Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
File: 5PFY7_xrOIKiWQweaQasoQjhjsI.mft (raw, json)
Hash identifier: Fqsk1iYdZsXnADRDq9Ql4E6m5Vo1pD4y6OUToT8wYV0=
Subject key identifier: 46:EB:D1:5E:47:E9:73:E8:A3:D5:3B:63:FA:26:5C:36:2C:4D:53:56
Authority key identifier: E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2
Certificate issuer: /CN=e4f158effc6b3882a2590c1e6906aca108e18ec2
Certificate serial: 0194BCA97A31E52855CC7311B8EC941ADAF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
Manifest number: 0A31
Signing time: Fri 31 Jan 2025 14:00:10 +0000
Manifest this update: Fri 31 Jan 2025 14:00:10 +0000
Manifest next update: Sat 01 Feb 2025 14:00:10 +0000
Files and hashes: 1: 5JIFCgXWGmsw1HA5JtADF-b1eJ4.roa (hash: kqtxwSPKoLsi1ph5t4VnO3iKewevISmebmIE1RpFWLg=)
2: 5PFY7_xrOIKiWQweaQasoQjhjsI.crl (hash: L1lap0gJaALZ7Vy8BGqGdM7Z9pzhQy3AMeRicA+IVUc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:7a:31:e5:28:55:cc:73:11:b8:ec:94:1a:da:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4f158effc6b3882a2590c1e6906aca108e18ec2
Validity
Not Before: Jan 31 14:00:10 2025 GMT
Not After : Feb 1 14:00:10 2025 GMT
Subject: CN=46ebd15e47e973e8a3d53b63fa265c362c4d5356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2f:05:90:41:c4:59:81:9a:03:cc:74:e8:07:
40:c5:4c:04:5d:1a:b8:db:82:17:b9:7b:94:50:3a:
2e:af:ba:56:1b:60:88:4b:b5:10:75:2d:8c:a9:e9:
da:3e:20:65:a6:30:d4:42:b4:f7:13:be:36:d0:fa:
62:eb:01:93:40:63:5d:e5:ae:99:37:e4:1d:8d:46:
b3:a9:a2:b0:53:78:38:46:71:26:74:e5:0d:b8:b6:
3d:13:d1:c6:98:70:7a:4d:1c:17:6f:60:6e:a3:b0:
9e:36:43:28:41:8c:b5:84:9c:e1:5c:41:d2:68:74:
57:00:11:d9:e0:d3:7c:ba:6a:07:ed:59:f8:8a:5c:
30:9c:cc:50:dd:27:22:11:f2:45:11:2f:4c:e4:bd:
9a:fc:2d:cd:2f:c9:f1:2c:40:37:8e:38:8c:4d:fc:
52:86:0c:1b:7a:fe:37:34:30:93:cc:b0:b6:19:30:
67:39:0e:2c:1c:c6:c3:37:64:56:b9:8b:0d:0c:b0:
ac:7a:d6:07:06:8f:39:1a:ea:a8:3e:13:b7:24:57:
90:58:f8:0b:50:54:e8:eb:c4:79:48:f1:4e:2f:91:
fb:cd:46:4b:84:72:f2:71:6d:b4:8e:a9:8f:8e:ac:
e5:12:25:5a:24:65:d3:81:bd:cb:a2:7d:ab:77:28:
69:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EB:D1:5E:47:E9:73:E8:A3:D5:3B:63:FA:26:5C:36:2C:4D:53:56
X509v3 Authority Key Identifier:
keyid:E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d9:bd:13:c4:e4:f4:75:2b:7d:bc:ee:18:93:23:d5:88:2d:
eb:44:78:5d:08:e7:b3:06:74:3b:00:10:25:1b:ba:ba:68:29:
8b:90:9b:aa:0d:c6:ea:74:82:59:2e:da:40:8b:67:60:5f:03:
7a:9e:03:a2:d0:0d:1c:ff:40:a2:89:bb:4d:18:70:d5:6b:eb:
02:ee:ee:aa:f5:45:d8:69:ae:28:44:c8:8b:23:ea:00:76:44:
30:ff:80:4a:2e:b5:3a:6c:eb:c0:c7:58:94:8d:79:26:07:0c:
25:99:31:df:17:3d:eb:ea:59:45:05:cb:af:aa:44:ad:56:39:
06:13:16:8a:d7:1a:1a:51:6a:99:0f:a3:e2:f0:a8:12:b7:3f:
45:75:36:60:64:2f:e7:12:ee:a6:2b:b5:40:05:4c:d3:1b:8b:
5b:8a:58:d9:8e:6e:7d:24:f3:e9:8b:1d:c5:43:68:06:6a:e4:
d6:b6:9a:7c:87:cc:52:85:7d:4c:e5:8e:6d:e4:12:18:58:5e:
b7:a5:e9:38:a9:7b:5c:10:90:45:7d:7b:a3:a2:80:76:29:7b:
6c:41:66:e1:a2:48:e8:af:40:bc:7e:cd:cb:2e:22:f6:da:ea:
3b:a3:5c:d2:fb:ee:56:96:15:e0:f2:f8:67:4f:e8:02:c5:b6:
2b:08:ca:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:15 2025 by rpki-client