Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
File: r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft (raw, json)
Hash identifier: kEObI87sfHrQXfmZNF6z4v/gLqYnezSdoHlkqksfewY=
Subject key identifier: F9:08:A8:72:C9:E4:8B:3E:9D:E0:D9:E9:2E:E6:32:D3:96:48:CB:49
Authority key identifier: AF:93:10:25:11:E6:60:26:3F:8E:F6:E4:C1:F9:AB:32:39:38:39:B2
Certificate issuer: /CN=af93102511e660263f8ef6e4c1f9ab32393839b2
Certificate serial: 0194BC3CA5E8366D37578D6F20B20876592B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
Manifest number: 0896
Signing time: Fri 31 Jan 2025 12:01:18 +0000
Manifest this update: Fri 31 Jan 2025 12:01:18 +0000
Manifest next update: Sat 01 Feb 2025 12:01:18 +0000
Files and hashes: 1: QyIQhrwBc_E0RzmwfCK0p-xEPL8.roa (hash: KU05TYN4aOywUPeCIgZViB5uKUpefnNLinujip3r7Ws=)
2: r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl (hash: Mu8rBzLCYNJxJ/1cUbVQNB03oRXvPttN0XpFVy2aHKI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a5:e8:36:6d:37:57:8d:6f:20:b2:08:76:59:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af93102511e660263f8ef6e4c1f9ab32393839b2
Validity
Not Before: Jan 31 12:01:18 2025 GMT
Not After : Feb 1 12:01:18 2025 GMT
Subject: CN=f908a872c9e48b3e9de0d9e92ee632d39648cb49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:75:86:50:2d:49:30:a2:cb:4f:6c:cb:51:ae:
ba:dd:7f:40:2a:5a:9d:99:01:3c:5d:10:26:be:9c:
27:a7:e5:0d:85:9d:dc:57:21:f7:a5:f7:d3:e5:3d:
45:4f:fd:a3:57:d1:46:07:cf:7e:07:e2:b4:79:d4:
eb:02:84:58:d9:67:5f:03:61:f1:06:24:bf:b6:2e:
fe:2a:17:35:eb:b7:23:00:b6:e5:bf:1f:77:c1:0b:
17:be:13:7b:a0:6b:2e:ae:5f:98:eb:50:d1:43:7e:
9b:13:4c:e8:03:58:ea:55:db:75:a2:8e:fa:0b:fd:
b2:ab:77:69:74:ac:de:dd:1c:4d:d9:b4:ac:31:5d:
02:df:2d:ce:1c:fa:be:93:dd:08:3c:56:44:b7:b6:
53:e9:22:9d:3d:94:a1:dd:d5:a1:ab:ca:0c:85:63:
14:a0:60:4d:66:17:3e:1b:cc:27:df:46:1f:58:ca:
d5:ee:38:c0:28:81:24:a6:e6:5e:b2:89:ab:4a:2e:
e6:bf:e9:b1:1b:1f:62:14:7b:5a:2a:16:e0:1c:cc:
e6:32:5b:f6:27:3b:be:2a:1e:89:87:39:11:49:2e:
e9:7e:de:13:bc:b6:5b:aa:51:7e:e7:5b:e7:f4:8e:
ca:b7:31:f0:e1:e6:f3:2b:8f:a5:18:8a:6a:23:62:
43:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:08:A8:72:C9:E4:8B:3E:9D:E0:D9:E9:2E:E6:32:D3:96:48:CB:49
X509v3 Authority Key Identifier:
keyid:AF:93:10:25:11:E6:60:26:3F:8E:F6:E4:C1:F9:AB:32:39:38:39:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5MQJRHmYCY_jvbkwfmrMjk4ObI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d16e96-0313-4c9b-9c09-a95fe3102645/1/r5MQJRHmYCY_jvbkwfmrMjk4ObI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:9d:d4:55:b0:43:d7:55:e4:6c:23:7b:00:23:65:4a:d9:bf:
4e:0e:05:38:b3:25:b6:b2:72:81:c9:81:a6:c5:08:9f:bc:0e:
52:c7:99:b1:11:32:0a:44:ca:f2:c1:83:43:b8:33:23:66:2d:
8a:1f:df:43:94:0f:e8:ae:bc:9a:13:31:3a:bc:4b:31:a9:cf:
da:60:bd:ee:33:86:2b:d0:26:34:e5:66:69:d6:18:fe:2f:19:
bf:e7:bc:27:b2:e7:cc:77:16:2c:da:47:3b:18:fc:22:04:16:
c8:44:9c:25:88:be:43:3f:45:e8:ae:74:23:cd:64:ae:91:1f:
6e:aa:ae:04:34:db:9e:33:ce:f1:77:1f:5f:63:b2:2f:67:46:
33:4b:c8:fc:87:1d:fc:f0:59:ed:3c:13:77:cf:5a:13:86:96:
2a:af:28:77:ef:ba:62:05:f3:a5:c8:93:25:44:ef:90:57:d6:
6c:5a:bc:17:f4:dc:0f:01:75:11:b0:9b:ad:b3:02:d6:a7:9f:
b1:90:35:8a:01:bd:b6:78:8e:b9:09:36:4e:55:76:9c:b5:32:
c5:e7:98:4f:5f:01:3b:19:b4:8b:31:21:cb:4b:a1:a8:63:a1:
78:58:48:a4:50:5b:3c:c5:be:e9:70:f2:e7:a2:50:d8:5a:24:
6d:21:6b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:28:50 2025 by rpki-client