Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
File: 5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft (raw, json)
Hash identifier: 7mZpWl4Ep+4XbwZXL8DC1Yp3z782j6QLyIXeHb6PTFw=
Subject key identifier: C1:A3:8C:31:BF:86:93:10:20:CB:E8:03:3E:44:6A:97:C1:B2:75:FF
Authority key identifier: E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E
Certificate issuer: /CN=e443fc203f706f9731412761b27a1a4b395cfc1e
Certificate serial: 0194BCAA2E88B1A36B607FDD78E0E65B78BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
Manifest number: 13C4
Signing time: Fri 31 Jan 2025 14:00:57 +0000
Manifest this update: Fri 31 Jan 2025 14:00:57 +0000
Manifest next update: Sat 01 Feb 2025 14:00:57 +0000
Files and hashes: 1: 5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl (hash: hCfYAjVVQt5XkkpBqlmRA2iG4yPXOvKUAtFWmUw3TyU=)
2: 80LgJ-bt-JVgl28q8iQu1JZiGBg.roa (hash: SbBL53O4850VvEVexpsOte6oujPeOQsBp7gTPoi1dqw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2e:88:b1:a3:6b:60:7f:dd:78:e0:e6:5b:78:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e443fc203f706f9731412761b27a1a4b395cfc1e
Validity
Not Before: Jan 31 14:00:57 2025 GMT
Not After : Feb 1 14:00:57 2025 GMT
Subject: CN=c1a38c31bf86931020cbe8033e446a97c1b275ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:42:f0:2e:32:6b:b5:cf:11:fe:62:1f:70:51:
7f:ec:fb:36:2b:f9:8b:86:c4:ec:92:6d:1d:a4:5a:
45:38:04:b9:75:be:ef:ad:7a:06:f1:2d:aa:bb:bd:
36:29:d0:e3:b8:a8:b8:6b:51:c6:26:0e:d0:6e:8e:
30:c9:0d:65:49:bb:7f:23:13:2c:20:a2:4e:85:da:
ef:be:04:51:55:51:a5:52:ea:8e:8d:9f:61:9e:49:
9d:2c:52:3a:e6:0c:8c:67:c3:82:64:4f:46:15:0f:
45:67:4b:2e:32:fc:df:aa:28:21:f0:cc:a9:b4:bc:
2a:21:27:62:45:af:a5:a0:55:9f:e8:ac:43:f0:47:
a1:12:4c:88:69:b4:e3:7c:1b:5b:69:28:73:20:ef:
91:3d:3b:b8:cc:aa:cb:1a:5a:3e:8f:e0:7f:9a:03:
05:3e:76:44:f7:b3:0f:78:34:a4:1d:63:08:86:23:
85:8d:ac:18:6c:82:8f:83:64:08:d8:9e:06:b3:f2:
63:32:2f:7c:1d:33:19:d3:d5:e5:f5:cd:48:d0:44:
ae:62:d1:04:bd:ac:17:a7:0a:6c:75:6c:2b:7b:7a:
dd:47:f8:62:f4:c6:bf:18:78:f2:80:41:a7:48:8f:
01:60:3d:11:55:09:36:9f:fc:4f:d2:3e:9c:6d:3c:
4b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A3:8C:31:BF:86:93:10:20:CB:E8:03:3E:44:6A:97:C1:B2:75:FF
X509v3 Authority Key Identifier:
keyid:E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:98:57:48:98:62:6e:74:6c:bf:24:c6:cc:f4:f1:41:42:39:
ac:ee:16:71:39:eb:50:f5:04:a9:ec:37:87:64:6f:03:a5:f9:
7a:d3:bc:bc:dc:5f:99:cd:94:4e:45:a3:b7:1b:7b:3d:38:a9:
b0:d6:ac:75:48:bf:27:0e:3f:6f:39:71:2a:e4:a6:11:c1:0e:
c1:42:9c:23:1c:4f:8c:58:7b:1a:4d:87:59:8a:88:4a:24:ca:
26:7d:f6:0d:5f:f7:d3:1f:40:b0:98:40:8a:8e:84:29:5e:a2:
bf:91:a2:5e:34:0c:3b:16:e5:21:4e:40:bb:d5:ce:cd:0f:1a:
07:00:16:99:ba:63:ab:40:e6:d7:26:3a:78:8b:b1:72:b3:e7:
7d:4f:6c:63:d5:e6:03:bf:21:ba:83:09:be:b1:83:04:6f:7a:
9e:bd:48:49:43:38:b8:00:e7:15:10:a6:9b:dc:aa:5a:e9:b5:
ec:10:56:53:64:bf:41:f2:99:f8:d9:18:dc:a2:9f:50:e3:18:
f3:08:8a:8b:df:cc:30:ac:81:b0:35:b5:ef:06:2c:76:05:f1:
fa:e1:e3:3b:22:14:4c:f6:9f:b9:d2:b8:5b:1e:3d:82:a9:45:
85:28:f1:1c:74:2a:de:c1:66:94:0c:dd:49:2d:ca:e3:2c:36:
58:dd:ec:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:22:47 2025 by rpki-client