Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
File: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft (raw, json)
Hash identifier: KuALhllyW6lZoVkivCUpU6UWgn1AmEPk+y+RX9E+Dd8=
Subject key identifier: 82:FD:9C:A8:AC:1C:A9:66:18:9C:36:3C:BE:8A:FB:90:13:E6:C4:6E
Authority key identifier: E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
Certificate issuer: /CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Certificate serial: 0194BC3BE5C16AC8B7EF3276CE51750FBCC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:29 +0000
Manifest this update: Fri 31 Jan 2025 12:00:29 +0000
Manifest next update: Sat 01 Feb 2025 12:00:29 +0000
Files and hashes: 1: 5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl (hash: E2/6KfPHtyYfNkZRUaiK5FwXuZVFBt1prBhDTdaJMXA=)
2: dq4NGDrJihdpAYEQ3owreA6iQU4.roa (hash: 1bpSRQ6nEHSR6H3DF+6pLQte0es+3qQ4qeng8ZdjLzc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e5:c1:6a:c8:b7:ef:32:76:ce:51:75:0f:bc:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e64682adb0238cc772d1c5b4986c7a33986364a0
Validity
Not Before: Jan 31 12:00:29 2025 GMT
Not After : Feb 1 12:00:29 2025 GMT
Subject: CN=82fd9ca8ac1ca966189c363cbe8afb9013e6c46e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2f:00:f5:2d:33:5a:20:3f:bd:94:75:fe:ca:
07:f8:37:52:66:b2:be:9e:a3:03:a7:3f:4c:d1:3e:
74:e1:1e:d0:e9:45:42:ca:ab:ba:06:3e:66:65:91:
0e:40:15:cc:50:d8:a8:43:48:7c:8a:37:52:6c:81:
52:03:aa:62:03:73:7e:68:db:28:6f:80:b4:4f:b3:
0a:4d:67:19:98:a6:8d:b2:7c:6c:52:ed:4b:d6:2f:
72:b8:cf:53:8e:f9:84:b3:81:0a:1f:e6:7c:96:fd:
8b:21:ae:c8:af:4b:70:3e:47:c9:5e:48:da:7c:3f:
01:ed:6f:ab:4a:bf:58:d3:3b:ef:5b:09:a6:1b:c3:
99:45:a6:6d:39:eb:2d:2f:fb:8a:d3:96:49:1e:b1:
63:09:8c:30:ca:0a:57:95:63:93:a3:f9:ec:04:70:
85:1a:01:a5:26:71:24:7b:4f:f7:c3:43:67:c5:86:
8e:15:3a:19:bb:d3:64:3c:77:90:41:20:32:74:9b:
e1:4e:4a:49:62:f5:aa:e0:a7:16:9e:74:fb:17:a2:
88:65:6a:28:dc:b3:5e:f7:2c:a7:b0:24:6b:f9:0f:
41:2b:61:a9:92:3c:42:bb:48:c6:64:e8:49:11:bc:
08:8b:ab:6f:dc:ee:5e:f5:10:2b:c1:df:8e:78:1b:
98:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:FD:9C:A8:AC:1C:A9:66:18:9C:36:3C:BE:8A:FB:90:13:E6:C4:6E
X509v3 Authority Key Identifier:
keyid:E6:46:82:AD:B0:23:8C:C7:72:D1:C5:B4:98:6C:7A:33:98:63:64:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5kaCrbAjjMdy0cW0mGx6M5hjZKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ceb8-0c86-49ac-a392-acecad53c815/1/5kaCrbAjjMdy0cW0mGx6M5hjZKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a0:83:05:c5:88:6b:94:12:e8:7d:0b:4b:95:d2:83:32:b0:
51:3f:e3:cd:22:14:7f:a2:de:2b:42:09:a1:98:2c:6b:06:2c:
b6:fd:a5:9c:7e:b1:60:04:ac:7e:36:a0:df:37:ad:73:2d:80:
4c:1b:58:af:78:c1:e8:b2:e8:0e:44:1c:57:93:60:8b:34:e6:
f3:8c:14:96:58:d2:1b:d4:b1:d9:41:7f:05:64:ed:10:a0:82:
55:1e:4f:2e:c6:6a:bc:20:4e:67:60:78:9d:be:b1:dc:c6:53:
30:15:b3:5c:58:c3:97:df:a5:29:0f:07:1b:95:a2:25:96:a3:
b8:3e:7b:16:b3:3f:e9:7a:fe:3b:55:fb:69:bb:cc:6b:a5:3e:
66:48:69:03:fd:93:8e:e6:bc:cb:6e:6e:60:66:1d:9e:d3:94:
93:d1:00:ed:df:2d:d9:9b:31:84:b4:45:30:24:f7:02:09:48:
5e:e8:ae:e6:6f:88:08:95:eb:72:e9:11:c8:ee:62:7a:e2:cc:
82:01:ed:1b:16:d2:f2:c2:e5:c2:ec:39:c7:7a:5a:35:f8:46:
ba:33:e1:ca:59:2a:e8:b8:16:a8:51:a4:8b:ec:7e:45:fa:5b:
47:05:28:2c:47:18:d4:a4:fd:cb:6f:07:13:75:d3:5d:05:44:
2c:ba:d9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:56:16 2025 by rpki-client