Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/70e964-601e-4f4b-911e-6e3a7d969a40/1/5OIv9yeFHntJFhTwetExVxQcwwk.mft
File: 5OIv9yeFHntJFhTwetExVxQcwwk.mft (raw, json)
Hash identifier: twUemHUD7a5zLvfG/xFgqaMxIrEETYdTtiDuO0SPdPE=
Subject key identifier: 16:5E:D1:57:23:95:28:2C:CE:92:A8:17:3B:B3:89:57:9A:AA:1C:4C
Authority key identifier: E4:E2:2F:F7:27:85:1E:7B:49:16:14:F0:7A:D1:31:57:14:1C:C3:09
Certificate issuer: /CN=e4e22ff727851e7b491614f07ad13157141cc309
Certificate serial: 0194BCAA24B06289834E22617E225567EAA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5OIv9yeFHntJFhTwetExVxQcwwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/70e964-601e-4f4b-911e-6e3a7d969a40/1/5OIv9yeFHntJFhTwetExVxQcwwk.mft
Manifest number: 12D9
Signing time: Fri 31 Jan 2025 14:00:54 +0000
Manifest this update: Fri 31 Jan 2025 14:00:54 +0000
Manifest next update: Sat 01 Feb 2025 14:00:54 +0000
Files and hashes: 1: 5OIv9yeFHntJFhTwetExVxQcwwk.crl (hash: FlDB1U8p8d20EJv+KuKxpKAC/yJPxlXooONK36g5QGo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:24:b0:62:89:83:4e:22:61:7e:22:55:67:ea:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4e22ff727851e7b491614f07ad13157141cc309
Validity
Not Before: Jan 31 14:00:54 2025 GMT
Not After : Feb 1 14:00:54 2025 GMT
Subject: CN=165ed1572395282cce92a8173bb389579aaa1c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:26:a7:48:65:9e:91:69:c0:d0:28:f1:d2:cb:
ce:26:89:e9:35:bb:7d:0f:e8:a5:28:91:e6:7d:ae:
10:40:45:73:d9:8a:b2:06:92:f6:88:16:1d:25:f8:
98:a3:28:ad:fa:3b:38:2a:57:c0:77:41:b4:e9:07:
c8:40:53:5b:7f:8b:38:a1:35:23:77:e9:ad:be:64:
88:97:d0:94:c8:f0:69:30:c7:93:55:68:51:84:0b:
2f:0e:78:40:a0:0e:d7:f5:ee:35:55:09:6d:f2:3f:
04:78:5a:46:ee:e4:63:22:0f:f6:ea:6c:cf:3a:5f:
49:00:d2:2f:91:6a:1b:c8:f2:fb:92:9e:5f:3e:f4:
24:cb:7e:2e:af:89:3d:79:20:4f:ba:3e:b8:a9:13:
d9:98:c0:58:05:3f:f7:da:c3:fc:58:e5:73:39:5c:
85:59:1a:8b:15:f6:60:f3:6c:43:12:e5:f3:2f:6e:
0e:23:23:4b:f6:9a:49:5b:b0:6d:60:ed:1b:e3:b5:
75:99:19:16:14:18:2b:66:cf:c9:87:79:b6:40:f5:
28:ce:1a:b7:9b:5d:c6:7b:57:8d:45:b1:af:da:77:
12:3a:65:61:5d:d6:c8:82:c7:cc:47:39:77:77:ff:
bf:b0:46:08:82:2c:dc:d1:61:76:81:ad:52:14:35:
61:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5E:D1:57:23:95:28:2C:CE:92:A8:17:3B:B3:89:57:9A:AA:1C:4C
X509v3 Authority Key Identifier:
keyid:E4:E2:2F:F7:27:85:1E:7B:49:16:14:F0:7A:D1:31:57:14:1C:C3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5OIv9yeFHntJFhTwetExVxQcwwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70e964-601e-4f4b-911e-6e3a7d969a40/1/5OIv9yeFHntJFhTwetExVxQcwwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70e964-601e-4f4b-911e-6e3a7d969a40/1/5OIv9yeFHntJFhTwetExVxQcwwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e3:bd:cf:dd:4b:0a:72:1e:bb:0b:10:ec:42:fc:79:f8:0e:
e5:43:6a:2a:0f:2b:37:e8:cd:cc:0a:41:8d:94:c7:b2:32:40:
15:ef:a1:bd:71:9a:87:c7:9f:92:d2:c6:08:55:67:6a:ea:2f:
32:d3:75:a0:d5:f7:1e:aa:84:64:7a:06:79:19:ad:09:4b:bd:
64:e3:28:67:c7:83:91:39:d4:e8:dd:75:a9:9e:56:63:99:ed:
89:fe:d2:b7:8d:ee:99:db:ef:c2:07:76:c7:41:5f:f7:c7:ea:
5d:e1:af:04:18:d2:b6:4f:82:63:9e:82:ee:50:90:45:a2:d0:
76:33:32:46:c3:56:f9:28:ae:ff:12:5b:d3:98:43:f4:00:ea:
55:87:cc:41:1e:76:0f:33:a5:bc:3b:f2:2a:0c:31:71:ac:28:
e8:4e:43:6a:78:67:fd:2d:77:65:56:1f:cc:e2:91:f6:78:e7:
48:41:31:99:e2:01:39:65:0d:86:65:95:aa:f7:ba:1d:d3:80:
7d:6c:4d:ce:ce:f3:10:37:01:bc:5c:f9:fd:11:96:ad:b9:12:
eb:22:34:51:e9:7a:ef:42:47:eb:ff:68:90:37:78:74:a1:bd:
ce:d8:05:47:b8:6e:3d:3d:1c:78:13:b3:89:88:7c:ed:42:cd:
59:64:38:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qiSwYomDTiJhfiJVZ+qpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZTIyZmY3Mjc4NTFlN2I0OTE2MTRmMDdhZDEzMTU3MTQx
Y2MzMDkwHhcNMjUwMTMxMTQwMDU0WhcNMjUwMjAxMTQwMDU0WjAzMTEwLwYDVQQD
EygxNjVlZDE1NzIzOTUyODJjY2U5MmE4MTczYmIzODk1NzlhYWExYzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSanSGWekWnA0Cjx0svOJonpNbt9
D+ilKJHmfa4QQEVz2YqyBpL2iBYdJfiYoyit+js4KlfAd0G06QfIQFNbf4s4oTUj
d+mtvmSIl9CUyPBpMMeTVWhRhAsvDnhAoA7X9e41VQlt8j8EeFpG7uRjIg/26mzP
Ol9JANIvkWobyPL7kp5fPvQky34ur4k9eSBPuj64qRPZmMBYBT/32sP8WOVzOVyF
WRqLFfZg82xDEuXzL24OIyNL9ppJW7BtYO0b47V1mRkWFBgrZs/Jh3m2QPUozhq3
m13Ge1eNRbGv2ncSOmVhXdbIgsfMRzl3d/+/sEYIgizc0WF2ga1SFDVhHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZe0VcjlSgszpKoFzuziVeaqhxMMB8GA1UdIwQY
MBaAFOTiL/cnhR57SRYU8HrRMVcUHMMJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU9Jdjl5ZUZIbnRKRmhUd2V0RXhWeFFjd3drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC83MGU5NjQtNjAxZS00ZjRiLTkxMWUt
NmUzYTdkOTY5YTQwLzEvNU9Jdjl5ZUZIbnRKRmhUd2V0RXhWeFFjd3drLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC83MGU5NjQtNjAxZS00ZjRiLTkxMWUtNmUzYTdkOTY5YTQw
LzEvNU9Jdjl5ZUZIbnRKRmhUd2V0RXhWeFFjd3drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWuO9z91L
CnIeuwsQ7EL8efgO5UNqKg8rN+jNzApBjZTHsjJAFe+hvXGah8efktLGCFVnauov
MtN1oNX3HqqEZHoGeRmtCUu9ZOMoZ8eDkTnU6N11qZ5WY5ntif7St43umdvvwgd2
x0Ff98fqXeGvBBjStk+CY56C7lCQRaLQdjMyRsNW+Siu/xJb05hD9ADqVYfMQR52
DzOlvDvyKgwxcawo6E5Danhn/S13ZVYfzOKR9njnSEExmeIBOWUNhmWVqve6HdOA
fWxNzs7zEDcBvFz5/RGWrbkS6yI0Uel670JH6/9okDd4dKG9ztgFR7huPT0ceBOz
iYh87ULNWWQ4Jw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:55 2025 by rpki-client