Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/524196-58f3-4f04-af69-874745303f6b/1/K5pG3oThSOiyoWk5opXFTDOoAXg.mft
File: K5pG3oThSOiyoWk5opXFTDOoAXg.mft (raw, json)
Hash identifier: 2VvCa5o76TSax47HCQ9btNf3ttTH8E5RXBIb1pTdHRw=
Subject key identifier: 5D:A0:85:F5:5B:4A:81:44:BB:84:2F:96:2B:C1:CA:8C:84:9E:E0:29
Authority key identifier: 2B:9A:46:DE:84:E1:48:E8:B2:A1:69:39:A2:95:C5:4C:33:A8:01:78
Certificate issuer: /CN=2b9a46de84e148e8b2a16939a295c54c33a80178
Certificate serial: 019070BE1BB3AB188E355374120B3F31964E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5pG3oThSOiyoWk5opXFTDOoAXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/524196-58f3-4f04-af69-874745303f6b/1/K5pG3oThSOiyoWk5opXFTDOoAXg.mft
Manifest number: 17
Signing time: Tue 02 Jul 2024 00:00:25 +0000
Manifest this update: Tue 02 Jul 2024 00:00:25 +0000
Manifest next update: Wed 03 Jul 2024 00:00:25 +0000
Files and hashes: 1: E7ZrwBXYPuyQ0H1t1HMc5qKKvBc.roa (hash: l1uY0x0DWQHRL7N7Ie2DIdGtlne7g+NiTYjiC3E+jjc=)
2: K5pG3oThSOiyoWk5opXFTDOoAXg.crl (hash: 4pXBy0nARS14t7chqLfG33cWLHWe+sZV4fWTbYiq2WY=)
3: SdaFk0i9oaACqCFG8FwyvK3jONA.roa (hash: mJwQw6cB9ENK8FtIb9A/q4I0gNZt3odByHKhh1kNEqs=)
4: pSGjeRBN4sSL1uoHbHUWuvJi-bg.roa (hash: FIUW2Q8jHbnxVsMOld8oWfWeIQhB40R5yUEQ+bItsAo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:70:be:1b:b3:ab:18:8e:35:53:74:12:0b:3f:31:96:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9a46de84e148e8b2a16939a295c54c33a80178
Validity
Not Before: Jul 2 00:00:25 2024 GMT
Not After : Jul 3 00:00:25 2024 GMT
Subject: CN=5da085f55b4a8144bb842f962bc1ca8c849ee029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:36:4e:c7:2c:25:ad:2e:fa:81:96:3a:e3:e0:
ec:2a:50:bc:5b:94:64:1c:df:9f:bb:a5:50:68:b0:
4b:4a:8f:dc:64:02:3e:ea:a2:8f:af:7e:35:04:b4:
ff:10:04:dd:62:f3:42:5e:61:0f:81:8a:9a:8b:e7:
3e:f5:da:4e:09:2d:47:b4:a6:c2:5e:41:b8:98:9b:
42:f1:67:c0:b7:00:f3:eb:63:29:62:39:97:0e:b9:
57:a3:04:c4:25:be:db:94:8e:91:94:6d:f0:9b:d0:
a3:44:47:ee:0f:52:4c:08:54:eb:9f:03:e1:a5:37:
c6:1d:48:76:d7:85:e8:47:a7:97:3f:d6:86:1e:c0:
37:3b:56:98:a6:9e:cf:46:97:32:aa:cf:32:c5:96:
20:24:28:1f:d2:b9:38:4c:30:df:fe:72:56:5f:be:
00:b6:8f:be:9f:07:6f:75:9d:45:4d:67:d2:71:96:
3d:0c:86:d8:9a:fe:90:61:9b:19:40:b2:e6:29:42:
c3:6c:6c:b8:a4:10:2e:2d:18:12:dd:b0:a5:6f:34:
ba:94:ff:51:94:dc:68:51:3d:6f:61:3d:71:73:6c:
e4:99:a7:26:c1:5e:9c:c3:d9:73:17:80:6c:45:a6:
05:f6:48:6b:6d:48:c7:32:50:ca:63:1e:a9:23:6b:
68:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A0:85:F5:5B:4A:81:44:BB:84:2F:96:2B:C1:CA:8C:84:9E:E0:29
X509v3 Authority Key Identifier:
keyid:2B:9A:46:DE:84:E1:48:E8:B2:A1:69:39:A2:95:C5:4C:33:A8:01:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5pG3oThSOiyoWk5opXFTDOoAXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/524196-58f3-4f04-af69-874745303f6b/1/K5pG3oThSOiyoWk5opXFTDOoAXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/524196-58f3-4f04-af69-874745303f6b/1/K5pG3oThSOiyoWk5opXFTDOoAXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:24:83:c9:ad:fd:db:9f:2c:cf:5a:cf:d6:e8:2a:9a:84:da:
50:2a:e2:56:2a:40:3a:b2:f5:ef:93:34:d4:db:b0:8a:75:5c:
f1:20:b4:b0:de:d0:b6:e6:2d:b3:f8:a0:04:ba:95:bd:21:7f:
f5:30:ae:06:a0:e6:9c:2f:4e:9a:2c:c3:60:ed:5d:b6:ba:7d:
97:f5:8d:94:56:96:0d:a3:90:ae:19:cb:ca:58:7a:5d:67:f0:
c2:fb:ea:fd:77:ad:08:bc:f3:0f:86:ce:1d:ed:cf:42:b0:c6:
18:59:ca:18:e8:1c:dc:5b:57:fa:c0:ca:e1:bc:93:8b:51:53:
ed:73:d4:a5:ab:04:1b:82:ba:c2:8f:fc:45:5a:e0:a6:a5:0b:
70:4c:a8:0b:77:81:88:01:89:8b:8c:1d:27:01:2f:ec:9b:da:
50:19:38:ab:c1:f6:44:88:a5:dd:45:47:0a:4e:18:f8:8d:2e:
5b:cd:d8:29:4e:6a:2e:12:ba:ae:f8:03:3b:13:83:29:51:c5:
91:0a:5e:70:a7:cd:ab:b4:9d:73:b5:90:80:85:7a:ad:92:25:
49:fc:46:15:f4:d4:4b:df:eb:6d:2d:3e:98:e1:c8:67:db:d1:
06:a9:9b:28:6c:93:57:32:c3:0c:6c:b8:9d:d1:9d:90:84:77:
49:db:93:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBwvhuzqxiONVN0Egs/MZZOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiOWE0NmRlODRlMTQ4ZThiMmExNjkzOWEyOTVjNTRjMzNh
ODAxNzgwHhcNMjQwNzAyMDAwMDI1WhcNMjQwNzAzMDAwMDI1WjAzMTEwLwYDVQQD
Eyg1ZGEwODVmNTViNGE4MTQ0YmI4NDJmOTYyYmMxY2E4Yzg0OWVlMDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzZOxywlrS76gZY64+DsKlC8W5Rk
HN+fu6VQaLBLSo/cZAI+6qKPr341BLT/EATdYvNCXmEPgYqai+c+9dpOCS1HtKbC
XkG4mJtC8WfAtwDz62MpYjmXDrlXowTEJb7blI6RlG3wm9CjREfuD1JMCFTrnwPh
pTfGHUh214XoR6eXP9aGHsA3O1aYpp7PRpcyqs8yxZYgJCgf0rk4TDDf/nJWX74A
to++nwdvdZ1FTWfScZY9DIbYmv6QYZsZQLLmKULDbGy4pBAuLRgS3bClbzS6lP9R
lNxoUT1vYT1xc2zkmacmwV6cw9lzF4BsRaYF9khrbUjHMlDKYx6pI2toKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2ghfVbSoFEu4QvlivByoyEnuApMB8GA1UdIwQY
MBaAFCuaRt6E4UjosqFpOaKVxUwzqAF4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzVwRzNvVGhTT2l5b1drNW9wWEZURE9vQVhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81MjQxOTYtNThmMy00ZjA0LWFmNjkt
ODc0NzQ1MzAzZjZiLzEvSzVwRzNvVGhTT2l5b1drNW9wWEZURE9vQVhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS81MjQxOTYtNThmMy00ZjA0LWFmNjktODc0NzQ1MzAzZjZi
LzEvSzVwRzNvVGhTT2l5b1drNW9wWEZURE9vQVhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADiSDya39
258sz1rP1ugqmoTaUCriVipAOrL175M01NuwinVc8SC0sN7QtuYts/igBLqVvSF/
9TCuBqDmnC9OmizDYO1dtrp9l/WNlFaWDaOQrhnLylh6XWfwwvvq/XetCLzzD4bO
He3PQrDGGFnKGOgc3FtX+sDK4byTi1FT7XPUpasEG4K6wo/8RVrgpqULcEyoC3eB
iAGJi4wdJwEv7JvaUBk4q8H2RIil3UVHCk4Y+I0uW83YKU5qLhK6rvgDOxODKVHF
kQpecKfNq7Sdc7WQgIV6rZIlSfxGFfTUS9/rbS0+mOHIZ9vRBqmbKGyTVzLDDGy4
ndGdkIR3SduTJA==
-----END CERTIFICATE-----
Generated at Sun May 11 06:38:46 2025 by rpki-client