Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
File: 5z_jNRpeYmSh-BKcECUdnolugGI.mft (raw, json)
Hash identifier: EwY4EaihfDi0gI+N+wp1HILxGAbYqoPsUQv0bvyGNVY=
Subject key identifier: B8:CC:1B:42:0B:B4:6A:DA:04:A2:41:E3:92:07:3D:58:F0:EB:E2:9F
Authority key identifier: E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
Certificate issuer: /CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Certificate serial: 0194BC729003842A065A75767B08A257EA5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 13:00:12 +0000
Manifest this update: Fri 31 Jan 2025 13:00:12 +0000
Manifest next update: Sat 01 Feb 2025 13:00:12 +0000
Files and hashes: 1: 5z_jNRpeYmSh-BKcECUdnolugGI.crl (hash: TKG5LOieKERX1+jog2BJXw8dr3Ao0RHsO5VwX8X8Pq0=)
2: mjZQqpBxq3tzElUxwYWj6w8CYqw.roa (hash: xWY5CwFTzA7VILUdMDaL5WQ8VyRltqo8AcwsKQ6Bk2Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:90:03:84:2a:06:5a:75:76:7b:08:a2:57:ea:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73fe3351a5e6264a1f8129c10251d9e896e8062
Validity
Not Before: Jan 31 13:00:12 2025 GMT
Not After : Feb 1 13:00:12 2025 GMT
Subject: CN=b8cc1b420bb46ada04a241e392073d58f0ebe29f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:77:c5:c2:40:1e:c0:6d:ac:92:9d:b5:20:35:
2b:f6:d0:6b:fa:8b:7d:55:27:b9:0c:a1:e5:da:b5:
33:eb:46:78:a5:6b:22:df:6f:1d:98:34:ea:50:f7:
6e:25:cc:9d:28:44:3e:8b:71:da:ca:d1:d2:3e:6e:
c6:c0:e6:00:71:53:92:a3:03:91:48:60:d4:dd:4e:
bb:c9:10:2f:fa:43:12:8b:31:5d:aa:f9:d2:46:a8:
75:75:d2:13:b1:d6:8f:6b:19:77:b8:fc:af:6a:9c:
eb:1b:f0:ab:b5:ea:23:cc:bd:6d:f8:5e:66:d9:27:
08:de:12:84:ed:48:9c:d2:34:b1:70:4f:45:ae:ca:
a8:e9:28:32:37:30:5a:5d:df:b5:d3:77:2f:e6:44:
af:10:41:76:5f:4f:63:51:71:3f:40:a5:46:e1:65:
47:6c:94:32:50:0a:79:5c:51:49:35:56:7d:6c:c3:
23:2b:d4:29:7f:80:44:1f:18:10:7d:e0:f8:28:7c:
26:92:cc:e8:e3:f1:5b:71:9c:d8:1e:df:5b:4a:3c:
dd:69:05:7d:ad:02:b0:9b:0c:b3:a9:87:24:c9:a3:
37:f2:e1:43:2b:59:e2:86:28:70:73:ba:e4:0c:36:
c7:39:87:8f:bb:45:12:a2:25:58:f3:db:0f:30:65:
b2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CC:1B:42:0B:B4:6A:DA:04:A2:41:E3:92:07:3D:58:F0:EB:E2:9F
X509v3 Authority Key Identifier:
keyid:E7:3F:E3:35:1A:5E:62:64:A1:F8:12:9C:10:25:1D:9E:89:6E:80:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z_jNRpeYmSh-BKcECUdnolugGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aeb224-8c89-4466-9b38-024c1edd62ec/1/5z_jNRpeYmSh-BKcECUdnolugGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c7:91:2b:87:0a:6f:65:94:d4:b2:f0:98:ff:36:a4:42:53:
a5:a9:31:12:20:96:f2:73:44:b1:b5:af:b2:1e:97:6a:69:7b:
9f:fd:f2:b9:3e:49:b9:7a:62:bb:e9:0d:df:5b:46:e4:c6:c8:
1e:51:61:ee:7c:2e:65:b2:57:dd:fd:62:cb:b2:b0:61:f7:c7:
a3:5b:e8:62:1b:e5:e6:c1:01:63:f0:50:9c:ae:03:9b:05:d5:
28:48:90:05:bd:44:7d:cf:8b:ba:25:f3:d7:42:91:13:05:10:
a2:82:20:f7:93:fe:6a:3e:bb:c1:34:c8:f4:bd:f9:62:35:ba:
ec:f4:b4:cd:3c:41:53:8e:28:32:92:51:bd:f6:ae:5f:0e:ff:
29:87:38:d5:b5:a4:1c:1e:08:3f:5d:54:ab:6d:24:b4:ea:3c:
a9:30:21:ca:5c:f3:92:ff:fd:f9:91:11:8e:84:05:c9:4f:c3:
16:fc:27:7c:ed:84:10:e3:d8:88:38:f9:8d:3b:84:67:d2:87:
0e:a4:da:d9:03:fa:09:72:d7:d3:21:6f:08:4a:3e:ea:2e:11:
df:cf:23:72:25:f9:cf:0c:82:65:a9:c9:1c:52:b0:5b:12:f5:
72:35:1f:b0:19:1d:71:3d:90:83:4a:d8:45:ae:5d:ae:e5:a8:
bf:9a:66:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:15:03 2025 by rpki-client