Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
File: 5LEwYQHMnsn86YUoDB2w83wTWjo.mft (raw, json)
Hash identifier: DB4j9199Ol5HF/lSBkfmmV/vLedKMBsCzu4ardaS7uo=
Subject key identifier: 81:49:91:2C:00:F1:BF:96:66:C7:B7:2B:40:4E:1A:E0:FE:D2:78:10
Authority key identifier: E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A
Certificate issuer: /CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
Certificate serial: 0194BD85570B4874F2E5EACE4F31070B36CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
Manifest number: 0F6C
Signing time: Fri 31 Jan 2025 18:00:19 +0000
Manifest this update: Fri 31 Jan 2025 18:00:19 +0000
Manifest next update: Sat 01 Feb 2025 18:00:19 +0000
Files and hashes: 1: 5LEwYQHMnsn86YUoDB2w83wTWjo.crl (hash: +dkTSy2EKKPd6i78A2wBg8WCUR7hbQ4eMvn5lZbIbE8=)
2: QzP1aoGPXGxJycT8WgKApOj77l0.roa (hash: V7t4vTx6viAWD2iCQY/J3lBZgTlKZ4hL2/EnpmHNbk4=)
3: kI0vHB0itKLKV54MYG6cGrVo0eY.roa (hash: C5TgalX0uC/rPE4DDIN7aoT3cFXmNAi4cZYsmZl5eDw=)
4: y-M_EBDyqDFIVawFxida8qjR5Co.roa (hash: OVypj78ZSdDN2W9JmlOfV0llyXCESZchLL8yqQ85v9o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:57:0b:48:74:f2:e5:ea:ce:4f:31:07:0b:36:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4b1306101cc9ec9fce985280c1db0f37c135a3a
Validity
Not Before: Jan 31 18:00:19 2025 GMT
Not After : Feb 1 18:00:19 2025 GMT
Subject: CN=8149912c00f1bf9666c7b72b404e1ae0fed27810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:db:15:0f:19:12:4e:41:da:96:d1:67:39:71:
e2:64:ab:79:a2:1c:3c:68:de:a0:3c:cf:58:61:d1:
80:97:7d:bb:56:6a:0a:b6:e8:34:28:c6:d8:f8:19:
e6:0c:04:85:74:11:1b:bc:dd:50:46:21:39:a8:c2:
64:66:0e:27:59:52:ff:e1:82:16:31:6c:4f:87:69:
e7:e2:5e:82:30:91:1d:eb:2b:6c:f6:59:17:0a:05:
b5:f9:e1:b0:b8:37:9d:f2:26:b8:15:4a:c0:c3:be:
44:53:90:0f:f7:6d:a8:f9:5a:85:17:4a:8a:6b:58:
20:32:7f:d3:e3:bf:31:d4:d8:95:32:95:64:62:56:
00:e5:2d:be:dc:49:1a:9e:fa:aa:a5:73:e5:a7:f6:
76:da:1a:48:6d:78:55:5c:88:d6:52:15:44:d5:a6:
c0:23:8c:f5:49:24:d6:a2:33:d7:36:ff:84:2b:c1:
7c:9c:13:75:78:c0:78:c8:ba:90:ed:de:34:97:4f:
b2:3c:bc:1e:42:7a:48:ae:60:34:1f:10:64:f5:a5:
ed:d4:6e:08:ae:56:c6:02:24:58:0b:7f:b7:d2:1b:
05:0c:d5:24:76:e8:00:fd:99:e2:f1:a2:38:b1:90:
0d:47:43:05:35:ce:24:00:98:fc:58:cd:99:1b:10:
3a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:49:91:2C:00:F1:BF:96:66:C7:B7:2B:40:4E:1A:E0:FE:D2:78:10
X509v3 Authority Key Identifier:
keyid:E4:B1:30:61:01:CC:9E:C9:FC:E9:85:28:0C:1D:B0:F3:7C:13:5A:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LEwYQHMnsn86YUoDB2w83wTWjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4d089e-5d1c-4e34-9465-fa6348f695b5/1/5LEwYQHMnsn86YUoDB2w83wTWjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:61:aa:8d:9d:20:af:4b:44:07:70:35:27:c5:97:9f:d8:26:
6a:e9:be:3d:58:ae:18:9f:1f:84:c7:94:88:20:8f:23:c9:74:
99:0a:f1:ac:57:92:f6:cf:9f:5c:b5:1f:de:4e:fb:70:7b:dd:
c4:2e:43:38:46:cf:ba:e6:32:5c:0d:7a:eb:f2:f5:c7:04:34:
8e:b2:9e:83:13:71:72:6a:4c:a4:05:72:6a:04:b6:82:08:36:
d0:c7:a6:c0:74:1e:fb:b3:cd:99:83:bb:f4:d7:34:e6:f6:b2:
ea:99:e1:fb:59:b5:bf:f6:5c:a9:e6:70:b7:0e:69:04:a5:70:
e7:62:23:41:b0:d9:c2:46:83:4f:55:85:87:f8:0d:cf:ce:2c:
6d:a6:92:c1:b2:18:59:72:96:0f:01:59:22:09:a0:0f:f0:56:
23:50:a0:64:df:31:5a:b8:56:10:8c:c2:dd:ca:b6:d8:00:68:
37:98:ce:47:31:8e:32:10:8f:96:a1:6b:b1:97:00:d2:20:ad:
df:e7:e8:ae:4f:61:87:db:c1:b7:8c:8a:cc:a1:45:a4:61:bd:
57:d7:e9:6a:e9:9b:4c:64:fa:96:98:ff:a8:c0:3a:02:41:95:
49:91:b9:ce:bc:6a:92:b9:84:79:31:8d:9b:70:af:55:71:34:
64:e7:b8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:50 2025 by rpki-client