Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
File: 5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft (raw, json)
Hash identifier: HQtRh6VTpKx1/ttcMtpGyGs13OIF4BUQJa+vWrcDlv8=
Subject key identifier: B7:B0:28:07:4F:C9:F7:7F:F8:2D:FC:62:6A:D5:E8:9E:48:E5:CA:BF
Authority key identifier: E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA
Certificate issuer: /CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
Certificate serial: 0194BCA9FAD1820008B56081EA8E706B534D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
Manifest number: 146E
Signing time: Fri 31 Jan 2025 14:00:43 +0000
Manifest this update: Fri 31 Jan 2025 14:00:43 +0000
Manifest next update: Sat 01 Feb 2025 14:00:43 +0000
Files and hashes: 1: 5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl (hash: smJJFRZ8/mJEcQrcjyQTOHyd91kVbyhTsLywHQJfxHE=)
2: 7VOnScmIfl5YQtcTz2D26XQWq5A.roa (hash: vu7qmzFO2z4PAZA8cHegYQseVd1YfdVKwhox9azJUJs=)
3: AGz8FgUVvE3Lvt6ftw3qobdQzrI.roa (hash: cmT93Ok9vnccSbuDE+6sxmO4c4ItItfSqVr3WTEQ4QE=)
4: sUzkXd5LwWwY0BXr324HOrp9knE.roa (hash: 9KlN4ytdVrB1XXBuhrFHGGSpHYOeDVdFTdNk2ffdYmY=)
5: y9DhCCOE8BMjbqy5zLi7FW3xy5M.roa (hash: veQZfmM2vQ79LyoIwIgPeLyEYqZZHAzen/nPgRCSK7w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:fa:d1:82:00:08:b5:60:81:ea:8e:70:6b:53:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
Validity
Not Before: Jan 31 14:00:43 2025 GMT
Not After : Feb 1 14:00:43 2025 GMT
Subject: CN=b7b028074fc9f77ff82dfc626ad5e89e48e5cabf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c0:ae:d0:93:16:4e:c0:04:bd:4f:c6:79:62:
ec:93:63:8d:40:31:34:6a:25:e5:e1:49:a5:ed:23:
b5:67:3d:2d:52:8a:0e:42:a0:20:0f:23:43:8e:99:
61:a4:ee:dd:0c:83:3a:d3:81:ee:9d:12:9d:d3:50:
f8:e7:c3:a8:d6:c1:80:0e:30:81:40:11:9d:03:0e:
6a:f0:e8:de:4f:f5:5d:21:fd:b8:28:46:3a:19:26:
07:8c:d9:1e:24:74:83:58:29:03:6e:fd:29:f9:f8:
3c:6d:42:1d:ef:98:24:e5:5d:d6:b6:47:62:7b:24:
34:cd:98:2a:c1:c6:b9:16:d8:16:1d:68:15:55:b2:
37:eb:f6:4f:79:bd:0c:5a:e8:0d:9b:bf:9c:8d:7c:
63:e9:9c:07:12:3f:bb:9b:bd:8d:c5:02:d5:1e:02:
4d:60:2d:3d:e0:67:b0:e4:72:c2:c8:fd:3f:a9:07:
c8:15:75:01:6a:75:9b:ce:c0:c8:7c:3f:1b:99:c1:
dc:6b:e9:a0:ab:3d:66:44:87:63:61:49:06:63:d3:
90:e5:77:56:f4:7b:bd:bd:ae:e5:bf:54:ac:2a:b0:
c6:0d:fb:d6:ef:26:68:f4:8c:65:6e:29:5a:18:4c:
f4:ff:e9:61:1c:03:ea:32:d2:68:b1:84:a8:59:37:
fd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B0:28:07:4F:C9:F7:7F:F8:2D:FC:62:6A:D5:E8:9E:48:E5:CA:BF
X509v3 Authority Key Identifier:
keyid:E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:18:92:55:1e:b8:22:e5:3c:07:46:3a:ba:47:a3:7b:7c:d4:
0a:07:31:15:b3:ec:46:34:b2:18:1c:f7:53:fe:57:d8:5a:ee:
aa:8e:1c:ee:1a:02:78:62:ec:81:d2:72:b3:cd:ad:64:ef:24:
02:20:52:a6:44:ac:58:e9:eb:6e:79:e4:68:85:aa:85:a6:4e:
b9:e8:2f:f1:c2:ab:4b:14:5e:96:ba:a3:b7:3b:0f:e3:41:c6:
1a:a3:bd:51:22:da:0e:1e:66:a8:73:e0:eb:48:38:ba:03:7a:
73:0b:01:8b:be:c1:e5:53:08:16:76:c7:03:75:e0:b1:55:17:
24:79:cd:ae:e5:51:6f:1c:c1:8d:a5:4e:4c:7a:27:90:77:d7:
1d:ab:9c:ab:05:ed:78:43:c3:4b:18:f3:3b:40:fe:a3:de:0e:
f2:ba:75:d8:f4:ae:f7:9f:cd:3b:1b:3a:98:8a:90:e6:b5:15:
63:50:81:76:89:ac:85:54:f3:af:b3:44:f4:e1:e7:c1:09:1e:
7b:e0:76:ae:10:93:90:f8:d8:89:96:7f:60:48:0e:72:c1:43:
d9:de:4a:e1:e7:27:e4:c9:d2:3f:70:03:a4:8c:be:73:cd:b7:
0b:61:fa:e9:50:91:c4:e7:c3:92:09:b3:0a:fb:29:91:88:d7:
3d:19:bf:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:19:11 2025 by rpki-client