
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft
File: f5tM_cmw2ePDHg67gebxscu9yeQ.mft (raw, json)
Hash identifier: WxYRtckzcp3Wa1FVdoc4930IlS9iwqHzN6WC/mNVk7A=
Subject key identifier: FB:25:9A:B1:8F:5E:0D:7F:85:DF:95:05:EF:BB:A4:FF:51:01:D2:53
Authority key identifier: 7F:9B:4C:FD:C9:B0:D9:E3:C3:1E:0E:BB:81:E6:F1:B1:CB:BD:C9:E4
Certificate issuer: /CN=7f9b4cfdc9b0d9e3c31e0ebb81e6f1b1cbbdc9e4
Certificate serial: 0194BD4E6BC7DC67F249857D4FB9E820D0A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f5tM_cmw2ePDHg67gebxscu9yeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft
Manifest number: 0A0A
Signing time: Fri 31 Jan 2025 17:00:20 +0000
Manifest this update: Fri 31 Jan 2025 17:00:20 +0000
Manifest next update: Sat 01 Feb 2025 17:00:20 +0000
Files and hashes: 1: f5tM_cmw2ePDHg67gebxscu9yeQ.crl (hash: 7R4d8l7eEGdYLVeD4CrLvK+9ErC93UUt0qbfALglcU4=)
2: zalftAHY0_vxWVcBQe7AUMKmyP4.roa (hash: IBVaMGf4826YIxpRZf58g0sJemKA+k9XLc2S0P/3S8E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6b:c7:dc:67:f2:49:85:7d:4f:b9:e8:20:d0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f9b4cfdc9b0d9e3c31e0ebb81e6f1b1cbbdc9e4
Validity
Not Before: Jan 31 17:00:20 2025 GMT
Not After : Feb 1 17:00:20 2025 GMT
Subject: CN=fb259ab18f5e0d7f85df9505efbba4ff5101d253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:54:9f:65:39:d7:6b:60:c6:5a:c5:03:d6:b8:
e1:5f:ef:ad:03:1b:d7:31:0c:e7:51:42:76:1e:28:
18:d8:1c:d1:9d:10:a9:02:84:6e:8d:a8:78:2b:cc:
47:80:db:2b:00:a6:54:1b:4f:70:44:93:41:ff:8b:
29:b5:e1:f5:68:57:68:8d:69:85:ac:e0:bd:38:da:
fa:6a:ba:03:a9:db:8d:e7:21:04:d7:a4:61:c2:c9:
cb:a6:44:29:29:3c:13:9c:60:17:3a:ca:c5:74:ff:
74:17:d4:ce:42:0a:07:b7:49:53:5e:55:34:2b:06:
87:89:36:a2:1a:b3:aa:bc:c8:50:2d:54:ec:c2:fc:
c9:47:5d:ee:f2:b8:c3:9d:a1:e1:87:0b:86:a8:3a:
7e:ec:4e:73:90:51:45:b3:3e:b2:1d:40:e4:63:75:
72:b4:3e:fd:a4:f0:30:b8:f9:7d:3d:ca:53:60:ea:
42:ae:71:9b:c5:d7:dc:c2:d0:27:63:e1:33:87:07:
74:5f:8a:23:17:7d:b2:9d:31:e3:75:e0:0d:ec:36:
eb:e9:34:c7:9b:b9:4f:6d:a1:21:71:cc:83:b1:06:
88:be:f2:9d:ca:ff:68:6e:0d:89:42:d0:c4:ac:ed:
75:4a:0f:ed:9c:66:8e:5a:1d:c9:f9:1a:39:df:62:
2f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:25:9A:B1:8F:5E:0D:7F:85:DF:95:05:EF:BB:A4:FF:51:01:D2:53
X509v3 Authority Key Identifier:
keyid:7F:9B:4C:FD:C9:B0:D9:E3:C3:1E:0E:BB:81:E6:F1:B1:CB:BD:C9:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5tM_cmw2ePDHg67gebxscu9yeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8246eb-8469-42df-a08f-90c421f55adb/1/f5tM_cmw2ePDHg67gebxscu9yeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ed:5d:b3:83:40:82:8b:ff:da:b5:10:df:c1:1b:be:06:e3:
b7:3f:a2:da:b9:49:4e:63:d5:14:51:a3:c1:a5:b8:ab:23:5a:
0b:84:e1:e5:c3:51:3e:66:b6:20:aa:2b:14:7d:80:b5:97:f8:
04:ce:ab:e2:e7:f0:17:91:44:46:25:60:be:ac:08:d0:99:31:
f5:e8:b8:58:00:de:af:9e:6e:16:2d:85:d5:59:83:7a:7b:e7:
9f:d7:98:f5:c9:c2:14:8a:18:2e:f9:50:7a:07:0c:cc:2c:01:
fc:af:fd:59:0d:ed:af:1a:4a:fd:ed:d4:e2:f1:49:7c:37:27:
56:f9:3f:06:15:2e:85:a5:df:8c:47:5b:c6:af:e9:21:8c:91:
d4:09:8f:6c:09:bc:39:3e:23:6d:65:86:16:7c:35:25:06:89:
7e:ac:a9:de:9d:54:4e:d6:f5:1c:f2:18:c6:4e:31:72:8c:ca:
59:5a:5d:17:ee:3d:75:2f:7e:4a:99:6b:87:e6:f5:1a:1b:98:
7a:e7:26:ad:01:c8:92:9f:16:7d:f1:65:12:34:43:ea:06:68:
40:84:de:83:64:9c:01:7d:8b:70:8b:cb:c6:dd:91:5e:54:5e:
48:a1:95:94:44:91:03:e6:4e:27:fe:9d:36:7b:32:80:c6:f9:
17:14:d1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:22:17 2025 by rpki-client