Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b9e6d5-a045-4438-bcaa-9d94fe97f125/1/EXa5JJcZYIXW-71fHJkpzyuCMKg.mft
File: EXa5JJcZYIXW-71fHJkpzyuCMKg.mft (raw, json)
Hash identifier: P56lPLpUiavYCCUZkYaN5OwLto5NmzveODayy081yxs=
Subject key identifier: 5E:EF:DC:35:7B:2D:B8:F5:4D:76:64:0B:33:45:E5:05:B6:84:FE:22
Authority key identifier: 11:76:B9:24:97:19:60:85:D6:FB:BD:5F:1C:99:29:CF:2B:82:30:A8
Certificate issuer: /CN=1176b92497196085d6fbbd5f1c9929cf2b8230a8
Certificate serial: 0191B5D3F34C39BD0C5540ACC678FF6257DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXa5JJcZYIXW-71fHJkpzyuCMKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b9e6d5-a045-4438-bcaa-9d94fe97f125/1/EXa5JJcZYIXW-71fHJkpzyuCMKg.mft
Manifest number: 1296
Signing time: Tue 03 Sep 2024 03:00:52 +0000
Manifest this update: Tue 03 Sep 2024 03:00:52 +0000
Manifest next update: Wed 04 Sep 2024 03:00:52 +0000
Files and hashes: 1: EXa5JJcZYIXW-71fHJkpzyuCMKg.crl (hash: Ddo9ylKL+9z4q1yNVIKjgPQbvmhiiAv5EORM/pygvYI=)
2: UApIjDVbl7LGmffFEHba-3Suiwo.roa (hash: f6YFpxfAgDD9hKvi8ZqGTV20e7r8JkVFOP1LBNxQzKk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b5:d3:f3:4c:39:bd:0c:55:40:ac:c6:78:ff:62:57:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1176b92497196085d6fbbd5f1c9929cf2b8230a8
Validity
Not Before: Sep 3 03:00:52 2024 GMT
Not After : Sep 4 03:00:52 2024 GMT
Subject: CN=5eefdc357b2db8f54d76640b3345e505b684fe22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c5:1c:6d:4c:92:d5:2f:42:f8:35:a5:d9:f8:
71:d5:34:36:c4:25:75:12:92:1b:26:2a:be:e2:d0:
08:0f:e4:70:a4:f5:37:bc:7a:6c:6a:72:7d:77:86:
ba:b3:b0:7f:b2:d2:5b:ce:82:77:72:a5:4c:9e:9a:
b8:97:2b:dc:e6:df:12:9b:c4:03:1d:a8:b5:48:77:
0e:68:f2:a1:4e:ba:ce:59:9d:09:13:81:c4:59:0a:
fe:91:c0:dd:11:3a:d3:29:15:60:0e:21:f7:b9:51:
6a:f1:98:6b:1d:25:29:c4:9f:61:af:b5:1c:80:43:
3a:3e:08:ca:c7:e0:c3:c4:d7:0f:ab:f0:95:dc:88:
0e:2f:34:2e:17:21:4d:fb:1d:0e:51:52:8e:83:fb:
cc:4a:00:e7:4d:d2:c7:2b:a2:a0:e1:ce:cd:e7:1b:
f1:04:20:fb:a6:1e:91:ff:40:9e:79:68:5b:a6:cd:
c0:09:1d:e3:87:e0:04:77:c8:56:5c:15:02:62:d5:
58:d6:52:6d:f6:5f:3d:a6:fe:a7:10:a4:31:38:de:
77:c3:ed:69:a2:f6:57:49:12:0f:14:52:d5:f5:3c:
7a:59:21:2e:dc:53:3c:3c:01:5b:70:de:a1:ec:17:
51:d2:8e:e8:81:ee:f3:06:3d:d0:eb:49:45:e6:5f:
84:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:EF:DC:35:7B:2D:B8:F5:4D:76:64:0B:33:45:E5:05:B6:84:FE:22
X509v3 Authority Key Identifier:
keyid:11:76:B9:24:97:19:60:85:D6:FB:BD:5F:1C:99:29:CF:2B:82:30:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXa5JJcZYIXW-71fHJkpzyuCMKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9e6d5-a045-4438-bcaa-9d94fe97f125/1/EXa5JJcZYIXW-71fHJkpzyuCMKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9e6d5-a045-4438-bcaa-9d94fe97f125/1/EXa5JJcZYIXW-71fHJkpzyuCMKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f5:cc:dd:3d:ad:1e:63:fb:4f:b1:6b:56:44:4f:c3:00:e0:
91:43:b2:73:b9:b0:f4:f5:65:fd:02:59:2e:ff:df:85:a8:05:
87:3b:b6:2b:e5:94:8d:e8:92:08:10:85:82:69:a9:28:03:bf:
23:db:47:88:5c:e5:e2:09:1b:35:dd:fc:b0:cb:05:60:e8:71:
b2:b0:c6:e7:29:65:e2:1d:74:f6:7b:6a:ad:f1:bf:03:18:4f:
ee:b4:bc:90:80:c2:f7:d3:47:52:0e:86:6a:9f:69:8a:d4:1e:
33:e7:03:1c:69:88:d6:39:77:b4:87:f2:0a:1e:49:8c:15:bd:
5b:59:4c:4a:cb:0d:57:71:a9:21:94:9c:03:02:2b:ad:da:ed:
9c:8b:fa:1a:17:0c:57:48:26:23:02:a8:fb:ce:06:e6:60:69:
a1:d8:e1:6e:55:7b:3e:2d:f8:14:9f:7d:a0:95:9e:da:ff:2d:
05:d8:cd:dc:5e:69:26:cf:5f:77:d6:29:23:8a:74:dd:2f:c6:
aa:cd:1a:8e:78:f0:9f:44:0f:06:65:05:99:d3:83:8e:07:9b:
59:94:b5:f4:c6:9b:3e:3d:91:7f:12:4b:2c:e3:ca:03:92:04:
99:64:fd:bc:15:98:50:aa:44:e2:09:86:b3:f4:03:9f:fe:4d:
b1:95:17:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZG10/NMOb0MVUCsxnj/YlfaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExNzZiOTI0OTcxOTYwODVkNmZiYmQ1ZjFjOTkyOWNmMmI4
MjMwYTgwHhcNMjQwOTAzMDMwMDUyWhcNMjQwOTA0MDMwMDUyWjAzMTEwLwYDVQQD
Eyg1ZWVmZGMzNTdiMmRiOGY1NGQ3NjY0MGIzMzQ1ZTUwNWI2ODRmZTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsUcbUyS1S9C+DWl2fhx1TQ2xCV1
EpIbJiq+4tAID+RwpPU3vHpsanJ9d4a6s7B/stJbzoJ3cqVMnpq4lyvc5t8Sm8QD
Hai1SHcOaPKhTrrOWZ0JE4HEWQr+kcDdETrTKRVgDiH3uVFq8ZhrHSUpxJ9hr7Uc
gEM6PgjKx+DDxNcPq/CV3IgOLzQuFyFN+x0OUVKOg/vMSgDnTdLHK6Kg4c7N5xvx
BCD7ph6R/0CeeWhbps3ACR3jh+AEd8hWXBUCYtVY1lJt9l89pv6nEKQxON53w+1p
ovZXSRIPFFLV9Tx6WSEu3FM8PAFbcN6h7BdR0o7oge7zBj3Q60lF5l+E1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF7v3DV7Lbj1TXZkCzNF5QW2hP4iMB8GA1UdIwQY
MBaAFBF2uSSXGWCF1vu9XxyZKc8rgjCoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVhhNUpKY1pZSVhXLTcxZkhKa3B6eXVDTUtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9iOWU2ZDUtYTA0NS00NDM4LWJjYWEt
OWQ5NGZlOTdmMTI1LzEvRVhhNUpKY1pZSVhXLTcxZkhKa3B6eXVDTUtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9iOWU2ZDUtYTA0NS00NDM4LWJjYWEtOWQ5NGZlOTdmMTI1
LzEvRVhhNUpKY1pZSVhXLTcxZkhKa3B6eXVDTUtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWvXM3T2t
HmP7T7FrVkRPwwDgkUOyc7mw9PVl/QJZLv/fhagFhzu2K+WUjeiSCBCFgmmpKAO/
I9tHiFzl4gkbNd38sMsFYOhxsrDG5yll4h109ntqrfG/AxhP7rS8kIDC99NHUg6G
ap9pitQeM+cDHGmI1jl3tIfyCh5JjBW9W1lMSssNV3GpIZScAwIrrdrtnIv6GhcM
V0gmIwKo+84G5mBpodjhblV7Pi34FJ99oJWe2v8tBdjN3F5pJs9fd9YpI4p03S/G
qs0ajnjwn0QPBmUFmdODjgebWZS19MabPj2RfxJLLOPKA5IEmWT9vBWYUKpE4gmG
s/QDn/5NsZUXzA==
-----END CERTIFICATE-----
Generated at Wed May 7 02:24:22 2025 by rpki-client