Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
File: _5lGMPx0VWzlCAJocJAVRft7BM0.mft (raw, json)
Hash identifier: DlWLMds+YOfnC79qWRnlwSBgbw4Nrrjoh4RTcZVFEhQ=
Subject key identifier: D7:14:D3:50:82:13:A9:0B:8B:1A:C1:0A:60:0E:DC:4D:95:70:FC:BE
Authority key identifier: FF:99:46:30:FC:74:55:6C:E5:08:02:68:70:90:15:45:FB:7B:04:CD
Certificate issuer: /CN=ff994630fc74556ce508026870901545fb7b04cd
Certificate serial: 0194BBCE66D7C7BD37D30A76EFC2122C1C50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:53 +0000
Manifest this update: Fri 31 Jan 2025 10:00:53 +0000
Manifest next update: Sat 01 Feb 2025 10:00:53 +0000
Files and hashes: 1: _5lGMPx0VWzlCAJocJAVRft7BM0.crl (hash: imffkCYAYl7Sv+Kt5LWxnGeUrU4r11nGVWAqhiYi5Ds=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:66:d7:c7:bd:37:d3:0a:76:ef:c2:12:2c:1c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff994630fc74556ce508026870901545fb7b04cd
Validity
Not Before: Jan 31 10:00:53 2025 GMT
Not After : Feb 1 10:00:53 2025 GMT
Subject: CN=d714d3508213a90b8b1ac10a600edc4d9570fcbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:75:9f:ac:43:16:4d:48:f0:81:2f:76:c2:1d:
20:5d:ba:40:df:0a:51:9c:c7:56:64:39:ba:24:6e:
1e:c3:ff:a5:25:54:1e:0e:f1:80:68:d7:9f:a8:d8:
20:fa:d0:15:b6:20:f7:fd:88:19:ce:78:4a:ac:4c:
e6:e6:b0:38:81:d2:12:2b:c8:f0:b8:99:d1:f4:f7:
99:8f:6b:c5:5f:33:44:4a:3a:0c:14:9b:ea:4c:2e:
98:42:f4:6b:0a:f8:7e:aa:b8:34:b7:1d:af:08:43:
74:46:c0:2b:fc:ac:42:b5:1c:c4:8a:df:23:7a:07:
97:54:13:69:3a:28:3f:e0:ef:2e:f5:22:7c:52:70:
c7:d8:2a:43:c1:64:41:6b:e5:10:43:38:7c:6c:27:
6c:11:78:41:39:d0:33:ed:7e:76:0c:b8:60:62:fd:
03:09:d4:95:8c:31:0d:e2:6b:fc:85:4a:40:5f:a0:
0b:23:9a:a7:82:64:40:95:64:36:ba:2c:2b:c1:19:
c7:16:2b:01:c0:05:8c:b0:18:4c:33:4a:32:ba:e8:
47:90:37:ac:7a:31:12:1c:51:39:ac:92:19:da:db:
c9:9e:a5:14:ba:a1:95:7a:76:70:e9:7a:29:ab:f1:
7f:39:90:e0:1b:e3:78:bb:d3:0c:ef:27:77:4f:30:
e8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:14:D3:50:82:13:A9:0B:8B:1A:C1:0A:60:0E:DC:4D:95:70:FC:BE
X509v3 Authority Key Identifier:
keyid:FF:99:46:30:FC:74:55:6C:E5:08:02:68:70:90:15:45:FB:7B:04:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:6b:33:af:45:54:b4:27:d7:b0:0a:41:26:b2:f1:f0:62:5e:
32:a8:ef:2a:69:f2:22:bf:67:6e:df:79:af:06:02:6a:d9:fa:
c5:fd:9e:ce:54:c1:04:a7:95:39:13:ba:87:5c:4c:df:25:fd:
37:1f:f9:29:c8:ac:52:89:89:a0:f2:f2:fb:35:3a:5e:53:8f:
ba:3e:91:c8:fe:d2:cd:47:4a:4a:b3:5a:1a:2c:e5:0a:8b:b7:
60:70:00:0a:e2:1c:86:71:f5:d4:5f:87:bb:c6:9b:49:e6:a7:
eb:7b:07:05:2c:42:79:a6:1e:8c:5f:6f:89:12:ac:a5:3b:d8:
a7:f8:62:bc:5b:7f:df:cb:99:41:43:25:ca:24:f0:dc:01:98:
b6:1d:78:58:e6:e5:b2:c5:f4:2b:b4:d7:17:6a:f9:41:08:39:
84:a8:bd:8d:98:1b:77:77:1e:7b:03:ae:7e:6f:3d:c3:84:7a:
68:79:00:4e:3d:f0:73:dc:0d:c7:e1:8f:67:ab:71:63:c2:63:
1b:d7:e7:61:11:b9:03:96:b6:e3:d3:12:65:3b:d3:03:a6:4f:
5e:b6:31:af:bc:0b:a5:ff:12:3e:91:8a:ed:45:e9:e0:b6:c8:
48:e9:ff:ef:0a:5b:3a:28:35:09:58:f4:8c:18:bc:5b:dc:43:
fe:e9:ca:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:33 2025 by rpki-client