Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
File: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft (raw, json)
Hash identifier: ksJ7jOtjWLuPpb0cAyWKfx/zLCk8lWBZr5TV61T8UJg=
Subject key identifier: 44:C8:55:AC:28:8E:45:7A:A4:3D:EE:88:DF:E1:3D:83:EC:EE:50:4F
Authority key identifier: E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
Certificate issuer: /CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Certificate serial: 0194BD1811A179E3DC08CEDFDEE9E0EE811F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
Manifest number: 094D
Signing time: Fri 31 Jan 2025 16:00:58 +0000
Manifest this update: Fri 31 Jan 2025 16:00:58 +0000
Manifest next update: Sat 01 Feb 2025 16:00:58 +0000
Files and hashes: 1: 5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl (hash: OmXanibSY23iwWVLMMLse18ZhgeuWSSe1ijHGpB56Sw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:18:11:a1:79:e3:dc:08:ce:df:de:e9:e0:ee:81:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e51d717fb2d437d411d871af7b9fbcb01e89f96c
Validity
Not Before: Jan 31 16:00:58 2025 GMT
Not After : Feb 1 16:00:58 2025 GMT
Subject: CN=44c855ac288e457aa43dee88dfe13d83ecee504f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f1:ae:11:61:35:1a:ee:c6:20:bc:0d:58:4a:
65:84:8b:4b:e2:ed:f2:1f:4e:df:cf:7b:6b:4a:d9:
a2:e8:2c:8b:42:05:3f:03:58:69:f8:8b:e2:fe:75:
cb:b2:8a:c9:01:a5:df:98:28:fe:3f:63:83:12:9e:
4b:20:dd:38:2e:e6:9f:a9:2e:3d:a9:63:9f:23:8d:
17:12:e9:be:5f:04:68:e6:70:24:ba:fa:bf:4d:94:
e2:99:38:92:11:38:4f:f1:e9:60:91:7d:bf:cf:66:
72:ed:95:72:a0:fb:14:48:6f:fa:a7:0c:22:ee:73:
14:d2:12:23:d1:cb:cd:e2:fb:46:2a:a5:67:72:fb:
b4:b4:4f:59:d0:be:1f:91:e1:b2:19:36:b9:33:ff:
84:46:47:19:8a:e3:a8:d2:92:38:79:53:8e:57:7d:
a4:eb:2a:42:23:04:ab:b2:1c:69:b6:89:96:3c:a5:
4a:7d:26:f5:94:c2:5f:f1:e8:77:10:a3:e1:d6:26:
21:ef:bf:11:e0:30:67:99:6e:8d:d4:20:8d:23:36:
3a:2e:2b:62:3d:22:19:d3:38:42:16:c8:c6:8c:21:
68:7f:bf:c5:18:8f:5a:07:4b:80:a7:56:7d:eb:b1:
47:a1:5c:73:1e:3d:b4:22:1a:82:78:1b:5d:d8:ff:
1c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C8:55:AC:28:8E:45:7A:A4:3D:EE:88:DF:E1:3D:83:EC:EE:50:4F
X509v3 Authority Key Identifier:
keyid:E5:1D:71:7F:B2:D4:37:D4:11:D8:71:AF:7B:9F:BC:B0:1E:89:F9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5R1xf7LUN9QR2HGve5-8sB6J-Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/12ed65-415b-48fb-a3d9-314d5e2b66ca/1/5R1xf7LUN9QR2HGve5-8sB6J-Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:99:d3:24:46:b8:44:f2:bf:76:4a:c5:ed:73:79:eb:cd:51:
b7:9a:8e:04:34:76:8c:43:e8:9c:fa:2f:d9:4b:46:1a:41:f0:
58:2f:86:e7:4f:07:f2:a9:7c:98:af:7a:04:00:5e:cc:f7:c7:
b1:8c:2e:1e:6f:43:7e:34:08:f3:f5:3f:94:d1:33:65:a3:e0:
6e:5f:92:2c:21:68:db:42:1b:28:ac:b1:2c:36:c1:ed:33:0c:
66:a0:c0:2c:8e:21:70:2a:aa:fe:e1:81:d3:7e:07:17:8e:a5:
e7:57:13:17:38:a0:63:86:af:51:e5:04:40:e4:71:1e:d3:84:
31:c0:4f:23:22:4e:3f:01:b6:cb:2c:5f:9d:d5:ab:ad:20:16:
8f:50:fb:74:65:f7:1e:fd:d0:43:18:66:10:46:d3:09:7a:8d:
1a:61:5f:df:7e:3f:07:32:3c:1e:53:58:8a:f4:c2:47:76:fe:
90:31:fe:11:e7:76:8b:15:97:68:8e:ce:97:68:e9:9c:ab:c9:
75:ef:a8:81:10:31:8d:04:c8:db:20:b3:b3:3d:d0:e3:e9:35:
33:54:b3:11:43:7b:84:b3:65:6e:fb:bd:67:6f:3b:64:4f:26:
53:5c:0c:60:33:82:3f:de:22:fd:d3:7f:96:b3:b4:99:40:f6:
93:93:08:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:22:49 2025 by rpki-client