Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft
File: N5fgOfAlolqm6ZI5HZJCYGmbpns.mft (raw, json)
Hash identifier: W6YZA3EE/AUf+/noS1Qq0EMllrVbTOOsxMOYDVYvSrw=
Subject key identifier: 6E:86:86:D4:B7:81:1F:FD:F4:8F:9A:EE:A2:55:05:27:FC:17:D0:E5
Authority key identifier: 37:97:E0:39:F0:25:A2:5A:A6:E9:92:39:1D:92:42:60:69:9B:A6:7B
Certificate issuer: /CN=3797e039f025a25aa6e992391d924260699ba67b
Certificate serial: 0194BD1754BC209940F8F3277EC5CEFBDC27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5fgOfAlolqm6ZI5HZJCYGmbpns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft
Manifest number: 0DA5
Signing time: Fri 31 Jan 2025 16:00:10 +0000
Manifest this update: Fri 31 Jan 2025 16:00:10 +0000
Manifest next update: Sat 01 Feb 2025 16:00:10 +0000
Files and hashes: 1: N5fgOfAlolqm6ZI5HZJCYGmbpns.crl (hash: pMeFjen7yDgYcFRuFKryPWFGa7O5waI43YiNwpdl4Q8=)
2: sVzqlUVXrHqVsVw4yhzSu1oYIjM.roa (hash: HaD8do3X9duYtx96VIyzNjLwjQlO2MrTlBSjfqbB5ec=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:54:bc:20:99:40:f8:f3:27:7e:c5:ce:fb:dc:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3797e039f025a25aa6e992391d924260699ba67b
Validity
Not Before: Jan 31 16:00:10 2025 GMT
Not After : Feb 1 16:00:10 2025 GMT
Subject: CN=6e8686d4b7811ffdf48f9aeea2550527fc17d0e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e3:94:5f:a1:29:fa:0b:a3:c6:67:34:1e:2e:
1f:ca:25:dc:56:34:8d:62:de:f5:f9:dd:b7:5f:5f:
67:c5:6b:b8:94:fd:cb:f8:82:86:5e:65:03:ba:64:
93:d2:7a:86:e0:b3:98:21:e8:5d:c1:40:25:66:06:
59:18:8d:98:1d:cb:9b:2d:fd:de:e4:a7:67:a7:5d:
cd:a3:24:0c:40:5a:f3:2e:89:fc:df:8c:7b:0a:ad:
a9:7d:a3:c8:a6:6f:50:32:53:61:51:1f:41:09:22:
8e:c7:ef:95:e2:27:d8:57:1c:d3:66:86:6a:ed:ef:
81:02:29:cb:f6:63:e3:ee:31:41:94:a4:c4:24:e6:
8d:69:c4:ff:8c:f0:5a:9b:03:bb:55:80:80:17:d1:
d0:05:16:d9:2e:79:a3:f3:f0:04:91:06:10:02:a7:
8d:93:4d:5a:03:50:e6:33:76:9a:bd:f1:cc:04:a0:
e4:51:f1:9a:77:06:26:5c:db:1a:97:90:ab:6d:57:
57:d1:f6:85:28:aa:1a:87:ce:50:43:a8:1e:94:be:
c7:4d:6a:f1:79:24:c1:8c:8d:74:52:6e:75:1b:dc:
a1:58:f5:3e:47:a6:1a:49:3d:49:d1:11:27:e8:6b:
5a:78:5d:f7:ee:c4:f7:b8:b6:a0:a1:ed:71:4f:d8:
9f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:86:86:D4:B7:81:1F:FD:F4:8F:9A:EE:A2:55:05:27:FC:17:D0:E5
X509v3 Authority Key Identifier:
keyid:37:97:E0:39:F0:25:A2:5A:A6:E9:92:39:1D:92:42:60:69:9B:A6:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5fgOfAlolqm6ZI5HZJCYGmbpns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:21:42:ca:29:61:5d:31:b9:49:13:8f:ed:62:0e:c8:1a:76:
5e:d9:82:70:4a:af:81:11:3b:84:0b:e9:b3:3c:02:c5:63:71:
60:5c:ba:ed:68:56:6f:3c:58:7c:a2:4d:47:c1:e1:98:8d:01:
8a:7a:6b:9a:cb:90:2a:4d:11:1c:6c:59:75:27:43:31:16:89:
6c:b5:c7:16:ff:10:14:4f:b2:2e:5a:1c:e4:7c:fd:9b:95:a1:
df:0d:03:e9:f5:d0:3d:5a:f8:a3:4f:7b:95:8b:10:a7:00:5c:
35:79:1f:a0:6c:cc:cc:0f:d4:91:a6:27:0a:6a:8f:d8:d6:07:
0a:cb:f2:6f:8d:9e:8a:a5:5e:77:5b:cd:44:73:0a:db:e4:be:
bf:ba:f2:7b:2e:20:06:fb:7f:0a:75:4a:9e:59:a1:ec:e0:23:
c7:38:d8:f8:98:ee:7e:4c:9e:fc:00:e2:65:35:0e:7f:d8:ec:
9f:3f:32:2c:e2:46:b6:9e:0b:74:72:e4:8a:e5:17:28:9a:58:
39:64:19:3f:e2:eb:1e:bb:88:03:c9:e8:ab:38:ff:ec:6c:af:
2c:5d:b0:34:81:70:ce:7a:3b:ab:92:bb:fa:5c:f1:34:54:cc:
41:ac:08:69:75:66:4e:37:fa:45:3a:e8:d3:a4:4e:bd:a1:5b:
f9:56:00:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:49 2025 by rpki-client