Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/5cfb0f-ec8d-4146-991e-76093750eec1/1/5cBMAZvGk2UEKFWFUfrNIiCAEm0.mft
File: 5cBMAZvGk2UEKFWFUfrNIiCAEm0.mft (raw, json)
Hash identifier: y090wQkA0c/a9WZUQjWDh6QL2GImoEPz/Tf7RsUIcKc=
Subject key identifier: 0C:8E:53:BD:40:B7:75:A7:98:4C:B8:EB:D5:B3:81:04:EC:D0:1A:0E
Authority key identifier: E5:C0:4C:01:9B:C6:93:65:04:28:55:85:51:FA:CD:22:20:80:12:6D
Certificate issuer: /CN=e5c04c019bc693650428558551facd222080126d
Certificate serial: 0194BC72BBC89E46B71D63E5FA681C60610E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cBMAZvGk2UEKFWFUfrNIiCAEm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/5cfb0f-ec8d-4146-991e-76093750eec1/1/5cBMAZvGk2UEKFWFUfrNIiCAEm0.mft
Manifest number: D4
Signing time: Fri 31 Jan 2025 13:00:23 +0000
Manifest this update: Fri 31 Jan 2025 13:00:23 +0000
Manifest next update: Sat 01 Feb 2025 13:00:23 +0000
Files and hashes: 1: 5cBMAZvGk2UEKFWFUfrNIiCAEm0.crl (hash: g2lBBtxkuwmlvYSFWr8O4txE2dL+hBiMXso/NWQP39E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:bb:c8:9e:46:b7:1d:63:e5:fa:68:1c:60:61:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c04c019bc693650428558551facd222080126d
Validity
Not Before: Jan 31 13:00:23 2025 GMT
Not After : Feb 1 13:00:23 2025 GMT
Subject: CN=0c8e53bd40b775a7984cb8ebd5b38104ecd01a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0e:55:bf:cd:0a:13:48:c4:d6:12:e5:44:40:
07:08:c0:86:0e:8a:f5:1f:7b:29:d1:b3:15:77:8b:
48:2f:48:86:dc:86:73:22:f0:96:89:49:a8:33:04:
c2:4d:81:2e:e0:80:49:3f:f2:cc:5b:ba:7b:c7:61:
7d:5b:6d:7e:60:ae:35:37:61:26:4f:13:cf:29:8f:
d3:bc:74:22:d6:09:78:22:bb:5f:33:4a:86:9d:7f:
16:21:c5:56:03:9c:b1:b5:82:25:70:35:ae:7b:61:
61:3c:1d:d9:ec:f9:79:1b:1b:79:e7:5d:ac:5a:91:
3a:6c:1f:eb:c7:f1:17:2f:45:92:10:67:d9:94:b6:
bb:04:f4:67:c5:6f:99:69:42:99:b5:34:13:2e:b7:
90:45:7d:97:7f:50:92:d4:f1:4a:4a:6c:53:37:f5:
e5:33:d3:8e:1b:e6:c9:4e:7b:9c:b4:61:94:1e:e8:
93:0d:92:69:27:d1:4c:37:04:be:75:02:8a:f4:eb:
5c:0d:aa:a0:46:a5:90:50:69:d4:d0:ee:cd:bc:66:
1f:b9:35:c5:5e:c8:1b:a6:ff:d9:ed:a7:18:19:18:
13:74:a7:06:c3:b8:9f:3e:e7:dc:07:1e:1e:bd:79:
80:21:5f:de:5b:7d:09:8f:49:ca:88:2f:96:fb:b1:
c0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8E:53:BD:40:B7:75:A7:98:4C:B8:EB:D5:B3:81:04:EC:D0:1A:0E
X509v3 Authority Key Identifier:
keyid:E5:C0:4C:01:9B:C6:93:65:04:28:55:85:51:FA:CD:22:20:80:12:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cBMAZvGk2UEKFWFUfrNIiCAEm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/5cfb0f-ec8d-4146-991e-76093750eec1/1/5cBMAZvGk2UEKFWFUfrNIiCAEm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/5cfb0f-ec8d-4146-991e-76093750eec1/1/5cBMAZvGk2UEKFWFUfrNIiCAEm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:af:3e:78:aa:2c:a4:f2:43:d5:97:d0:fe:4c:8e:ac:0b:50:
14:1e:33:fe:88:e2:67:c7:c0:d8:73:2e:95:69:18:0d:bb:50:
9c:4d:4a:fa:6f:76:a2:0c:84:5c:42:46:08:71:f3:72:a3:6b:
c2:78:66:a7:2c:4d:4b:9c:1a:5b:8a:d9:79:56:4b:80:3f:89:
c4:d6:0d:a8:57:a9:86:d0:d6:67:5a:58:d7:aa:e9:e9:07:01:
8c:95:30:2d:ae:f5:81:51:fe:14:73:a2:74:f9:84:5d:ab:02:
9c:f0:b7:9c:e5:72:7e:05:d0:47:4a:75:cd:76:ba:66:6a:d8:
6c:d6:83:be:96:b0:5d:fe:31:79:0d:7b:ae:ad:5b:5b:b6:24:
61:06:74:a9:cb:f2:b2:e7:df:2c:0a:57:7e:6c:13:ff:f5:3a:
bd:a6:dd:de:a4:c5:6a:89:34:d2:f5:9a:b5:b6:52:25:63:fd:
51:aa:05:ff:81:fe:6d:65:02:2a:14:06:21:f9:f4:c3:b8:34:
bc:a9:e9:14:7f:f5:64:6e:a8:ec:25:82:80:2f:7f:88:4d:3e:
c9:c0:ee:f2:83:22:b2:91:c6:b0:85:43:28:f3:d2:12:a6:93:
7b:3c:16:3c:e5:99:28:28:4b:34:4e:1d:16:64:be:29:e7:80:
c6:15:0a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:50 2025 by rpki-client