Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
File: 5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft (raw, json)
Hash identifier: 8H0yDJjJ7ijAW6rgKHUFX286jrLHQxDE1DQwZjzvqtM=
Subject key identifier: 3A:51:22:45:FF:B3:EC:3A:C2:55:26:28:01:E9:AC:9D:91:57:73:D2
Authority key identifier: E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF
Certificate issuer: /CN=e4f51741df136f9389254efde4ba9adcfb0de6bf
Certificate serial: 0194BC3BF82FA3A9267564444EA07C154A64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
Manifest number: 04B5
Signing time: Fri 31 Jan 2025 12:00:34 +0000
Manifest this update: Fri 31 Jan 2025 12:00:34 +0000
Manifest next update: Sat 01 Feb 2025 12:00:34 +0000
Files and hashes: 1: 00lUHR0HsWF62e0OhdTMmz1D8cI.roa (hash: 7/l5GLFu9biLRhRjYyy3+K05xs5xfnn4gHwWEjQvlNY=)
2: 5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl (hash: 4nSRwnzonlSL1io+hungnD34y/pw+ofuf2qvChzCXwo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f8:2f:a3:a9:26:75:64:44:4e:a0:7c:15:4a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4f51741df136f9389254efde4ba9adcfb0de6bf
Validity
Not Before: Jan 31 12:00:34 2025 GMT
Not After : Feb 1 12:00:34 2025 GMT
Subject: CN=3a512245ffb3ec3ac255262801e9ac9d915773d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ea:c2:6a:af:c2:83:71:a9:81:e0:5c:40:3a:
5a:80:80:f4:c2:61:b6:b5:2b:33:ff:f1:5d:11:4c:
aa:78:10:23:f4:ef:6a:77:a5:4b:0d:bc:14:f1:b2:
f4:58:ff:22:e6:9a:2a:65:c5:3b:53:5e:0d:a2:9e:
49:45:e7:d8:12:95:24:b9:61:3f:ca:b7:c7:96:e7:
5b:86:26:a5:d9:e9:21:e0:b7:05:e9:1b:c5:12:26:
18:c5:ae:c9:f2:5c:de:64:fd:bc:57:33:e2:26:8f:
ba:0e:79:52:ba:7d:75:d1:fc:f8:cb:76:7b:3a:8a:
c8:7e:cc:68:5c:e7:13:fc:b4:4d:b4:db:d8:09:61:
e0:84:1d:e4:01:29:74:32:1f:6e:76:9a:12:f9:8b:
eb:58:c3:87:b7:00:38:51:86:f7:4f:f2:4c:7d:bf:
a2:51:13:4e:eb:7e:e5:60:e7:1f:0b:1b:d8:77:23:
39:df:77:e8:48:d9:96:3b:50:64:ff:25:6d:01:aa:
ba:1a:65:83:67:b0:2a:2c:c3:1c:a9:67:fa:2e:f3:
39:9b:cf:c9:64:1c:9f:40:2c:0a:98:e2:ee:9b:bc:
04:73:ec:86:07:ba:33:2a:0a:3d:3e:3b:b0:0a:18:
52:69:c9:3e:de:d8:74:f0:4d:75:c6:1d:72:3c:6d:
b5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:51:22:45:FF:B3:EC:3A:C2:55:26:28:01:E9:AC:9D:91:57:73:D2
X509v3 Authority Key Identifier:
keyid:E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:2e:39:c4:d2:b1:75:0a:5d:11:9a:03:72:4c:26:f6:db:8a:
b6:97:e3:9e:df:1a:10:ce:8e:74:57:8c:69:39:ce:d2:fe:52:
df:c2:33:55:3d:91:79:cf:52:de:83:08:bd:83:2c:36:6b:9c:
f8:43:bd:1e:5f:4b:36:cd:84:6a:b5:25:6e:5f:ca:21:97:79:
5d:55:de:44:2f:d5:0d:85:30:c0:a5:cb:64:5a:cf:1e:a9:df:
fb:a2:d2:db:29:38:21:f3:73:90:93:0b:21:f7:4e:8e:7b:8a:
70:83:f6:61:e4:47:49:06:07:e3:f2:8b:49:66:34:52:9a:e1:
a6:4e:5c:77:87:d2:a9:42:35:23:95:c3:e9:e7:cf:2a:41:4e:
a9:9a:98:77:ee:dd:98:89:42:35:5a:e9:03:56:c7:52:e8:20:
86:54:98:d6:9e:e1:b5:ac:50:46:a9:46:12:4e:69:ee:d6:d8:
2a:07:5a:28:d3:2b:61:c6:45:ca:b0:01:fc:b0:9b:bf:a3:ba:
bf:0c:02:2e:d5:ad:ac:7d:0d:78:0f:0d:49:0f:76:f6:37:28:
98:32:ee:a8:5f:03:93:d6:42:ee:6e:4f:6f:58:6b:ac:4a:62:
20:b8:5f:f9:82:b1:9f:b4:7c:c0:ca:81:fd:c2:07:6b:52:9d:
49:97:25:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:59:46 2025 by rpki-client