
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft
File: X5K_96iahZDmq7rsAoKw8k4K_rI.mft (raw, json)
Hash identifier: rvlXi50J5EKhx5g69NdUSedQneNyjo2CZCLfBKcw9Iw=
Subject key identifier: BA:BB:4A:16:5D:54:6C:A1:D6:03:C7:8F:2D:F4:D7:42:45:16:54:DD
Authority key identifier: 5F:92:BF:F7:A8:9A:85:90:E6:AB:BA:EC:02:82:B0:F2:4E:0A:FE:B2
Certificate issuer: /CN=5f92bff7a89a8590e6abbaec0282b0f24e0afeb2
Certificate serial: 0194BCAA29238388CA1AB1195A032685E61D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft
Manifest number: 12E3
Signing time: Fri 31 Jan 2025 14:00:55 +0000
Manifest this update: Fri 31 Jan 2025 14:00:55 +0000
Manifest next update: Sat 01 Feb 2025 14:00:55 +0000
Files and hashes: 1: X5K_96iahZDmq7rsAoKw8k4K_rI.crl (hash: 9gwENMuXNXgX2++VFFQ/4k7zydF0v3+iNRD+8akbRIY=)
2: cZRy7XY5dDHs5DQ2e6HdBH1PnmM.roa (hash: 3JeVGhOmnf8UAWFgpjcbUPRndvwOtl5MmVpvoRBsyvw=)
3: evKhJ57xaSzVNl3Qur7cE-8m3B0.roa (hash: aCKoxKyHcj4KLd0GXx48dLEfPi6FKkTqW5i/PZZzxQY=)
4: g48iOiDRDJ_XgJvC4YquAwkHpcU.roa (hash: W/4pzvw1CPsXQg+e4ipuVBiSg+Ao5Jez6JAYyxmb4bg=)
5: qPyyZrBMf0ucOLd_oXC2xlNfpHI.roa (hash: maKG5skNiEELx6cnhHvPmlu2+gxjGrUB3RJ4ysfb/0Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:29:23:83:88:ca:1a:b1:19:5a:03:26:85:e6:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f92bff7a89a8590e6abbaec0282b0f24e0afeb2
Validity
Not Before: Jan 31 14:00:55 2025 GMT
Not After : Feb 1 14:00:55 2025 GMT
Subject: CN=babb4a165d546ca1d603c78f2df4d742451654dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8b:3e:58:e9:3a:7e:0c:83:a9:18:fb:59:0a:
c0:29:59:d7:45:f1:03:13:d6:f3:4f:55:a6:60:2f:
ec:39:35:c0:53:84:25:d5:f5:15:a5:06:8a:a0:94:
7d:0e:ae:06:5e:16:29:5a:af:0d:35:25:59:e7:1d:
a1:6e:b8:2b:8d:35:63:c9:4c:32:75:45:eb:16:cd:
57:a8:b1:fe:ae:23:9c:06:ae:3e:b2:e9:0f:1d:7a:
bb:1c:7c:a3:99:96:49:ec:ec:38:00:19:2e:30:51:
1c:03:af:0c:a7:5f:c5:ca:9a:b0:1d:22:c2:7e:eb:
87:56:75:b3:6e:42:e4:79:19:cd:2c:e8:f5:93:84:
1f:fb:14:ee:ee:4a:65:4c:aa:ec:cf:29:66:bf:23:
7e:dd:e2:b0:cd:c6:4e:a2:4e:1e:b7:19:6a:e4:0d:
d2:f9:92:d6:11:77:2c:b9:7d:29:98:12:49:45:03:
3f:8c:1c:6c:01:56:cd:d6:46:f0:0f:36:76:b2:e8:
59:c0:30:d8:6b:d2:12:28:01:c9:84:53:45:f1:9c:
6e:03:3c:7f:18:1d:a9:f4:2a:a8:8f:27:6d:34:9b:
02:c2:ab:49:f1:a8:2d:b8:59:23:76:2b:75:fe:96:
2c:6a:6f:a1:26:7b:0a:84:36:64:39:9d:2f:e9:1e:
21:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BB:4A:16:5D:54:6C:A1:D6:03:C7:8F:2D:F4:D7:42:45:16:54:DD
X509v3 Authority Key Identifier:
keyid:5F:92:BF:F7:A8:9A:85:90:E6:AB:BA:EC:02:82:B0:F2:4E:0A:FE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c8:6b:2d:07:00:e2:20:d5:13:f9:98:23:29:eb:78:7c:a4:
7f:d1:90:fb:32:eb:0d:cf:b9:69:33:ac:27:d9:41:b7:24:5e:
b0:2a:d1:7a:97:e0:ed:da:30:9a:9b:e4:6b:3e:13:5f:62:8e:
b7:f4:3e:05:c2:9e:c7:09:a2:5e:c7:b0:24:d2:60:4f:95:e3:
84:e4:ad:26:a6:a3:d7:80:03:b8:28:b9:19:eb:75:39:62:e7:
3e:56:52:b0:14:94:6e:f4:66:de:aa:df:78:60:32:e0:9f:8e:
c5:fa:ae:18:19:91:42:9b:e3:30:fa:f1:10:2d:a3:2e:a2:b2:
82:7c:c4:26:d3:38:12:9e:16:27:e7:8d:4b:98:92:0a:37:1b:
77:dd:fc:f7:29:70:31:46:14:e3:0e:e2:f5:f8:78:30:d8:e4:
c1:9e:92:9f:75:3d:6f:57:8a:0a:d9:2f:1e:88:7d:02:27:99:
d3:11:d8:1d:43:27:0d:49:d1:57:e6:2c:77:c0:c3:f4:d0:71:
e2:13:8e:37:00:19:7e:4a:c3:02:b6:aa:6f:a2:99:45:5a:61:
a1:cd:14:e9:6e:37:6c:c7:6a:26:f8:c6:c0:78:e5:9c:79:d2:
a7:ce:94:52:7c:14:65:0b:34:6a:6a:02:ce:0a:a6:75:50:b5:
54:e2:cc:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:46 2025 by rpki-client