Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
File: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft (raw, json)
Hash identifier: m0McpvUof+piNXimztEUjTQTypodk2tCH4khAOHT6vg=
Subject key identifier: E5:D5:1F:A3:A6:E7:00:3D:DA:C2:5E:FA:6C:D6:65:58:0A:CD:3C:C5
Authority key identifier: DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
Certificate issuer: /CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Certificate serial: 0195E00F6B58268683039FDF6EBF37AC4B23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
Manifest number: 1188
Signing time: Sat 29 Mar 2025 04:01:01 +0000
Manifest this update: Sat 29 Mar 2025 04:01:01 +0000
Manifest next update: Sun 30 Mar 2025 04:01:01 +0000
Files and hashes: 1: 2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl (hash: HkNK0tTe5TgL0eE+jxjRAPFnh8RA+D9SWZ2TCz16U/s=)
2: 4udGWxGR-js2GEwlomwjvclAxHE.roa (hash: VNpxs0Ge8Cse1RtzdBng0WTdx7VQU0TgsR0AE0NC3pA=)
3: H7J8lcwk3WdhuKagL6mXekb371E.roa (hash: 7MQiHES7WHCAfF60We+tu+FGbPelHei3BFiTklBqYfM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:6b:58:26:86:83:03:9f:df:6e:bf:37:ac:4b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da1a521ec13031527d2f2cacfc85eb99e4841256
Validity
Not Before: Mar 29 04:01:01 2025 GMT
Not After : Mar 30 04:01:01 2025 GMT
Subject: CN=e5d51fa3a6e7003ddac25efa6cd665580acd3cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:be:da:39:fd:ca:54:51:a2:6a:3a:50:7a:36:
57:05:ab:3b:40:94:bc:76:95:2e:f8:70:de:b8:9a:
e6:24:32:1c:24:26:56:84:0c:3e:98:75:7d:85:a5:
3d:a0:9f:b5:11:2f:6b:5f:c0:0b:6c:22:24:14:c8:
c2:06:b0:08:14:a8:9f:30:47:2d:3e:75:f7:85:73:
8c:4d:9f:63:15:e7:0d:8e:b8:ba:40:0b:4d:ad:a3:
ff:85:a6:d8:15:0e:5d:40:aa:93:6b:a8:c9:ae:04:
09:ec:d6:11:12:1a:e2:f1:f3:48:cf:11:1c:61:ad:
1e:b2:f6:f8:f8:5f:37:cb:33:79:4a:a8:97:dc:cd:
7c:af:1f:19:dd:f9:15:b1:ef:6f:28:df:70:21:e7:
41:e7:8e:dc:5e:27:51:c9:d5:a1:f0:58:2a:e0:f6:
a4:f8:ce:09:da:05:b8:25:ac:b8:3a:c1:81:ad:95:
b9:54:cc:14:ee:bf:f8:f1:16:01:b8:de:33:91:03:
fc:0a:a9:88:00:e0:80:ae:dc:3e:30:ed:0e:7e:a2:
06:48:38:eb:dc:a6:36:b9:ee:47:b6:75:bb:b9:f7:
be:d6:4c:52:73:9d:ba:29:4b:d1:0f:3d:56:d0:2c:
39:16:d3:de:f0:74:2a:3b:e3:53:ba:60:3c:a7:e8:
73:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D5:1F:A3:A6:E7:00:3D:DA:C2:5E:FA:6C:D6:65:58:0A:CD:3C:C5
X509v3 Authority Key Identifier:
keyid:DA:1A:52:1E:C1:30:31:52:7D:2F:2C:AC:FC:85:EB:99:E4:84:12:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hpSHsEwMVJ9Lyys_IXrmeSEElY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fead16-dd2f-4d66-8503-5d5aec20fc9a/1/2hpSHsEwMVJ9Lyys_IXrmeSEElY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:9f:50:fe:b9:c8:a5:b4:64:2c:b7:f0:e0:f2:00:bc:1d:3f:
6b:ba:0d:89:55:56:05:d5:5e:27:41:07:0a:ee:a6:04:ab:c7:
11:8e:f0:40:17:cc:ea:52:92:7d:6c:01:5e:12:c9:f8:0e:5f:
21:94:9d:ad:33:e8:53:c8:22:94:e6:a9:6d:71:a4:ad:b0:42:
6a:5c:e0:15:77:29:bc:c2:25:ff:5a:0e:73:f0:c2:0f:aa:71:
61:35:8d:2a:8e:b2:8b:e0:e6:7a:94:36:66:ae:a9:90:63:01:
87:e5:49:96:05:28:2f:5b:5c:2f:c9:ff:ce:4e:cc:e1:82:22:
ad:ff:04:59:11:f1:10:fb:2d:8d:3b:fc:3a:4c:8b:ab:cf:ae:
91:49:bc:9f:1f:8c:64:34:3b:f8:cc:a2:83:0a:e1:b0:dc:93:
06:2c:4e:50:4b:fc:59:9f:84:8a:bc:59:7b:7c:19:74:d7:cb:
f0:a9:89:54:82:d7:b4:71:dd:f1:6e:ce:5e:6f:de:cc:7d:dc:
89:b5:e5:00:e6:f6:86:5e:ad:ab:22:b7:e4:7f:31:3e:5c:27:
f9:b2:c2:34:35:f3:cf:ab:09:7b:f3:e5:a9:24:16:55:8a:fc:
d8:ed:86:da:c7:60:8c:af:45:28:4c:06:ee:42:f9:46:19:0e:
68:ea:f9:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgD2tYJoaDA5/fbr83rEsjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMWE1MjFlYzEzMDMxNTI3ZDJmMmNhY2ZjODVlYjk5ZTQ4
NDEyNTYwHhcNMjUwMzI5MDQwMTAxWhcNMjUwMzMwMDQwMTAxWjAzMTEwLwYDVQQD
EyhlNWQ1MWZhM2E2ZTcwMDNkZGFjMjVlZmE2Y2Q2NjU1ODBhY2QzY2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmr7aOf3KVFGiajpQejZXBas7QJS8
dpUu+HDeuJrmJDIcJCZWhAw+mHV9haU9oJ+1ES9rX8ALbCIkFMjCBrAIFKifMEct
PnX3hXOMTZ9jFecNjri6QAtNraP/habYFQ5dQKqTa6jJrgQJ7NYREhri8fNIzxEc
Ya0esvb4+F83yzN5SqiX3M18rx8Z3fkVse9vKN9wIedB547cXidRydWh8Fgq4Pak
+M4J2gW4Jay4OsGBrZW5VMwU7r/48RYBuN4zkQP8CqmIAOCArtw+MO0OfqIGSDjr
3KY2ue5HtnW7ufe+1kxSc526KUvRDz1W0Cw5FtPe8HQqO+NTumA8p+hzBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOXVH6Om5wA92sJe+mzWZVgKzTzFMB8GA1UdIwQY
MBaAFNoaUh7BMDFSfS8srPyF65nkhBJWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmhwU0hzRXdNVko5THl5c19JWHJtZVNFRWxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mZWFkMTYtZGQyZi00ZDY2LTg1MDMt
NWQ1YWVjMjBmYzlhLzEvMmhwU0hzRXdNVko5THl5c19JWHJtZVNFRWxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9mZWFkMTYtZGQyZi00ZDY2LTg1MDMtNWQ1YWVjMjBmYzlh
LzEvMmhwU0hzRXdNVko5THl5c19JWHJtZVNFRWxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeJ9Q/rnI
pbRkLLfw4PIAvB0/a7oNiVVWBdVeJ0EHCu6mBKvHEY7wQBfM6lKSfWwBXhLJ+A5f
IZSdrTPoU8gilOapbXGkrbBCalzgFXcpvMIl/1oOc/DCD6pxYTWNKo6yi+DmepQ2
Zq6pkGMBh+VJlgUoL1tcL8n/zk7M4YIirf8EWRHxEPstjTv8OkyLq8+ukUm8nx+M
ZDQ7+MyigwrhsNyTBixOUEv8WZ+EirxZe3wZdNfL8KmJVILXtHHd8W7OXm/ezH3c
ibXlAOb2hl6tqyK35H8xPlwn+bLCNDXzz6sJe/PlqSQWVYr82O2G2sdgjK9FKEwG
7kL5RhkOaOr5tg==
-----END CERTIFICATE-----
Generated at Wed Apr 9 13:28:21 2025 by rpki-client