Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/6fe12c-cac3-475b-9299-e478baf950db/1/5sLVELjwVQenEULr-yOaUbJxepE.mft
File: 5sLVELjwVQenEULr-yOaUbJxepE.mft (raw, json)
Hash identifier: 1bhp0z1Fd10eZKCMrAZgLV8gmJQyC9BXNXayZRI2fgQ=
Subject key identifier: 87:CA:C9:79:09:32:AE:E0:F8:14:0D:AD:54:AF:C5:A7:E1:4D:F3:E4
Authority key identifier: E6:C2:D5:10:B8:F0:55:07:A7:11:42:EB:FB:23:9A:51:B2:71:7A:91
Certificate issuer: /CN=e6c2d510b8f05507a71142ebfb239a51b2717a91
Certificate serial: 018EBFBAB352087BFCB38ECCEFD9BC7685C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5sLVELjwVQenEULr-yOaUbJxepE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/6fe12c-cac3-475b-9299-e478baf950db/1/5sLVELjwVQenEULr-yOaUbJxepE.mft
Manifest number: 06D7
Signing time: Mon 08 Apr 2024 22:01:07 +0000
Manifest this update: Mon 08 Apr 2024 22:01:07 +0000
Manifest next update: Tue 09 Apr 2024 22:01:07 +0000
Files and hashes: 1: 5sLVELjwVQenEULr-yOaUbJxepE.crl (hash: 3+j8yryzA7iqj27IzpgTeqZp+weimRBXCiaqHOl/dqY=)
2: SuXzL3qyYLOHcKGh2kXFMMG-J3w.roa (hash: FK6CABNehcHtxzrNzVQDZThFJbqDZEcPGekrT+FQ3r8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bf:ba:b3:52:08:7b:fc:b3:8e:cc:ef:d9:bc:76:85:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c2d510b8f05507a71142ebfb239a51b2717a91
Validity
Not Before: Apr 8 22:01:07 2024 GMT
Not After : Apr 9 22:01:07 2024 GMT
Subject: CN=87cac9790932aee0f8140dad54afc5a7e14df3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d5:c3:f2:47:2b:8f:86:32:a8:d7:f6:95:c6:
76:8c:b8:96:9a:d5:9b:70:10:13:20:d6:6c:43:a5:
38:0b:fd:85:05:cf:4b:63:8c:09:99:da:2f:c9:0e:
e5:70:fc:1c:03:15:0b:fc:0e:0e:d8:ba:d1:b8:15:
86:66:c9:0d:9b:a3:0f:af:01:cb:d1:8b:13:ce:37:
81:aa:48:e8:2f:06:f4:9a:c4:7a:51:62:ff:7b:90:
d9:1f:6f:50:c0:2e:1d:0d:a6:7f:c0:2f:65:13:50:
64:e4:3b:fc:ca:71:a5:3b:5a:91:aa:40:e6:38:f8:
05:89:44:c2:8c:01:0b:d4:59:1a:0e:de:cf:b3:8e:
8e:c8:b2:8e:fa:6e:8a:89:e5:fc:b3:a3:56:49:09:
4d:d0:d1:b4:b1:0b:eb:aa:f7:ac:a7:e2:22:87:c9:
1d:eb:cb:4d:20:1e:61:76:1c:dc:9f:04:1d:69:a3:
a0:b1:86:83:dd:66:a2:5d:05:b0:6f:d3:e5:6e:87:
a6:98:cf:b9:04:55:65:72:6b:3f:de:35:02:df:6a:
56:e7:15:74:56:e0:96:5c:f8:22:fe:14:f2:08:26:
d5:6e:17:25:d0:3c:6d:a2:fd:dc:43:51:cb:02:9d:
f5:6e:2a:0a:c0:99:f3:60:4e:98:cc:9d:f8:46:db:
4d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CA:C9:79:09:32:AE:E0:F8:14:0D:AD:54:AF:C5:A7:E1:4D:F3:E4
X509v3 Authority Key Identifier:
keyid:E6:C2:D5:10:B8:F0:55:07:A7:11:42:EB:FB:23:9A:51:B2:71:7A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sLVELjwVQenEULr-yOaUbJxepE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6fe12c-cac3-475b-9299-e478baf950db/1/5sLVELjwVQenEULr-yOaUbJxepE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6fe12c-cac3-475b-9299-e478baf950db/1/5sLVELjwVQenEULr-yOaUbJxepE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:15:78:7e:1e:1e:ad:ab:fb:1b:aa:2e:ba:24:7c:c6:d1:28:
2b:3f:b5:4c:75:6a:65:68:82:2a:a4:27:5e:a7:b3:08:26:4e:
3a:fb:5e:3c:35:13:26:b7:47:32:a2:75:3d:ab:cc:44:77:44:
0d:30:6c:ee:08:6d:31:f1:13:80:df:08:0b:ac:e1:4a:91:37:
85:d3:7e:f0:b5:83:3e:a5:0f:7f:48:b2:7c:e2:ea:3e:d6:64:
22:d3:e0:32:65:2e:79:51:a9:ac:c5:42:73:68:b5:81:a6:73:
60:14:d8:86:ba:86:52:3b:6a:7f:67:96:da:26:98:7c:84:5b:
a3:93:40:85:42:65:08:08:2d:af:32:ae:4a:47:7c:03:03:e7:
e7:25:51:3a:13:bf:aa:7d:b5:f7:af:5d:8f:ab:39:17:cf:33:
b1:4a:22:a9:13:73:b3:44:d9:e5:a6:22:70:35:d9:f6:93:f6:
87:da:20:3a:25:56:94:7d:c3:ba:49:d8:1b:03:85:c2:f4:32:
c3:47:6a:88:4a:f6:de:7d:c7:7a:95:b5:09:2f:d3:3c:48:5b:
4e:de:ee:11:15:80:e7:27:52:18:19:40:29:86:02:3a:97:42:
60:b6:31:03:a1:e2:71:c3:a5:5c:20:5b:b0:94:6d:8f:b0:58:
cc:8c:a1:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY6/urNSCHv8s47M79m8doXIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YzJkNTEwYjhmMDU1MDdhNzExNDJlYmZiMjM5YTUxYjI3
MTdhOTEwHhcNMjQwNDA4MjIwMTA3WhcNMjQwNDA5MjIwMTA3WjAzMTEwLwYDVQQD
Eyg4N2NhYzk3OTA5MzJhZWUwZjgxNDBkYWQ1NGFmYzVhN2UxNGRmM2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9XD8kcrj4YyqNf2lcZ2jLiWmtWb
cBATINZsQ6U4C/2FBc9LY4wJmdovyQ7lcPwcAxUL/A4O2LrRuBWGZskNm6MPrwHL
0YsTzjeBqkjoLwb0msR6UWL/e5DZH29QwC4dDaZ/wC9lE1Bk5Dv8ynGlO1qRqkDm
OPgFiUTCjAEL1FkaDt7Ps46OyLKO+m6KieX8s6NWSQlN0NG0sQvrqvesp+Iih8kd
68tNIB5hdhzcnwQdaaOgsYaD3WaiXQWwb9PlboemmM+5BFVlcms/3jUC32pW5xV0
VuCWXPgi/hTyCCbVbhcl0Dxtov3cQ1HLAp31bioKwJnzYE6YzJ34RttNRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfKyXkJMq7g+BQNrVSvxafhTfPkMB8GA1UdIwQY
MBaAFObC1RC48FUHpxFC6/sjmlGycXqRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXNMVkVMandWUWVuRVVMci15T2FVYkp4ZXBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS82ZmUxMmMtY2FjMy00NzViLTkyOTkt
ZTQ3OGJhZjk1MGRiLzEvNXNMVkVMandWUWVuRVVMci15T2FVYkp4ZXBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS82ZmUxMmMtY2FjMy00NzViLTkyOTktZTQ3OGJhZjk1MGRi
LzEvNXNMVkVMandWUWVuRVVMci15T2FVYkp4ZXBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADhV4fh4e
rav7G6ouuiR8xtEoKz+1THVqZWiCKqQnXqezCCZOOvtePDUTJrdHMqJ1PavMRHdE
DTBs7ghtMfETgN8IC6zhSpE3hdN+8LWDPqUPf0iyfOLqPtZkItPgMmUueVGprMVC
c2i1gaZzYBTYhrqGUjtqf2eW2iaYfIRbo5NAhUJlCAgtrzKuSkd8AwPn5yVROhO/
qn21969dj6s5F88zsUoiqRNzs0TZ5aYicDXZ9pP2h9ogOiVWlH3DuknYGwOFwvQy
w0dqiEr23n3HepW1CS/TPEhbTt7uERWA5ydSGBlAKYYCOpdCYLYxA6HiccOlXCBb
sJRtj7BYzIyh0Q==
-----END CERTIFICATE-----
Generated at Wed Apr 16 04:46:11 2025 by rpki-client