Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
File: 5J2_PERGjlJBHUhhhWvwvceQY-Q.mft (raw, json)
Hash identifier: tDd/P/S1c+9uAWKxEDf9DL7pMsBh5JSQ9qv+qNxmzmk=
Subject key identifier: D9:50:9B:42:D5:4A:81:73:41:83:57:A2:22:8E:98:10:A9:46:12:EE
Authority key identifier: E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4
Certificate issuer: /CN=e49dbf3c44468e52411d4861856bf0bdc79063e4
Certificate serial: 0194BC04E47D882EA274ED554F5404D177CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
Manifest number: 0BFD
Signing time: Fri 31 Jan 2025 11:00:24 +0000
Manifest this update: Fri 31 Jan 2025 11:00:24 +0000
Manifest next update: Sat 01 Feb 2025 11:00:24 +0000
Files and hashes: 1: 5J2_PERGjlJBHUhhhWvwvceQY-Q.crl (hash: 98JwqcEKhvdYmhvuayfkC7S3RtKwtH6PJf2Z9QbnrOY=)
2: 7JvOqf8jCijk_scq8k44QE4ZcJg.roa (hash: Zr9qOX5zC6nd7EBM4UVaMfXBvFyKtR8sioHct77HMic=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e4:7d:88:2e:a2:74:ed:55:4f:54:04:d1:77:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e49dbf3c44468e52411d4861856bf0bdc79063e4
Validity
Not Before: Jan 31 11:00:24 2025 GMT
Not After : Feb 1 11:00:24 2025 GMT
Subject: CN=d9509b42d54a8173418357a2228e9810a94612ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:67:6d:78:b8:41:3a:7e:fe:b3:70:b3:63:1e:
55:a0:ae:ed:45:3a:33:42:ef:37:40:3f:83:dc:b8:
a9:a3:10:7e:d4:ef:32:54:ad:64:35:1b:09:ff:65:
57:c5:05:4a:57:c6:2a:a1:e0:3e:63:77:d1:f5:8d:
e8:c5:04:04:32:a5:f7:91:c3:89:22:85:09:b7:7b:
f6:c1:d5:76:90:f3:f6:cc:b6:38:dc:9a:cb:a7:8c:
06:e7:35:65:9b:e1:44:4c:c1:bb:c6:8f:bd:5a:04:
00:a2:5e:26:e3:49:a1:c0:31:02:b9:fe:12:ef:58:
70:e3:ee:6a:2b:20:30:0c:b7:56:79:df:e7:fe:af:
e4:2a:4b:66:28:b7:3c:83:a9:b7:41:44:89:b2:09:
0e:23:b0:3d:62:2d:9b:b4:d6:ba:3e:f9:84:82:79:
4b:3d:d2:01:2c:56:2c:49:a8:43:67:4e:de:bc:ea:
8a:f9:1c:0c:ed:4e:f8:71:0e:58:33:be:9a:91:26:
e2:7b:a6:d6:86:5d:21:48:ca:7e:95:04:ff:2b:3a:
62:b5:42:e0:f5:54:8e:c8:da:29:be:02:0e:aa:71:
11:ad:9f:aa:65:bc:99:85:de:85:70:56:6c:05:be:
67:a8:4d:8a:ff:4e:5b:fc:79:b2:7f:07:ee:a4:41:
96:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:50:9B:42:D5:4A:81:73:41:83:57:A2:22:8E:98:10:A9:46:12:EE
X509v3 Authority Key Identifier:
keyid:E4:9D:BF:3C:44:46:8E:52:41:1D:48:61:85:6B:F0:BD:C7:90:63:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J2_PERGjlJBHUhhhWvwvceQY-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6e457e-366d-440b-af2c-5cadbdcf2215/1/5J2_PERGjlJBHUhhhWvwvceQY-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:78:f2:7a:53:69:07:64:fe:51:ee:63:10:c7:0e:5c:36:71:
74:b3:4d:f4:6f:32:21:47:d8:1b:a8:fd:e1:c0:39:e1:6e:fe:
57:81:a7:32:f8:c7:f0:7a:91:40:c5:e5:d3:62:ca:9b:c6:d8:
b6:61:fe:43:7f:b3:04:d0:10:84:50:23:92:91:df:57:80:60:
63:3f:9b:1c:67:0d:af:06:a3:0e:d1:6d:55:46:4c:e1:e3:1d:
79:70:96:53:98:da:a6:ec:b0:bf:bc:ec:78:fb:36:c7:ee:26:
0a:3f:7e:24:a1:43:d7:70:79:ed:32:98:cf:71:90:5c:2c:98:
92:e9:aa:8e:d9:6c:ae:99:75:fe:74:99:e4:a0:e0:8e:00:23:
69:88:79:0c:ca:00:a4:a0:ac:e0:2d:6e:69:19:ea:2c:d2:68:
02:5e:20:75:e9:ae:e5:2c:8e:6c:bb:99:d0:4f:60:7f:6b:d8:
ba:48:9a:c3:04:80:5e:94:71:0d:2a:2b:7b:62:4f:2e:ac:bb:
6d:44:47:1c:d5:18:d4:e4:9d:85:7e:dc:4e:c6:59:e6:0c:d7:
75:79:d1:95:13:46:ee:b8:34:43:c0:c4:54:3a:8d:9a:7f:63:
70:0a:00:4c:60:44:e8:f2:59:e9:47:d3:57:16:55:16:a6:b3:
e0:81:74:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:57 2025 by rpki-client