Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
File: 5iNO09jKltxRjTXB58kr6_z2zk0.mft (raw, json)
Hash identifier: CqRhTqO7bK+nxAod8BLOtqYKwap08LGJEcD+4IV/RD0=
Subject key identifier: D5:A5:DF:89:BB:F8:35:C0:9F:2C:53:3C:41:42:4A:C7:C9:63:6C:52
Authority key identifier: E6:23:4E:D3:D8:CA:96:DC:51:8D:35:C1:E7:C9:2B:EB:FC:F6:CE:4D
Certificate issuer: /CN=e6234ed3d8ca96dc518d35c1e7c92bebfcf6ce4d
Certificate serial: 0194BD8593BE9A7651C4B3B7CF29EE7FBBD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
Manifest number: 13BA
Signing time: Fri 31 Jan 2025 18:00:35 +0000
Manifest this update: Fri 31 Jan 2025 18:00:35 +0000
Manifest next update: Sat 01 Feb 2025 18:00:35 +0000
Files and hashes: 1: 5iNO09jKltxRjTXB58kr6_z2zk0.crl (hash: c+jB5GXaDAOUFuB4Oeco9EZcj1SeQFgTAWs5IZK9bw4=)
2: 9wh4IjR2WdijxIEialrBfGScnoA.roa (hash: aGpT2hqWZX/M5kbSljEdFZvRHYfWgQ/Qc0ertXxiLJ4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:93:be:9a:76:51:c4:b3:b7:cf:29:ee:7f:bb:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6234ed3d8ca96dc518d35c1e7c92bebfcf6ce4d
Validity
Not Before: Jan 31 18:00:35 2025 GMT
Not After : Feb 1 18:00:35 2025 GMT
Subject: CN=d5a5df89bbf835c09f2c533c41424ac7c9636c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:9b:7a:af:26:76:cd:25:e2:e1:77:5d:23:01:
d5:8e:a5:38:8d:8d:d5:3d:ea:78:84:30:03:b9:87:
07:bd:bf:03:ad:ae:a0:cd:9c:18:b3:d7:1e:e5:12:
21:4e:16:63:dd:fd:d1:45:67:69:ec:1b:17:e7:97:
6e:5c:07:6d:6e:49:ba:85:41:1c:aa:83:8f:85:f7:
65:25:01:08:da:fe:34:33:3d:4c:f8:bc:f3:1a:37:
e8:5a:9c:34:20:c5:1e:8b:73:60:33:42:cd:60:13:
15:d8:4b:e8:dc:b6:35:28:b8:aa:ec:d2:e4:e1:90:
ad:49:1c:af:13:95:13:8e:5f:c8:dc:5e:3a:c6:27:
8d:a2:29:ad:0a:22:d8:aa:2f:32:df:3c:86:3f:e5:
77:5c:44:e3:f3:7b:67:e0:31:cc:6a:42:cf:a7:76:
4f:e0:32:e0:19:4f:16:4e:a3:b2:17:f2:0e:fe:92:
11:cb:7d:52:ec:1f:c7:5d:1a:07:44:64:01:27:a3:
bd:1f:20:af:b8:a7:4a:2e:34:1b:60:f0:5d:ca:90:
b9:b6:24:cb:a0:e5:9d:50:6b:d3:77:db:9a:fd:08:
5b:dc:0d:9e:cd:52:8e:99:c9:f6:8b:38:b9:77:d1:
b3:6c:c5:d6:3a:bb:c9:2a:fb:89:ab:21:77:29:7d:
e6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A5:DF:89:BB:F8:35:C0:9F:2C:53:3C:41:42:4A:C7:C9:63:6C:52
X509v3 Authority Key Identifier:
keyid:E6:23:4E:D3:D8:CA:96:DC:51:8D:35:C1:E7:C9:2B:EB:FC:F6:CE:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f5:40:fd:aa:b9:79:72:c6:a3:39:fe:15:3b:38:d3:96:41:
13:ad:00:d7:cd:1f:99:10:70:ae:8f:bd:ff:de:d7:70:06:9a:
83:97:42:27:9f:41:ec:47:fa:71:e4:67:e7:e7:a6:82:7d:31:
bc:eb:d1:b7:23:00:10:eb:7b:5c:af:cd:66:4e:7e:9e:c6:f2:
e2:4f:6b:67:01:d4:7c:e9:46:bf:d2:e0:65:b2:c8:79:f9:3f:
7b:f3:fc:8e:cd:00:b0:bd:7d:6e:02:b2:96:c1:b6:e6:de:96:
40:33:c5:b1:b7:74:5c:ae:1d:10:f7:4b:97:0e:ef:b9:f5:63:
a9:63:b1:a4:90:fd:99:20:a6:e8:60:e9:72:ce:42:85:9b:ff:
aa:2a:0b:76:a7:f5:be:6d:62:71:25:6a:39:f4:32:7b:9e:75:
94:d1:de:e1:c3:c2:78:f0:69:47:cb:5c:13:83:81:e5:f4:c0:
15:fe:9a:3a:44:6d:de:24:82:aa:f8:e8:77:e7:ba:fa:f7:4e:
57:e8:88:db:ad:fd:bc:42:3c:1c:68:1d:bc:62:6c:5f:45:c5:
66:3a:f7:f9:5b:f8:f0:92:81:e6:4f:c7:d0:5f:4c:a8:f1:c0:
99:99:d9:26:8b:6b:80:25:eb:2b:91:f5:04:50:38:44:d5:a8:
5a:7d:ba:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:19:35 2025 by rpki-client