Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
File: 5WzVePQvjeBnI2dnxs_CusvBbgU.mft (raw, json)
Hash identifier: oIRJhQp7OdnvQdlJq3Oj1UHTE6qAlwDFFrWgSs+IpPE=
Subject key identifier: 99:A6:3F:C3:29:1E:03:29:2D:00:E5:5D:8A:97:F6:8C:70:F9:36:0B
Authority key identifier: E5:6C:D5:78:F4:2F:8D:E0:67:23:67:67:C6:CF:C2:BA:CB:C1:6E:05
Certificate issuer: /CN=e56cd578f42f8de067236767c6cfc2bacbc16e05
Certificate serial: 0194BCAA09D6F3011BA3E566E720C54D63F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
Manifest number: 13A8
Signing time: Fri 31 Jan 2025 14:00:47 +0000
Manifest this update: Fri 31 Jan 2025 14:00:47 +0000
Manifest next update: Sat 01 Feb 2025 14:00:47 +0000
Files and hashes: 1: 5WzVePQvjeBnI2dnxs_CusvBbgU.crl (hash: 9n7vQrQsd3/cBycjS4ypnyB/2Oz+2mF+2sDdECNnOac=)
2: QNHfp-QpZNwcvnNXnGl6CZVZ8Tc.roa (hash: 6rWKjyivZLws8Y1JTJaRv4be4dA3ijdzaWgzmRI12KU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:09:d6:f3:01:1b:a3:e5:66:e7:20:c5:4d:63:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e56cd578f42f8de067236767c6cfc2bacbc16e05
Validity
Not Before: Jan 31 14:00:47 2025 GMT
Not After : Feb 1 14:00:47 2025 GMT
Subject: CN=99a63fc3291e03292d00e55d8a97f68c70f9360b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:79:5a:7b:8f:98:4e:5d:81:ad:76:b2:04:cd:
0f:6b:a9:d2:4a:fd:45:a1:77:3a:81:84:fe:c4:53:
d5:12:05:1d:5c:6d:9f:ab:7e:40:15:69:dd:e8:5f:
1c:af:51:5b:03:75:02:26:f6:94:66:d3:e6:47:fe:
8e:fc:5f:a4:e0:b2:ee:2f:e0:4f:24:07:01:44:bc:
98:8c:f3:55:00:6b:54:e1:6e:b6:05:32:42:b2:90:
47:09:5c:65:71:43:f3:cb:35:c9:ec:9b:b6:e9:6f:
2c:4f:ad:1f:b9:2d:99:28:12:67:67:3c:b6:9d:c8:
3a:ec:24:0e:c9:53:32:fa:04:03:2e:57:21:d3:e8:
30:49:6b:c8:94:90:83:7c:ca:f3:4b:83:50:e4:75:
ea:24:4b:30:ec:ca:47:ef:b1:cd:6b:fd:16:8c:a3:
ae:95:7e:b7:54:97:c9:db:11:2e:4c:63:3c:2c:78:
9a:eb:91:96:09:5e:ed:5d:54:c3:31:80:10:33:64:
a9:05:73:3a:46:18:be:2f:20:08:be:75:60:0e:e1:
d5:8a:71:2c:af:2a:df:99:6c:18:bf:f8:1a:12:ea:
12:93:a6:6d:b8:54:58:f8:10:f8:d5:2b:69:7c:22:
e6:67:53:40:c2:f4:42:51:3e:e0:46:ae:dd:f4:6f:
e7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A6:3F:C3:29:1E:03:29:2D:00:E5:5D:8A:97:F6:8C:70:F9:36:0B
X509v3 Authority Key Identifier:
keyid:E5:6C:D5:78:F4:2F:8D:E0:67:23:67:67:C6:CF:C2:BA:CB:C1:6E:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:a6:59:42:b4:96:cb:b4:4a:60:73:c7:10:84:03:30:99:7a:
cf:6e:c3:70:b1:2a:3e:64:69:a8:ed:ee:f5:88:89:e8:6d:18:
c7:1d:fd:94:5d:04:11:94:18:c2:b8:3b:4d:0b:d8:f7:22:7d:
90:14:8b:d6:16:ac:9b:d3:1a:66:6d:f4:ad:68:1c:25:64:ba:
62:8a:b9:06:2c:6f:01:c7:40:ac:8a:f4:3a:4f:46:d4:58:fa:
a3:41:82:7c:d5:95:21:15:a3:48:58:3a:54:4b:8b:2d:f9:9d:
c9:07:8b:24:cd:be:fe:5c:4b:f9:38:ce:00:7c:4c:ae:4a:4e:
8e:37:ee:bd:39:88:43:5a:79:a7:77:28:07:f7:78:e6:d8:51:
65:42:8b:c4:65:3a:91:a5:13:7a:9c:49:5d:59:94:45:b3:84:
b5:e4:50:d6:a4:07:56:19:53:9d:a8:3c:6f:4d:75:5a:cd:1d:
f4:10:fb:24:63:b4:f7:bb:6d:69:c6:51:10:be:0c:90:c8:39:
0d:66:df:c0:74:ad:36:d7:18:72:09:4a:4f:31:6c:4a:f4:07:
53:f8:21:74:ed:50:f6:74:7a:6b:e2:7a:c2:88:ae:77:52:23:
33:2c:2c:a8:d1:93:20:9e:57:12:40:28:81:b9:c6:1d:81:26:
e1:66:39:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:02 2025 by rpki-client