Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
File: 5nEAZ58HKCzUjLUQe_l69684ick.mft (raw, json)
Hash identifier: v2cfuwCWyinWlFrjLCCqGpy4naNc6kepSfLDf0FULUE=
Subject key identifier: E1:7A:AF:78:37:A5:DC:CB:54:6D:C7:29:F7:07:86:C4:4C:59:16:1B
Authority key identifier: E6:71:00:67:9F:07:28:2C:D4:8C:B5:10:7B:F9:7A:F7:AF:38:89:C9
Certificate issuer: /CN=e67100679f07282cd48cb5107bf97af7af3889c9
Certificate serial: 0194BC72DB40846EC2DDFC61D25E7CAF6C41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 13:00:31 +0000
Manifest this update: Fri 31 Jan 2025 13:00:31 +0000
Manifest next update: Sat 01 Feb 2025 13:00:31 +0000
Files and hashes: 1: 5nEAZ58HKCzUjLUQe_l69684ick.crl (hash: O4bsRf+DmAbeAlUcBleD+88RcvwiblIHtTIc181xAjc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:db:40:84:6e:c2:dd:fc:61:d2:5e:7c:af:6c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67100679f07282cd48cb5107bf97af7af3889c9
Validity
Not Before: Jan 31 13:00:31 2025 GMT
Not After : Feb 1 13:00:31 2025 GMT
Subject: CN=e17aaf7837a5dccb546dc729f70786c44c59161b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:26:21:3d:9f:5c:8f:88:f1:7b:4e:d1:20:2f:
b7:1b:76:73:9e:dc:48:b3:ed:3b:45:9b:c7:c5:3a:
df:ef:6b:56:3d:d3:f5:99:c9:ca:87:f0:ac:20:68:
9d:13:54:31:2f:ba:cf:5e:3f:df:93:a4:49:90:84:
16:be:19:dd:4c:e7:2b:11:7a:9f:40:21:a8:f6:f1:
c3:1b:90:a4:e8:cf:8a:8d:bd:30:31:18:fa:83:34:
8a:37:68:a5:bb:48:8e:cb:6c:45:37:17:fd:dc:b6:
f2:a7:7b:c4:b4:75:c6:ce:3c:5d:e1:d4:d7:84:6f:
8e:a1:00:7c:a7:85:fa:44:94:9c:52:2b:12:4c:7f:
23:64:57:9d:ed:57:3a:82:f6:87:27:63:d6:66:ec:
86:5b:60:46:ca:30:3d:a2:73:14:71:e9:c0:4f:a9:
8d:bf:93:4c:1f:c3:7f:55:5e:27:2c:99:dd:47:0b:
2f:4c:70:c8:02:25:0e:f8:b2:85:ce:7d:86:fa:d8:
01:db:27:2d:13:25:90:22:f9:f7:04:fa:cf:dc:f9:
a0:10:98:35:60:eb:99:48:e4:b7:4d:9e:b2:a6:ad:
cd:7d:61:6e:cf:27:89:87:89:00:c9:d6:74:70:d7:
39:9e:92:68:bc:c6:f5:d9:d6:b5:7c:92:50:d5:3d:
43:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7A:AF:78:37:A5:DC:CB:54:6D:C7:29:F7:07:86:C4:4C:59:16:1B
X509v3 Authority Key Identifier:
keyid:E6:71:00:67:9F:07:28:2C:D4:8C:B5:10:7B:F9:7A:F7:AF:38:89:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:9a:29:3b:f3:6c:d8:ec:4f:96:7d:34:95:60:b9:e0:b2:62:
62:1e:45:ed:7c:82:9a:36:36:7e:8c:3a:98:1f:56:f4:7f:c3:
09:c4:f6:a0:d3:94:d0:b6:87:52:c4:67:4e:bd:ff:c0:45:e0:
0d:e9:fe:d4:a2:ca:f1:66:8e:d4:94:0d:80:ff:49:0f:04:00:
9f:ae:cf:33:ee:da:1b:ce:13:98:7e:eb:00:00:52:00:2e:8d:
7c:a8:54:02:bf:0a:3b:8c:98:4f:b9:51:24:a1:aa:14:84:34:
1e:89:08:0c:94:43:a9:f8:3c:ca:68:be:91:c8:53:0d:7b:8d:
a5:1a:6a:ba:98:91:01:b1:4b:b3:2f:68:de:b1:fa:a9:ac:6d:
ea:06:b0:76:0f:76:96:fa:2a:89:70:65:1b:63:a4:59:c0:5c:
74:9b:e8:cb:3a:e7:63:fb:44:80:b8:38:c3:46:82:93:83:54:
7c:66:05:bb:7d:a8:47:e7:a3:32:99:e8:9c:2b:0a:80:cd:7d:
1a:66:e0:6a:1a:ce:6b:9a:9b:6f:e0:8c:1c:99:ee:64:dc:be:
65:37:34:fe:b2:82:23:73:c6:b5:0f:85:b5:b9:7e:7e:53:d8:
b0:d2:f2:a4:a2:1c:ec:66:10:c0:a5:91:da:bf:99:63:62:89:
36:36:6a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:02 2025 by rpki-client