Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e5c7e6-a57b-4c57-b5a5-58ac05f4d954/1/5xhnDMKBDk0YFTtuTnhBPBz0748.mft
File: 5xhnDMKBDk0YFTtuTnhBPBz0748.mft (raw, json)
Hash identifier: oJOwkAfYpSL+IJOKqQZ/LU/Y7d+OCJt10PH+F2O2+LM=
Subject key identifier: 5C:C0:E9:BE:5D:C6:11:51:2E:C9:74:45:D7:7C:CA:06:DB:FA:26:22
Authority key identifier: E7:18:67:0C:C2:81:0E:4D:18:15:3B:6E:4E:78:41:3C:1C:F4:EF:8F
Certificate issuer: /CN=e718670cc2810e4d18153b6e4e78413c1cf4ef8f
Certificate serial: 0194BD176EC990DABCDC8CB51C3B2A45DD75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xhnDMKBDk0YFTtuTnhBPBz0748.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e5c7e6-a57b-4c57-b5a5-58ac05f4d954/1/5xhnDMKBDk0YFTtuTnhBPBz0748.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 16:00:17 +0000
Manifest this update: Fri 31 Jan 2025 16:00:17 +0000
Manifest next update: Sat 01 Feb 2025 16:00:17 +0000
Files and hashes: 1: 5xhnDMKBDk0YFTtuTnhBPBz0748.crl (hash: 7Su5YYlvmGUu9QFVu+qLTUXZMT4wMM2TJMVBEpDFSEY=)
2: McOsQMvjBBddr62PC0udNAkTiZE.roa (hash: XNiDpIia1i2lCsXP0+KatnkvQgNyXMN/LXGQLjKFa4c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6e:c9:90:da:bc:dc:8c:b5:1c:3b:2a:45:dd:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e718670cc2810e4d18153b6e4e78413c1cf4ef8f
Validity
Not Before: Jan 31 16:00:17 2025 GMT
Not After : Feb 1 16:00:17 2025 GMT
Subject: CN=5cc0e9be5dc611512ec97445d77cca06dbfa2622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1b:dc:a3:17:ac:9b:18:d3:33:83:f6:22:b1:
24:48:ce:12:fb:6a:b9:86:f1:fb:d1:f0:fd:b7:70:
e2:28:65:86:be:45:10:98:c1:93:68:98:97:b6:f6:
6c:80:fe:c3:da:4b:a6:82:47:ee:ac:25:4a:32:aa:
2e:45:b3:b7:ca:ed:1d:57:0c:58:e9:c2:1c:e3:80:
99:5c:78:38:26:2d:a6:8c:b1:3e:5e:71:77:db:17:
f2:8d:4f:77:8e:c4:33:4d:f0:c6:02:76:08:75:69:
8b:7f:bc:ce:44:ab:d0:02:ab:45:39:1a:2c:ce:60:
9e:20:91:36:87:ba:0a:2c:72:23:56:99:bf:a0:42:
49:b0:0a:07:f5:35:df:1b:8e:73:ec:04:87:27:4d:
23:45:aa:3c:3b:8b:30:0f:fc:ac:d8:99:91:2e:64:
54:9b:2e:41:92:39:43:e6:98:35:8a:61:ee:44:ec:
50:38:74:de:12:e5:e4:df:14:cc:16:e0:b2:f2:e9:
fd:60:d1:02:f6:a4:a4:03:72:1d:fa:27:31:c5:d5:
1d:e4:48:96:79:f1:06:ba:07:26:26:fa:8e:42:87:
e9:db:ae:9e:d8:55:22:68:ac:38:11:81:d5:6d:89:
b8:41:42:1e:d8:e2:de:77:51:6b:74:5e:39:bc:1e:
77:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C0:E9:BE:5D:C6:11:51:2E:C9:74:45:D7:7C:CA:06:DB:FA:26:22
X509v3 Authority Key Identifier:
keyid:E7:18:67:0C:C2:81:0E:4D:18:15:3B:6E:4E:78:41:3C:1C:F4:EF:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xhnDMKBDk0YFTtuTnhBPBz0748.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e5c7e6-a57b-4c57-b5a5-58ac05f4d954/1/5xhnDMKBDk0YFTtuTnhBPBz0748.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e5c7e6-a57b-4c57-b5a5-58ac05f4d954/1/5xhnDMKBDk0YFTtuTnhBPBz0748.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:42:75:da:16:d8:75:63:43:d7:00:63:6f:f0:fa:f5:61:27:
33:46:28:a4:02:ee:42:54:cb:7c:c9:13:ef:1a:38:ed:3a:93:
86:61:c1:d8:bb:b6:aa:c3:3e:c9:7a:8f:4b:64:17:d6:02:08:
a6:df:69:cc:86:52:f3:14:90:0c:2e:f7:11:e6:bd:dc:e5:92:
dd:fd:80:92:1e:47:dc:32:0f:e4:f9:98:ad:f7:1c:7f:d7:9c:
a1:6c:8c:27:f1:01:3e:1f:99:a8:2c:e4:6d:7c:91:10:51:d1:
a5:15:be:6e:0e:30:23:3d:70:e8:d6:41:2c:c1:0a:bf:90:aa:
dc:b7:85:83:4f:88:6c:b0:ff:29:c0:12:77:17:b3:84:43:10:
49:13:7a:67:00:8c:75:0d:b4:35:2a:cb:67:ee:da:b6:1d:18:
94:2f:aa:35:34:9d:5b:ef:e4:82:ce:03:cd:61:d5:cf:ad:86:
89:91:51:3a:a7:31:da:ed:70:c5:ee:2c:ef:5f:70:6d:08:b5:
a3:f6:cb:1f:13:9c:06:4e:be:18:b9:6d:eb:ce:8f:94:6d:19:
a9:8a:82:85:98:81:27:f1:79:62:21:62:fb:13:8f:d6:c3:58:
1f:67:47:e1:6c:eb:97:98:42:28:fe:ca:ba:e7:e1:f5:31:60:
c0:51:31:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:28 2025 by rpki-client