
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
File: 5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft (raw, json)
Hash identifier: HqLdf3ebJEQTHl2rVHLkL32oosAwdYLLnragQz1jFjA=
Subject key identifier: A9:42:0A:76:64:17:45:AF:80:63:BC:7A:14:B4:46:63:FB:0E:BC:DA
Authority key identifier: E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F
Certificate issuer: /CN=e7fd9909d16baf11cb958c8d274e24ec9947422f
Certificate serial: 0194BD85328A75705C497CCDE6033A1F011C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
Manifest number: 0EE1
Signing time: Fri 31 Jan 2025 18:00:10 +0000
Manifest this update: Fri 31 Jan 2025 18:00:10 +0000
Manifest next update: Sat 01 Feb 2025 18:00:10 +0000
Files and hashes: 1: 5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl (hash: 7U2rceiq23mGm3Q5mudsiYZNF+mWzRVxchQHUK8aOV0=)
2: V60g_4Hl1O4ws6xObJRepK5WbCI.roa (hash: WQJN9PGlNp52w8KNVApuftRmLkpbyYXJ0S9Q2EedPcE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:32:8a:75:70:5c:49:7c:cd:e6:03:3a:1f:01:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fd9909d16baf11cb958c8d274e24ec9947422f
Validity
Not Before: Jan 31 18:00:10 2025 GMT
Not After : Feb 1 18:00:10 2025 GMT
Subject: CN=a9420a76641745af8063bc7a14b44663fb0ebcda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a1:75:35:10:1c:f3:16:80:a6:7b:5f:36:15:
6d:6f:ba:2c:63:f7:32:69:9b:6c:90:a2:e2:0d:fc:
71:7b:bd:c1:8c:ad:df:ea:5e:14:45:e5:10:92:93:
c1:d0:9a:54:ea:be:65:ae:b0:4d:d0:ff:39:b2:95:
2b:32:87:01:ff:e8:89:b2:38:7e:b1:1c:16:a8:cd:
53:e8:57:14:7d:9b:3d:35:d3:d7:ed:e9:d7:7c:67:
3f:3d:25:e4:dd:99:7f:92:c2:71:bb:07:d1:d9:e4:
94:d2:3b:b3:93:e8:cd:91:35:41:d5:87:08:1d:97:
80:21:71:e7:36:0c:be:67:ae:5c:5c:c3:91:38:98:
fb:42:ad:05:32:23:1a:94:67:2d:6c:c9:ce:ec:4d:
21:18:35:ee:11:6e:81:c2:a8:f5:9b:46:5b:4e:3e:
03:1f:cf:2a:0a:8c:00:a2:83:98:14:f0:3e:8d:43:
de:1f:1c:b6:33:1a:26:f6:37:85:3e:a6:8f:9c:82:
a4:0a:72:2b:96:d4:9e:db:37:05:0f:19:91:cb:94:
ca:54:77:48:f9:0f:2c:2e:f8:fc:d3:0b:aa:71:e9:
84:0f:68:ca:b0:c9:63:2a:3c:1c:54:98:4f:bd:30:
c0:bb:c7:6d:f9:04:db:66:ff:99:e3:80:06:3f:67:
9d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:42:0A:76:64:17:45:AF:80:63:BC:7A:14:B4:46:63:FB:0E:BC:DA
X509v3 Authority Key Identifier:
keyid:E7:FD:99:09:D1:6B:AF:11:CB:95:8C:8D:27:4E:24:EC:99:47:42:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1f01e3-77d3-4cf7-aea8-122feecde3ea/1/5_2ZCdFrrxHLlYyNJ04k7JlHQi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:1a:0a:22:95:89:7e:c1:f9:f1:5a:be:fb:c1:18:4e:34:b7:
64:70:5e:ed:3d:d4:0f:17:15:83:bd:5b:c4:cd:2a:57:b8:3b:
01:04:65:d0:cc:ad:91:d4:b1:18:34:cd:8e:70:a3:de:18:9e:
38:12:7d:e2:14:a0:91:f6:3f:48:1a:34:22:ac:ce:5f:c1:4d:
62:6c:8b:3a:72:57:27:f8:0e:71:3e:61:89:60:87:62:0a:c0:
4b:eb:be:28:25:48:2e:9f:9a:eb:72:10:65:e2:c4:be:06:bb:
54:e5:c6:06:04:1f:63:4a:48:59:dd:bd:ee:1d:92:17:5c:14:
5b:4e:5f:c7:63:dc:7a:fd:f9:c2:9f:bd:7f:a7:d9:59:3f:21:
bd:f7:68:f0:0a:a8:34:05:3f:4d:df:3b:da:38:0e:90:e7:43:
7d:26:ff:85:fc:c0:03:11:cd:0f:b2:ee:41:ea:50:13:17:2f:
84:c3:9f:3c:a4:34:96:53:43:44:6e:8a:82:3a:74:c1:3c:78:
1c:5d:40:a8:81:bb:d2:1d:c4:f6:37:1f:66:37:82:5a:ff:77:
33:5c:74:03:62:af:46:c5:77:bd:7c:99:0b:94:0c:c9:28:c4:
78:38:d4:58:cf:f4:56:b1:fc:95:63:b4:cd:e3:4c:ba:72:bf:
d0:31:6d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:54 2025 by rpki-client