Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft
File: 53ltjBnzKhyvvVt49Sds6N-ZXQo.mft (raw, json)
Hash identifier: 5kiTkwwbo5W4BoUEiSRSDlEuDzyFxCMoyppWLOtdfEY=
Subject key identifier: DE:80:23:EC:97:D4:F1:7E:4A:51:D0:64:41:23:3A:25:03:AB:C8:D9
Authority key identifier: E7:79:6D:8C:19:F3:2A:1C:AF:BD:5B:78:F5:27:6C:E8:DF:99:5D:0A
Certificate issuer: /CN=e7796d8c19f32a1cafbd5b78f5276ce8df995d0a
Certificate serial: 0194BCE0F1CF991DE792BAF48CAC0F56DA3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53ltjBnzKhyvvVt49Sds6N-ZXQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:46 +0000
Manifest this update: Fri 31 Jan 2025 15:00:46 +0000
Manifest next update: Sat 01 Feb 2025 15:00:46 +0000
Files and hashes: 1: 53ltjBnzKhyvvVt49Sds6N-ZXQo.crl (hash: 25x7UgNOWblG6jb+Rin00+MsopHMmCaO/UCXDjw95u0=)
2: NSSboe1wxlMIOf4H1ym0BPT-rCY.roa (hash: dKR82CR6RtrhKiyhhDRuSTP5OlKpaGcPWazs+LJAU9w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:f1:cf:99:1d:e7:92:ba:f4:8c:ac:0f:56:da:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7796d8c19f32a1cafbd5b78f5276ce8df995d0a
Validity
Not Before: Jan 31 15:00:46 2025 GMT
Not After : Feb 1 15:00:46 2025 GMT
Subject: CN=de8023ec97d4f17e4a51d06441233a2503abc8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a5:e4:38:86:00:08:86:c0:ce:32:16:ab:a4:
d7:54:e9:0a:83:87:1d:c7:9a:08:c9:0c:ab:eb:31:
02:40:a4:8f:c1:d1:8a:9b:06:bf:88:24:ea:36:26:
7c:82:f5:36:b7:23:ea:9a:62:1d:58:5c:be:47:d5:
51:70:b2:1a:06:37:3d:58:7a:f9:17:da:ca:1e:3a:
08:59:b4:70:f8:17:10:93:ea:2c:f0:ca:80:7c:a3:
c3:3a:f6:da:9f:4c:bc:d8:03:9f:ba:7a:6d:43:fe:
18:bc:01:98:2c:3a:3d:06:db:71:6d:e0:28:4f:22:
bb:28:5d:98:8c:b4:bb:df:32:43:ea:da:2d:84:be:
1a:79:3e:5b:b8:94:5c:22:b4:85:8a:42:cb:fb:1e:
fe:ad:ad:94:50:22:51:ed:a6:15:bb:21:30:b2:22:
49:d7:e2:3c:c9:d2:a2:06:ab:8e:c5:cc:2b:cf:a3:
2b:23:c1:b6:b9:48:a3:b0:fc:1c:fd:79:28:81:3b:
82:6d:c4:ba:e4:a2:8b:16:dd:06:bf:d0:8e:7e:42:
9c:d8:71:9c:0e:cd:fb:eb:ba:de:50:6a:b0:e0:6c:
27:3f:90:e1:e4:b7:d5:91:e0:53:22:d9:91:79:16:
d5:6f:3a:15:38:cf:e5:ab:5a:a9:ff:6a:f4:07:59:
6b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:80:23:EC:97:D4:F1:7E:4A:51:D0:64:41:23:3A:25:03:AB:C8:D9
X509v3 Authority Key Identifier:
keyid:E7:79:6D:8C:19:F3:2A:1C:AF:BD:5B:78:F5:27:6C:E8:DF:99:5D:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53ltjBnzKhyvvVt49Sds6N-ZXQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:79:87:eb:29:e8:15:1c:79:38:bd:ba:b6:57:55:aa:c6:71:
3d:c1:13:ca:28:68:ff:1e:d0:45:ed:69:20:65:3e:bb:5b:11:
2f:d8:bb:b3:9b:c7:ab:3e:7c:50:35:ec:c0:ab:68:83:8c:9f:
a2:ab:89:29:24:8c:9c:bd:59:18:80:94:0c:14:02:60:6f:88:
f9:5b:28:aa:67:28:d4:dc:67:f7:ec:f4:41:26:f7:7f:e2:35:
72:be:45:05:8b:b4:b7:43:85:46:bf:aa:a3:a0:2f:ba:2e:a1:
7f:c0:17:4a:2a:d6:cc:a4:f5:f4:7a:45:6b:c0:c3:d6:a9:3e:
4d:57:4d:a8:1a:c4:9a:4f:9f:ca:9b:0e:e8:33:21:bb:13:21:
5c:39:20:52:a1:7c:5a:0c:0f:d2:de:2a:5d:1b:24:db:a0:3a:
5f:08:85:75:7e:a5:ff:de:5b:74:e7:77:b4:10:b3:5c:19:01:
a2:5d:f1:14:5f:f1:b5:29:e9:44:08:6d:18:24:f0:3d:2a:78:
d1:25:b8:c3:4c:3f:a4:2f:34:d7:e6:8a:99:2d:5e:1b:5e:24:
36:ae:b4:1a:af:99:cc:d1:a9:4b:13:f9:ec:3d:79:b6:59:33:
3b:b0:95:45:85:3d:bb:6f:1c:db:d7:ac:0c:39:db:e7:6a:06:
91:73:94:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:20:09 2025 by rpki-client