Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.mft
File: ENJnhg06QDsA4aYcVDSs_265c5Q.mft (raw, json)
Hash identifier: Hz7VbC0Q5kGXI5gyA2Yv38tHtDX9TFxSLxWOdCbebXM=
Subject key identifier: 5C:C8:10:CD:8C:3A:8A:C2:BA:12:9E:5E:DF:A7:60:63:D7:91:7E:9B
Authority key identifier: 10:D2:67:86:0D:3A:40:3B:00:E1:A6:1C:54:34:AC:FF:6E:B9:73:94
Certificate issuer: /CN=10d267860d3a403b00e1a61c5434acff6eb97394
Certificate serial: 0194BC72843D5254CE1C10320A255723D42A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ENJnhg06QDsA4aYcVDSs_265c5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 13:00:08 +0000
Manifest this update: Fri 31 Jan 2025 13:00:08 +0000
Manifest next update: Sat 01 Feb 2025 13:00:08 +0000
Files and hashes: 1: ENJnhg06QDsA4aYcVDSs_265c5Q.crl (hash: A2aY6J5ZKKdTCbVNpi7PREZZNu4P0P1hYcLACtmIrnw=)
2: dBEJ6Z4T0iJXRXy3ic-Gmbtq2zk.roa (hash: 2ngGgbsBeXS5oDaHpMWchshDHqxPpAQ3xlLFSQTtD/s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:84:3d:52:54:ce:1c:10:32:0a:25:57:23:d4:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10d267860d3a403b00e1a61c5434acff6eb97394
Validity
Not Before: Jan 31 13:00:08 2025 GMT
Not After : Feb 1 13:00:08 2025 GMT
Subject: CN=5cc810cd8c3a8ac2ba129e5edfa76063d7917e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:20:73:74:8d:f1:d1:d0:15:19:41:19:12:5f:
02:46:d9:cd:94:4e:53:79:d6:82:16:23:70:ed:88:
5f:2f:56:44:44:dd:59:e6:18:f1:e3:bb:93:5d:10:
49:9c:1c:f0:23:37:fd:f2:c0:26:b1:58:f8:1a:7c:
b6:2f:d7:d3:d5:cc:91:ac:6d:ae:bf:9b:72:b1:e9:
06:df:08:83:f1:50:6c:3a:71:12:0e:bd:4c:24:36:
a5:53:34:c0:6f:4f:9c:eb:7c:cb:e4:5c:7a:4c:82:
e1:9b:91:14:09:fe:76:31:fb:01:41:eb:8e:0b:f5:
f0:c8:1f:ba:2c:00:85:3a:8b:c8:e3:53:83:9e:4a:
cb:f7:99:b5:09:03:f0:ad:bd:6c:ca:42:35:f5:59:
e1:56:e9:f1:6d:6b:99:8e:f0:12:b8:33:0a:3a:2b:
0e:a3:33:02:3f:61:2c:28:0f:fa:d9:1b:31:de:6e:
4f:8d:bc:6a:bc:6d:89:c8:96:58:6e:f9:ae:b5:67:
f3:52:8c:4e:95:2e:5c:03:45:79:4d:9b:eb:23:4f:
06:1f:46:85:ed:2e:a3:a1:26:b6:f7:b9:a3:ee:b1:
35:e5:ea:7b:f1:90:cf:27:26:6f:8c:ba:1d:a9:3a:
c5:d0:ab:df:2a:7c:c0:bf:41:87:b1:74:02:3f:ee:
58:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C8:10:CD:8C:3A:8A:C2:BA:12:9E:5E:DF:A7:60:63:D7:91:7E:9B
X509v3 Authority Key Identifier:
keyid:10:D2:67:86:0D:3A:40:3B:00:E1:A6:1C:54:34:AC:FF:6E:B9:73:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ENJnhg06QDsA4aYcVDSs_265c5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/b6ef42-b8c0-4e5a-bda1-034bcf4ebdcb/1/ENJnhg06QDsA4aYcVDSs_265c5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:12:21:e4:95:cb:b1:76:60:1e:c3:b8:93:9e:8f:db:a1:51:
c4:fd:c5:a9:f0:26:40:96:18:a8:d6:8d:8c:75:12:c6:24:14:
4d:91:21:a8:04:7b:c1:53:eb:90:8f:b5:8c:5d:12:5d:f2:d0:
f6:49:fe:5e:b2:fc:25:e5:52:ac:ab:2a:31:b4:9f:ac:a6:ed:
6c:55:46:a3:39:11:bd:3c:a3:11:dd:23:5f:7e:b3:05:2e:84:
61:e6:61:d9:ba:71:c6:46:00:8a:3a:1f:9c:63:4c:5c:c8:ea:
d7:8d:87:fe:6d:ab:9c:b4:2e:76:81:ec:a9:3f:fc:2a:85:b1:
a5:56:9d:79:6e:d7:58:22:46:c1:48:dd:3a:9d:55:44:00:99:
93:57:bc:6f:84:92:b3:b4:42:c2:63:49:91:40:ea:6c:fb:fc:
11:b6:d1:91:c7:f3:75:75:12:06:6c:d1:ee:81:83:2c:76:6a:
ce:8b:4d:de:4a:2d:e0:61:d4:f8:1c:f7:20:5a:25:fe:88:e3:
a2:41:4e:18:35:3d:13:6f:ba:5f:d5:da:d1:3e:e7:cc:de:f6:
ce:a3:a2:b0:0c:e2:04:48:3b:06:af:f7:58:a8:3c:57:56:20:
d7:36:75:6b:d6:58:88:35:7d:24:8f:20:47:44:b4:fe:06:8b:
d4:c2:fe:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:58:16 2025 by rpki-client