Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/8b43b3-03eb-4867-a60e-d7d9533287c5/1/5ecAZeAJ3tlYVugKBTsuntzv-4w.mft
File: 5ecAZeAJ3tlYVugKBTsuntzv-4w.mft (raw, json)
Hash identifier: 5mTDt8OIqZno6Waz1pCQjAxnBF64F2/LbokPpg+YpWA=
Subject key identifier: F3:3D:4C:B8:7C:A1:7E:66:3D:75:C0:45:67:CB:4C:4E:A8:0B:FD:FA
Authority key identifier: E5:E7:00:65:E0:09:DE:D9:58:56:E8:0A:05:3B:2E:9E:DC:EF:FB:8C
Certificate issuer: /CN=e5e70065e009ded95856e80a053b2e9edceffb8c
Certificate serial: 018EFE2BDFFD774DFEE7BE798EC4C38A0A53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ecAZeAJ3tlYVugKBTsuntzv-4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/8b43b3-03eb-4867-a60e-d7d9533287c5/1/5ecAZeAJ3tlYVugKBTsuntzv-4w.mft
Manifest number: 08C0
Signing time: Sun 21 Apr 2024 01:01:11 +0000
Manifest this update: Sun 21 Apr 2024 01:01:11 +0000
Manifest next update: Mon 22 Apr 2024 01:01:11 +0000
Files and hashes: 1: 5ecAZeAJ3tlYVugKBTsuntzv-4w.crl (hash: S2gqLH16TbUe6O4kSidbwoWWKZdfllbsg7Gz36aPGS4=)
2: Lx_4XFDsplQfOXQQGVipgwTfSms.roa (hash: OD9c/vjTLTeMTjWpAoQEiZoFFds5ic3aO4dEsnWENEA=)
3: i93dNDTZUmndF-WrTwIxtqLHx3Y.roa (hash: yCUwHnvF0Emqy9YYjXnuZJx5Irogsp7OFUEG8TMqtYU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:fe:2b:df:fd:77:4d:fe:e7:be:79:8e:c4:c3:8a:0a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e70065e009ded95856e80a053b2e9edceffb8c
Validity
Not Before: Apr 21 01:01:11 2024 GMT
Not After : Apr 22 01:01:11 2024 GMT
Subject: CN=f33d4cb87ca17e663d75c04567cb4c4ea80bfdfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ea:f9:53:c2:61:bd:09:4f:42:bc:0e:25:07:
f6:7e:fd:98:94:2a:61:55:d4:e4:37:f5:9a:79:11:
8e:5a:45:da:0f:eb:ac:4a:f1:bf:4e:52:6f:25:31:
6b:c5:52:70:a8:cb:8b:bf:44:35:8e:7e:e6:57:20:
e7:8b:94:c9:61:cf:ca:84:d9:ca:d5:82:e5:1d:50:
f4:e6:01:d6:a7:27:d6:85:f0:00:7d:66:ba:28:d8:
fa:b8:9c:86:61:56:da:62:5b:18:30:9e:2e:b2:55:
fa:f4:3a:3c:b3:f4:6a:72:42:7a:15:a4:48:15:7a:
42:59:7d:dd:e5:08:15:af:45:9e:53:65:b9:3f:d6:
32:03:60:9d:6a:b9:09:b1:82:d0:d7:9a:d6:7e:6e:
79:64:f4:52:65:05:43:67:8f:ec:e6:ec:9d:f0:15:
61:d1:c7:85:ee:92:bb:03:cd:b0:18:63:6e:a6:0c:
70:6f:e7:37:f5:05:81:cd:d7:a9:8d:17:8b:63:a3:
6a:f8:0e:b1:f8:dc:a6:33:dd:03:ff:0f:29:d9:64:
2f:3e:c9:30:ee:1c:40:07:41:8a:7f:a3:26:93:10:
0b:24:eb:4e:d3:d7:1c:97:03:9c:7f:70:8f:f4:37:
56:8d:ab:fd:e5:ec:2e:8a:1f:f4:0f:06:db:c1:71:
ee:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3D:4C:B8:7C:A1:7E:66:3D:75:C0:45:67:CB:4C:4E:A8:0B:FD:FA
X509v3 Authority Key Identifier:
keyid:E5:E7:00:65:E0:09:DE:D9:58:56:E8:0A:05:3B:2E:9E:DC:EF:FB:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ecAZeAJ3tlYVugKBTsuntzv-4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8b43b3-03eb-4867-a60e-d7d9533287c5/1/5ecAZeAJ3tlYVugKBTsuntzv-4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8b43b3-03eb-4867-a60e-d7d9533287c5/1/5ecAZeAJ3tlYVugKBTsuntzv-4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:3d:fa:88:68:52:ef:26:03:f3:1a:b0:52:3b:66:db:67:4f:
b9:f5:be:93:3d:80:df:d8:76:c9:34:45:5d:aa:38:16:26:4e:
95:b6:ce:bb:3c:06:26:f2:a5:ae:f9:09:e8:02:5a:3a:83:f4:
bc:ad:df:3a:7c:94:d1:dc:f1:86:21:1b:10:38:01:90:8f:cf:
f1:31:28:48:bf:9e:e5:7e:c3:a7:3a:0b:c7:e3:25:98:b1:2d:
00:8e:9f:a6:55:23:64:61:6e:c0:b4:c4:b0:72:92:03:b3:19:
e5:bb:dd:0a:79:dc:84:35:ec:cc:9f:c5:bc:cd:02:80:9b:92:
a0:1a:f1:7a:a4:ce:26:3a:cf:82:7e:ec:82:d4:3d:77:12:1b:
ed:d3:df:57:eb:bb:96:bc:df:ce:57:cb:d0:c4:28:6f:6e:2b:
f1:d9:15:ac:cc:44:ac:a3:8c:cd:70:80:f9:b3:71:e8:2a:ce:
ea:fd:01:bb:62:8a:7c:e8:f1:57:38:db:92:2f:c5:75:67:01:
d6:b2:d8:c2:13:25:9d:69:84:e0:7e:af:01:63:6a:3a:a6:8d:
0f:f2:c7:86:7f:9a:5d:3e:10:c9:9b:fe:aa:f1:2f:71:1c:db:
b4:f0:df:20:d5:48:e8:b5:19:33:65:24:66:2e:74:74:77:ac:
bb:81:11:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY7+K9/9d03+5755jsTDigpTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZTcwMDY1ZTAwOWRlZDk1ODU2ZTgwYTA1M2IyZTllZGNl
ZmZiOGMwHhcNMjQwNDIxMDEwMTExWhcNMjQwNDIyMDEwMTExWjAzMTEwLwYDVQQD
EyhmMzNkNGNiODdjYTE3ZTY2M2Q3NWMwNDU2N2NiNGM0ZWE4MGJmZGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiur5U8JhvQlPQrwOJQf2fv2YlCph
VdTkN/WaeRGOWkXaD+usSvG/TlJvJTFrxVJwqMuLv0Q1jn7mVyDni5TJYc/KhNnK
1YLlHVD05gHWpyfWhfAAfWa6KNj6uJyGYVbaYlsYMJ4uslX69Do8s/RqckJ6FaRI
FXpCWX3d5QgVr0WeU2W5P9YyA2CdarkJsYLQ15rWfm55ZPRSZQVDZ4/s5uyd8BVh
0ceF7pK7A82wGGNupgxwb+c39QWBzdepjReLY6Nq+A6x+NymM90D/w8p2WQvPskw
7hxAB0GKf6MmkxALJOtO09cclwOcf3CP9DdWjav95ewuih/0DwbbwXHuwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPM9TLh8oX5mPXXARWfLTE6oC/36MB8GA1UdIwQY
MBaAFOXnAGXgCd7ZWFboCgU7Lp7c7/uMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWVjQVplQUozdGxZVnVnS0JUc3VudHp2LTR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84YjQzYjMtMDNlYi00ODY3LWE2MGUt
ZDdkOTUzMzI4N2M1LzEvNWVjQVplQUozdGxZVnVnS0JUc3VudHp2LTR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS84YjQzYjMtMDNlYi00ODY3LWE2MGUtZDdkOTUzMzI4N2M1
LzEvNWVjQVplQUozdGxZVnVnS0JUc3VudHp2LTR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADD36iGhS
7yYD8xqwUjtm22dPufW+kz2A39h2yTRFXao4FiZOlbbOuzwGJvKlrvkJ6AJaOoP0
vK3fOnyU0dzxhiEbEDgBkI/P8TEoSL+e5X7DpzoLx+MlmLEtAI6fplUjZGFuwLTE
sHKSA7MZ5bvdCnnchDXszJ/FvM0CgJuSoBrxeqTOJjrPgn7sgtQ9dxIb7dPfV+u7
lrzfzlfL0MQob24r8dkVrMxErKOMzXCA+bNx6CrO6v0Bu2KKfOjxVzjbki/FdWcB
1rLYwhMlnWmE4H6vAWNqOqaND/LHhn+aXT4QyZv+qvEvcRzbtPDfINVI6LUZM2Uk
Zi50dHesu4ERiA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:51:52 2025 by rpki-client