Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
File: 5MzXNQiptZmF1Vl4aOOl1ex0X14.mft (raw, json)
Hash identifier: be98xw0rD9SAfGKS0kL8rHMfM0j8TSzb5IagImchkNI=
Subject key identifier: 2E:DF:51:5E:28:01:C4:0D:66:6D:96:73:C7:D6:99:31:E2:72:AA:E0
Authority key identifier: E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E
Certificate issuer: /CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
Certificate serial: 0194BD174D7F2D2D7FF6CADD2997DA03C0F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
Manifest number: 0BF9
Signing time: Fri 31 Jan 2025 16:00:08 +0000
Manifest this update: Fri 31 Jan 2025 16:00:08 +0000
Manifest next update: Sat 01 Feb 2025 16:00:08 +0000
Files and hashes: 1: 5MzXNQiptZmF1Vl4aOOl1ex0X14.crl (hash: /UQ/+ImLVcxLt3vshYbNsEjG/bDEKCrM7/gi283Mfik=)
2: XKgFLRL69SL60NdfQXwm1QTIJjA.roa (hash: gmsw3/0a1oqoWvmsXkV41iDiqrBjRS4S2LvnTqx2H9E=)
3: olWcwiaAoq2wbYuXrz1GVqOmILU.roa (hash: Elg7s5AYrUxQTxV0rajyo3IZzGiW80+xg0M4V3aItiA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:4d:7f:2d:2d:7f:f6:ca:dd:29:97:da:03:c0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
Validity
Not Before: Jan 31 16:00:08 2025 GMT
Not After : Feb 1 16:00:08 2025 GMT
Subject: CN=2edf515e2801c40d666d9673c7d69931e272aae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b8:01:13:72:d8:d7:23:24:8e:28:55:e6:10:
7c:80:b2:60:ac:20:9d:16:d4:5a:ee:26:d4:75:91:
79:ef:9a:36:af:39:eb:fd:4e:ca:b9:9e:e8:37:c2:
69:f4:57:88:5a:86:fe:6b:12:f8:cd:8a:28:08:07:
8e:00:cc:23:28:40:9d:69:84:8a:c7:c8:8a:44:ff:
d3:14:6e:16:92:60:6d:74:93:21:a2:f3:0f:56:df:
24:bc:9d:0e:b2:e5:4e:13:97:a0:88:44:b4:76:9d:
45:8e:0f:31:75:cd:ab:0f:52:7d:c5:ff:b9:ae:90:
b7:7a:ef:90:ff:8d:8a:ee:ae:4f:a8:63:c7:d4:f0:
10:21:1c:f9:18:3a:52:46:79:f9:1a:49:fb:4a:ab:
f5:ce:42:e8:ef:98:54:9b:c7:14:08:3e:0b:b3:3d:
79:1f:da:2d:a8:3e:a1:ad:17:8a:04:e8:b7:b3:55:
49:a5:eb:a8:07:39:9d:c8:02:a6:02:f8:6c:9d:e1:
9d:c5:f6:0c:86:43:a4:df:25:55:6f:5b:d2:04:23:
92:23:af:2f:19:8a:49:e4:e6:89:c5:8c:ee:95:91:
65:fc:30:98:3b:f8:bf:f8:28:ac:69:86:41:89:02:
55:8a:8f:8c:cc:26:c9:6a:ab:96:f3:32:47:4a:f6:
d4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DF:51:5E:28:01:C4:0D:66:6D:96:73:C7:D6:99:31:E2:72:AA:E0
X509v3 Authority Key Identifier:
keyid:E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ef:a7:5d:d7:a7:55:67:3e:03:30:c4:50:b3:ac:45:bc:20:
a5:d8:5d:d3:f0:48:0a:b7:99:92:71:ee:9a:66:62:64:c1:85:
50:f6:af:a4:f9:82:30:a1:18:02:7b:20:46:30:c8:b8:71:af:
e9:63:64:44:46:50:4e:1a:54:76:95:63:e0:61:9e:48:45:d0:
b0:48:34:55:26:3b:39:af:09:ab:58:83:05:79:d4:ef:03:04:
da:40:15:c6:f0:85:6f:98:c0:42:07:3c:f4:18:97:68:18:bf:
f3:8e:39:a1:b6:43:43:87:a4:6f:f1:e8:41:62:2c:ba:67:90:
9b:e0:be:40:49:47:43:9f:f2:eb:fc:38:38:68:9f:24:32:71:
39:3c:59:80:50:3a:12:de:13:bb:53:29:a7:e1:28:fb:33:be:
94:17:23:7d:81:6a:29:e4:a8:1f:08:40:a2:5a:9b:6f:a0:00:
3e:c0:45:ce:9a:73:36:2d:a5:9d:6c:34:88:35:6f:f4:fc:1c:
69:be:2b:b2:48:c3:b3:a3:54:67:50:a6:47:20:3a:a6:52:db:
3c:42:ad:c4:8a:b4:b4:3f:74:b2:9e:1a:86:4f:6d:ea:c3:bd:
5f:f5:72:58:8e:be:85:c9:52:db:3f:76:8f:1d:0c:73:4f:6a:
5c:d5:d7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:40 2025 by rpki-client