Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.mft
File: 5VtmTJKz5yEMKw7UU8ZOp_Xodvc.mft (raw, json)
Hash identifier: vwBKX3qjd6wTYBZycqmYJe+FSkGqW3ioev2qH93RBv4=
Subject key identifier: EE:B5:E7:C1:E1:6A:D2:C8:A2:B6:8E:3D:4C:7E:60:96:C0:7D:C0:F2
Authority key identifier: E5:5B:66:4C:92:B3:E7:21:0C:2B:0E:D4:53:C6:4E:A7:F5:E8:76:F7
Certificate issuer: /CN=e55b664c92b3e7210c2b0ed453c64ea7f5e876f7
Certificate serial: 0194BBCE40887D5425198880A7DA577A5783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:00:43 +0000
Manifest this update: Fri 31 Jan 2025 10:00:43 +0000
Manifest next update: Sat 01 Feb 2025 10:00:43 +0000
Files and hashes: 1: 1xvntgtwN598Xt12Wp30p-iFY40.roa (hash: Mu8yYMtQaTf8Y5ca71Jrhca8f7JY0TOmjgZFuk/22tE=)
2: 5VtmTJKz5yEMKw7UU8ZOp_Xodvc.crl (hash: cPN1/LDtsznZv1kW2nyx/VTkQrkXCQLwbbAot54aj9A=)
3: V_bFPJiZiN3dn69rtGf2PU2V_7s.roa (hash: yf/Df7sBD+Bl6bPwS7+5B7VNWvnFlcA8NvL0Ry+NDTQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:40:88:7d:54:25:19:88:80:a7:da:57:7a:57:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e55b664c92b3e7210c2b0ed453c64ea7f5e876f7
Validity
Not Before: Jan 31 10:00:43 2025 GMT
Not After : Feb 1 10:00:43 2025 GMT
Subject: CN=eeb5e7c1e16ad2c8a2b68e3d4c7e6096c07dc0f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:db:48:bd:63:6b:76:f5:d9:a0:4c:20:24:16:
6c:dd:0e:75:31:74:f8:d5:81:c5:97:5d:f1:8b:9d:
a0:f2:2b:fc:9b:fb:2d:f1:70:6a:3e:75:e3:9f:1b:
47:b9:a2:19:31:c2:98:7c:f4:02:e0:b8:e0:e5:c5:
fe:0a:30:e5:7f:9b:69:2c:f2:35:96:70:d4:1d:1c:
b8:0e:e4:99:35:2b:76:d6:7a:67:d8:ee:ca:21:b6:
21:8a:59:a6:6b:b7:7e:41:30:fd:af:36:ee:46:9e:
11:80:62:3e:83:e0:54:eb:1a:6d:8e:ce:dd:5b:55:
f5:24:79:c3:47:0e:23:05:f6:1e:50:d9:3c:2f:12:
4d:30:44:a0:6f:61:03:a6:60:e5:fe:8a:69:b9:54:
20:ce:c9:94:d4:67:2d:d1:b0:30:99:d7:43:7a:0d:
31:36:4a:84:26:e6:2f:77:9a:9a:d4:91:df:ae:4b:
4f:7c:9a:fc:2d:09:c9:9f:45:e6:e8:6a:7c:ee:21:
e6:64:cc:dc:36:6f:db:4b:f8:73:0a:b5:07:65:ef:
97:ea:67:b7:5a:5a:aa:b1:d5:fa:14:d4:6a:51:d9:
72:41:9a:e9:96:46:96:04:66:c1:36:fb:be:95:69:
e9:b9:a9:17:7f:76:60:13:4e:5a:73:0f:c2:82:14:
90:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B5:E7:C1:E1:6A:D2:C8:A2:B6:8E:3D:4C:7E:60:96:C0:7D:C0:F2
X509v3 Authority Key Identifier:
keyid:E5:5B:66:4C:92:B3:E7:21:0C:2B:0E:D4:53:C6:4E:A7:F5:E8:76:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9d414e-0009-4c76-aaa8-0cf4cb136e16/1/5VtmTJKz5yEMKw7UU8ZOp_Xodvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d0:f5:f5:23:b8:3e:77:61:d5:6f:82:8f:0c:ea:2a:bf:cb:
b6:95:1b:11:30:ed:e6:bd:d3:4f:94:54:28:32:0d:e1:27:bf:
81:f6:07:27:73:47:2e:0a:f5:ef:82:be:e6:46:fd:0d:e6:3a:
8e:79:94:7b:9f:85:d7:1a:78:50:be:d3:bf:f0:5d:8f:9d:6c:
a6:c3:4c:57:e6:d0:3d:a4:b1:f7:ff:55:bd:31:fb:fe:e3:dd:
b0:63:3d:24:8f:76:07:4c:aa:6d:43:86:47:16:f4:1e:ca:c5:
32:43:3f:64:e8:47:fd:85:05:37:86:58:de:ca:d5:d6:1a:5a:
f4:c3:11:fd:a1:4e:8e:e7:ec:c6:61:b9:ce:a6:44:61:9d:33:
46:1a:ff:d2:83:bf:c1:ed:fc:35:47:91:23:32:a1:b2:d1:7f:
1b:15:d9:17:25:47:10:cf:97:94:5b:61:08:6f:92:a4:c9:58:
87:c3:56:6c:6a:78:cc:ab:1b:ee:9e:e8:b1:23:20:e1:67:19:
ce:e2:89:4b:ef:04:73:ec:3e:8b:49:84:11:70:23:f0:dd:31:
e1:6c:9a:49:db:86:fe:3e:e5:ce:ae:a7:28:ce:b7:7f:a0:aa:
ae:bd:aa:10:6b:e1:60:99:3b:c8:37:70:a4:53:d3:74:2a:ad:
18:de:79:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:17:29 2025 by rpki-client