Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft
File: m5TSR2sxUeHn8DYNzk84USXu1fs.mft (raw, json)
Hash identifier: n5Ad3oqnax0jqTFPMJ0rUZervq2kNXvPDzJxVoRDGsE=
Subject key identifier: DC:23:F4:51:2E:66:19:78:9F:3E:65:FF:E3:16:6C:40:58:E1:6E:1A
Authority key identifier: 9B:94:D2:47:6B:31:51:E1:E7:F0:36:0D:CE:4F:38:51:25:EE:D5:FB
Certificate issuer: /CN=9b94d2476b3151e1e7f0360dce4f385125eed5fb
Certificate serial: 0194BC3C438992CB10E2B14148422822C00D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5TSR2sxUeHn8DYNzk84USXu1fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 12:00:53 +0000
Manifest this update: Fri 31 Jan 2025 12:00:53 +0000
Manifest next update: Sat 01 Feb 2025 12:00:53 +0000
Files and hashes: 1: m5TSR2sxUeHn8DYNzk84USXu1fs.crl (hash: Jm47A86YJnv3cfka3ob4Vxw1osFsAUhTKvfu7SSyWg4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:43:89:92:cb:10:e2:b1:41:48:42:28:22:c0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b94d2476b3151e1e7f0360dce4f385125eed5fb
Validity
Not Before: Jan 31 12:00:53 2025 GMT
Not After : Feb 1 12:00:53 2025 GMT
Subject: CN=dc23f4512e6619789f3e65ffe3166c4058e16e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:99:c1:07:95:4f:aa:75:df:e8:8c:8c:1b:e0:
78:b0:ea:b0:a3:82:2c:13:48:ba:52:11:e8:2c:26:
93:80:ab:03:fc:e3:fd:ec:2d:45:f1:96:83:90:f4:
de:1d:03:c7:3a:37:02:14:97:95:3a:74:d0:d9:1e:
e1:d1:16:1a:b1:12:ff:d6:6a:cd:61:f0:38:b6:2e:
ec:fd:e4:a0:85:50:92:0c:99:2a:9f:64:89:92:40:
f2:54:d7:f8:e3:02:a0:f1:90:da:95:8e:fb:6d:8c:
22:7b:21:16:22:4d:91:7e:44:d8:f4:d7:98:ba:e2:
9a:e3:3f:92:c8:7f:8b:72:c3:02:e2:5b:1b:51:9c:
b0:61:1d:81:7e:1e:e9:cb:6a:7e:bf:da:63:d9:de:
4a:8e:9c:f7:08:36:cf:8f:c2:84:d7:01:27:d2:5b:
58:a9:a5:98:5b:04:96:53:b3:d5:68:7e:37:e0:ee:
7c:09:84:fa:1e:65:eb:7e:52:b7:27:ff:27:22:99:
d7:be:a2:53:09:43:2a:16:aa:7c:9f:76:6d:9f:3c:
dd:8c:59:fa:66:fe:c3:a7:55:99:38:4d:3c:aa:5e:
b7:97:ce:bb:02:f6:04:ac:d6:00:2a:80:5a:dd:d9:
bd:d6:73:ac:e9:51:2a:1e:18:a6:02:b7:10:d3:3a:
b4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:23:F4:51:2E:66:19:78:9F:3E:65:FF:E3:16:6C:40:58:E1:6E:1A
X509v3 Authority Key Identifier:
keyid:9B:94:D2:47:6B:31:51:E1:E7:F0:36:0D:CE:4F:38:51:25:EE:D5:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5TSR2sxUeHn8DYNzk84USXu1fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/3b74f0-e753-4669-85fd-822eaf0d22b0/1/m5TSR2sxUeHn8DYNzk84USXu1fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:18:96:1f:73:1d:05:49:2b:1c:ed:d6:a8:ab:6e:10:ea:39:
b3:03:4a:8e:ce:26:bb:18:81:c4:2a:5f:d8:41:06:58:59:00:
6e:9d:98:03:bc:4a:48:c3:04:14:13:49:3d:c5:fe:c4:fd:b4:
7e:30:4a:39:9a:58:f0:d7:4a:da:9c:d8:c5:5e:69:a8:e2:e5:
5c:4c:7b:0a:6c:d9:58:33:9f:9e:99:44:01:22:0e:07:70:01:
35:77:7d:5b:b2:4d:80:e1:09:ae:7e:2b:63:00:f9:e5:88:9e:
95:fb:47:9d:18:01:9c:93:48:50:ef:84:3d:78:7b:ec:ec:ac:
6c:b4:89:b6:14:cd:60:4d:07:96:b8:8b:16:98:18:1e:03:26:
ad:92:0c:3f:30:59:fc:65:cd:84:2c:09:97:89:7a:c2:02:fc:
23:b6:e0:2c:8f:0f:59:f4:74:df:83:4d:ef:40:72:6f:e0:64:
3f:89:3c:6b:95:79:2c:61:ad:81:c1:eb:1a:c0:af:be:7b:66:
60:c8:81:75:07:9d:0f:b3:dd:8f:4b:1f:6d:87:76:4a:57:ef:
ad:5a:5f:fa:b5:f2:0a:0e:36:70:63:16:f0:ca:b0:1a:14:bf:
0e:66:c7:7c:e9:16:8a:71:32:56:d3:51:ca:27:4b:f1:58:88:
01:dc:14:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PEOJkssQ4rFBSEIoIsANMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliOTRkMjQ3NmIzMTUxZTFlN2YwMzYwZGNlNGYzODUxMjVl
ZWQ1ZmIwHhcNMjUwMTMxMTIwMDUzWhcNMjUwMjAxMTIwMDUzWjAzMTEwLwYDVQQD
EyhkYzIzZjQ1MTJlNjYxOTc4OWYzZTY1ZmZlMzE2NmM0MDU4ZTE2ZTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZnBB5VPqnXf6IyMG+B4sOqwo4Is
E0i6UhHoLCaTgKsD/OP97C1F8ZaDkPTeHQPHOjcCFJeVOnTQ2R7h0RYasRL/1mrN
YfA4ti7s/eSghVCSDJkqn2SJkkDyVNf44wKg8ZDalY77bYwieyEWIk2RfkTY9NeY
uuKa4z+SyH+LcsMC4lsbUZywYR2Bfh7py2p+v9pj2d5Kjpz3CDbPj8KE1wEn0ltY
qaWYWwSWU7PVaH434O58CYT6HmXrflK3J/8nIpnXvqJTCUMqFqp8n3ZtnzzdjFn6
Zv7Dp1WZOE08ql63l867AvYErNYAKoBa3dm91nOs6VEqHhimArcQ0zq0ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNwj9FEuZhl4nz5l/+MWbEBY4W4aMB8GA1UdIwQY
MBaAFJuU0kdrMVHh5/A2Dc5POFEl7tX7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTVUU1Iyc3hVZUhuOERZTnprODRVU1h1MWZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8zYjc0ZjAtZTc1My00NjY5LTg1ZmQt
ODIyZWFmMGQyMmIwLzEvbTVUU1Iyc3hVZUhuOERZTnprODRVU1h1MWZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8zYjc0ZjAtZTc1My00NjY5LTg1ZmQtODIyZWFmMGQyMmIw
LzEvbTVUU1Iyc3hVZUhuOERZTnprODRVU1h1MWZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXxiWH3Md
BUkrHO3WqKtuEOo5swNKjs4muxiBxCpf2EEGWFkAbp2YA7xKSMMEFBNJPcX+xP20
fjBKOZpY8NdK2pzYxV5pqOLlXEx7CmzZWDOfnplEASIOB3ABNXd9W7JNgOEJrn4r
YwD55YielftHnRgBnJNIUO+EPXh77OysbLSJthTNYE0HlriLFpgYHgMmrZIMPzBZ
/GXNhCwJl4l6wgL8I7bgLI8PWfR034NN70Byb+BkP4k8a5V5LGGtgcHrGsCvvntm
YMiBdQedD7Pdj0sfbYd2SlfvrVpf+rXyCg42cGMW8MqwGhS/DmbHfOkWinEyVtNR
yidL8ViIAdwUzw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:22:47 2025 by rpki-client