Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
File: 5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft (raw, json)
Hash identifier: sm7JsM+moMjBsjGgG8/LX35q0+Ig8l3HKj+KCNQHj68=
Subject key identifier: EB:47:6D:61:71:F5:FA:DF:4E:44:6C:13:29:1B:D0:E7:5D:D8:19:02
Authority key identifier: E6:A5:48:52:07:7A:00:78:38:30:3C:1F:61:C8:43:87:CC:CD:D6:84
Certificate issuer: /CN=e6a54852077a007838303c1f61c84387cccdd684
Certificate serial: 0194BD85B50F9AE6FED267D9EBFE28BD91B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
Manifest number: 01B6
Signing time: Fri 31 Jan 2025 18:00:43 +0000
Manifest this update: Fri 31 Jan 2025 18:00:43 +0000
Manifest next update: Sat 01 Feb 2025 18:00:43 +0000
Files and hashes: 1: 3cGSK8NVA9eNtztBrAr51UavoEk.roa (hash: pMEP1TJfXu1V+w800yX1v0YDExi+6bPx0cct+Fh5aw4=)
2: 5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl (hash: WZY/wHDe0aeD86XWoG57HEqk25cNS+vcZqBhvMEvUiw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b5:0f:9a:e6:fe:d2:67:d9:eb:fe:28:bd:91:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6a54852077a007838303c1f61c84387cccdd684
Validity
Not Before: Jan 31 18:00:43 2025 GMT
Not After : Feb 1 18:00:43 2025 GMT
Subject: CN=eb476d6171f5fadf4e446c13291bd0e75dd81902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b9:70:0b:8f:5d:bb:98:9d:db:ad:ee:32:81:
39:17:be:89:6c:50:e3:98:bf:c2:3d:34:9e:cb:8e:
37:a7:bc:8e:57:6f:9d:cc:ff:54:c0:17:70:e1:05:
46:6d:f0:2a:38:44:9a:34:ce:12:79:63:26:91:54:
06:dd:d6:1a:f7:3c:29:a1:45:bb:78:05:8b:f7:06:
7e:13:ab:9d:7d:f6:a9:e5:06:4d:6f:a4:63:9c:25:
aa:12:ab:11:46:05:86:36:e8:88:11:77:cd:6e:c6:
85:7a:66:f3:db:3c:63:d7:81:50:33:50:ad:68:a0:
1d:e8:4d:2e:0d:ab:03:0e:17:1c:fb:d9:ae:43:32:
b4:7b:43:bc:8a:8c:56:77:7d:19:1f:8f:0e:9a:16:
bf:c6:6f:a0:c9:82:7a:0b:8c:3c:3a:d1:65:0d:68:
f0:15:77:ed:30:cb:cd:83:99:fa:88:e1:11:b9:0f:
0d:54:00:cf:6c:f4:75:10:a1:a5:3e:d3:da:f2:3b:
e5:a5:b8:58:27:67:64:fc:63:88:6d:20:e7:b8:8a:
8b:73:a6:ea:34:c0:b3:07:ee:11:0f:20:5f:5a:be:
ae:a2:3f:4d:61:3d:46:45:1e:7e:c7:b8:0d:17:27:
51:1c:0a:1a:f1:b4:9e:c4:ad:da:17:21:5a:c5:2f:
46:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:47:6D:61:71:F5:FA:DF:4E:44:6C:13:29:1B:D0:E7:5D:D8:19:02
X509v3 Authority Key Identifier:
keyid:E6:A5:48:52:07:7A:00:78:38:30:3C:1F:61:C8:43:87:CC:CD:D6:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qVIUgd6AHg4MDwfYchDh8zN1oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc803f-9675-4355-80f6-77730159c8d4/1/5qVIUgd6AHg4MDwfYchDh8zN1oQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c8:47:e4:eb:5b:b5:dd:8b:b1:75:1d:29:c8:ba:7d:d3:57:
d9:ed:c8:4e:2a:ce:6f:5d:50:af:b0:09:9c:17:ae:b8:4d:b7:
b9:dc:48:61:03:5a:7a:18:bb:f0:ae:b2:76:7c:08:83:03:5e:
00:24:4e:51:8e:59:fa:cd:b4:95:a2:4b:08:9b:4d:16:fd:48:
e6:3a:35:5c:9c:f5:4d:ce:79:43:7c:a5:1b:34:fb:95:ac:39:
ad:60:ef:3e:01:ad:fa:bc:aa:10:59:7d:ad:73:26:4c:24:7a:
40:a0:f9:46:ac:d2:27:ef:ee:8e:78:19:90:a0:b5:af:93:14:
c3:3c:71:9c:ec:2d:69:d4:3a:5d:b8:bc:3f:4a:aa:a1:a0:b5:
ae:7a:dd:d9:de:08:54:95:54:5f:8d:2e:ee:17:0f:66:a0:a2:
32:33:2f:50:eb:f1:b2:fe:99:8f:86:5f:84:23:61:4b:d7:4f:
75:c6:3f:09:89:7a:f0:a1:5c:64:87:fe:79:70:05:c6:a1:63:
a5:53:49:8c:14:74:e3:62:1b:65:a7:3c:48:5b:d5:99:21:41:
00:4b:eb:10:ff:ca:b7:c0:33:6f:f5:fc:a3:ab:05:ac:7e:ac:
48:a5:1f:1c:cf:d6:09:3d:6a:97:cb:dc:bf:73:34:44:40:ef:
4a:21:09:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:19:19 2025 by rpki-client