Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.mft
File: 5e61yh0hW8msLLQNHum-53UPn1c.mft (raw, json)
Hash identifier: j8gmUv4von1efkGHXV7pYERm0Slqeqdo3hD7UxyR2iM=
Subject key identifier: 6E:5F:72:71:C3:47:69:88:68:CB:65:12:97:6C:77:9F:52:E9:AA:55
Authority key identifier: E5:EE:B5:CA:1D:21:5B:C9:AC:2C:B4:0D:1E:E9:BE:E7:75:0F:9F:57
Certificate issuer: /CN=e5eeb5ca1d215bc9ac2cb40d1ee9bee7750f9f57
Certificate serial: 0194BD4E7BD6BB19EB597B8E00BA8777ECBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5e61yh0hW8msLLQNHum-53UPn1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.mft
Manifest number: 0386
Signing time: Fri 31 Jan 2025 17:00:24 +0000
Manifest this update: Fri 31 Jan 2025 17:00:24 +0000
Manifest next update: Sat 01 Feb 2025 17:00:24 +0000
Files and hashes: 1: 5e61yh0hW8msLLQNHum-53UPn1c.crl (hash: xERhrA0WEQJfRs+mFZZIrp9x4/PcwrRZxiglgRpWuTY=)
2: fv9GU78KTThVylwpUoVkrE_AXzQ.roa (hash: nnsqZgD7w8A2HHvf/0xUBOlqX3ZvvzafFDRwPNk7+QE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7b:d6:bb:19:eb:59:7b:8e:00:ba:87:77:ec:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5eeb5ca1d215bc9ac2cb40d1ee9bee7750f9f57
Validity
Not Before: Jan 31 17:00:24 2025 GMT
Not After : Feb 1 17:00:24 2025 GMT
Subject: CN=6e5f7271c347698868cb6512976c779f52e9aa55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f2:fa:75:17:3b:d4:d9:68:5a:87:8f:e2:75:
f0:23:f2:91:85:c7:c1:00:39:f9:a6:7c:96:03:f3:
83:d3:85:cb:96:b7:e5:b1:3b:0b:71:4c:d9:77:c0:
06:3f:97:1f:60:1c:ed:8c:f9:73:3b:49:56:cf:83:
67:59:f0:a3:96:6f:5b:73:39:4b:3b:a2:a0:a0:78:
fe:22:2a:f1:40:62:08:4e:a1:91:9f:b7:e2:35:ea:
93:eb:cb:ac:c9:60:77:22:86:ee:74:7f:c7:10:2f:
36:44:72:1f:28:ed:94:bb:86:2d:40:50:7b:50:ff:
d6:77:14:14:2f:77:35:3d:98:59:2d:ea:0d:88:d4:
8a:e1:04:77:29:09:e1:d3:7e:9c:d6:01:33:25:ef:
9a:4f:82:5f:ff:90:aa:b7:a4:e0:9c:f2:6b:f9:cd:
48:34:36:32:45:2a:d6:21:2b:f6:2e:7c:0b:34:cc:
2b:5b:5f:07:4a:14:4d:e0:f7:15:bb:6d:74:63:8e:
f9:86:a7:c4:34:8d:57:89:41:1f:29:b0:c7:4b:ab:
40:a5:5e:64:3d:0e:cd:f8:7e:7e:c1:97:4b:be:6a:
bc:4e:e8:45:12:a4:44:49:f6:c4:c5:12:e3:ff:9e:
87:3e:48:e8:67:58:bc:1a:5f:81:b3:4b:7d:73:75:
10:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5F:72:71:C3:47:69:88:68:CB:65:12:97:6C:77:9F:52:E9:AA:55
X509v3 Authority Key Identifier:
keyid:E5:EE:B5:CA:1D:21:5B:C9:AC:2C:B4:0D:1E:E9:BE:E7:75:0F:9F:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e61yh0hW8msLLQNHum-53UPn1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d8847a-743f-48b6-b783-e9fb4b614164/1/5e61yh0hW8msLLQNHum-53UPn1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:68:c0:19:c0:89:97:b1:65:82:a9:a3:29:8d:a0:cc:30:f2:
dd:7c:a9:b5:94:12:7d:7b:e2:ef:2f:ca:fc:f0:88:87:e5:c1:
f7:e1:4b:65:82:cf:0a:35:3d:d1:ef:ef:c1:db:68:7e:bd:3c:
17:cb:43:79:bb:18:ef:76:96:a3:2b:14:90:97:b6:e5:bc:82:
2a:84:e0:ea:91:14:74:90:51:d9:84:99:98:4a:66:b2:a5:bd:
d4:aa:8e:ca:41:d7:f3:2f:74:b1:a3:e6:49:91:2d:95:09:6c:
70:61:69:9d:98:a6:34:a8:2a:78:d0:a1:95:22:ac:d3:24:5e:
66:66:74:c6:6d:30:f4:e9:36:f2:7f:2f:99:99:1d:32:c4:d0:
89:c2:f6:f3:36:53:83:cf:8c:8e:f6:ad:2b:87:81:97:d4:77:
0e:3e:dd:fa:1d:8f:c5:4d:6e:5e:c6:b2:a4:0e:b1:37:47:ec:
85:1f:bc:9f:cf:d1:80:0f:e5:fb:d7:1b:fc:70:79:c3:29:6d:
38:18:4c:07:eb:37:db:89:cb:d9:94:f6:57:d6:bf:36:aa:31:
be:58:4a:c3:2b:f9:87:f3:62:d1:bd:6f:7e:54:b5:8b:13:bb:
20:9e:c6:00:93:fd:61:df:3d:e5:98:70:02:1f:34:a3:8d:e9:
76:3a:b4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:34:00 2025 by rpki-client