Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
File: 5frVG_rdJFMhvgkuaB2N5uLSdcM.mft (raw, json)
Hash identifier: h7Cf4LNQAGMeV+ExMaXWpK88QJGc28KBlyu00ooRcPk=
Subject key identifier: DB:24:34:FD:0D:B5:49:6F:BF:97:D0:0F:9E:81:0C:E6:A2:83:0E:68
Authority key identifier: E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3
Certificate issuer: /CN=e5fad51bfadd245321be092e681d8de6e2d275c3
Certificate serial: 0194BCA9AE346829394CC8CF2B0686672328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
Manifest number: 03AE
Signing time: Fri 31 Jan 2025 14:00:24 +0000
Manifest this update: Fri 31 Jan 2025 14:00:24 +0000
Manifest next update: Sat 01 Feb 2025 14:00:24 +0000
Files and hashes: 1: 5frVG_rdJFMhvgkuaB2N5uLSdcM.crl (hash: cITRpYblZ0iUbwzK3blirgbt82xuVCn7nato7Wcw7MM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ae:34:68:29:39:4c:c8:cf:2b:06:86:67:23:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5fad51bfadd245321be092e681d8de6e2d275c3
Validity
Not Before: Jan 31 14:00:24 2025 GMT
Not After : Feb 1 14:00:24 2025 GMT
Subject: CN=db2434fd0db5496fbf97d00f9e810ce6a2830e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bf:04:65:0f:b4:6e:6c:01:c4:7a:dc:e0:90:
23:e3:4f:88:e9:92:38:58:92:92:24:85:3c:4b:70:
32:1b:df:5c:ad:d1:fb:e5:0c:b3:29:41:34:bd:ba:
05:fe:49:d0:60:af:2d:e9:ee:aa:c9:35:c4:0f:3a:
3e:71:ed:ec:03:3b:fe:3f:b8:6c:ae:15:c1:22:93:
14:20:81:d7:f6:c0:aa:18:bc:89:04:dd:61:80:53:
b5:b3:b0:cf:b4:6e:d9:42:52:c3:38:78:83:68:8d:
43:aa:25:7b:b8:c9:1a:89:7a:5d:40:c8:95:e5:dd:
77:c0:7a:5d:4c:e7:8a:38:72:8b:0f:72:a9:fd:9a:
be:51:17:ad:bf:c5:11:78:c6:e9:af:39:1a:95:8f:
a6:34:d4:e2:be:b8:2b:4b:2b:50:20:7d:ea:d8:9f:
5d:cb:17:38:b8:a5:ad:54:27:3b:5f:fe:79:be:19:
ae:f4:25:e8:7b:f4:44:10:26:57:32:4c:ab:c2:29:
0c:f2:d5:bb:53:4a:d5:8b:9f:d7:e9:a2:18:74:1d:
4a:06:a8:b5:b5:f6:6b:6f:8d:7e:2a:f7:25:d4:cd:
65:55:aa:23:2c:d8:2e:82:57:8f:b9:dc:74:19:3e:
65:8f:72:c6:71:13:48:77:91:8c:96:d2:9f:ae:b1:
ba:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:24:34:FD:0D:B5:49:6F:BF:97:D0:0F:9E:81:0C:E6:A2:83:0E:68
X509v3 Authority Key Identifier:
keyid:E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:4d:20:32:79:4f:98:8b:d7:96:09:ad:f1:2e:b4:12:9b:2d:
ac:1c:01:94:e4:83:ce:b5:91:1b:4e:a9:11:04:43:d9:36:e6:
da:d7:21:4e:6c:43:81:92:9f:3f:f3:aa:b2:3b:c3:0d:1b:c7:
3e:1f:4d:e3:3d:3d:93:c4:4e:cc:0e:c4:98:56:95:f3:4e:eb:
94:5e:48:5a:16:6e:f5:ed:30:23:72:a6:43:79:ff:45:3f:fd:
4b:3a:3f:cb:9e:71:25:b7:a7:52:d9:0b:22:a8:66:4e:8c:d6:
9b:00:dd:7c:fe:7a:f0:03:f4:5c:36:36:f3:a9:54:42:a7:36:
c7:be:37:97:54:e4:7a:cb:fe:4f:b0:28:83:5b:0c:89:0b:0a:
2c:94:d6:18:e7:37:c0:98:4d:db:98:2a:1d:06:f6:d4:61:67:
5f:f0:06:49:55:98:2f:26:a5:76:45:2d:09:ba:3d:e7:f1:1d:
24:61:82:a5:23:24:db:b5:ab:cc:d0:ab:27:1a:54:de:20:ff:
fd:42:08:6f:8e:32:82:d1:df:79:10:e0:6d:17:4a:d6:3d:93:
5b:be:a9:57:63:9b:3e:9a:c7:e5:07:5f:a1:53:f9:9c:5b:f5:
0a:c2:ad:89:24:a2:82:9c:a4:98:90:6b:e9:e3:f0:3a:25:d3:
78:71:55:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:39:52 2025 by rpki-client