Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
File: 5OF-B7BNx2ydbJH6_C1ahALGS44.mft (raw, json)
Hash identifier: U4sFFZWFkaLIeFXG6axjdJQbtmZeVOsDZLDeHx6oC1Q=
Subject key identifier: B3:A0:2F:40:91:F6:60:68:B5:A6:2B:3F:A1:8E:69:4F:3A:22:33:82
Authority key identifier: E4:E1:7E:07:B0:4D:C7:6C:9D:6C:91:FA:FC:2D:5A:84:02:C6:4B:8E
Certificate issuer: /CN=e4e17e07b04dc76c9d6c91fafc2d5a8402c64b8e
Certificate serial: 0195E07D6D7178C77AC917BB54C8D9DEF338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
Manifest number: 124A
Signing time: Sat 29 Mar 2025 06:01:11 +0000
Manifest this update: Sat 29 Mar 2025 06:01:11 +0000
Manifest next update: Sun 30 Mar 2025 06:01:11 +0000
Files and hashes: 1: 5OF-B7BNx2ydbJH6_C1ahALGS44.crl (hash: KzXM7dzfJ7yedym+rrDcnzL16G7aCtcMClPlY9Yy/PY=)
2: c7QJZpcKw5JtI5FMoVTzm0WUSCk.roa (hash: eFh5B28aZqPEyGFrbmBU9Qj8kztn04oOd68LadOBOHU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:6d:71:78:c7:7a:c9:17:bb:54:c8:d9:de:f3:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4e17e07b04dc76c9d6c91fafc2d5a8402c64b8e
Validity
Not Before: Mar 29 06:01:11 2025 GMT
Not After : Mar 30 06:01:11 2025 GMT
Subject: CN=b3a02f4091f66068b5a62b3fa18e694f3a223382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f9:91:a4:53:b7:04:82:a8:59:38:4d:8c:6e:
7e:31:9e:7c:8c:a3:26:dc:e3:88:e6:cc:d4:a8:17:
4e:48:6a:fd:0f:2d:20:3b:79:8f:72:67:80:a5:6f:
8f:55:9e:2f:80:fd:21:2a:59:01:39:d6:ab:36:00:
5b:15:43:9c:9d:5c:58:d8:42:bd:7e:e6:0c:83:c4:
89:64:2d:f4:40:6f:3c:29:c4:4c:d5:b7:20:e9:ca:
a9:6b:8c:31:09:8c:62:af:33:93:93:03:1e:3c:38:
aa:6d:66:f4:cf:11:8c:6d:4c:8a:78:cd:90:5f:33:
4f:a0:86:b8:b1:c9:d3:62:fd:01:15:dc:ae:d2:62:
24:9b:b0:e2:b2:66:10:cb:65:71:df:19:68:07:4e:
e4:92:61:59:ee:7e:63:e9:06:d6:78:bb:54:5e:d9:
6e:d0:db:df:80:a8:f0:65:6d:e9:2d:90:2a:79:fe:
1d:4d:fa:df:81:f9:02:11:68:9b:c7:0b:50:5b:03:
9b:c4:a4:bd:4d:e5:b9:2f:87:f2:2c:bb:1b:dc:9f:
a3:ac:23:4c:fe:e4:8b:92:c8:df:3d:db:2f:ab:83:
ca:99:0b:f5:a7:47:bf:81:ac:18:16:b2:fc:9e:3a:
6b:cf:06:2b:d3:f6:08:c0:a6:f9:6b:fd:8e:f1:93:
4d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A0:2F:40:91:F6:60:68:B5:A6:2B:3F:A1:8E:69:4F:3A:22:33:82
X509v3 Authority Key Identifier:
keyid:E4:E1:7E:07:B0:4D:C7:6C:9D:6C:91:FA:FC:2D:5A:84:02:C6:4B:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5OF-B7BNx2ydbJH6_C1ahALGS44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/42be5f-2432-4899-a4ff-198adda5a281/1/5OF-B7BNx2ydbJH6_C1ahALGS44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:97:84:2d:aa:78:f3:0f:8e:e7:0c:e2:5d:4c:6a:51:48:da:
f4:c8:ce:22:9d:71:4c:2a:bc:3b:28:3f:46:92:7e:ce:9f:78:
b4:05:e0:4c:18:8a:78:d3:9b:1c:69:db:ff:85:13:18:0e:21:
64:7d:2d:e1:66:79:ca:73:ac:00:b6:16:01:e9:5c:01:f9:b7:
40:de:92:26:10:5c:31:f0:64:0a:ed:67:da:ac:a2:3c:b0:38:
78:a0:fa:b0:da:0a:aa:38:55:f6:fd:3f:93:ad:f9:d2:a8:fa:
39:48:be:04:20:2c:d9:d6:a4:6c:2a:00:4a:bf:fd:a1:a4:97:
9a:ee:90:80:0a:a1:dd:7d:94:e7:ba:fa:26:ba:f3:24:85:fb:
d1:4b:d9:e5:bd:c7:eb:2b:33:66:a6:98:fb:55:c9:4b:4c:64:
4d:8a:11:5a:c0:03:32:a1:48:8d:3e:85:51:e6:2b:ce:5e:99:
56:91:e4:14:b0:d2:f0:ba:c0:7f:ce:2e:85:c0:cc:23:d1:02:
e3:a8:94:67:a4:e1:1a:16:13:3d:a7:57:48:90:c9:57:70:a7:
cf:0e:6a:3f:a5:68:74:cc:fc:1d:30:0d:4d:81:ed:0a:68:8e:
f0:f1:db:48:e4:17:e7:e0:13:fb:e9:5b:a9:a8:fd:ea:08:62:
b8:79:f0:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgfW1xeMd6yRe7VMjZ3vM4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZTE3ZTA3YjA0ZGM3NmM5ZDZjOTFmYWZjMmQ1YTg0MDJj
NjRiOGUwHhcNMjUwMzI5MDYwMTExWhcNMjUwMzMwMDYwMTExWjAzMTEwLwYDVQQD
EyhiM2EwMmY0MDkxZjY2MDY4YjVhNjJiM2ZhMThlNjk0ZjNhMjIzMzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vmRpFO3BIKoWThNjG5+MZ58jKMm
3OOI5szUqBdOSGr9Dy0gO3mPcmeApW+PVZ4vgP0hKlkBOdarNgBbFUOcnVxY2EK9
fuYMg8SJZC30QG88KcRM1bcg6cqpa4wxCYxirzOTkwMePDiqbWb0zxGMbUyKeM2Q
XzNPoIa4scnTYv0BFdyu0mIkm7DismYQy2Vx3xloB07kkmFZ7n5j6QbWeLtUXtlu
0NvfgKjwZW3pLZAqef4dTfrfgfkCEWibxwtQWwObxKS9TeW5L4fyLLsb3J+jrCNM
/uSLksjfPdsvq4PKmQv1p0e/gawYFrL8njprzwYr0/YIwKb5a/2O8ZNN7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLOgL0CR9mBotaYrP6GOaU86IjOCMB8GA1UdIwQY
MBaAFOThfgewTcdsnWyR+vwtWoQCxkuOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU9GLUI3Qk54MnlkYkpINl9DMWFoQUxHUzQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC80MmJlNWYtMjQzMi00ODk5LWE0ZmYt
MTk4YWRkYTVhMjgxLzEvNU9GLUI3Qk54MnlkYkpINl9DMWFoQUxHUzQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC80MmJlNWYtMjQzMi00ODk5LWE0ZmYtMTk4YWRkYTVhMjgx
LzEvNU9GLUI3Qk54MnlkYkpINl9DMWFoQUxHUzQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjZeELap4
8w+O5wziXUxqUUja9MjOIp1xTCq8Oyg/RpJ+zp94tAXgTBiKeNObHGnb/4UTGA4h
ZH0t4WZ5ynOsALYWAelcAfm3QN6SJhBcMfBkCu1n2qyiPLA4eKD6sNoKqjhV9v0/
k6350qj6OUi+BCAs2dakbCoASr/9oaSXmu6QgAqh3X2U57r6JrrzJIX70UvZ5b3H
6yszZqaY+1XJS0xkTYoRWsADMqFIjT6FUeYrzl6ZVpHkFLDS8LrAf84uhcDMI9EC
46iUZ6ThGhYTPadXSJDJV3Cnzw5qP6VodMz8HTANTYHtCmiO8PHbSOQX5+AT++lb
qaj96ghiuHnwSQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:42 2025 by rpki-client