Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
File: 5oBHj67Itn3f7OY1fPJc8sodhdA.mft (raw, json)
Hash identifier: c+Xxmo19or+coyHKOKtaKzNbNnB+B/EONnd6pFtfEQA=
Subject key identifier: 9D:C3:41:4B:EF:0D:2B:27:0D:CC:61:82:55:21:CE:C0:C8:88:C6:97
Authority key identifier: E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0
Certificate issuer: /CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
Certificate serial: 0194BD852D7027FDCF83B829EA769B00C221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 18:00:08 +0000
Manifest this update: Fri 31 Jan 2025 18:00:08 +0000
Manifest next update: Sat 01 Feb 2025 18:00:08 +0000
Files and hashes: 1: 5oBHj67Itn3f7OY1fPJc8sodhdA.crl (hash: +e01isHIJ1A3yN1j0l7S1CZ+ZK1F3e3Yiocy/i2NZmk=)
2: tRzSJb7DVEfQEAa9U4BrDqM_SWA.roa (hash: XZPt+PoWwjSkw1pIWuwBcMWbKd9UU7K0EsDZzwNXa5E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:2d:70:27:fd:cf:83:b8:29:ea:76:9b:00:c2:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
Validity
Not Before: Jan 31 18:00:08 2025 GMT
Not After : Feb 1 18:00:08 2025 GMT
Subject: CN=9dc3414bef0d2b270dcc61825521cec0c888c697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f9:00:d4:8a:36:b3:ec:e0:f4:3b:94:b1:00:
76:f1:54:32:f4:b1:55:84:92:6a:15:dc:67:6c:71:
1b:7b:d5:91:66:7e:c0:fe:0e:89:e9:d6:5a:5f:b8:
89:fe:aa:de:a7:e9:1f:37:83:da:17:e8:bc:96:54:
9b:e3:a6:32:ac:6d:12:b6:36:62:04:e2:72:9e:96:
05:84:02:31:cc:ee:f5:4a:7e:2d:a2:d7:3e:be:74:
0d:f0:a6:4b:6f:4d:e7:02:9d:29:3c:30:ea:a1:53:
df:02:66:94:2d:22:8e:93:51:a0:9c:60:6c:06:eb:
d4:ac:02:f1:6f:68:b2:f4:1b:31:fa:8e:be:e2:6d:
ed:72:83:63:17:b9:24:f2:26:a8:1b:e3:eb:c4:b6:
08:7d:a9:da:50:89:a9:ff:bf:0f:51:23:c1:45:9f:
ad:9d:da:08:a1:23:d2:d7:cc:1d:36:33:c4:5c:4f:
49:f7:70:b2:d2:42:b3:74:49:12:ca:c3:73:d6:9b:
fd:14:d0:b4:0e:df:62:37:f1:41:42:78:07:c5:50:
a6:6c:83:cc:a5:e4:e8:39:77:50:3d:09:6d:8d:54:
5e:23:06:e7:49:ff:45:1a:f0:93:4c:5b:8c:57:f8:
68:ef:ae:d3:93:ac:96:14:9b:30:7e:b4:65:50:6d:
bf:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C3:41:4B:EF:0D:2B:27:0D:CC:61:82:55:21:CE:C0:C8:88:C6:97
X509v3 Authority Key Identifier:
keyid:E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:98:40:83:75:f7:96:c6:78:d6:4e:fc:cf:81:7b:7f:44:3b:
ef:ef:64:0f:fe:8c:ed:df:2d:13:58:3f:73:76:b3:da:25:36:
16:76:16:39:57:82:20:6b:0d:85:68:d8:49:13:5f:f8:4f:75:
a9:7d:b4:07:0b:35:22:46:77:cc:de:9b:2c:a7:96:4b:6b:0c:
3c:9d:10:17:61:da:7a:4f:c1:ae:bd:2a:10:dd:31:82:ac:83:
11:78:5a:8e:62:b9:94:44:56:57:19:3f:dc:15:74:27:85:a8:
03:b5:5d:28:4c:b8:12:66:27:c8:29:d1:94:4f:e9:62:24:7f:
5b:96:cc:83:b8:46:c3:c0:35:bc:25:02:24:24:19:d8:30:62:
c2:d1:ff:65:2a:8e:59:99:c9:32:56:8b:00:50:70:fc:ab:62:
d9:42:26:0e:8b:bd:d9:c7:92:a8:7f:d7:2c:a2:40:6f:aa:0f:
6c:1c:57:d4:f5:48:01:fd:b6:6b:d1:c9:d8:b7:e1:3c:a8:de:
43:45:a9:d4:cb:e9:4f:24:d1:ae:57:f7:5a:fc:8d:1c:c9:63:
1d:7e:5a:22:46:b8:6b:43:1c:b1:12:3c:7b:fd:fa:52:df:79:
d7:d3:be:66:1a:c1:00:8a:30:da:6e:35:ac:7f:7d:66:d3:7b:
c6:a4:4a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:24 2025 by rpki-client