Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
File: 5fTyS0D9qblSjkqO3K1huEHfbBg.mft (raw, json)
Hash identifier: lW0SUt9uT6T27I/4J7PtXazCJ1M16BWniHaybf0CtvQ=
Subject key identifier: 43:B0:8C:BB:E4:E0:A9:78:D1:40:4B:A4:78:E6:C5:EF:AA:AA:BA:7F
Authority key identifier: E5:F4:F2:4B:40:FD:A9:B9:52:8E:4A:8E:DC:AD:61:B8:41:DF:6C:18
Certificate issuer: /CN=e5f4f24b40fda9b9528e4a8edcad61b841df6c18
Certificate serial: 0194BCA98C2F2C360EB294B715434BA79F20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
Manifest number: 11BC
Signing time: Fri 31 Jan 2025 14:00:15 +0000
Manifest this update: Fri 31 Jan 2025 14:00:15 +0000
Manifest next update: Sat 01 Feb 2025 14:00:15 +0000
Files and hashes: 1: 4k9DaSQHXw2s8I0EzO1Y-jNpTYg.roa (hash: ZVBB3cjYOT3VqfWQ4/A+wZjufx+V4UWOyQ4pBr48oC8=)
2: 5fTyS0D9qblSjkqO3K1huEHfbBg.crl (hash: 2/cPhQeG1eolNsuosPZ92cX3MIGxKOxcplx6+JiIVPM=)
3: W0VJvnbWq3J3Bz14XVJrCcO-0Ak.roa (hash: BRMekWIhLsWnxOA/bB8odlVJv4hlD7aXq4PRDSkGzkc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8c:2f:2c:36:0e:b2:94:b7:15:43:4b:a7:9f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f4f24b40fda9b9528e4a8edcad61b841df6c18
Validity
Not Before: Jan 31 14:00:15 2025 GMT
Not After : Feb 1 14:00:15 2025 GMT
Subject: CN=43b08cbbe4e0a978d1404ba478e6c5efaaaaba7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cb:46:e6:2f:e7:64:0f:c3:81:bd:00:0a:68:
39:e0:d6:a4:c8:e2:b6:41:72:00:93:23:90:5d:5e:
35:7b:55:61:ac:5a:c0:91:f3:07:a3:5b:c4:32:94:
1d:10:6a:0c:e1:f8:7d:1e:83:65:56:7c:77:6c:26:
8d:34:20:41:fa:ca:05:a4:ac:50:ba:32:f4:93:72:
ca:39:36:e6:56:59:2b:7f:0d:b2:41:6c:c9:49:e2:
5b:28:6e:b9:1e:9a:ba:fa:58:55:64:d2:e7:1a:bb:
3c:5f:04:7d:9f:be:31:c6:6e:39:89:3c:60:8b:7f:
fa:39:f9:c2:a7:68:ad:90:5d:4d:6c:d2:6d:4e:da:
3c:bb:69:6a:6f:3d:bb:37:f2:13:23:54:a8:9b:80:
93:cd:d4:cd:03:a0:d3:81:43:d7:eb:b6:36:70:7d:
85:f4:6c:45:1b:94:9a:85:ac:d5:6d:74:fe:9c:1d:
7e:41:08:3b:f9:1d:d9:d0:b3:e5:93:b5:2d:ce:71:
03:58:4a:86:02:5b:ab:f2:09:5f:59:ce:5c:67:bb:
aa:e3:cd:7f:af:b1:4a:8a:e9:a0:5b:db:da:79:b8:
90:65:38:17:6d:52:d0:0b:b7:fa:09:23:cb:fb:07:
5e:03:c7:37:c9:c4:94:27:2e:73:0a:a3:81:73:b7:
da:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B0:8C:BB:E4:E0:A9:78:D1:40:4B:A4:78:E6:C5:EF:AA:AA:BA:7F
X509v3 Authority Key Identifier:
keyid:E5:F4:F2:4B:40:FD:A9:B9:52:8E:4A:8E:DC:AD:61:B8:41:DF:6C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fTyS0D9qblSjkqO3K1huEHfbBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51e3a5-31db-4bdd-b0cd-828022043ea3/1/5fTyS0D9qblSjkqO3K1huEHfbBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b8:3f:e1:5d:c8:a4:ca:0d:cb:c5:6f:a7:63:e9:4c:79:db:
97:65:d8:e6:6c:4a:84:fb:3d:27:f8:79:70:37:6a:8f:13:6f:
b5:7e:9a:49:62:9a:96:d0:db:53:57:f7:48:0d:5f:0b:94:7f:
1d:7d:8f:ae:a2:dc:27:f4:40:9d:ae:e8:11:45:6e:52:c9:91:
37:d1:e1:5c:28:a4:4e:50:65:36:37:93:fe:15:35:9a:bd:66:
51:7f:a6:8a:27:28:c1:30:6b:68:f9:79:43:25:72:08:0b:c2:
c6:41:4e:ca:82:c8:db:1d:60:3c:30:05:e1:1c:13:e8:b1:c8:
44:d5:98:1e:22:b0:78:61:f8:62:aa:78:74:23:66:96:f1:ca:
78:d5:7a:7d:21:00:0d:01:90:b6:4d:e3:be:e3:c0:2f:f8:d7:
22:c1:34:bf:84:74:4e:50:b2:8c:d7:9c:8c:d4:54:c1:e2:d9:
c6:e3:d6:ab:bc:97:f7:89:19:41:d3:4e:7e:ce:a6:75:5c:fc:
5f:ce:63:65:70:28:f9:96:6d:ad:9a:06:09:a8:3a:fd:90:b0:
43:fc:13:9b:d8:e4:ff:ee:ee:55:41:6a:58:71:a4:75:6a:46:
c3:d8:c1:cb:83:b9:9d:63:59:dc:33:69:ef:ba:c8:fc:38:ef:
b4:63:8e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:02 2025 by rpki-client