Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
File: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft (raw, json)
Hash identifier: /rIux1wem+ttL6K+qSqX0PCBZ526dIQN7J7NtrU68Xg=
Subject key identifier: 26:85:ED:69:E7:A8:04:C9:25:BE:06:95:A6:47:21:B3:AE:E0:B2:59
Authority key identifier: E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70
Certificate issuer: /CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70
Certificate serial: 0194BCA9E0884307584DB3F1ECCFB2CD368B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:37 +0000
Manifest this update: Fri 31 Jan 2025 14:00:37 +0000
Manifest next update: Sat 01 Feb 2025 14:00:37 +0000
Files and hashes: 1: 5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl (hash: C3nrmg8YHotTLgSTH8URhBoBb/b5aU0ee9uO8gEcO9k=)
2: fTo1f8ubRBwfU0xVoHHtzOApYuU.roa (hash: 6qDVE6eG6EbcIMXQ5M9bjDvf2Vx2WIt3k9ZSfVGTUr8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e0:88:43:07:58:4d:b3:f1:ec:cf:b2:cd:36:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ba91d626504ccbc64d89740b63cb2eb4234f70
Validity
Not Before: Jan 31 14:00:37 2025 GMT
Not After : Feb 1 14:00:37 2025 GMT
Subject: CN=2685ed69e7a804c925be0695a64721b3aee0b259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a0:1c:23:52:be:c6:36:06:62:03:d4:78:d6:
55:24:bc:c5:21:00:ae:c3:01:da:a6:07:06:d4:39:
99:18:87:42:b8:68:1f:1c:d4:19:df:ee:3b:3a:5b:
4b:d8:4f:65:72:81:b8:5d:bc:fe:01:e7:f7:19:d4:
46:94:b2:42:14:80:84:31:48:5c:19:33:8e:37:65:
7e:5f:96:81:56:cf:bd:08:46:23:29:08:f2:6c:fa:
fb:f8:b8:06:39:89:af:69:4f:4c:06:99:a3:23:3d:
0f:b6:fd:4f:66:d9:67:0f:57:40:bd:31:09:75:b9:
c7:cb:11:9b:68:1d:60:85:e4:fc:0c:89:6a:85:0b:
f9:68:98:ab:89:fc:f2:bf:aa:9e:f3:36:71:78:89:
7c:ec:a8:a3:d4:1c:52:b1:80:0d:39:20:1d:de:70:
58:55:87:c6:65:f8:f3:38:7a:dd:4d:47:a0:b7:65:
a6:48:7a:91:59:70:30:09:77:33:2a:47:3a:66:2e:
d9:3c:b1:5a:1c:cf:1b:48:c2:a2:a1:5c:af:b4:6d:
f4:af:d8:9e:4e:5c:2a:1c:46:48:ca:bf:7a:91:f8:
62:53:4a:12:44:01:d8:89:80:57:63:52:31:76:18:
4b:92:0b:f6:8b:99:c1:ad:a2:bd:29:64:8f:ea:01:
80:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:85:ED:69:E7:A8:04:C9:25:BE:06:95:A6:47:21:B3:AE:E0:B2:59
X509v3 Authority Key Identifier:
keyid:E4:BA:91:D6:26:50:4C:CB:C6:4D:89:74:0B:63:CB:2E:B4:23:4F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LqR1iZQTMvGTYl0C2PLLrQjT3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/5LqR1iZQTMvGTYl0C2PLLrQjT3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e8:ed:e9:2c:16:88:94:21:52:63:5e:ba:e3:60:a8:31:b3:
6f:a7:b1:0d:f0:02:4b:16:43:a1:80:60:4d:69:ad:10:9e:15:
51:af:8c:08:74:97:7e:b3:f2:9d:45:40:84:4a:11:2a:ba:85:
7b:3e:93:c4:c0:42:ad:d6:c1:4e:30:d7:5a:1a:f6:2c:c7:00:
89:24:f9:18:57:84:4c:34:b1:34:6c:8e:6a:16:4e:ef:b4:3d:
ef:2b:e9:bb:ca:a3:5c:57:3d:9c:e8:12:fb:c8:07:a3:b1:67:
a3:1e:13:e2:b9:27:54:d4:a5:9c:42:9e:74:a6:6f:86:ee:13:
21:ac:64:c1:07:93:4f:43:91:be:33:a5:36:57:7a:af:1c:08:
13:98:c1:25:97:5b:83:61:c4:38:0e:de:4f:49:1d:d5:fc:8b:
99:c9:f9:e8:2a:25:cc:01:0f:55:53:e3:45:f4:65:a0:2e:e7:
c3:9e:5f:7d:20:4e:ac:ab:1a:2b:02:00:52:5f:e9:c0:3b:0f:
c0:7f:e9:d2:01:aa:1d:de:36:ae:ec:fa:0c:d9:80:53:5e:11:
f5:30:6e:20:2b:98:10:97:eb:8e:94:24:f3:6c:57:f2:3d:f6:
96:2f:a5:55:96:df:77:87:54:9f:35:16:1a:1c:99:4b:35:d5:
26:09:35:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:20 2025 by rpki-client