Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
File: 5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft (raw, json)
Hash identifier: fq2kHuwvksV07uiaYW5exlzG/+y8rBJR/HcOeQwqSNM=
Subject key identifier: 89:E1:15:D7:F1:67:3D:B1:C6:02:FB:19:A9:BF:D0:49:92:01:92:43
Authority key identifier: E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04
Certificate issuer: /CN=e71d709d8b184c5a50c9431dccaf649bc8684704
Certificate serial: 0194BCAA0470C2884283718A3F817C6A0F40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:46 +0000
Manifest this update: Fri 31 Jan 2025 14:00:46 +0000
Manifest next update: Sat 01 Feb 2025 14:00:46 +0000
Files and hashes: 1: 5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl (hash: MkeaJcAQ6gG4iJeg0WLzU6FKqQgoMO3nHXBAAmcN6aI=)
2: qvfFT1waDERLpkfbuL979IFfQzo.roa (hash: paMjx2cHD10xNMb2RegQEWwQPemRR0QtwqJzV/kovDg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:04:70:c2:88:42:83:71:8a:3f:81:7c:6a:0f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e71d709d8b184c5a50c9431dccaf649bc8684704
Validity
Not Before: Jan 31 14:00:46 2025 GMT
Not After : Feb 1 14:00:46 2025 GMT
Subject: CN=89e115d7f1673db1c602fb19a9bfd04992019243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:58:c7:2a:56:d8:a3:cb:96:d4:b7:a6:c6:89:
50:d6:57:dd:cb:5b:5d:99:5a:73:cc:b0:cb:0f:9a:
05:e1:60:54:df:83:e7:68:63:1b:20:b9:5d:1c:43:
2d:75:c9:3a:f8:31:c1:d2:80:d3:f3:6e:95:e7:8a:
c3:b7:74:02:3f:ec:fa:60:19:bc:d4:e3:4f:fa:14:
70:ad:81:c2:76:6c:aa:0b:80:81:5a:29:54:e6:24:
81:95:41:f3:93:e9:6d:49:52:05:60:c9:c1:68:26:
43:4b:88:69:27:6d:ee:83:a5:e5:56:2c:5f:99:15:
08:cd:41:fc:a4:13:99:d7:a9:c6:97:cc:3a:7a:47:
a2:7a:4f:55:06:eb:1b:6c:07:d0:8b:aa:0d:09:6e:
04:a8:6f:51:c9:05:92:c7:c5:d4:d4:ab:8a:5b:69:
2c:a7:12:db:ff:85:66:5a:04:17:8f:3e:d9:f0:d1:
ea:45:09:f2:c1:f0:1f:b0:5e:e2:83:1e:b9:bd:95:
49:22:3f:27:6a:27:3a:38:57:6a:49:d8:2a:aa:1c:
3f:6e:01:04:f2:66:ad:cc:b2:19:1b:0c:e8:36:c8:
0e:90:d8:ee:19:4d:17:3d:45:60:3f:68:54:dd:24:
44:a8:38:d3:0e:e4:0e:82:e8:17:e9:05:31:15:e8:
5b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E1:15:D7:F1:67:3D:B1:C6:02:FB:19:A9:BF:D0:49:92:01:92:43
X509v3 Authority Key Identifier:
keyid:E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:a6:04:26:2a:4d:49:06:43:82:a1:59:be:47:ad:16:44:cd:
6a:2d:f8:9f:22:93:f2:71:ff:99:74:9c:c4:13:5e:f5:7d:b0:
2e:4f:1e:3f:36:5d:54:46:c0:11:76:c2:bc:0a:d7:f7:6a:5f:
99:af:4d:46:07:bf:f7:79:f3:32:9c:3f:0c:ec:03:bb:a4:a2:
0f:fb:88:fd:8e:9d:c3:71:1a:09:32:35:ca:47:ab:b0:4a:29:
d5:ef:51:36:3d:ad:9a:bf:90:99:5d:74:b2:eb:1c:53:95:e7:
3e:a7:05:c9:74:d9:e9:70:75:47:df:05:5a:14:62:da:13:c6:
51:3b:f8:8d:bb:eb:8b:02:4c:28:4a:c2:72:54:c7:49:d4:83:
e5:6b:e2:d4:b1:6f:02:0f:41:54:48:f3:fb:3b:ce:08:3c:89:
7d:6e:36:5e:00:ae:f5:36:71:99:a9:0a:59:e2:13:88:70:b2:
aa:8f:3c:7b:ba:6c:a3:d0:68:70:aa:6a:89:c0:06:58:f5:ea:
fb:e2:bb:05:fa:09:4d:76:23:8a:c9:be:0b:62:07:2d:c4:1e:
86:c9:88:0c:f0:ed:6f:f2:84:46:bf:7d:fe:d9:e3:3b:c7:cf:
89:22:94:a4:b0:f9:65:62:4b:95:db:c0:1b:5f:a1:59:16:79:
57:25:18:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:13:36 2025 by rpki-client