Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft
File: 5NozpY-0djTWFOwJpomN4PWABv4.mft (raw, json)
Hash identifier: CoBadVymGWo210CsIGmLhZXUxyVAT+h8w2d3WN3xHLw=
Subject key identifier: EE:4A:31:A2:55:CB:F7:6B:1F:3A:C3:17:CE:FA:FA:D0:01:2F:7E:2A
Authority key identifier: E4:DA:33:A5:8F:B4:76:34:D6:14:EC:09:A6:89:8D:E0:F5:80:06:FE
Certificate issuer: /CN=e4da33a58fb47634d614ec09a6898de0f58006fe
Certificate serial: 0194BCAA0FD798C429BEA4FB25E2CC66512E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NozpY-0djTWFOwJpomN4PWABv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft
Manifest number: 0B01
Signing time: Fri 31 Jan 2025 14:00:49 +0000
Manifest this update: Fri 31 Jan 2025 14:00:49 +0000
Manifest next update: Sat 01 Feb 2025 14:00:49 +0000
Files and hashes: 1: 5NozpY-0djTWFOwJpomN4PWABv4.crl (hash: z/BMj6vZQHJo4iYj8XqVa7Th8G8JWZ7iF1HKkkDx74A=)
2: q_FuKEatt0zR6PfM8hStM_OAEUA.roa (hash: 2y3NDWHhYWGNF2joY5nRoFi6Rxr80fn/VSsCMypexYw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:0f:d7:98:c4:29:be:a4:fb:25:e2:cc:66:51:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4da33a58fb47634d614ec09a6898de0f58006fe
Validity
Not Before: Jan 31 14:00:49 2025 GMT
Not After : Feb 1 14:00:49 2025 GMT
Subject: CN=ee4a31a255cbf76b1f3ac317cefafad0012f7e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4e:28:e8:cb:41:84:1a:30:db:62:16:65:ae:
53:33:e4:92:5e:78:fd:76:98:5c:e2:f3:a1:c1:fe:
f4:36:5d:8f:06:48:22:0c:7b:3b:06:83:4e:8b:1d:
ec:c3:63:f5:5b:87:7c:2c:e2:5c:c5:48:cc:0c:1a:
f0:c8:67:40:d2:91:36:f4:69:8b:1a:66:2d:56:c9:
f3:43:ee:78:dd:fc:8b:40:44:d7:e8:9a:5b:db:85:
e3:49:95:e8:18:93:1a:cb:7b:d6:dd:e8:5f:81:e9:
71:79:58:30:81:98:4f:18:a2:80:01:13:be:44:a2:
1e:ac:69:ad:e9:ee:31:09:e4:9f:ce:95:42:1b:1a:
86:1e:2c:b2:fc:c4:56:47:59:bd:64:8f:97:18:01:
7e:95:58:7b:8c:f8:aa:63:e9:07:35:eb:5b:1a:bd:
eb:4b:fb:f3:d4:75:0d:70:0f:09:75:f4:16:5b:2a:
d8:6d:77:ce:a1:c0:29:d9:cf:64:f3:73:74:52:71:
11:3f:d2:bd:f9:e1:06:10:95:8a:2e:d4:74:fe:0b:
fe:77:df:f2:d2:cb:47:53:87:4f:11:98:69:ae:0a:
58:30:91:aa:57:9f:0b:0c:11:58:eb:1b:96:80:02:
74:53:0c:e0:29:a2:07:66:19:7e:1c:c7:a0:bf:3c:
2a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4A:31:A2:55:CB:F7:6B:1F:3A:C3:17:CE:FA:FA:D0:01:2F:7E:2A
X509v3 Authority Key Identifier:
keyid:E4:DA:33:A5:8F:B4:76:34:D6:14:EC:09:A6:89:8D:E0:F5:80:06:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NozpY-0djTWFOwJpomN4PWABv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ce:34:c6:c6:4a:4f:d2:b3:94:f6:26:81:be:4f:3c:8b:a6:
8e:44:a2:9b:dd:e8:46:1d:09:fe:93:a3:cb:35:81:fe:9b:ad:
5e:12:3d:c4:68:f3:d4:8e:3b:ec:4e:8c:69:b3:df:78:aa:53:
32:43:48:21:79:13:e3:4a:53:e5:61:41:4b:fb:f1:11:44:24:
5e:d8:6f:15:76:31:69:39:fd:ff:fc:b7:44:36:37:0a:06:94:
e2:75:7c:be:71:7d:02:83:9b:59:02:b1:1e:ef:a4:ab:92:ae:
23:f1:e2:81:93:d1:c6:dd:e3:81:c8:a0:d5:c1:a8:16:79:88:
e8:1f:86:64:07:98:ff:5b:58:78:8f:7e:fc:32:95:89:42:f6:
39:c7:bb:72:77:fa:e2:a5:9a:91:7a:99:45:41:f0:2a:c7:90:
bb:44:13:58:c6:24:ad:b4:3c:70:bc:d0:1f:b9:90:d0:54:21:
80:81:22:3d:ac:be:ac:c5:53:c1:e2:fa:ce:a3:53:39:e9:f9:
d7:ab:86:a0:78:2b:39:8c:8f:26:7b:9e:71:a3:3c:d4:76:07:
60:a3:b9:b7:11:52:52:7d:d0:be:d1:f8:4e:80:40:40:c9:8c:
a6:0a:ca:0e:62:1f:f7:f9:10:9d:1e:69:da:32:47:1b:03:3a:
b7:20:df:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:01 2025 by rpki-client