Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
File: r5VJF2-WbToiFBAHkJfIfw4dILE.mft (raw, json)
Hash identifier: 6xRRzKKjKBYc4PeL89s1qoF63EC4E2Te1GdQwHsJxuQ=
Subject key identifier: 84:F7:95:A1:98:0F:00:B5:83:FB:D9:22:CB:90:78:8F:BF:E0:BD:CD
Authority key identifier: AF:95:49:17:6F:96:6D:3A:22:14:10:07:90:97:C8:7F:0E:1D:20:B1
Certificate issuer: /CN=af9549176f966d3a221410079097c87f0e1d20b1
Certificate serial: 0194BC3BF117AB0EA15BDE43A6CB492BD7D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
Manifest number: 0B8C
Signing time: Fri 31 Jan 2025 12:00:32 +0000
Manifest this update: Fri 31 Jan 2025 12:00:32 +0000
Manifest next update: Sat 01 Feb 2025 12:00:32 +0000
Files and hashes: 1: 1n_N6auYiXQ1pyBQYj7m3QI_dSs.roa (hash: LsHjMOF74kduMAehGu3uEfQUdY1PYN7E293m6Bfa2Jo=)
2: r5VJF2-WbToiFBAHkJfIfw4dILE.crl (hash: tYJju7dLG1vG64KuqMzO/5UGgWMEsGrYcOMAeBW3l6Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f1:17:ab:0e:a1:5b:de:43:a6:cb:49:2b:d7:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9549176f966d3a221410079097c87f0e1d20b1
Validity
Not Before: Jan 31 12:00:32 2025 GMT
Not After : Feb 1 12:00:32 2025 GMT
Subject: CN=84f795a1980f00b583fbd922cb90788fbfe0bdcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:83:a2:92:ce:fe:f1:c9:48:da:85:db:8b:cd:
35:e8:40:0c:f5:45:8f:50:2e:6c:33:83:9d:4c:59:
32:bd:82:59:94:80:41:9d:0c:e7:bb:fd:13:ed:85:
7f:c9:2d:2e:6f:ce:18:b3:72:21:5b:85:ef:d1:b0:
0d:60:76:a2:0d:ac:4a:a6:74:8b:a4:2e:94:55:a7:
f8:19:09:73:5c:57:3b:d0:88:61:f0:c8:47:c1:fd:
68:5e:3d:45:5b:0c:b1:ce:8b:9a:b3:1f:62:77:ca:
c4:29:5b:4c:e5:3e:d0:8d:cf:38:e9:00:00:5f:3a:
14:5a:74:64:22:a4:c0:a0:b0:7e:a6:5c:04:96:9d:
ae:db:69:8d:6f:97:2d:3c:66:ce:f0:57:3f:7f:40:
c6:11:db:8c:0c:46:03:ca:e6:88:5b:1a:d8:33:7f:
b3:35:91:3a:f0:e9:cd:c1:2d:31:c4:36:c1:60:1c:
ef:90:6a:44:4e:93:8a:82:4e:26:f3:9a:39:61:3b:
7d:23:20:9a:8d:aa:cf:53:f5:b2:dd:50:ef:94:c3:
ed:d1:b8:47:78:b7:aa:4f:0f:4e:75:83:c1:ef:e1:
e7:4c:ac:1d:64:d8:b2:25:66:3a:02:2f:59:5e:15:
51:88:98:6a:da:78:c2:09:78:ba:d3:13:83:58:61:
d1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F7:95:A1:98:0F:00:B5:83:FB:D9:22:CB:90:78:8F:BF:E0:BD:CD
X509v3 Authority Key Identifier:
keyid:AF:95:49:17:6F:96:6D:3A:22:14:10:07:90:97:C8:7F:0E:1D:20:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5VJF2-WbToiFBAHkJfIfw4dILE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/859170-a974-4ae3-a020-3ea59d96a790/1/r5VJF2-WbToiFBAHkJfIfw4dILE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:3e:c8:0e:b2:00:5d:8e:45:8c:d9:2c:c0:72:11:5b:44:3c:
39:a3:27:75:22:57:cd:7b:94:6b:6e:66:89:72:23:5f:db:bb:
bf:e1:b4:da:61:f2:6a:eb:bf:9d:14:f7:16:2f:68:47:bf:26:
24:1e:b1:4d:75:c4:80:f7:7c:1a:aa:d7:97:82:80:4e:1d:a5:
10:37:3a:c4:7c:65:f2:be:45:9c:d4:d2:f9:96:77:07:54:83:
d5:ca:4e:f3:40:e8:cf:f1:07:31:ac:1d:49:79:3e:46:ed:6c:
cf:4f:78:71:79:14:ec:aa:59:38:9d:e9:c7:cf:34:6f:ad:04:
92:2c:53:bc:15:a9:d0:c8:37:e4:1e:43:c3:bd:0f:07:c0:0a:
cb:d3:f4:13:83:9b:26:c9:a8:2a:b9:d1:f9:cc:3d:1b:fa:f7:
65:f5:97:48:27:37:34:ee:95:c0:b5:aa:88:3d:f5:53:96:a1:
03:9b:11:41:4d:f5:78:ea:34:53:0b:71:0d:7b:88:05:fd:11:
53:03:24:a9:8c:e7:be:3c:f9:a9:0b:a1:25:a7:c3:a6:8c:c0:
7f:d7:e0:12:bf:23:a2:52:45:b8:9c:cb:49:13:58:f6:09:b1:
a6:f2:0c:17:bb:4f:2f:9b:6e:6d:1f:74:db:d1:71:ab:2e:97:
b1:74:61:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O/EXqw6hW95DpstJK9fWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmOTU0OTE3NmY5NjZkM2EyMjE0MTAwNzkwOTdjODdmMGUx
ZDIwYjEwHhcNMjUwMTMxMTIwMDMyWhcNMjUwMjAxMTIwMDMyWjAzMTEwLwYDVQQD
Eyg4NGY3OTVhMTk4MGYwMGI1ODNmYmQ5MjJjYjkwNzg4ZmJmZTBiZGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoOiks7+8clI2oXbi8016EAM9UWP
UC5sM4OdTFkyvYJZlIBBnQznu/0T7YV/yS0ub84Ys3IhW4Xv0bANYHaiDaxKpnSL
pC6UVaf4GQlzXFc70Ihh8MhHwf1oXj1FWwyxzouasx9id8rEKVtM5T7Qjc846QAA
XzoUWnRkIqTAoLB+plwElp2u22mNb5ctPGbO8Fc/f0DGEduMDEYDyuaIWxrYM3+z
NZE68OnNwS0xxDbBYBzvkGpETpOKgk4m85o5YTt9IyCajarPU/Wy3VDvlMPt0bhH
eLeqTw9OdYPB7+HnTKwdZNiyJWY6Ai9ZXhVRiJhq2njCCXi60xODWGHRvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIT3laGYDwC1g/vZIsuQeI+/4L3NMB8GA1UdIwQY
MBaAFK+VSRdvlm06IhQQB5CXyH8OHSCxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjVWSkYyLVdiVG9pRkJBSGtKZklmdzRkSUxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS84NTkxNzAtYTk3NC00YWUzLWEwMjAt
M2VhNTlkOTZhNzkwLzEvcjVWSkYyLVdiVG9pRkJBSGtKZklmdzRkSUxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS84NTkxNzAtYTk3NC00YWUzLWEwMjAtM2VhNTlkOTZhNzkw
LzEvcjVWSkYyLVdiVG9pRkJBSGtKZklmdzRkSUxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfD7IDrIA
XY5FjNkswHIRW0Q8OaMndSJXzXuUa25miXIjX9u7v+G02mHyauu/nRT3Fi9oR78m
JB6xTXXEgPd8GqrXl4KATh2lEDc6xHxl8r5FnNTS+ZZ3B1SD1cpO80Doz/EHMawd
SXk+Ru1sz094cXkU7KpZOJ3px880b60EkixTvBWp0Mg35B5Dw70PB8AKy9P0E4Ob
JsmoKrnR+cw9G/r3ZfWXSCc3NO6VwLWqiD31U5ahA5sRQU31eOo0UwtxDXuIBf0R
UwMkqYznvjz5qQuhJafDpozAf9fgEr8jolJFuJzLSRNY9gmxpvIMF7tPL5tubR90
29Fxqy6XsXRhng==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:58 2025 by rpki-client