Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
File: 5UmH5s-8zliuDJbnZmqyGrPi4JA.mft (raw, json)
Hash identifier: GKZk3h5xe4ObWuFoqqsd6uwzctjBpVkViVbdVyokSy8=
Subject key identifier: D5:14:55:BD:98:E2:A8:95:4A:7A:0F:C3:FE:47:E8:32:43:F6:7F:D6
Authority key identifier: E5:49:87:E6:CF:BC:CE:58:AE:0C:96:E7:66:6A:B2:1A:B3:E2:E0:90
Certificate issuer: /CN=e54987e6cfbcce58ae0c96e7666ab21ab3e2e090
Certificate serial: 0194BCA9BA6945D1401D1B4783F70AEFB3AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
Manifest number: CE
Signing time: Fri 31 Jan 2025 14:00:27 +0000
Manifest this update: Fri 31 Jan 2025 14:00:27 +0000
Manifest next update: Sat 01 Feb 2025 14:00:27 +0000
Files and hashes: 1: 5UmH5s-8zliuDJbnZmqyGrPi4JA.crl (hash: h6rvq5tMp1mGqu5Dopwl+HACsStJzqQ0aYi2QCpw344=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ba:69:45:d1:40:1d:1b:47:83:f7:0a:ef:b3:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e54987e6cfbcce58ae0c96e7666ab21ab3e2e090
Validity
Not Before: Jan 31 14:00:27 2025 GMT
Not After : Feb 1 14:00:27 2025 GMT
Subject: CN=d51455bd98e2a8954a7a0fc3fe47e83243f67fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9a:6f:9e:46:39:be:59:3a:3f:07:f9:e7:58:
3b:62:4f:b7:d0:b8:18:75:da:9e:f8:49:56:6d:9b:
7b:f2:3a:54:bf:12:ea:d6:a1:a1:31:ca:73:40:58:
f9:8b:ff:8b:1a:d2:33:c4:59:16:a7:26:11:d5:7d:
17:66:97:bf:84:62:d3:b1:2c:50:48:b9:2d:e7:eb:
c0:6a:6b:ed:ac:7f:ed:e9:39:35:91:22:56:da:70:
e0:f3:21:82:8f:ef:60:b6:f1:f5:7d:4f:f0:a0:97:
1d:cb:b4:0a:76:cf:42:69:97:85:64:2d:a7:d4:05:
2c:da:fd:42:b2:43:ff:69:af:7c:1a:55:fa:c4:61:
38:57:46:fb:1b:69:62:03:9d:44:70:10:b2:88:32:
7d:9b:32:63:10:0d:3f:79:d6:ce:c6:b8:eb:4f:d6:
ee:5a:1a:a1:07:15:b4:02:9b:29:e5:5f:93:3c:e3:
c6:f7:8c:d1:13:a4:27:48:6c:6f:70:a7:dc:e5:6b:
f2:7b:d4:63:eb:63:05:80:64:2c:59:ce:94:43:90:
62:a9:15:3a:19:61:23:a4:65:c1:ca:e4:9e:50:56:
63:1e:46:12:11:31:4c:16:96:bc:8a:67:57:d7:02:
75:ff:04:a7:c1:17:83:73:36:8f:02:33:91:11:c2:
5a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:14:55:BD:98:E2:A8:95:4A:7A:0F:C3:FE:47:E8:32:43:F6:7F:D6
X509v3 Authority Key Identifier:
keyid:E5:49:87:E6:CF:BC:CE:58:AE:0C:96:E7:66:6A:B2:1A:B3:E2:E0:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UmH5s-8zliuDJbnZmqyGrPi4JA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/8ae730-ae5e-4be9-978b-00b520875376/1/5UmH5s-8zliuDJbnZmqyGrPi4JA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:9e:f1:ca:9b:10:24:8f:f5:d8:35:9a:04:97:af:f9:0a:84:
a0:f1:64:ea:63:da:4e:7c:2f:7a:af:f7:80:f8:ee:91:91:6f:
9b:e4:a1:68:a9:e3:92:5b:b0:45:e2:69:b2:a3:dc:c7:78:34:
83:f9:9c:a1:d5:14:9a:7b:b3:9c:56:cd:de:c6:a3:d4:5d:e6:
e1:64:b8:3d:b1:79:68:03:b1:12:af:5d:13:a0:f2:4d:83:77:
39:54:4a:97:61:c9:23:36:b6:d3:b6:06:56:4d:e9:7f:aa:35:
2a:01:11:f4:e5:51:8b:01:13:5a:ec:a1:7c:3d:9d:29:f8:b9:
97:ac:d8:40:72:ee:79:a0:c3:29:8e:9a:25:91:78:2f:9c:bd:
58:6d:bd:db:59:0b:6e:76:7f:19:c6:5e:e8:1a:d5:a6:0e:7e:
97:1a:ba:ac:6b:34:c8:11:c4:95:45:9c:bf:c5:2c:68:9d:35:
a3:1a:f1:3e:a8:86:e3:56:d7:d8:ad:4e:45:4b:8a:1d:86:84:
54:b8:e9:ee:28:ae:0d:ae:0f:fb:7d:36:f4:80:ea:56:ba:db:
71:62:98:dc:0d:7b:fe:15:27:9a:b5:b0:6e:b3:1e:06:b9:40:
ca:82:d9:ce:30:4a:45:66:d4:6d:bb:1e:e3:8e:cb:56:02:89:
60:96:a2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:55 2025 by rpki-client