Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
File: V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft (raw, json)
Hash identifier: LFKchq59yqPWkKG8TiHTroz0OXY7RaWC1k+aqY8NIdk=
Subject key identifier: 31:E7:A7:EC:FB:6B:2C:A7:7E:43:9F:09:46:F7:62:4B:FD:93:B5:DF
Authority key identifier: 57:97:24:5D:78:07:89:85:C1:47:DC:CB:E0:EC:6D:16:8D:D9:98:2D
Certificate issuer: /CN=5797245d78078985c147dccbe0ec6d168dd9982d
Certificate serial: 0194BCA975CA1130A7755F41F67A218FC082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
Manifest number: 1115
Signing time: Fri 31 Jan 2025 14:00:09 +0000
Manifest this update: Fri 31 Jan 2025 14:00:09 +0000
Manifest next update: Sat 01 Feb 2025 14:00:09 +0000
Files and hashes: 1: LXZlJTG3YsWQvmeHm3moz8YZuWw.roa (hash: mxP6NSnPOQlaHwnP8UnNjh2RIRc/bI9gDbXBJw+o1lw=)
2: V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl (hash: LuR5KOWnwqHX/Wo5kiT++w6mqdzGnB7uQ/NU87ZOJc0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:75:ca:11:30:a7:75:5f:41:f6:7a:21:8f:c0:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5797245d78078985c147dccbe0ec6d168dd9982d
Validity
Not Before: Jan 31 14:00:09 2025 GMT
Not After : Feb 1 14:00:09 2025 GMT
Subject: CN=31e7a7ecfb6b2ca77e439f0946f7624bfd93b5df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ed:4d:09:f2:de:72:a5:3c:88:88:df:0a:42:
b7:e5:7d:e8:74:fe:27:39:a4:82:ea:63:29:ec:a3:
f8:a5:46:3c:97:10:d0:87:15:72:89:8b:5a:35:f1:
84:1c:76:53:8d:9a:d8:10:f4:4c:6d:82:fa:41:07:
03:55:93:2b:23:1a:e6:db:0d:8e:ed:49:f9:13:21:
1b:99:77:8d:23:b0:e5:21:c7:41:88:a8:02:db:3e:
65:78:79:74:ee:08:6f:97:3a:17:fa:da:0f:5b:38:
57:72:f9:95:2c:b2:b7:2a:51:80:ac:1f:c6:c5:b2:
d4:c9:4f:fd:c4:7a:0b:79:ba:aa:24:39:93:fb:8a:
a8:e8:13:b3:f3:a8:63:6a:56:95:5e:3e:a8:65:4f:
c5:81:19:3d:60:5c:9c:e3:57:aa:3a:79:8d:3f:a0:
db:ca:6d:a6:3b:c2:b6:6e:f4:17:32:de:61:34:31:
04:ea:23:d9:dd:35:f3:d0:3f:7d:9e:09:92:c5:c0:
1d:0a:84:9c:8c:88:b0:81:1e:e4:73:55:4d:a5:33:
87:b4:4a:79:d8:a7:b7:c5:1a:5e:a5:02:e0:95:3f:
4c:7d:97:95:42:77:a5:94:b9:aa:c8:2e:a9:38:21:
63:2a:7d:80:7e:4d:4c:b6:55:79:8e:db:f0:7a:c7:
5c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E7:A7:EC:FB:6B:2C:A7:7E:43:9F:09:46:F7:62:4B:FD:93:B5:DF
X509v3 Authority Key Identifier:
keyid:57:97:24:5D:78:07:89:85:C1:47:DC:CB:E0:EC:6D:16:8D:D9:98:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ca:9d:38:16:02:4a:78:c9:e1:98:69:93:32:e6:55:1b:bd:
36:8c:34:45:ab:53:69:20:a7:61:64:f3:45:7b:3e:cd:0f:bc:
e1:9a:a3:29:1e:67:f3:1d:ee:fd:84:2b:11:0b:b1:db:f2:8e:
19:ba:8c:5a:ce:75:a4:9e:97:fb:7d:26:84:4d:2d:11:2e:1b:
ed:a8:39:50:19:35:5b:24:95:1c:e9:5b:06:a5:3c:06:fa:67:
0f:ec:1b:c4:e5:93:5e:88:67:e0:a5:b2:b6:6e:8e:d8:34:a0:
00:9c:8d:05:1b:cd:48:cc:0a:cd:ac:be:2d:be:a8:8a:09:00:
8c:5b:6c:32:3f:18:d7:24:26:e1:26:2b:c0:ad:01:41:eb:cd:
28:58:32:43:57:30:bc:13:25:cc:7b:e1:a0:3e:2b:de:2d:31:
83:96:b8:b0:57:0e:11:c7:f1:f2:f8:34:26:84:88:e9:15:d4:
0d:c0:7d:18:b3:1c:10:63:41:bb:7f:88:9b:52:da:14:bd:de:
7d:e5:a7:e4:d3:d6:3b:8c:92:d3:9d:c9:22:31:41:7b:81:cc:
3e:06:1e:c8:8e:99:74:4d:ad:bb:5d:cf:9d:28:6f:dc:eb:45:
cd:7b:43:9f:a0:d5:a6:dd:da:01:9a:1b:eb:e7:19:18:f4:47:
41:73:49:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:23 2025 by rpki-client