Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
File: 5pySw7nuYLoBPZQYIgQvJQBMlew.mft (raw, json)
Hash identifier: VnzMEjihyihrl+dhHQjr/6HW60vmy9oszvPBWtpGdw8=
Subject key identifier: 01:F7:C8:01:D5:D9:FD:D0:64:4B:04:64:CB:8F:26:97:1B:EA:B8:5D
Authority key identifier: E6:9C:92:C3:B9:EE:60:BA:01:3D:94:18:22:04:2F:25:00:4C:95:EC
Certificate issuer: /CN=e69c92c3b9ee60ba013d941822042f25004c95ec
Certificate serial: 0194BC7290CC3E4AC25D12D05D21FFBA8F21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:12 +0000
Manifest this update: Fri 31 Jan 2025 13:00:12 +0000
Manifest next update: Sat 01 Feb 2025 13:00:12 +0000
Files and hashes: 1: 5pySw7nuYLoBPZQYIgQvJQBMlew.crl (hash: jAjUQbLn9d65Gu1kqH3DtzCAFisSdxJ66Hhx7bcdc0s=)
2: rR9_uvw4xytf2agupQ_iUhFHPXQ.roa (hash: X8fcaKRyDp0VyO5muGsQviUm1Dvz7ExE7FAL5YYozyg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:90:cc:3e:4a:c2:5d:12:d0:5d:21:ff:ba:8f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e69c92c3b9ee60ba013d941822042f25004c95ec
Validity
Not Before: Jan 31 13:00:12 2025 GMT
Not After : Feb 1 13:00:12 2025 GMT
Subject: CN=01f7c801d5d9fdd0644b0464cb8f26971beab85d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ae:b2:fa:72:ff:53:05:84:6d:0c:83:b8:59:
1e:64:10:93:8a:36:d8:92:ef:d6:f4:e2:62:f9:39:
8d:7d:d7:25:5d:ed:23:4a:8b:f4:74:72:1c:8e:4c:
ab:85:6d:f9:d2:be:fe:5f:92:83:29:d8:f6:80:c1:
64:8f:56:8f:61:98:37:b5:d4:4b:7d:ea:aa:d9:78:
45:81:99:db:94:9a:71:f2:d6:29:f2:b6:1c:61:32:
f8:0c:8a:a8:71:ca:aa:7a:f3:5e:bf:0c:ca:5a:43:
3e:9b:9d:65:9a:b3:b9:3a:80:1d:e1:64:dd:c1:fd:
d9:b2:dc:eb:49:b7:04:c0:c8:c4:7c:e0:57:f5:ef:
b6:c9:c1:49:f5:6e:bf:91:05:05:bd:ca:87:88:0a:
46:58:13:55:ca:ee:ec:2c:b5:38:e0:08:fd:40:21:
20:b8:f7:70:b9:23:3f:72:46:59:fa:e4:72:ab:2f:
40:6c:35:e1:f6:8a:e5:c7:15:b5:d6:88:3a:4e:bf:
9a:e8:d7:bd:df:6f:b1:45:8d:7e:c4:d5:eb:28:05:
c3:50:88:a1:6c:23:a5:ac:0c:03:0c:c4:5a:95:9f:
66:a7:76:68:cd:34:e1:8d:99:a3:e6:53:d8:61:58:
3a:ba:21:72:62:47:c2:ec:40:78:8c:c3:77:19:30:
c2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F7:C8:01:D5:D9:FD:D0:64:4B:04:64:CB:8F:26:97:1B:EA:B8:5D
X509v3 Authority Key Identifier:
keyid:E6:9C:92:C3:B9:EE:60:BA:01:3D:94:18:22:04:2F:25:00:4C:95:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:89:79:5d:ec:99:a3:3d:c3:8b:97:b9:ce:6a:29:34:63:89:
93:2b:0d:01:2e:4c:b5:5b:f9:73:3f:c7:67:b5:70:49:3a:08:
2f:1d:b1:c5:25:5c:07:51:2e:38:bb:90:fe:ca:f8:b0:da:37:
5b:8b:1a:4d:b9:ca:e5:39:b4:30:38:23:f5:29:99:06:7e:b6:
a2:1c:c9:94:dc:dd:ec:a3:f3:82:ef:35:2d:8f:ee:81:ca:73:
82:40:37:cb:fa:a5:9d:32:66:48:a7:27:93:7a:cb:c6:10:27:
11:bb:a2:fe:f0:7f:5a:6f:5d:64:12:f5:e4:6f:54:3e:b1:47:
28:f6:66:98:12:9d:a1:e2:87:63:41:1d:6d:9c:47:da:74:07:
6a:bf:04:75:79:b3:24:79:e5:a2:6d:64:90:f4:09:13:79:90:
63:5f:4d:6c:4c:34:16:ed:12:7a:be:6b:5a:b8:8f:3d:2f:24:
ed:03:3f:db:71:d9:f4:ca:17:cd:f7:11:0e:29:e7:6a:7b:fa:
83:42:53:72:eb:4c:8c:6a:18:24:9e:e7:9b:72:10:bd:38:35:
13:d4:5e:3e:8d:bd:bd:95:14:33:4a:3f:af:ef:e9:b6:ea:4e:
4d:e2:42:90:3b:ab:c6:91:5d:52:04:a2:2b:75:ac:c0:99:8b:
08:d6:a9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:23:41 2025 by rpki-client