Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
File: 5f4C8qp2xAK312oRTcdzXV-TW4g.mft (raw, json)
Hash identifier: dz9YIrM9Yh1b65MkuE9zAfeA5R52c+72GZ45sJiIw4o=
Subject key identifier: 5B:2B:8F:F4:32:2A:01:93:6F:E4:9B:EF:44:84:F6:B1:3A:C2:8E:24
Authority key identifier: E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
Certificate issuer: /CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Certificate serial: 0194BBCE3858FF023D3398FDF0B09B304A2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:41 +0000
Manifest this update: Fri 31 Jan 2025 10:00:41 +0000
Manifest next update: Sat 01 Feb 2025 10:00:41 +0000
Files and hashes: 1: 5f4C8qp2xAK312oRTcdzXV-TW4g.crl (hash: m7h3j0RzZDQX7WxjCHWx+oGdgj7wx8Is1QFhM7XcYFE=)
2: O7xkMgYDWmT39_oyZPNETli4dGo.roa (hash: BJVxC4UljGsK/BbuRqwBk8+Scbbux5UgI7xaPeJbQCA=)
3: mTHF4xRS849mOw36faqzyw4dbV0.roa (hash: wG6gmT9BywW9Amqbl4suJT23ZQUJGIpmhCizynoZqms=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:38:58:ff:02:3d:33:98:fd:f0:b0:9b:30:4a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Validity
Not Before: Jan 31 10:00:41 2025 GMT
Not After : Feb 1 10:00:41 2025 GMT
Subject: CN=5b2b8ff4322a01936fe49bef4484f6b13ac28e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8c:7e:dd:f1:e8:ee:3b:5b:4c:dc:c4:b1:a9:
6a:b9:f3:54:1d:8a:2b:78:07:c7:81:f8:ab:a6:58:
43:7b:d7:06:e1:31:53:1d:54:6c:f7:42:1a:df:7a:
c3:93:97:5a:ef:27:dc:71:cf:c6:df:5d:0e:65:b7:
b3:24:5c:f8:84:b2:b2:69:6f:25:21:0b:e9:85:24:
79:88:28:54:47:8b:7d:71:67:2b:ab:31:10:fc:70:
93:53:80:09:17:18:47:13:8c:7d:c2:d5:65:76:b6:
54:cd:97:8c:8e:37:fc:44:7a:f9:fb:0a:64:cb:3d:
fc:72:1b:df:76:00:79:bf:8f:09:b8:3c:72:b9:50:
28:91:b5:7e:ba:cf:62:83:2b:77:33:7d:1b:63:37:
a8:c8:6d:02:97:66:bc:33:c8:5f:d8:42:ef:da:01:
32:62:80:4e:9b:f5:a2:e9:fb:44:76:ad:e4:b1:df:
03:f8:f7:28:2c:c1:2d:77:4a:68:99:75:a9:e2:be:
57:67:38:99:a6:b1:72:f0:15:d5:73:c9:75:22:64:
c6:3a:60:fc:d6:50:48:8d:5b:01:cb:45:a5:a7:85:
37:af:56:de:a8:d1:c7:9b:de:44:af:1f:0e:a3:8d:
05:0b:67:f0:13:9b:a8:83:65:dc:b3:fd:75:b0:3b:
86:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2B:8F:F4:32:2A:01:93:6F:E4:9B:EF:44:84:F6:B1:3A:C2:8E:24
X509v3 Authority Key Identifier:
keyid:E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:2f:4c:43:83:18:40:c6:07:af:74:bc:8d:ca:b3:0c:70:e5:
49:bf:f5:2e:b2:58:76:7a:94:a3:41:98:fb:80:fb:fc:db:82:
52:20:17:df:f6:f6:ab:24:e7:c4:24:45:b0:71:26:03:f7:62:
8c:02:b2:95:da:e8:55:a0:ba:dd:8e:05:2c:7d:1e:d6:9d:dd:
b7:6f:de:7b:a8:32:15:33:71:de:b3:e3:86:d9:06:43:2b:61:
82:3a:3f:4d:a5:a6:43:c8:86:02:62:77:9b:50:32:dd:ef:d5:
f2:89:47:d7:1b:bd:f8:c6:c0:01:1c:b3:4f:2a:97:e5:3a:60:
75:37:53:ad:ce:ec:cc:6d:9e:60:57:b1:78:15:ac:e5:76:c8:
75:59:42:38:19:4b:77:2c:90:ba:f5:7f:16:89:40:f9:bc:a5:
da:37:03:c3:7e:8b:9e:18:25:45:8d:d3:d3:07:08:7c:e8:62:
05:d3:51:1e:a7:12:6a:93:7d:b7:54:30:64:0f:a4:69:0e:02:
ab:b9:99:c9:0d:b1:0b:db:fe:87:f5:db:56:86:70:db:47:cb:
34:1f:89:1f:65:b0:07:dd:d9:2d:54:c3:3a:21:27:1b:81:ff:
29:d4:e9:b3:16:05:fa:9c:88:5e:37:41:70:17:77:f2:42:bf:
98:fa:5f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:29:43 2025 by rpki-client