Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft
File: m5fCLQsziopFqhNFsJF7oNyXM5A.mft (raw, json)
Hash identifier: IzvYbpkTQt3kKfPrPT2V8+B1RvseB7eG6FziNivssro=
Subject key identifier: DA:3F:E7:37:DE:E4:38:FB:35:C8:56:B1:41:FA:27:F7:BF:C0:3D:85
Authority key identifier: 9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90
Certificate issuer: /CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390
Certificate serial: 0194BC0512327F9335CFABC1036C8B06585B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft
Manifest number: 1062
Signing time: Fri 31 Jan 2025 11:00:36 +0000
Manifest this update: Fri 31 Jan 2025 11:00:36 +0000
Manifest next update: Sat 01 Feb 2025 11:00:36 +0000
Files and hashes: 1: A5RYkDh5iQHsMCEi9eKiE3UYQTY.roa (hash: 2Z2MMJPop83/eKqvvRjbHx9UxdjVWLlOnDA0QnBD8dM=)
2: L0DdrovJryEa-N4DLBstIfe1SL4.roa (hash: +d1mwe6h8qfJPidVxlydif4S17sbEG+dJNApe+AHcNw=)
3: m5fCLQsziopFqhNFsJF7oNyXM5A.crl (hash: l8C73QmHS/r89xrov8ZphiaLRbOWTNWTTnq7vu7tFqE=)
4: s9-7uzfILp_wqpuTQ6RY06M_vb0.roa (hash: Pd9QbCwquRy9rtMT/uczWDR3qfrQi3t7npfRPZFPtOw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:12:32:7f:93:35:cf:ab:c1:03:6c:8b:06:58:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390
Validity
Not Before: Jan 31 11:00:36 2025 GMT
Not After : Feb 1 11:00:36 2025 GMT
Subject: CN=da3fe737dee438fb35c856b141fa27f7bfc03d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2c:9d:21:e7:84:f2:2c:46:03:a6:0d:7c:33:
bb:4a:bb:d3:5b:dd:07:68:93:94:d3:52:d1:d7:db:
9a:6d:4c:eb:9d:ae:56:7d:26:00:07:24:b0:64:65:
9d:cd:2f:37:a1:04:21:09:a6:3b:a7:28:b3:5e:96:
88:0e:62:d7:f7:9f:10:9b:80:79:2e:5d:f2:2b:3d:
4e:f5:9e:54:83:3d:23:2e:86:ff:4e:2a:e1:87:ff:
2e:83:5a:60:5a:28:82:10:cc:0d:64:2f:fe:9e:f5:
1a:23:15:07:40:02:0b:d3:b1:c7:32:ef:5c:2b:29:
b8:16:dd:48:3c:d1:c6:61:2f:ee:a0:98:0e:3e:50:
df:cc:50:f5:b9:78:b8:90:f1:18:53:55:2e:b8:ea:
ec:62:03:3e:75:fa:f3:7b:80:d5:c2:11:ce:f5:ad:
77:ca:3e:56:06:12:01:30:fc:48:fe:b0:6c:5f:f8:
1a:ff:fc:42:3d:3b:30:55:3e:69:1b:e9:72:06:85:
f3:0c:32:33:80:aa:c5:13:f2:08:ad:35:51:51:df:
6b:e5:f7:c8:e1:6d:8c:ee:6c:a6:73:58:71:22:9c:
4a:9c:49:6b:f1:1e:be:7f:ea:e0:49:0e:80:78:ac:
85:41:5b:42:8f:92:e7:68:45:ef:60:f4:45:a8:90:
42:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3F:E7:37:DE:E4:38:FB:35:C8:56:B1:41:FA:27:F7:BF:C0:3D:85
X509v3 Authority Key Identifier:
keyid:9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:64:5f:4a:a5:d1:4b:d9:82:38:3b:9e:5e:26:56:b6:4f:2f:
66:f2:f1:04:f6:e0:15:e4:30:40:47:9f:6d:f4:1f:90:be:4e:
05:e2:b4:d3:3b:9a:f4:c4:0d:fa:34:07:d6:6d:98:07:01:40:
62:3b:c7:f2:53:75:0d:72:bc:c9:a3:a4:56:20:4b:d2:c4:62:
6a:f9:05:b4:0d:26:7c:0e:15:d9:88:51:1c:0c:e0:1c:c8:1a:
54:f8:5c:7e:ea:d8:0b:0d:0f:3b:74:bd:e0:3d:23:e8:73:23:
d7:21:87:04:ea:3d:ee:8a:fe:04:b9:02:c4:e8:3c:1d:c5:b9:
92:86:5a:ff:1a:aa:25:12:5d:bc:f0:d4:01:2a:42:9a:38:ef:
79:0a:2c:61:cb:a8:e7:5f:13:ae:82:92:e7:f2:a5:70:21:21:
9b:d6:20:df:86:c9:bb:12:eb:d0:f2:79:7e:e9:19:a1:72:b5:
5a:f5:31:24:8d:50:cb:d1:34:53:7f:54:88:69:e8:45:15:da:
cd:03:5b:3e:e0:f0:37:fa:c0:3d:5c:6f:98:7f:50:78:b3:8a:
de:fa:87:e7:82:3b:e7:69:7c:cd:c2:df:73:94:e2:a6:76:58:
c3:bb:02:32:13:e7:04:43:21:6c:a3:d8:a4:5a:50:cb:3b:43:
80:bb:d9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:19 2025 by rpki-client