Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
File: 5saSR1gKSIv0YbhL97iyrBN01cU.mft (raw, json)
Hash identifier: /EoZiI5ELuNLaTeOroAxDkfR1Hh3Qcb4GO/wqnaxyjk=
Subject key identifier: 26:D7:9E:CE:DC:5C:63:6A:03:7D:87:E8:01:2C:9B:B9:E6:1A:59:9D
Authority key identifier: E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5
Certificate issuer: /CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
Certificate serial: 0194BCA9F059AAC7C91EA7F4BB5FFE7A6ABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:41 +0000
Manifest this update: Fri 31 Jan 2025 14:00:41 +0000
Manifest next update: Sat 01 Feb 2025 14:00:41 +0000
Files and hashes: 1: 5saSR1gKSIv0YbhL97iyrBN01cU.crl (hash: m0bH2EO7coKZ3Ads8i8dEEfHgbWapB76Ar+IffjnaAs=)
2: l7WjKJBoi3ZOMaBwpHnPjLLele8.roa (hash: VuHVVXaHP8BDF2HI+1C+9vRLPuu0QKmIZQUwhxNEcWs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f0:59:aa:c7:c9:1e:a7:f4:bb:5f:fe:7a:6a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
Validity
Not Before: Jan 31 14:00:41 2025 GMT
Not After : Feb 1 14:00:41 2025 GMT
Subject: CN=26d79ecedc5c636a037d87e8012c9bb9e61a599d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ef:44:37:b9:66:b1:af:ff:c6:4e:31:be:63:
5f:25:2e:99:c7:80:5c:da:23:5f:2e:fc:df:c9:cf:
70:98:b1:07:4b:c7:6f:5a:54:f1:3b:3d:ff:71:bc:
fd:91:e2:f5:a7:e8:3f:1a:36:94:b2:9e:6c:79:40:
09:ff:c2:6a:85:38:7b:88:85:4f:06:9c:73:d7:7f:
87:ee:06:e2:bb:df:96:42:e0:1c:52:00:6a:0a:30:
3e:04:8c:0a:77:41:12:68:25:de:85:9a:2d:49:37:
84:80:8a:b8:6f:b9:9a:ef:ce:ab:01:9b:98:db:59:
22:f6:bf:ed:b6:6f:d0:a4:f3:41:74:0c:5d:84:f9:
33:f9:e5:93:41:75:d2:2a:77:3c:d6:37:91:6f:00:
88:d4:12:f8:26:10:25:10:39:30:13:6d:1b:17:67:
33:16:8c:51:e8:b3:ca:1c:0f:71:fb:92:f9:bd:a9:
07:d0:2d:d9:23:bd:34:21:7c:1a:bf:c7:0a:78:bb:
4b:f4:7c:b7:5c:e2:1c:f5:77:ae:31:4c:16:f6:bd:
1e:51:f3:99:81:99:7d:e1:0d:1c:86:86:84:ce:b8:
37:13:f6:8e:ec:01:a0:1c:04:99:7c:fc:b3:5b:17:
93:78:ec:e0:98:46:bf:da:34:4f:72:e7:a4:0b:50:
db:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D7:9E:CE:DC:5C:63:6A:03:7D:87:E8:01:2C:9B:B9:E6:1A:59:9D
X509v3 Authority Key Identifier:
keyid:E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:0b:ed:66:b1:27:08:0b:1d:1d:2b:12:c8:fa:e3:97:7e:ea:
2a:23:af:f3:b6:3c:a8:1c:75:33:90:1c:49:51:78:bc:cb:34:
88:88:9f:97:f8:92:d1:78:9e:a3:7f:de:11:ea:df:89:79:f7:
f2:a0:1f:34:ee:1d:8c:0e:03:43:02:9b:2a:01:a0:30:34:8c:
06:0d:5f:ac:6c:9c:9f:95:8a:d4:02:61:91:bf:12:a0:61:66:
84:73:14:bd:01:ad:55:c5:84:67:e9:c3:a4:b1:5c:56:52:e0:
b4:74:87:ae:82:59:40:ed:28:ec:13:96:08:23:13:fa:04:15:
dc:c1:31:ae:5b:af:8f:d6:f7:fa:89:2c:d8:ff:d3:f4:64:f9:
6b:4e:71:f0:36:f6:b0:4e:73:da:5c:91:e9:64:4b:82:e7:9c:
61:06:ef:58:70:a7:1e:0c:4e:98:72:5f:c0:09:22:77:f4:78:
20:c5:5e:ee:0a:a5:6e:ec:c4:69:af:a1:5c:e0:40:14:43:c0:
22:a9:c9:3c:ee:1d:31:b9:a3:c6:62:ad:67:59:62:6d:ff:76:
1b:fc:ac:0d:59:63:15:3c:cf:ee:ca:0d:89:c6:17:bc:bc:f4:
86:4c:0e:a9:87:25:fe:62:a4:b0:c3:a3:b1:1f:13:ab:6c:62:
43:21:ac:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:22 2025 by rpki-client