Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft
File: 5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft (raw, json)
Hash identifier: bofxjN7VX881TkjOslWoPej/oAhtIVdwW4MG7+bpS1w=
Subject key identifier: 67:6F:06:DD:43:E5:46:1E:5F:46:37:33:F6:63:D6:3E:3A:32:2E:6C
Authority key identifier: E6:7C:0D:47:1D:C3:E4:79:04:C9:35:7D:40:F9:77:A3:E0:81:B4:BD
Certificate issuer: /CN=e67c0d471dc3e47904c9357d40f977a3e081b4bd
Certificate serial: 0194BD177D958B9D41EE2BA75599B19DD89A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft
Manifest number: 05EE
Signing time: Fri 31 Jan 2025 16:00:20 +0000
Manifest this update: Fri 31 Jan 2025 16:00:20 +0000
Manifest next update: Sat 01 Feb 2025 16:00:20 +0000
Files and hashes: 1: 5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl (hash: N2B3LMu0GZGppKgniil94WDHkqJ4mqtHDGKN9HydKcU=)
2: UsysYH87_MeusDVf_2VMl6ZiNoA.roa (hash: l/efuOvavvhLwF5l7zidaNvIJhmEgoHAGGzbipbPPZE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:7d:95:8b:9d:41:ee:2b:a7:55:99:b1:9d:d8:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67c0d471dc3e47904c9357d40f977a3e081b4bd
Validity
Not Before: Jan 31 16:00:20 2025 GMT
Not After : Feb 1 16:00:20 2025 GMT
Subject: CN=676f06dd43e5461e5f463733f663d63e3a322e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:51:fd:1c:86:bd:9b:92:d9:f0:0a:17:b9:cf:
94:d0:4d:98:3f:a5:5a:96:92:a6:fb:bf:5f:7c:9c:
78:72:de:f0:c0:33:c3:3a:29:41:b6:d9:3d:c6:f6:
ef:c0:c2:40:de:b8:b9:c8:82:d9:9f:f7:60:56:20:
ed:5c:58:dc:cd:46:b8:99:00:44:ad:1c:4b:93:8a:
6f:c3:01:f0:13:63:40:5c:f9:47:d6:26:d1:2c:f5:
6e:a6:ac:c0:74:99:54:67:1f:57:a8:21:21:fa:b3:
85:8f:0b:c3:45:95:fa:db:0a:95:8f:51:df:be:9a:
91:9a:c1:eb:31:65:84:98:75:2b:e4:b8:0b:44:05:
2a:88:2a:82:6e:31:c4:19:70:39:16:cb:66:2a:b6:
52:53:82:96:28:95:e1:c4:a3:be:f5:20:e4:b2:36:
1d:c9:95:c2:df:7c:87:b6:9c:43:8c:e1:82:09:f6:
4c:10:60:35:eb:59:21:17:e1:9a:c6:4b:a5:86:91:
c6:b4:1f:e9:75:78:fa:64:25:21:80:55:fc:8a:83:
24:45:cb:74:eb:4e:d1:db:cc:ad:aa:c4:06:e0:e6:
3b:72:4d:e6:4a:ba:e0:bf:7d:62:64:32:84:74:53:
2a:49:4d:90:fe:4a:40:c6:03:98:11:bc:ca:14:d5:
45:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6F:06:DD:43:E5:46:1E:5F:46:37:33:F6:63:D6:3E:3A:32:2E:6C
X509v3 Authority Key Identifier:
keyid:E6:7C:0D:47:1D:C3:E4:79:04:C9:35:7D:40:F9:77:A3:E0:81:B4:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nwNRx3D5HkEyTV9QPl3o-CBtL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5a5638-455a-4250-94f0-0561bde0bfa8/1/5nwNRx3D5HkEyTV9QPl3o-CBtL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:82:a9:33:d0:ab:44:51:61:e8:24:bc:cf:27:21:82:ab:bd:
da:6d:6e:89:8f:99:84:18:2c:e8:76:24:fd:63:4e:a0:80:d0:
d2:15:87:b7:22:c5:dd:a2:1f:d5:60:ef:25:3b:d8:4c:d5:fb:
38:84:d1:b3:72:73:1f:10:f4:30:d7:c5:b1:07:c0:77:1f:94:
ba:e9:a0:b6:61:ce:56:2b:f4:3c:e6:0d:56:93:a1:2e:7b:f4:
53:4c:04:d0:23:0b:29:ed:29:b1:c0:3a:33:b3:79:92:a8:f1:
44:09:ec:ab:62:db:04:ca:45:1c:20:98:0c:62:d6:bc:8d:11:
1e:bd:6e:5b:0c:fc:9b:ee:70:f3:f9:47:db:4e:58:50:3c:ac:
8e:90:91:f4:d6:b1:60:35:0a:59:99:16:c9:0b:b2:df:6a:11:
37:9c:5f:0e:e3:ea:8f:de:32:df:bc:ef:e1:03:26:8b:cd:63:
73:80:6b:03:2f:e9:77:9c:8f:96:70:87:42:4d:ea:7e:d6:97:
bf:41:01:71:98:5c:d1:cc:55:2a:46:e5:ac:a9:ea:66:f9:e1:
44:b5:30:a5:ba:2e:d8:26:10:00:13:06:a8:b4:e4:3a:ee:a3:
05:7c:39:51:06:c6:a8:90:7c:6e:aa:89:18:4f:30:47:a0:c1:
dc:50:16:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:12:53 2025 by rpki-client