Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
File: 05EjiA9CdEbV_wfO-WM-htxJGY0.mft (raw, json)
Hash identifier: vlAP2UK1wJfnD7Lt1PIjZ7I7vr4s6rwmOGSiyypyBug=
Subject key identifier: 13:2C:D1:44:5C:1F:BE:16:CF:DC:5F:90:E7:E3:6D:DA:9E:AA:C6:CE
Authority key identifier: D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D
Certificate issuer: /CN=d39123880f427446d5ff07cef9633e86dc49198d
Certificate serial: 0194BC3C039471CB0E5CC31548E20B3E60CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
Manifest number: 0513
Signing time: Fri 31 Jan 2025 12:00:37 +0000
Manifest this update: Fri 31 Jan 2025 12:00:37 +0000
Manifest next update: Sat 01 Feb 2025 12:00:37 +0000
Files and hashes: 1: 05EjiA9CdEbV_wfO-WM-htxJGY0.crl (hash: XqsqZQGt/Z2uk9lh925facn6fPHXfJhSNakqbbytv3s=)
2: 1-HePaXJiClEhHOw237Wa73vaFTc.roa (hash: 4PUKfjaEAzPB9R2XBWxJhNfJbqqZiV/WF7YuGVgHgMI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:03:94:71:cb:0e:5c:c3:15:48:e2:0b:3e:60:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d39123880f427446d5ff07cef9633e86dc49198d
Validity
Not Before: Jan 31 12:00:37 2025 GMT
Not After : Feb 1 12:00:37 2025 GMT
Subject: CN=132cd1445c1fbe16cfdc5f90e7e36dda9eaac6ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:81:e8:35:f8:bc:af:50:59:d9:3a:8c:66:1c:
f6:19:d2:88:ad:57:8a:4f:76:9a:4f:66:f9:a3:41:
43:13:4d:ee:2b:c4:66:1e:99:cb:1d:b4:2e:c6:c1:
91:bf:d4:8a:15:1d:50:37:b5:c8:9f:78:6b:cc:22:
ec:d3:9b:ca:b0:23:35:88:78:03:ae:2e:60:7d:90:
34:83:00:e6:c3:1b:c6:df:28:2c:1b:b3:e5:d1:60:
ca:7a:cf:95:78:5e:78:7d:aa:4c:95:7f:29:9d:f6:
4a:73:df:e9:0d:6d:f9:bb:64:e3:39:6b:ae:fd:43:
79:7f:8f:17:1b:83:5f:0c:67:0b:53:d3:3f:4d:8b:
64:7c:ea:20:b6:25:b4:f8:b2:fe:eb:70:0b:e5:aa:
8a:61:7e:9b:fe:8f:a8:41:5e:3f:53:10:02:c3:69:
18:bc:d5:7c:92:b0:34:01:70:ad:bc:9c:4d:c6:ac:
88:82:3c:bb:2c:e8:a7:fc:d4:0b:e0:ce:bd:4a:20:
4d:ff:33:bb:3e:3f:ce:c8:b8:d9:b2:fd:9e:a4:f2:
99:9a:79:71:f7:5c:e9:55:58:b7:31:d7:75:b7:d7:
6a:82:ec:d3:96:97:b3:71:54:2f:66:d4:1f:0b:47:
7f:68:36:ee:29:22:e9:9c:50:4c:f3:00:0d:f2:4a:
98:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2C:D1:44:5C:1F:BE:16:CF:DC:5F:90:E7:E3:6D:DA:9E:AA:C6:CE
X509v3 Authority Key Identifier:
keyid:D3:91:23:88:0F:42:74:46:D5:FF:07:CE:F9:63:3E:86:DC:49:19:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05EjiA9CdEbV_wfO-WM-htxJGY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/661b84-114d-4929-b684-cca0ad2685ca/1/05EjiA9CdEbV_wfO-WM-htxJGY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d2:a4:10:39:51:24:df:39:32:e4:2a:b9:9f:fa:58:e8:e1:
67:09:14:51:78:65:70:16:a8:77:82:46:c5:54:32:f1:23:12:
d3:68:f3:a4:6c:4a:ce:f2:d3:10:f7:da:ed:6b:b5:17:4a:f4:
b2:b8:8b:88:9a:b6:82:fb:0d:c2:60:ea:db:c2:21:eb:ec:b1:
7f:c8:a2:07:70:ed:84:31:88:2f:f1:81:a0:92:87:5d:bc:e1:
3b:ee:5f:0f:1c:87:d4:b8:05:07:34:60:5d:da:7a:34:71:3f:
1c:a4:79:9a:45:a9:b2:67:d4:ed:50:df:3d:47:8a:92:00:01:
9c:bd:2a:4c:5b:b8:76:d0:54:a7:c3:c7:25:7e:d9:d7:ab:c1:
ae:5d:52:b1:53:b1:b8:92:1b:3c:55:a1:f2:84:ea:a0:c7:52:
c8:34:b9:75:9c:f2:fd:1c:53:a9:27:b0:9e:92:19:b5:2b:81:
fb:35:72:df:a9:2c:fc:53:3f:7e:f5:e6:04:19:1e:9f:27:57:
86:9d:02:a8:b1:ab:6c:8f:d1:15:77:fb:36:b1:92:02:99:76:
35:da:10:ae:6e:64:90:ec:53:fa:33:af:43:ae:d9:7d:60:cc:
7a:b8:51:73:2d:a5:8e:03:d9:79:07:6e:bc:76:77:66:38:19:
e0:d0:da:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:30 2025 by rpki-client