Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
File: 5o9MhddoNjPDOOA92OykR78_Z4U.mft (raw, json)
Hash identifier: Zyn/aLanfBCxD3fRROKE/Dea9qekkRRUNNLaDa/eqNw=
Subject key identifier: 26:47:03:7D:13:D4:DB:95:D0:EC:63:3A:8B:25:CA:91:A1:72:F5:F0
Authority key identifier: E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85
Certificate issuer: /CN=e68f4c85d7683633c338e03dd8eca447bf3f6785
Certificate serial: 0194BD856C6F8A947ECD6EF1AB13CBE48B81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
Manifest number: 096E
Signing time: Fri 31 Jan 2025 18:00:25 +0000
Manifest this update: Fri 31 Jan 2025 18:00:25 +0000
Manifest next update: Sat 01 Feb 2025 18:00:25 +0000
Files and hashes: 1: 5o9MhddoNjPDOOA92OykR78_Z4U.crl (hash: ITd3cWaxyeAe9rKCihrHFryMFZOx/4LYoWWlOCdYO3M=)
2: n9muJIRBw4eBvZP1hvt-YKWhQ1g.roa (hash: MB5Zeb9aar2OAVcUrab3R1409lEJyOeTnWEExzpIcts=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:6c:6f:8a:94:7e:cd:6e:f1:ab:13:cb:e4:8b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e68f4c85d7683633c338e03dd8eca447bf3f6785
Validity
Not Before: Jan 31 18:00:25 2025 GMT
Not After : Feb 1 18:00:25 2025 GMT
Subject: CN=2647037d13d4db95d0ec633a8b25ca91a172f5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:84:26:5e:da:cf:f7:36:84:f2:19:bc:31:c7:
ec:59:e5:f6:50:5d:cb:a4:a4:9b:ad:cf:48:86:18:
db:84:b5:1b:47:3c:07:c4:fc:e3:5a:4d:bf:a5:b5:
60:da:42:e0:c7:ec:02:b3:c2:84:de:9f:36:d9:0b:
46:e6:e3:01:1d:5c:7d:d5:4c:f1:8f:5e:08:5d:69:
ef:aa:dc:2c:35:bc:64:1b:10:0f:c4:9b:18:84:70:
82:c0:43:cf:25:0e:ab:95:f3:6a:7e:29:ca:96:78:
f0:a9:9b:bb:3c:6a:e8:2c:97:66:c5:f3:c3:13:b4:
94:8f:00:46:9d:16:05:0c:75:d2:a8:dc:db:25:8b:
46:68:9d:f4:5d:95:b3:b9:12:b2:e9:ae:aa:ba:8c:
a9:70:ae:cc:46:f4:bc:af:99:93:74:f1:d4:34:a2:
16:e1:16:3c:89:21:4f:f7:79:c0:fa:33:0a:32:b4:
61:ff:a2:a4:ee:00:8c:62:7f:b7:84:30:59:15:42:
2b:77:25:e1:b7:7e:74:a3:24:f4:b2:2e:fe:2b:83:
c5:fc:c4:ed:06:97:09:cc:8e:1e:81:bf:ed:b0:2e:
88:93:a0:9b:82:a7:f7:9d:14:58:14:d9:11:49:53:
cc:fc:2a:bd:c9:36:b9:d9:c8:4d:90:80:95:af:48:
e6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:47:03:7D:13:D4:DB:95:D0:EC:63:3A:8B:25:CA:91:A1:72:F5:F0
X509v3 Authority Key Identifier:
keyid:E6:8F:4C:85:D7:68:36:33:C3:38:E0:3D:D8:EC:A4:47:BF:3F:67:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5o9MhddoNjPDOOA92OykR78_Z4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/5bbebc-cf36-43a4-9974-9b6cfd8a2aa3/1/5o9MhddoNjPDOOA92OykR78_Z4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:0a:42:3f:76:9f:66:a8:2e:c1:79:52:bc:a5:91:04:b7:03:
56:27:bd:86:87:d3:9f:37:9d:87:63:1c:11:83:21:f8:e8:9f:
f2:be:53:fb:0b:e9:0d:cd:4d:eb:6a:7a:4e:ce:80:cc:8b:47:
38:88:e6:25:63:fd:e6:0b:3b:72:bc:08:fc:d9:be:72:e9:d4:
98:45:86:5a:7c:96:10:5f:1b:1e:16:65:4e:4f:7f:14:ca:20:
0a:25:e8:f3:20:f1:a2:34:b4:20:b2:f3:23:88:78:27:60:5d:
e7:37:e5:b0:b9:96:d4:8f:4c:57:80:34:3f:99:98:37:93:9a:
f8:42:5a:e3:11:51:ee:8f:25:80:f2:6e:ff:ed:a5:97:d8:f6:
bf:28:d3:7a:40:a9:d8:75:63:45:ae:53:9f:63:b7:90:9c:fe:
04:a5:87:ff:5e:26:af:bc:cc:f9:2e:c5:60:b4:a9:89:60:22:
1a:ba:e6:9a:76:32:8b:0f:2b:3f:54:a4:aa:e6:d4:3d:b5:83:
0a:2b:a4:6b:96:5b:fd:09:41:52:fc:4d:96:5a:47:de:c2:f5:
b0:3f:ee:41:69:7e:e2:92:23:dd:cc:63:97:81:ec:2f:3c:89:
3f:4b:cc:f8:f3:98:0b:82:71:d9:e6:bf:dd:13:0c:5e:52:32:
ad:b7:d1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:22:44 2025 by rpki-client