Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a1b2ec-c4c4-4030-95f3-d308328c0514/1/5HwodAhcg6Lj2gsMewXOskkCG1M.mft
File: 5HwodAhcg6Lj2gsMewXOskkCG1M.mft (raw, json)
Hash identifier: Dtqo3ST3/SMkrPdN1KYc6X/UGP1ZvVGQC0MXf9ItMso=
Subject key identifier: E1:A5:DB:4F:83:E8:77:A2:3D:F9:90:A9:66:C7:69:50:2C:5D:46:D2
Authority key identifier: E4:7C:28:74:08:5C:83:A2:E3:DA:0B:0C:7B:05:CE:B2:49:02:1B:53
Certificate issuer: /CN=e47c2874085c83a2e3da0b0c7b05ceb249021b53
Certificate serial: 0194BCA983EBA73243162ED05D5CB82576B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HwodAhcg6Lj2gsMewXOskkCG1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a1b2ec-c4c4-4030-95f3-d308328c0514/1/5HwodAhcg6Lj2gsMewXOskkCG1M.mft
Manifest number: 068B
Signing time: Fri 31 Jan 2025 14:00:13 +0000
Manifest this update: Fri 31 Jan 2025 14:00:13 +0000
Manifest next update: Sat 01 Feb 2025 14:00:13 +0000
Files and hashes: 1: 5HwodAhcg6Lj2gsMewXOskkCG1M.crl (hash: FH6hetaCdwi2BP2uA6ZWMCH1r4wM9U0JFGVIYAewdaU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:83:eb:a7:32:43:16:2e:d0:5d:5c:b8:25:76:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47c2874085c83a2e3da0b0c7b05ceb249021b53
Validity
Not Before: Jan 31 14:00:13 2025 GMT
Not After : Feb 1 14:00:13 2025 GMT
Subject: CN=e1a5db4f83e877a23df990a966c769502c5d46d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7a:95:a3:8c:66:c4:90:09:b1:19:81:7e:2c:
f3:6e:88:84:da:38:a5:d9:c9:61:c5:71:7f:8f:c3:
5f:83:85:82:4e:56:5f:ed:e6:15:6e:11:f3:ff:80:
80:4f:0f:33:ea:9e:7d:86:e4:55:97:65:81:8e:59:
68:61:8d:15:d8:55:20:3d:0a:21:00:07:48:59:49:
64:60:ec:c3:b2:21:cc:7d:ce:3c:7f:ac:fe:ac:37:
55:eb:59:38:ee:fe:6e:32:72:ad:1a:01:56:e1:ae:
54:12:19:ba:b3:0f:2a:e7:0d:3f:65:56:bf:b4:fb:
6d:88:a9:0e:56:27:94:1f:56:c3:2a:c5:ed:0b:48:
a5:5e:11:93:8d:01:d5:75:1c:d1:f0:83:50:9b:37:
8d:23:b3:3f:57:bb:09:e0:cd:bb:de:44:de:02:56:
fb:b8:c4:5a:23:2f:15:d9:0e:ed:d3:6c:7b:43:2c:
0a:f4:21:9a:80:30:40:4c:32:93:13:62:ae:13:e6:
ca:4e:b3:0d:b4:df:e1:75:a9:83:8a:bd:14:0a:74:
d9:97:aa:20:5e:3b:bd:7b:db:8f:74:3b:cc:7a:80:
13:9b:7b:01:90:11:5c:4c:51:eb:42:84:07:14:6c:
78:4e:70:7a:db:f5:01:89:ee:01:de:78:aa:7f:b9:
0a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A5:DB:4F:83:E8:77:A2:3D:F9:90:A9:66:C7:69:50:2C:5D:46:D2
X509v3 Authority Key Identifier:
keyid:E4:7C:28:74:08:5C:83:A2:E3:DA:0B:0C:7B:05:CE:B2:49:02:1B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HwodAhcg6Lj2gsMewXOskkCG1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a1b2ec-c4c4-4030-95f3-d308328c0514/1/5HwodAhcg6Lj2gsMewXOskkCG1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a1b2ec-c4c4-4030-95f3-d308328c0514/1/5HwodAhcg6Lj2gsMewXOskkCG1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:8f:c1:53:38:3a:1a:d6:e8:fb:b5:39:23:b7:40:d0:d4:ca:
4c:a4:e8:c3:e3:9b:f4:10:d3:1b:48:01:c8:b0:a2:f0:4e:30:
7b:63:ad:8e:aa:6e:45:55:21:bc:15:d4:42:ef:5f:f5:de:44:
2c:89:65:33:a2:62:ae:23:d9:46:b4:71:4f:cd:46:77:c9:3b:
29:fb:f4:d3:16:c7:b3:8f:f3:5f:f8:a3:65:9a:bd:2b:77:ce:
f3:07:7a:19:88:ad:d5:a4:78:01:86:5a:bf:4a:c5:4e:38:4e:
c5:51:08:e0:fb:ce:d1:67:1a:88:a4:eb:bf:fb:09:b0:12:ee:
af:68:52:de:c7:f2:ef:d7:7c:73:1d:7f:cd:52:4c:fe:5c:59:
2e:83:67:b9:91:8d:83:84:9b:ef:73:80:33:87:4b:41:76:04:
73:2c:2e:57:dc:95:34:db:4f:03:81:fc:00:75:ac:71:ba:14:
38:f6:3d:85:d7:69:41:c3:c6:63:8e:8b:f6:f6:0c:b1:96:34:
d0:e8:23:06:d8:8b:c9:64:00:9f:f7:3c:13:60:2b:3c:3a:18:
7f:97:da:bb:c3:14:7d:6c:df:c9:fa:4e:67:83:ab:24:7b:3c:
43:54:f3:36:ce:ab:d9:d7:1c:be:8a:a0:07:6e:da:fa:e8:65:
54:03:75:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:57 2025 by rpki-client