Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
File: 5aiGWRTezNyYByQf1wtrsIOkRLM.mft (raw, json)
Hash identifier: FvXiz18TUAKJ8T/Z0eFdhY4yAz+OQXCnrlkl0yi5NHA=
Subject key identifier: 23:A5:20:F2:FF:DB:E6:88:53:E4:96:81:78:6F:24:16:2E:0A:15:D4
Authority key identifier: E5:A8:86:59:14:DE:CC:DC:98:07:24:1F:D7:0B:6B:B0:83:A4:44:B3
Certificate issuer: /CN=e5a8865914deccdc9807241fd70b6bb083a444b3
Certificate serial: 0194BBCE1F5DE44AE4194B75910F2F8D531C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
Manifest number: 0DA5
Signing time: Fri 31 Jan 2025 10:00:35 +0000
Manifest this update: Fri 31 Jan 2025 10:00:35 +0000
Manifest next update: Sat 01 Feb 2025 10:00:35 +0000
Files and hashes: 1: 5aiGWRTezNyYByQf1wtrsIOkRLM.crl (hash: AuzCP/ddt58EMvFGOosIzCcqAVRdZzYv+xXbwQZiduk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:1f:5d:e4:4a:e4:19:4b:75:91:0f:2f:8d:53:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a8865914deccdc9807241fd70b6bb083a444b3
Validity
Not Before: Jan 31 10:00:35 2025 GMT
Not After : Feb 1 10:00:35 2025 GMT
Subject: CN=23a520f2ffdbe68853e49681786f24162e0a15d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ef:62:71:56:62:ff:fb:4c:5d:d1:c9:78:6a:
f5:4b:aa:3c:ed:c9:be:ee:d6:62:24:5f:4f:2e:df:
82:e9:22:8b:5f:93:a5:0f:c6:57:36:08:b2:30:61:
22:94:04:65:1a:8d:ad:88:ca:d9:19:15:a0:a9:50:
81:43:6e:1e:ef:a7:e4:b8:7a:8e:94:01:60:f3:5b:
a5:19:b4:29:1b:9e:b0:92:11:ef:f2:de:7e:83:3f:
f4:68:3a:b6:24:60:0c:dd:86:43:aa:0e:fc:b5:10:
6a:8b:c3:65:75:f8:16:96:58:a9:a4:a7:a5:5f:db:
b5:63:8e:19:5a:50:11:6b:22:e6:eb:5c:aa:4c:67:
98:b8:78:6e:d0:84:04:81:20:cf:85:fb:d6:dc:4f:
6d:18:af:03:58:1a:f5:b7:9b:69:92:ed:5e:cb:ed:
4e:48:83:6a:83:06:3b:4c:08:d6:5a:70:91:73:12:
ed:3e:fe:96:c1:73:28:f1:e4:9d:0e:ab:b1:e7:4e:
1f:b9:56:a1:79:90:a1:f3:1d:5f:6f:f5:67:70:9b:
8c:05:d4:1e:98:20:5c:a2:47:6b:03:20:a1:0e:97:
0d:af:20:c8:19:5b:f1:ce:d2:a0:d8:9a:6b:ad:45:
4c:f3:39:8a:36:06:70:a3:c8:7c:e7:66:8b:d8:31:
ec:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A5:20:F2:FF:DB:E6:88:53:E4:96:81:78:6F:24:16:2E:0A:15:D4
X509v3 Authority Key Identifier:
keyid:E5:A8:86:59:14:DE:CC:DC:98:07:24:1F:D7:0B:6B:B0:83:A4:44:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:1a:ed:0c:1e:e8:ed:a5:6b:ca:d9:b6:3f:ab:44:66:3a:af:
84:7c:57:e5:28:74:bd:48:40:75:01:a4:5f:d9:1a:34:6b:a6:
56:85:06:6f:d8:85:ed:8f:13:be:af:6e:12:a7:f2:e6:82:e3:
5b:7a:88:3e:04:9a:e5:86:3b:31:ef:35:e8:78:db:a0:ee:15:
86:65:4a:46:31:8e:03:c1:60:22:bf:d0:a6:1b:73:f1:82:6e:
f2:77:b6:ef:d6:c9:dd:57:c0:96:61:62:b6:67:a0:8b:4d:98:
cc:2d:cc:43:8b:a8:84:f0:6d:7b:c4:0f:e2:e6:b1:3b:81:a7:
8a:21:b6:8b:18:5a:b4:dc:de:84:ea:91:3a:9a:3b:e8:21:f8:
14:d6:ca:2b:e8:c9:b8:f1:73:23:b0:39:cc:c6:3e:35:1f:88:
11:b9:7c:00:26:ea:22:ea:e3:aa:a1:93:64:29:43:fd:8b:f4:
7a:39:76:b5:78:e8:45:a1:0e:53:59:95:84:86:55:04:68:9f:
04:31:fb:e4:86:6b:00:66:4c:64:f0:30:3d:eb:72:85:3f:0a:
e0:9e:fa:8a:d1:ef:23:df:be:5f:35:44:71:f5:65:6f:74:14:
9e:88:28:a6:4d:69:99:d4:42:98:fd:59:51:e2:95:0b:4a:a6:
e4:74:6f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:38:44 2025 by rpki-client