Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
File: 5c4xqiBddBAUR-_9bDE1GGFGRTo.mft (raw, json)
Hash identifier: MFWIfQgs9cy6KMdCNgvB+k/LnGFyZ1Lv8u626oX1o5Q=
Subject key identifier: 4F:A8:9F:63:D6:E6:5C:4D:36:3C:C1:2E:19:3A:35:18:4F:D2:E2:A4
Authority key identifier: E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A
Certificate issuer: /CN=e5ce31aa205d74101447effd6c3135186146453a
Certificate serial: 0194BCA9D779EC62419654B618215FA53130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 14:00:34 +0000
Manifest this update: Fri 31 Jan 2025 14:00:34 +0000
Manifest next update: Sat 01 Feb 2025 14:00:34 +0000
Files and hashes: 1: 1prUVz0HPmxrICK89MLWQGvd_os.roa (hash: nYOxG6xI/OF/g1onNafntFHFC9rtfVRgZj8b/z6tXRg=)
2: 5c4xqiBddBAUR-_9bDE1GGFGRTo.crl (hash: i7TuRn8rz2VmhOwh3mHfIgyayc8sgbnnYB1ZwEtThbs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d7:79:ec:62:41:96:54:b6:18:21:5f:a5:31:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5ce31aa205d74101447effd6c3135186146453a
Validity
Not Before: Jan 31 14:00:34 2025 GMT
Not After : Feb 1 14:00:34 2025 GMT
Subject: CN=4fa89f63d6e65c4d363cc12e193a35184fd2e2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:00:c2:c8:a6:83:87:05:fe:bd:28:8a:f6:9f:
f1:17:da:6e:73:a6:25:d6:d3:86:3b:5b:1f:ec:1e:
ed:63:1c:e7:d0:d0:6d:9b:22:b0:91:4d:b4:6d:66:
b9:78:7d:2a:98:97:a8:27:94:49:cd:3e:2f:d5:9b:
cd:c2:94:7c:53:70:34:5e:d0:d9:8b:35:5d:8c:c7:
ba:b6:95:74:50:fb:60:3d:10:ed:f7:79:ea:66:67:
5a:50:d5:9e:2a:3c:d7:ad:c0:65:25:1e:55:e3:ff:
eb:05:7f:91:a0:fe:ac:86:9e:3b:7f:00:4f:b8:e8:
45:34:f2:7a:ae:d6:00:25:29:6d:e6:c6:70:3c:39:
77:85:f2:ae:ef:ba:71:db:62:c4:be:03:08:5f:ef:
bb:43:45:5a:51:ca:2b:34:09:ed:c2:0c:ae:8e:27:
3a:58:c3:21:f2:6b:28:7d:f3:60:74:62:ec:27:e5:
4c:74:b2:39:fc:ab:a9:17:12:c5:05:5d:c1:3d:1e:
b7:a4:39:8f:09:3d:f4:f0:44:00:05:3b:fe:b3:28:
59:26:da:a4:2a:19:a9:1b:2a:cf:74:21:ca:46:57:
8e:de:cc:33:71:7a:1d:17:84:7a:99:d9:d3:d8:ab:
19:61:19:b1:5b:6a:e2:83:c4:8a:81:4f:33:82:af:
c5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A8:9F:63:D6:E6:5C:4D:36:3C:C1:2E:19:3A:35:18:4F:D2:E2:A4
X509v3 Authority Key Identifier:
keyid:E5:CE:31:AA:20:5D:74:10:14:47:EF:FD:6C:31:35:18:61:46:45:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c4xqiBddBAUR-_9bDE1GGFGRTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8c8524-7f85-4313-8ed2-bf866da747af/1/5c4xqiBddBAUR-_9bDE1GGFGRTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:78:6d:d4:e3:59:11:e9:63:de:a9:32:11:a3:fc:98:d9:32:
37:d4:10:80:2e:dc:d7:3f:5f:a5:50:d4:a1:bb:36:95:a1:d5:
78:6d:48:4e:1e:ff:69:96:b9:71:82:ea:96:2b:94:6c:3f:d7:
4c:8d:c8:99:ac:44:01:46:e0:cc:8a:da:77:85:10:d4:4a:d2:
10:88:c6:27:a2:c3:fb:63:ce:db:c4:67:a2:fa:2c:eb:30:ff:
45:89:b0:b4:5c:22:17:28:3e:21:c6:bd:4e:b5:69:11:1a:0f:
30:7b:72:6a:96:3d:05:6e:c8:e9:ed:9c:b9:fd:27:ea:12:aa:
11:56:61:36:e8:42:70:e7:17:06:bb:77:80:bc:ec:f2:f2:1c:
b8:3a:a9:e8:1a:11:78:6e:12:2f:5e:9f:cf:cd:28:59:15:db:
5e:12:44:62:13:d5:8a:7c:70:de:ba:12:4a:fa:f5:84:7a:41:
4c:56:c1:ee:f0:a0:5b:fe:a3:af:86:cb:c0:57:01:d4:23:7b:
4e:b6:8c:3d:20:e9:af:33:60:2e:4c:a6:03:76:fe:1e:64:9b:
15:ab:43:b7:2d:6b:05:5a:92:a5:1f:a1:aa:17:a2:08:b3:66:
99:7c:be:a8:a1:ad:c5:94:16:04:0e:93:ba:69:55:fb:14:4c:
b1:67:c0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:42 2025 by rpki-client