Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
File: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft (raw, json)
Hash identifier: Bh0q6FYKMjg2XWxnvVUvI84NB0vOsXXS/WDDx3JgPQo=
Subject key identifier: 1A:A7:FC:88:78:F7:70:1A:DC:F2:9B:56:A4:87:0A:1E:0A:24:06:7C
Authority key identifier: E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
Certificate issuer: /CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Certificate serial: 0194BC04F00DD88437674C0F8FE6829D0569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
Manifest number: 0899
Signing time: Fri 31 Jan 2025 11:00:27 +0000
Manifest this update: Fri 31 Jan 2025 11:00:27 +0000
Manifest next update: Sat 01 Feb 2025 11:00:27 +0000
Files and hashes: 1: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl (hash: QiRSCQ4kVQbIuGN6cZ7jffmB26cySLJtnLRbPGQBrg8=)
2: Rc60vV-F1L-UqYzdKcZQOm60y-0.roa (hash: FQKstCOFxWP7ZQ28iVRSWHUy45Tut7m/+zZH8tzdTxg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f0:0d:d8:84:37:67:4c:0f:8f:e6:82:9d:05:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Validity
Not Before: Jan 31 11:00:27 2025 GMT
Not After : Feb 1 11:00:27 2025 GMT
Subject: CN=1aa7fc8878f7701adcf29b56a4870a1e0a24067c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e4:7d:b0:22:9b:67:51:57:96:8b:9c:9c:77:
ad:12:4b:37:d8:be:37:ee:1e:8a:d5:98:af:33:1d:
3c:3a:0a:90:d3:79:77:f8:7f:56:7e:41:67:e7:ce:
91:40:9a:d9:64:29:ce:ad:78:81:8b:e6:a0:36:f7:
2e:4d:67:0c:ac:4f:e1:9d:61:a4:68:79:1e:51:44:
d6:ed:4f:70:ac:67:35:f7:29:39:43:f4:fe:29:30:
f4:50:c8:9f:4d:ef:45:0d:1a:bc:75:bc:7d:69:f1:
4f:e7:06:b9:f3:4f:cf:e6:38:e1:c5:a9:1c:9c:15:
47:45:85:28:de:c6:74:f3:ed:8b:2f:b4:45:bb:a3:
6f:62:ce:f8:76:5d:c0:53:95:e0:0f:ac:42:6c:3a:
d5:43:c5:40:ac:1f:0f:61:b5:76:e2:04:6d:11:4b:
b1:c1:1a:55:ff:25:ac:eb:52:99:8a:bc:a4:22:0c:
74:cd:ee:bc:e1:c6:26:a2:1f:a5:a4:b6:83:5b:b8:
da:6e:94:55:fb:52:18:b1:ca:bb:f3:75:ed:58:0d:
c5:f5:45:e3:c3:7c:fd:56:1d:85:4e:c1:02:4e:25:
a8:00:60:3a:75:64:3d:6c:96:c2:62:5a:c5:f0:43:
51:80:d9:a3:39:24:da:fb:a5:e2:56:64:5c:9a:d8:
fb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A7:FC:88:78:F7:70:1A:DC:F2:9B:56:A4:87:0A:1E:0A:24:06:7C
X509v3 Authority Key Identifier:
keyid:E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:0d:ee:0b:fe:9c:9b:9d:5a:68:33:fe:e2:2d:64:5e:6b:c3:
42:0e:d9:18:30:ec:f6:58:cc:56:a1:87:e4:6e:cd:ea:d5:5d:
f5:09:7c:9a:b5:42:a9:55:b2:c8:5f:00:65:48:f4:97:2f:c5:
40:d6:b9:49:38:5b:a9:3d:cd:23:40:f7:5d:d0:fb:e6:2a:bc:
b5:6b:1a:19:7a:1f:d3:85:b4:42:91:ec:92:28:43:09:a3:06:
56:82:05:25:d2:5c:4a:3e:97:f1:5a:fe:14:ff:67:ff:fb:54:
0d:f5:1b:c3:b4:2e:12:1e:69:40:a1:f4:c5:9a:f7:45:19:b7:
2b:2a:87:e1:45:6d:97:06:ab:fe:5a:f4:b3:ee:f0:dc:34:93:
38:21:a9:ad:27:ed:48:71:df:26:29:26:9a:68:44:fc:3c:32:
15:00:87:1f:b2:8f:60:da:6e:e5:c1:21:61:e6:54:66:10:78:
c4:85:e4:0b:7c:80:2a:5d:27:88:33:bc:a5:af:2f:6b:c5:00:
f0:37:56:d8:cc:07:d8:fc:dc:26:35:bb:5c:63:40:41:f7:96:
0a:63:76:07:60:80:8d:67:1c:40:14:2b:28:0c:ea:42:78:a3:
69:98:41:93:d9:42:de:b1:71:ad:5c:7a:16:c9:b5:51:5b:ba:
91:96:f8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:25:30 2025 by rpki-client