Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
File: 5UTiZtTrnMfe0pLBKwaxynvOp3g.mft (raw, json)
Hash identifier: 7T+Cpe4zWcOo8v+uViIQlxJEWUKpKHiaR/qioaUm6zw=
Subject key identifier: 92:83:C1:AC:30:66:91:3E:99:BA:B5:DD:82:8A:99:1F:9B:B7:75:1C
Authority key identifier: E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78
Certificate issuer: /CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778
Certificate serial: 0194BBCE39291D9C60747A483EB47BB49954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:00:41 +0000
Manifest this update: Fri 31 Jan 2025 10:00:41 +0000
Manifest next update: Sat 01 Feb 2025 10:00:41 +0000
Files and hashes: 1: 5UTiZtTrnMfe0pLBKwaxynvOp3g.crl (hash: DVG94H8Up2pFcf8trNneWwfkL2e8s3g8eiK2FNUNWPY=)
2: LeXJLi-TLu5NLRkSo2hJnEK9QDQ.roa (hash: 1KfkyTUePDTOuHMENqew1KmyeJrolI/GoAGN74JhXHQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:39:29:1d:9c:60:74:7a:48:3e:b4:7b:b4:99:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e544e266d4eb9cc7ded292c12b06b1ca7bcea778
Validity
Not Before: Jan 31 10:00:41 2025 GMT
Not After : Feb 1 10:00:41 2025 GMT
Subject: CN=9283c1ac3066913e99bab5dd828a991f9bb7751c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8e:8a:23:65:3a:e0:91:ea:b0:56:14:7c:b2:
06:eb:00:b6:4a:f8:48:c2:de:4c:d4:e1:9d:2e:f3:
64:b1:b9:36:6d:ab:de:c0:d6:4a:97:10:21:1e:98:
f5:e9:7a:1e:70:12:04:1c:aa:21:54:60:f2:c4:0c:
5e:2c:e7:76:a5:22:6f:e7:fc:8a:15:b4:13:99:0a:
cf:36:9a:d6:32:ec:1b:f9:f2:ad:3d:39:81:31:b1:
b7:b0:7b:72:fd:5b:2e:31:63:be:94:84:5a:43:6f:
3c:47:b6:e2:c1:b0:a9:5e:1d:48:2b:af:1f:b7:5b:
4b:52:94:e1:40:5c:3e:27:e3:7f:8a:46:12:32:52:
1e:21:8d:34:64:59:7c:78:98:4c:d1:2d:51:de:7c:
93:03:9b:45:ba:ad:72:14:53:6a:d0:ae:21:5c:4b:
82:c1:1c:ea:0b:10:1c:c1:47:43:dd:69:e8:57:5d:
4e:1c:f2:02:b5:f4:7e:47:b5:96:8a:dc:d4:cd:8a:
63:ad:86:c7:82:fd:e7:9f:22:f5:52:a0:70:cb:57:
a0:e1:b7:5e:ac:9c:f6:15:44:21:b0:bf:0a:39:ee:
6c:86:66:79:54:4c:43:60:37:77:b1:4a:c8:91:57:
dc:7a:9f:58:05:03:ba:8a:54:16:ac:48:f4:08:77:
4f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:83:C1:AC:30:66:91:3E:99:BA:B5:DD:82:8A:99:1F:9B:B7:75:1C
X509v3 Authority Key Identifier:
keyid:E5:44:E2:66:D4:EB:9C:C7:DE:D2:92:C1:2B:06:B1:CA:7B:CE:A7:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UTiZtTrnMfe0pLBKwaxynvOp3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bff799-9e32-43be-85cd-824760714dfb/1/5UTiZtTrnMfe0pLBKwaxynvOp3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:7e:1c:45:65:7c:9a:38:53:30:5e:aa:6a:43:6b:e0:12:07:
2a:32:40:ea:88:9c:2e:ca:bd:d6:28:a0:ac:ae:c2:12:ef:e0:
45:da:77:96:39:bf:6c:17:da:1c:06:a1:4a:90:ec:6f:5f:e4:
49:03:5c:9c:e7:c4:de:8c:a1:c2:d3:29:03:13:0b:bf:17:15:
bf:d0:40:68:34:21:4f:2a:62:2c:ca:3a:9c:ec:74:d5:0b:cf:
99:af:f9:92:21:c3:07:da:6a:bd:8d:fa:c6:12:06:03:e8:1f:
b2:d8:2e:81:96:a1:95:1e:93:a6:06:23:ab:7e:42:8c:c4:35:
1e:a4:9f:69:94:46:f4:b1:b9:fc:ec:c3:a0:68:cd:c8:68:b0:
64:e3:4e:16:84:64:3e:33:1a:0e:8d:10:07:e4:0a:84:7f:0e:
c9:8c:44:31:fd:20:48:74:d1:3b:f7:e0:56:5b:16:1b:f7:f1:
cc:33:ff:2d:28:35:9f:24:f6:f0:a9:d7:3a:fd:54:e5:59:c2:
d5:4c:7d:be:77:7a:da:f5:9e:ba:c0:12:65:7f:e7:6a:32:6c:
26:63:34:42:ac:c0:f7:b0:e1:50:75:2d:4d:e5:c2:bc:60:5a:
01:55:16:99:06:05:28:16:a8:a5:d2:23:a7:d4:30:04:5c:e9:
9a:c6:5c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:48:07 2025 by rpki-client