Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.mft
File: d5KQMR5unPpeUX-rsNlvqaccPaE.mft (raw, json)
Hash identifier: SE/ZUhdsmsqZtbR7frCTfnuKUO68d2PTGnmGlyMgqf0=
Subject key identifier: 64:FD:6A:57:A1:03:93:2A:B8:32:3A:D8:68:56:C2:EE:76:89:F6:E5
Authority key identifier: 77:92:90:31:1E:6E:9C:FA:5E:51:7F:AB:B0:D9:6F:A9:A7:1C:3D:A1
Certificate issuer: /CN=779290311e6e9cfa5e517fabb0d96fa9a71c3da1
Certificate serial: 0194BD4E61F24BF8F02A739AFF4395708EBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d5KQMR5unPpeUX-rsNlvqaccPaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:18 +0000
Manifest this update: Fri 31 Jan 2025 17:00:18 +0000
Manifest next update: Sat 01 Feb 2025 17:00:18 +0000
Files and hashes: 1: LOkJgQnrVhTjIGglVDZP2nXIS3k.roa (hash: w0AA95RC5IbPZCqkTY536mw4aIKSxO5pRstC+7ehig8=)
2: d5KQMR5unPpeUX-rsNlvqaccPaE.crl (hash: SvcUB9I0FxBe+uRpVcaqSA+kOjNN0NjN76+5eznE68A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:61:f2:4b:f8:f0:2a:73:9a:ff:43:95:70:8e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779290311e6e9cfa5e517fabb0d96fa9a71c3da1
Validity
Not Before: Jan 31 17:00:18 2025 GMT
Not After : Feb 1 17:00:18 2025 GMT
Subject: CN=64fd6a57a103932ab8323ad86856c2ee7689f6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ec:59:40:e9:77:c9:ee:6b:70:b5:46:91:8a:
7a:c7:f8:9e:85:80:dc:a0:90:2a:b1:fd:65:48:0d:
89:d2:81:f7:27:61:11:06:e5:d7:c7:6e:e3:81:6e:
c6:20:bd:2d:72:7c:63:47:37:8a:7c:ad:37:e8:51:
1e:ca:f4:96:2e:8e:6f:43:f0:e8:08:41:ae:5d:26:
a0:fd:73:62:ea:b0:c9:2d:b4:23:ab:a4:b2:bf:b8:
e3:1e:e3:26:a1:75:af:8e:a9:c9:78:87:f4:cf:d6:
f4:36:ea:e5:bb:fc:90:f2:b6:0f:e0:a4:66:f2:a3:
f0:fc:c9:7c:0b:a6:14:24:15:e8:50:04:5a:29:b0:
e0:c6:08:8b:85:cd:4b:23:df:7f:0c:4e:db:0c:f4:
d9:01:3b:82:42:9f:89:ec:d8:5e:6d:73:e1:2c:9d:
8b:f9:f8:c6:ef:19:8c:03:ac:9d:f4:01:b3:21:5b:
14:51:4c:f5:1f:f6:d6:6b:62:06:ec:fa:6f:c7:4a:
61:c4:e6:91:f3:7b:a1:2e:b1:40:dc:70:66:a8:72:
0d:0a:9c:57:a9:b1:17:56:ab:5e:fa:51:4f:8d:b4:
61:ed:50:f3:8f:d6:c5:e8:f2:c8:34:5d:1d:b5:3b:
c1:83:f2:5f:bf:cc:18:c6:19:b5:03:f3:ae:e3:92:
7d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FD:6A:57:A1:03:93:2A:B8:32:3A:D8:68:56:C2:EE:76:89:F6:E5
X509v3 Authority Key Identifier:
keyid:77:92:90:31:1E:6E:9C:FA:5E:51:7F:AB:B0:D9:6F:A9:A7:1C:3D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5KQMR5unPpeUX-rsNlvqaccPaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b8e03e-c398-4eee-8939-f909d79a44ad/1/d5KQMR5unPpeUX-rsNlvqaccPaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b9:cd:7a:02:5a:a1:c0:03:56:9b:27:b7:08:94:02:d7:2f:
00:dc:f9:bf:a4:a8:26:75:60:e1:5a:4e:e2:e1:fc:36:6f:7f:
ea:cd:fe:50:3a:cd:df:db:58:5d:54:7d:f1:7d:de:7c:59:94:
b0:88:12:e4:17:6a:87:c3:34:6d:a1:19:50:f3:05:d9:7e:81:
25:72:f3:34:3d:a1:c6:ca:b5:63:e9:3d:64:33:d2:f4:60:d5:
21:8c:01:c1:0b:72:3f:f5:4e:01:1a:15:c6:c2:3b:40:df:3c:
e4:ff:3d:f0:f2:07:57:75:d4:25:39:f1:f6:86:7f:d0:83:e6:
c3:93:ab:cd:c9:ed:9d:e1:e9:e7:29:a4:a1:f2:e9:57:fd:3d:
7a:69:10:e9:30:ee:bd:ae:66:6e:67:61:60:ee:9a:95:9f:f6:
86:33:11:47:36:2e:93:8b:55:04:43:ce:0a:23:03:1c:e6:aa:
a8:c1:de:5a:07:5a:8d:d5:f3:eb:7d:4b:a7:13:54:21:be:2f:
3e:5e:21:85:1f:f6:7f:27:51:80:72:00:fb:44:fa:6a:6c:a2:
5d:69:c1:b0:a3:25:28:02:e3:43:66:9e:11:71:94:14:a9:b2:
94:da:13:46:48:1a:85:18:42:73:8e:47:65:a5:6c:23:70:d4:
da:3e:8a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:55:09 2025 by rpki-client