Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.mft
File: 5eioFf01iudtJ0sEWwpxW9UcYng.mft (raw, json)
Hash identifier: Gcml3cxGbdRFLdKfOU8sPCFshbxX1CMwpAE0HfEHgP4=
Subject key identifier: D3:7C:BA:9F:3E:C0:A0:6B:82:B3:DA:03:12:14:6F:80:53:9B:CC:CC
Authority key identifier: E5:E8:A8:15:FD:35:8A:E7:6D:27:4B:04:5B:0A:71:5B:D5:1C:62:78
Certificate issuer: /CN=e5e8a815fd358ae76d274b045b0a715bd51c6278
Certificate serial: 0194BCA9771F319F336B1FA5E8C04BD5BC76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eioFf01iudtJ0sEWwpxW9UcYng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.mft
Manifest number: 0292
Signing time: Fri 31 Jan 2025 14:00:10 +0000
Manifest this update: Fri 31 Jan 2025 14:00:10 +0000
Manifest next update: Sat 01 Feb 2025 14:00:10 +0000
Files and hashes: 1: 5eioFf01iudtJ0sEWwpxW9UcYng.crl (hash: F1sdflJfj9yjry7NXoHIP0xioJdbNsn3kkN0uAoCvFs=)
2: zgXChFab3CAW1cEIvlaaHwBihDQ.roa (hash: KIPNLp3NHIAV1bWGC3MaoaY8HHw3uTlNTX/DpY4nEoA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:77:1f:31:9f:33:6b:1f:a5:e8:c0:4b:d5:bc:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e8a815fd358ae76d274b045b0a715bd51c6278
Validity
Not Before: Jan 31 14:00:10 2025 GMT
Not After : Feb 1 14:00:10 2025 GMT
Subject: CN=d37cba9f3ec0a06b82b3da0312146f80539bcccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:12:76:00:20:ca:7c:4b:40:d0:46:46:ee:8d:
b7:06:87:ac:ad:99:30:1a:16:b6:eb:f0:7e:28:2b:
41:48:ec:60:4c:e8:bc:39:b1:6f:76:4d:73:81:c8:
79:14:86:1c:01:07:49:64:3e:d0:83:5a:09:7e:73:
e2:c6:83:d7:59:d6:4a:36:bd:33:fa:2b:93:5b:2f:
01:38:6c:90:ca:69:46:8a:00:67:b3:65:48:25:b0:
c5:20:94:70:d0:f7:72:77:a6:4e:c4:c3:dc:96:08:
9a:cc:c1:1d:75:aa:b8:76:79:58:f7:0e:98:7f:8e:
4e:8e:23:e7:d9:d5:6f:56:60:4f:6e:ab:98:7d:c3:
61:c7:fa:4b:a0:e7:ce:8b:4f:fd:ca:18:69:81:d3:
b4:e5:71:95:8d:fc:f1:28:43:5d:73:40:60:63:bf:
57:a7:8f:44:2f:f4:59:d1:63:54:db:43:05:52:a5:
86:a4:98:da:d6:ba:9a:8a:55:4f:42:86:ea:33:79:
0a:b9:05:85:45:ed:28:23:c6:95:28:2e:a7:4a:1a:
24:e1:90:92:78:7c:8e:21:18:ed:e4:da:99:9a:7b:
b4:3b:9e:60:97:87:83:3a:4a:60:2d:0c:cf:2b:4a:
ec:62:6b:78:dd:11:6d:1e:75:08:4a:bb:6a:ef:b7:
e3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7C:BA:9F:3E:C0:A0:6B:82:B3:DA:03:12:14:6F:80:53:9B:CC:CC
X509v3 Authority Key Identifier:
keyid:E5:E8:A8:15:FD:35:8A:E7:6D:27:4B:04:5B:0A:71:5B:D5:1C:62:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eioFf01iudtJ0sEWwpxW9UcYng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/923e78-78a7-4d97-9a7c-786de3d1abe4/1/5eioFf01iudtJ0sEWwpxW9UcYng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:cb:f3:e2:63:2d:f1:f8:92:c5:0f:59:a8:69:56:2f:a3:57:
fc:fd:bc:fd:62:df:73:cd:36:b1:d4:96:5f:ac:32:26:ff:95:
6b:72:b3:36:86:40:8e:7e:01:c5:a1:af:cb:be:5b:76:05:23:
57:ec:cb:c2:4d:f5:10:95:1f:5e:54:3b:59:fb:33:52:23:93:
ab:49:86:a1:d7:0f:1a:74:5b:1b:e8:20:ac:ef:10:b4:ec:21:
76:55:77:3e:df:2d:ec:13:0c:1a:05:70:fc:2a:a5:c2:60:52:
15:16:f6:26:1e:96:ff:d7:75:53:49:60:66:f4:1b:3f:20:8a:
a8:54:4f:29:3e:0d:23:43:1d:ce:f4:34:c2:49:06:21:38:8e:
3d:61:12:16:bc:41:9d:e0:33:0e:79:b7:37:6c:56:ad:d8:e4:
09:1e:ed:38:e0:55:e8:e3:98:5b:d9:7d:2f:ba:1d:ff:53:f4:
e6:19:79:aa:a6:92:c7:85:5f:53:52:b6:11:6b:c2:f0:e4:68:
f2:23:ef:d4:30:59:57:6e:0e:8b:ca:d3:d6:df:2f:22:e5:d9:
a3:c0:92:cd:44:b3:d5:5b:a0:3b:f4:9e:4c:a5:21:f7:cd:75:
38:01:33:d6:14:0e:2b:cd:d5:cc:45:60:88:d4:2e:eb:84:28:
7f:d5:42:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:55 2025 by rpki-client