Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.mft
File: 5LDTY6ChegaEUahRRc5PpGTX-hs.mft (raw, json)
Hash identifier: VufCrb1w8iNtmNEZjIAkFzN9qZi7aE1fI0at0dQ/dP8=
Subject key identifier: EB:92:92:0B:E5:EB:D1:83:88:4A:26:82:1D:2F:80:B3:68:3B:12:77
Authority key identifier: E4:B0:D3:63:A0:A1:7A:06:84:51:A8:51:45:CE:4F:A4:64:D7:FA:1B
Certificate issuer: /CN=e4b0d363a0a17a068451a85145ce4fa464d7fa1b
Certificate serial: 0194BBCE7CA17ABC53D9FE29E96FD244B39F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LDTY6ChegaEUahRRc5PpGTX-hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.mft
Manifest number: 0D5B
Signing time: Fri 31 Jan 2025 10:00:59 +0000
Manifest this update: Fri 31 Jan 2025 10:00:59 +0000
Manifest next update: Sat 01 Feb 2025 10:00:59 +0000
Files and hashes: 1: 5LDTY6ChegaEUahRRc5PpGTX-hs.crl (hash: FQVCvSB5W0HyujpzzDYiZlCX/fwCIPfiTfSKUCeIDU0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:7c:a1:7a:bc:53:d9:fe:29:e9:6f:d2:44:b3:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4b0d363a0a17a068451a85145ce4fa464d7fa1b
Validity
Not Before: Jan 31 10:00:59 2025 GMT
Not After : Feb 1 10:00:59 2025 GMT
Subject: CN=eb92920be5ebd183884a26821d2f80b3683b1277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:42:83:96:b3:e2:33:b4:56:67:d7:b8:c7:af:
16:d4:63:59:8b:c4:b7:55:04:39:12:6d:e3:cc:7d:
28:9b:23:2f:b3:52:53:0c:75:d9:56:66:23:8b:32:
23:f4:ae:30:8f:ff:97:5f:b7:b7:42:88:66:52:22:
f9:7c:f8:b8:95:a2:68:9c:27:75:76:22:db:83:5c:
14:c1:90:32:7e:35:e7:e1:bf:4a:22:02:f7:a9:a3:
26:64:3d:f2:f4:49:4a:b2:11:2f:f1:a4:cc:9a:6c:
14:04:f5:db:fa:8d:91:63:52:28:ab:f1:c7:d2:ce:
7d:17:6a:e9:3d:b8:3a:e5:d6:72:d5:a1:14:97:02:
08:59:2f:bd:81:4b:62:fe:c3:44:fd:2f:34:b9:c4:
99:3d:77:aa:c8:24:25:ce:df:bf:b1:e4:2e:8b:2b:
8b:2b:8f:ae:34:27:c6:2c:42:e4:d0:67:7e:dd:b4:
82:70:02:d2:4a:7c:60:02:14:19:3e:65:50:6a:c2:
38:1b:ee:3b:34:91:4a:7e:cf:b3:bd:a0:b5:7b:a8:
53:80:60:95:9b:40:a9:08:15:2a:cd:40:03:03:a3:
4e:a8:b7:11:11:d9:42:b2:17:56:b5:ac:29:80:e3:
fb:27:98:a4:b7:d7:f5:3d:c8:fc:9a:4b:72:16:17:
b0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:92:92:0B:E5:EB:D1:83:88:4A:26:82:1D:2F:80:B3:68:3B:12:77
X509v3 Authority Key Identifier:
keyid:E4:B0:D3:63:A0:A1:7A:06:84:51:A8:51:45:CE:4F:A4:64:D7:FA:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LDTY6ChegaEUahRRc5PpGTX-hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4753d3-a1e9-4fd5-aefe-7c7d8a78a963/1/5LDTY6ChegaEUahRRc5PpGTX-hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d6:57:2b:18:8b:cc:76:62:8e:9c:6b:18:fe:9a:d7:9e:2d:
fb:c3:58:d2:c8:34:ff:41:f8:4a:9b:88:b8:01:20:39:d1:95:
b6:49:1a:59:dd:24:59:b4:53:ea:b5:e1:ab:5c:fd:84:21:c8:
3f:e7:af:8d:a8:9d:85:d8:92:df:de:d1:0f:d7:79:df:6a:20:
4b:a6:a4:18:24:eb:0e:c9:c4:7a:3c:2f:13:1f:55:bb:49:f9:
b6:6d:a7:52:c2:55:9c:73:0d:b9:f2:1c:ea:65:dd:74:4c:b1:
76:93:41:8f:de:9b:92:01:40:8a:ec:8c:27:06:6a:fd:2a:51:
58:13:b8:90:16:24:e0:b1:55:23:c3:6b:8d:b8:bc:fc:7d:75:
4e:cd:b3:41:80:f7:a8:36:0f:93:e9:ff:e2:46:4b:bd:1f:40:
88:a1:aa:98:1b:47:6a:8d:62:38:c7:fb:3a:0e:79:47:9d:1c:
3b:77:7a:ef:78:dc:c5:45:e4:cc:e5:d0:f4:04:f1:b7:76:fe:
0f:0a:9a:83:9a:67:73:74:f5:c3:f2:fd:43:5f:d5:20:9d:45:
ba:e0:3e:4c:a4:b6:cf:ba:88:d5:cb:82:5b:32:82:54:db:38:
05:cc:37:ef:62:b3:e0:9f:b4:ee:14:00:bb:36:6c:31:fa:23:
c8:55:98:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:44 2025 by rpki-client