Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.mft
File: 5_y3rNVfY0m52BRheGwSRY-G9y4.mft (raw, json)
Hash identifier: r5ASQ66MXAtlnvjm8RqemFAYaHoGOWlJpBtLky7N5u0=
Subject key identifier: 80:BC:1A:6C:13:54:E1:41:5E:29:DD:CB:24:D2:4E:39:FC:7F:80:4F
Authority key identifier: E7:FC:B7:AC:D5:5F:63:49:B9:D8:14:61:78:6C:12:45:8F:86:F7:2E
Certificate issuer: /CN=e7fcb7acd55f6349b9d81461786c12458f86f72e
Certificate serial: 0194BD17E66812C4B09EC6C075F2D1B179E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_y3rNVfY0m52BRheGwSRY-G9y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 16:00:47 +0000
Manifest this update: Fri 31 Jan 2025 16:00:47 +0000
Manifest next update: Sat 01 Feb 2025 16:00:47 +0000
Files and hashes: 1: 5_y3rNVfY0m52BRheGwSRY-G9y4.crl (hash: vfc6sosylelieZhEuTqY2tl2Kct0jEH14RmDqZMNcHY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e6:68:12:c4:b0:9e:c6:c0:75:f2:d1:b1:79:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fcb7acd55f6349b9d81461786c12458f86f72e
Validity
Not Before: Jan 31 16:00:47 2025 GMT
Not After : Feb 1 16:00:47 2025 GMT
Subject: CN=80bc1a6c1354e1415e29ddcb24d24e39fc7f804f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cd:9a:71:0c:7c:2d:c7:e1:93:9f:83:2f:3f:
16:73:8a:8a:8a:09:1e:a1:03:5f:f9:b0:29:f1:b7:
57:56:d2:60:25:40:98:fc:34:65:f2:3a:34:05:24:
f3:92:05:b2:b8:6d:df:f8:b0:62:ef:67:40:d6:07:
d7:74:5c:04:a4:96:49:ab:ca:33:69:84:b7:da:a0:
07:a0:b7:a1:49:ef:48:5a:e6:fb:8e:4a:8f:26:01:
12:47:cb:a2:0c:cb:73:41:d7:e0:6e:c3:89:72:35:
20:f8:13:bb:70:4c:86:64:82:38:10:1a:7c:08:6e:
11:40:ac:44:20:92:3b:da:24:23:e8:ae:69:2a:68:
6a:23:bb:d8:4e:a4:92:8f:dc:e4:48:e6:49:8e:90:
b4:f4:04:a0:1d:df:1a:09:8b:47:bf:fb:1e:59:c2:
6c:db:30:68:35:d3:a9:12:50:99:b5:97:75:3a:a2:
28:47:da:7e:b3:ab:45:d5:a3:12:ff:70:7d:9c:e1:
48:0f:f5:79:e2:50:33:d1:a8:55:16:8a:11:6b:ae:
35:ae:89:e5:b4:05:e3:31:13:75:4c:09:bb:e6:98:
88:6b:6a:9a:74:06:79:06:f8:0c:cf:c2:05:b9:15:
1f:7d:1f:de:a6:8f:0f:6a:53:fa:d4:0d:8d:80:4a:
02:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BC:1A:6C:13:54:E1:41:5E:29:DD:CB:24:D2:4E:39:FC:7F:80:4F
X509v3 Authority Key Identifier:
keyid:E7:FC:B7:AC:D5:5F:63:49:B9:D8:14:61:78:6C:12:45:8F:86:F7:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_y3rNVfY0m52BRheGwSRY-G9y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/698339-5905-4637-b983-cdb3a657d9ee/1/5_y3rNVfY0m52BRheGwSRY-G9y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:82:42:4d:a7:29:ed:4d:41:44:cb:b4:dc:1d:62:ec:7e:04:
a0:63:c6:df:a7:1f:83:f3:21:77:70:e5:c7:c8:8e:c1:94:22:
a6:16:04:94:28:41:7d:a6:76:1f:de:d3:c3:f9:36:41:5e:46:
23:08:8c:d0:55:5f:0c:f2:ee:1c:7f:64:d3:2d:bb:99:f8:b4:
e9:04:f2:9b:cd:ed:9a:cb:5e:54:89:a1:99:40:10:24:88:91:
d8:56:c7:1f:2b:14:6c:c1:2e:7d:6a:0f:bd:ab:75:2f:98:cd:
65:6e:51:f8:03:17:37:f1:84:9f:7b:44:7e:f8:af:fd:f0:9b:
29:39:47:29:a2:3a:d7:27:e7:cc:b3:5d:f7:9b:9d:54:6e:8b:
1c:55:d5:99:62:31:0c:46:3c:64:95:c1:70:40:8f:6f:ad:01:
6e:0c:30:68:fc:30:92:ea:86:0d:f1:18:9f:bc:52:9c:d1:96:
5b:84:8e:1c:ea:2f:5a:24:f1:ba:55:28:e5:48:fe:91:92:e6:
89:1b:b3:6a:74:a2:7c:2d:2d:7a:2b:33:a9:06:81:86:e4:b3:
1d:73:95:61:46:35:a9:e6:ed:d0:37:91:ed:8c:8a:78:51:aa:
0a:de:87:0b:c4:63:37:89:5a:e8:d9:2b:4a:cb:da:66:8b:e3:
12:a9:86:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:52:35 2025 by rpki-client