41:ff:1c:59:8c:a7:e8:63:37:3c:de:37:
40:b0:e5:0f:88:0c:ad:37:f0:d8:91:1e:ee:53:d7:e5:43:56:
0b:98:d8:de:89:79:36:a0:22:bc:e1:9c:87:6d:a7:a6:15:a0:
eb:b9:9e:37:c7:39:42:8e:4f:0e:5c:46:6b:c1:41:66:e3:24:
47:6f:14:3a:75:e4:21:2e:8d:dd:4a:56:ca:1c:bb:f8:b6:b2:
de:d5:b2:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zpb8MhL74RXPV1CEDnrXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmOTJjNTJmODYwMDk4NzljMTc3MDkyZjdjZDgzNDE4YjRk
ZjhjYWIwHhcNMjUwMTMxMTAwMTA1WhcNMjUwMjAxMTAwMTA1WjAzMTEwLwYDVQQD
Eyg2NDQ2N2Q1NzZjZTA2MjAyMDQzNmE4MzE5N2NmYWRkY2FkZDk5MmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxGJe15BQ1FGgFGbdR5OgOcLELPE
5sCJB+tnEcRlIguAXnl5rs/IQfnCrgVjK2wSpGhShPAKP+LY5VPBl97WAumhSyX1
wRcPfG85p8oEKuhVTPw2M6+VWPp0YEeJBorGK9Kiv2EV64A1xySSBo+wgo7BYjk5
hp3BHYQjQioJHSZ1P1u3mvgeNCfD9XRqImr0IdK8TQK01KhnScJ5LckrvOE8bVeV
fbdqwbDz9KZrAASr9cr3ssKliu7VVv32gvE4zIV3DdNOwo75HGwgCRFwk1vp09Z0
B08KYi+zpvO0eK8gqTetK5eGvpdqx/b3XuBfgSNpVP2xi45pGKi3eTmiqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGRGfVds4GICBDaoMZfPrdyt2ZLhMB8GA1UdIwQY
MBaAFA+SxS+GAJh5wXcJL3zYNBi034yrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDVMRkw0WUFtSG5CZHdrdmZOZzBHTFRmaktzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lOGMyODctZjA0OS00NTk1LTg2ZWIt
MGJlMjA5ZmZiYWVjLzEvRDVMRkw0WUFtSG5CZHdrdmZOZzBHTFRmaktzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9lOGMyODctZjA0OS00NTk1LTg2ZWItMGJlMjA5ZmZiYWVj
LzEvRDVMRkw0WUFtSG5CZHdrdmZOZzBHTFRmaktzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmDs5+ro/
+7ylxzk1YomeJ0jkqnCY/aQtbuSlopfr12JxPAL8YL5YVMSbpIe9Q33tH0qDQUg/
U0sMM6mDwDObJ0QLbeh4vbGSfCQcgHnur4VfzWSdybQyKeP2WWJMKjIEF3p7vctM
R9jJNmvuo5TDlmKQ0WaeOTPTT9UTnl6ZYSfBUS2wog4gQS6TQphZAI+2sfHtjBgn
6sAtef73lHThgZ41jl8C5RagQf8cWYyn6GM3PN43QLDlD4gMrTfw2JEe7lPX5UNW
C5jY3ol5NqAivOGch22nphWg67meN8c5Qo5PDlxGa8FBZuMkR28UOnXkIS6N3UpW
yhy7+Lay3tWyUg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:39 2025 by rpki-client