Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.mft
File: 5SBEb3n_wtfDqe80DOneJXI6cZo.mft (raw, json)
Hash identifier: DAz31J06+JXb5Isc0P9lQM2wkzh64vzCW9RsLON7ECU=
Subject key identifier: 24:70:38:BE:A7:54:02:09:60:35:54:03:33:D5:F4:00:04:3A:DC:12
Authority key identifier: E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A
Certificate issuer: /CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a
Certificate serial: 0194BCAA31CE5C71107AD81208C3F5437F02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.mft
Manifest number: 0AA2
Signing time: Fri 31 Jan 2025 14:00:57 +0000
Manifest this update: Fri 31 Jan 2025 14:00:57 +0000
Manifest next update: Sat 01 Feb 2025 14:00:57 +0000
Files and hashes: 1: 5SBEb3n_wtfDqe80DOneJXI6cZo.crl (hash: qbeoxr7pziqRbDF++myTO9XDj0PPGzAaGDYa62nz4bo=)
2: JlO_qnVL00Suee0_HOVdRa3sq6o.roa (hash: 853LDg7z48nkGHDawle640a0tB7YzauOfSJF7xZQbVw=)
3: KwGp6Z3v_f_qdKMLeB5RP3eXNRo.roa (hash: A2C/O+Kqn5BMFDMcQh3sDt1p5I358AiHafCSfwd+Wn0=)
4: r9qf6KgX9IgFo0eq5J1Iki9tbIU.roa (hash: 5vA2NlXN7t+qJxC8MfIinBSgfDV+e3NTP2tOSZC2XEw=)
5: tZVX3qYygm8mhqLKvtgCUl1qics.roa (hash: C3pcGXYwCjQl9eRypOyqTAkBmg+sjPi6ucd+K6cZcQw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:31:ce:5c:71:10:7a:d8:12:08:c3:f5:43:7f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a
Validity
Not Before: Jan 31 14:00:57 2025 GMT
Not After : Feb 1 14:00:57 2025 GMT
Subject: CN=247038bea75402096035540333d5f400043adc12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:de:ac:38:3f:24:5a:df:59:ca:fc:a2:bc:a7:
b7:2f:87:c6:ae:9b:15:5f:fe:c1:5c:6f:ae:fd:e7:
4d:dc:5e:ad:2b:a1:59:7f:f0:20:24:0f:77:6a:bc:
84:93:d6:59:88:ee:d8:f9:7c:ca:89:89:d9:c5:3d:
c1:5b:ae:3f:d3:e4:6c:e7:d6:e6:c5:1e:9f:8b:80:
93:aa:c2:aa:44:05:65:5c:bf:06:f1:a1:74:96:d4:
86:36:10:5d:5f:89:b1:43:85:cc:bf:0a:46:c8:34:
74:9b:0c:27:e4:4f:29:93:ac:ac:ad:07:fc:4a:4d:
e4:66:a5:02:0f:d6:17:39:00:c2:2d:f0:f0:8e:7b:
df:ee:25:a0:20:c8:38:c4:bb:18:b4:36:a0:3f:aa:
67:70:7e:37:5b:6c:33:dd:3a:23:3b:da:18:21:59:
87:c1:db:e2:29:e2:54:0c:1f:de:a4:c7:3e:f4:ac:
65:32:38:42:7c:c9:dd:d4:f9:f7:8d:83:20:d8:ce:
81:ce:31:4f:d4:f1:f3:bf:9c:74:e1:e6:04:63:10:
2d:3f:af:00:b6:dc:47:ac:03:93:08:aa:a8:cd:24:
34:1f:04:07:5a:01:76:6f:58:57:26:ad:68:69:24:
6e:45:00:39:a1:8d:bb:49:ce:d5:58:9c:17:a8:89:
b0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:70:38:BE:A7:54:02:09:60:35:54:03:33:D5:F4:00:04:3A:DC:12
X509v3 Authority Key Identifier:
keyid:E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:93:07:67:26:76:3a:e4:c7:2a:ea:de:15:f4:30:07:70:9f:
91:c9:ef:3f:11:35:09:d1:4f:d8:35:a5:f7:60:4c:d0:44:30:
76:b5:ae:8c:81:06:ae:b8:68:01:5e:0f:4b:12:32:4f:45:bf:
d9:65:a1:bd:8e:f3:33:23:67:3f:42:55:f2:51:07:fb:7a:d2:
92:fb:44:d9:e0:2b:8b:aa:7b:17:46:33:f4:08:ff:7d:6e:de:
07:1e:57:90:20:fb:9a:6d:6d:13:99:fa:9c:80:c2:ae:67:60:
38:0c:2c:b9:8c:38:ee:28:6d:bb:9e:42:e1:a2:2b:47:42:19:
1e:8f:95:46:a9:94:0b:6c:70:6b:07:5e:c5:97:03:d9:7f:45:
c0:7d:4c:42:8c:40:88:21:63:7a:9a:33:72:f2:3d:c1:a6:78:
51:18:c4:a6:e7:b8:ba:e2:04:34:d5:77:95:e4:58:07:59:f4:
dc:48:3a:24:65:75:f2:bf:36:fd:53:61:6f:b0:d1:bb:8d:8c:
15:88:be:ba:d1:34:b1:7a:07:bc:80:d9:06:99:ad:89:d4:eb:
59:1d:6a:71:e9:f7:d7:a3:12:cc:18:c0:9e:e7:20:73:a9:e5:
79:02:62:62:72:06:32:f1:d2:8d:e9:d6:f1:b8:fc:5e:68:7d:
86:ba:40:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:39 2025 by rpki-client