Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
File: 5Q5mktlyjagfXE9J4VB3Phr7yAs.mft (raw, json)
Hash identifier: w51MjXEIZqJi7r6dyCB31/xXql8n0tAMXJTXRTVWKrA=
Subject key identifier: FB:70:A2:5F:DE:6C:CB:9E:E2:07:4E:EC:CF:62:DD:46:2C:C6:E1:18
Authority key identifier: E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B
Certificate issuer: /CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
Certificate serial: 0194BCAA22C4DCD3B5CCD2980DD0BD3D06F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
Manifest number: 0C48
Signing time: Fri 31 Jan 2025 14:00:54 +0000
Manifest this update: Fri 31 Jan 2025 14:00:54 +0000
Manifest next update: Sat 01 Feb 2025 14:00:54 +0000
Files and hashes: 1: 5Q5mktlyjagfXE9J4VB3Phr7yAs.crl (hash: sQu7WfWls9dzb4QOY0aO3soyo/jNJhspV9/4LnCtjI4=)
2: h1D7CnT2PY1NPObHiR4r21lOKxw.roa (hash: FFNEtoxBXjniX9r1DmUch9vHzQqa3zr4aAAiKoIwvtI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:22:c4:dc:d3:b5:cc:d2:98:0d:d0:bd:3d:06:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
Validity
Not Before: Jan 31 14:00:54 2025 GMT
Not After : Feb 1 14:00:54 2025 GMT
Subject: CN=fb70a25fde6ccb9ee2074eeccf62dd462cc6e118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:63:02:fe:ab:11:66:fb:18:7e:7f:51:43:b3:
c7:0c:dc:c1:53:5b:f8:b3:e6:50:94:bf:dd:d0:f4:
89:75:51:b1:25:8f:50:bd:8e:a7:80:e6:aa:63:19:
be:8a:89:b8:cf:76:04:f5:0b:07:db:e7:a5:37:c1:
16:62:87:a1:9d:46:e0:02:57:b9:c7:a0:99:e1:c9:
8a:30:20:7b:18:be:1f:ac:ae:00:9b:b5:eb:f1:39:
1f:45:27:4e:61:d6:3c:c0:32:73:e1:75:ed:f3:30:
2a:d6:96:89:c8:3d:30:a9:f7:89:f2:27:7c:73:89:
e6:05:97:16:48:f8:02:ca:88:ae:fb:f9:51:c8:a6:
b5:88:cc:56:92:8b:88:35:64:a9:3f:9f:d7:24:c6:
d1:7b:38:f1:b5:14:c9:86:cb:16:d6:41:1f:ef:46:
2e:d9:f4:ec:ba:b6:e8:0f:a8:27:5c:4e:a1:08:90:
7c:4e:6a:aa:77:95:a1:12:60:e4:e3:f6:ce:3a:7a:
97:b6:01:13:9d:37:da:af:b3:e9:16:48:96:3d:31:
45:5e:0b:10:a2:92:8d:66:32:64:16:6b:3e:24:f5:
e0:e9:fc:db:fd:6b:0b:0d:6e:6d:0a:c5:4e:05:aa:
c7:1d:cc:4b:2e:f6:af:b6:e4:73:92:a4:29:7e:76:
73:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:70:A2:5F:DE:6C:CB:9E:E2:07:4E:EC:CF:62:DD:46:2C:C6:E1:18
X509v3 Authority Key Identifier:
keyid:E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e9:29:cd:a8:00:35:61:a6:e9:95:1d:c8:d7:ed:d8:4c:84:
34:27:39:03:2a:c5:4f:ab:64:9e:b8:91:23:25:c0:83:24:ff:
33:34:d7:e8:65:e0:4a:7c:bd:16:8e:d9:8f:09:94:6c:ce:b0:
82:a4:3e:8c:50:c9:49:8b:18:f9:87:f0:75:ae:57:49:87:b0:
06:42:e2:e8:7c:7c:24:f8:85:c9:80:c4:2e:c3:9e:0f:36:31:
c7:a7:1c:3d:85:43:6d:af:f0:25:17:64:fd:e7:71:e1:6a:16:
61:a5:2d:52:97:b4:14:1f:f1:86:5a:b3:fc:52:95:ad:fe:a8:
58:38:e1:4f:88:32:3e:02:78:b4:f3:57:98:2a:47:9d:af:cb:
30:1c:18:30:b3:b6:23:ff:df:d0:c4:2d:f6:95:39:10:3b:f5:
29:3d:39:53:5f:36:08:cd:1b:7e:34:79:ae:15:cf:0e:e5:54:
15:8e:5a:e2:5a:d6:ef:f0:e6:a2:61:b8:16:3e:85:fe:aa:97:
0d:05:7a:b8:8c:ca:74:c3:81:56:ba:49:d6:cc:86:80:1c:1e:
6b:ae:78:0f:6c:50:ff:bf:d6:55:5f:4b:9a:d4:71:1c:8e:5e:
30:c8:b5:d9:57:f2:db:d0:39:07:bb:f6:d6:af:eb:2b:ab:97:
d2:82:3f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:13:33 2025 by rpki-client