Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft
File: 53bFGYDHUepeMd3ayO9h-1bJcA8.mft (raw, json)
Hash identifier: y/iGcI2oK+cdVRqyGPEwkSEKGDRT/VH7bAo/0tPYG2I=
Subject key identifier: 3E:F6:B2:7B:05:80:0D:5D:1F:AF:4C:CB:0A:DE:AB:E9:EE:09:47:E1
Authority key identifier: E7:76:C5:19:80:C7:51:EA:5E:31:DD:DA:C8:EF:61:FB:56:C9:70:0F
Certificate issuer: /CN=e776c51980c751ea5e31dddac8ef61fb56c9700f
Certificate serial: 0194BC04BD3CE92D7DAB5E32AB54B9563A46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53bFGYDHUepeMd3ayO9h-1bJcA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft
Manifest number: 3D
Signing time: Fri 31 Jan 2025 11:00:14 +0000
Manifest this update: Fri 31 Jan 2025 11:00:14 +0000
Manifest next update: Sat 01 Feb 2025 11:00:14 +0000
Files and hashes: 1: 53bFGYDHUepeMd3ayO9h-1bJcA8.crl (hash: xguUbWMGVSCwjttWGzqmD2jIyXwkiLkTzbCLjZMbkEo=)
2: MSnHBIOL0Bltj-Q0mkBqryaUsS4.roa (hash: R8xRgK2CEN6mE5gSyGtBAs14gnmUzJFq4i62UURLtRQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:bd:3c:e9:2d:7d:ab:5e:32:ab:54:b9:56:3a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e776c51980c751ea5e31dddac8ef61fb56c9700f
Validity
Not Before: Jan 31 11:00:14 2025 GMT
Not After : Feb 1 11:00:14 2025 GMT
Subject: CN=3ef6b27b05800d5d1faf4ccb0adeabe9ee0947e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7b:fa:3f:e1:a4:70:30:72:55:15:db:53:cf:
3c:34:f4:18:94:6b:8b:e8:24:08:1f:16:14:d9:d5:
f8:03:93:2a:e7:9e:31:bb:65:ed:84:12:60:94:81:
52:aa:ed:b1:93:cb:a4:13:83:e0:a7:40:f1:84:c9:
b4:7f:83:c2:07:d3:b2:24:6d:81:c8:a1:b5:22:70:
f0:a0:c1:f6:b7:3d:61:d0:10:2d:5f:bc:a7:58:92:
d6:37:70:83:25:9b:6e:26:28:03:90:34:c3:3a:68:
b6:c8:ac:dd:8e:1b:cc:bc:34:e6:7e:b9:0c:61:09:
79:f4:16:5a:1a:f4:29:39:a3:79:90:98:13:50:80:
b3:01:9a:b5:d9:b2:29:be:95:e2:2a:9b:4f:24:97:
ac:bd:70:9e:49:70:c8:30:d6:2d:14:18:95:67:8b:
16:ac:4a:f0:e3:a6:00:63:67:a7:99:a6:26:e2:98:
f1:2a:79:9a:8c:1d:6c:1b:25:70:87:28:9d:c5:80:
2f:08:de:dc:4b:00:8b:50:78:c0:55:bd:f9:a1:52:
78:c6:97:d8:1e:67:02:dd:a4:ad:47:16:02:59:26:
87:f1:62:65:44:b5:1d:7e:b2:17:dc:bb:7f:15:60:
aa:81:74:3e:7a:b0:17:15:1f:12:8b:84:34:ce:5b:
e7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F6:B2:7B:05:80:0D:5D:1F:AF:4C:CB:0A:DE:AB:E9:EE:09:47:E1
X509v3 Authority Key Identifier:
keyid:E7:76:C5:19:80:C7:51:EA:5E:31:DD:DA:C8:EF:61:FB:56:C9:70:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53bFGYDHUepeMd3ayO9h-1bJcA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/45adde-27b5-4d99-9319-d7c00750ed94/1/53bFGYDHUepeMd3ayO9h-1bJcA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:7c:12:41:85:15:e6:d5:06:dd:67:fb:9c:89:dc:da:d5:c4:
86:0d:02:cb:36:33:fb:ed:7d:ca:51:fe:a1:84:74:60:eb:ad:
46:2e:0d:02:ec:99:75:9c:4f:9b:ba:4f:17:72:a9:dd:96:51:
c5:89:28:38:62:f6:ce:8f:b1:6a:32:8c:f5:88:2f:d5:6d:44:
09:9c:e2:38:db:30:c8:8e:7b:5c:88:cc:8f:ae:b8:5b:8b:1d:
3f:49:0d:bb:b5:5a:ad:54:9e:5b:49:d6:ac:e0:64:04:63:a8:
be:15:3e:27:21:79:44:81:9d:ca:4f:23:4c:9d:34:29:19:c8:
b9:58:04:64:60:d2:e5:cb:44:2a:f0:ce:f9:be:34:a5:bc:30:
6d:b9:56:c6:42:3a:89:c4:5b:42:2e:46:73:49:87:6d:eb:79:
6d:e1:1f:bb:86:23:6b:99:5d:be:ec:be:49:98:31:b1:4d:ab:
f7:de:c8:31:e0:ef:c0:22:ef:1d:c0:6b:a9:62:9c:75:5a:fc:
02:66:1d:5f:9d:5a:3b:c5:d5:36:a7:40:ba:9e:8a:eb:fd:47:
0b:d9:bc:5a:d8:1c:c9:53:f3:3e:a3:07:1c:05:02:3c:71:c4:
3b:37:14:57:9d:65:2f:fe:d5:b2:d3:45:9d:90:dc:16:74:1e:
f0:17:c9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:11:28 2025 by rpki-client