Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
File: r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft (raw, json)
Hash identifier: aWytCrXB50L/90tiupKS7/fEcRjbDYnfCQtUyN+BTe8=
Subject key identifier: EF:B2:70:70:50:4F:0D:B3:12:60:FF:19:53:F5:F0:39:F3:7D:ED:2B
Authority key identifier: AF:93:4E:C6:94:AF:68:13:4B:75:14:C1:0D:CD:13:85:7B:45:9E:38
Certificate issuer: /CN=af934ec694af68134b7514c10dcd13857b459e38
Certificate serial: 0194BCA9C5FFEE33C39FB60E55C74A0AF5C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5NOxpSvaBNLdRTBDc0ThXtFnjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
Manifest number: 0E27
Signing time: Fri 31 Jan 2025 14:00:30 +0000
Manifest this update: Fri 31 Jan 2025 14:00:30 +0000
Manifest next update: Sat 01 Feb 2025 14:00:30 +0000
Files and hashes: 1: 3KVjDh6tV6LcIk6BDE6xPuXzBDM.roa (hash: bQvllPBonHjb5qHCFeaDeGABQpp//k5Dnzxk+0td390=)
2: r5NOxpSvaBNLdRTBDc0ThXtFnjg.crl (hash: 4FbG9jGmTv6af2pBTGeocJBKFY1lqZm5IyQcK83O5cE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c5:ff:ee:33:c3:9f:b6:0e:55:c7:4a:0a:f5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af934ec694af68134b7514c10dcd13857b459e38
Validity
Not Before: Jan 31 14:00:30 2025 GMT
Not After : Feb 1 14:00:30 2025 GMT
Subject: CN=efb27070504f0db31260ff1953f5f039f37ded2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d4:fa:bd:7c:1e:62:50:d3:92:38:e4:be:3a:
37:de:d6:71:a8:22:76:97:2d:10:a2:cb:7e:76:00:
df:ee:73:8b:08:86:b2:4c:a3:7c:b9:9d:02:0f:47:
df:c3:02:56:78:20:fd:16:de:3b:3e:f3:69:f3:b5:
9c:6a:59:23:26:cf:1c:f7:e9:20:1b:4f:f6:e2:02:
42:fd:01:21:73:88:a2:d6:33:ab:6b:90:3e:74:3f:
b1:62:39:70:aa:2a:c2:78:29:92:fa:86:35:ef:4f:
48:4a:c1:a4:71:a4:f3:c9:bd:a9:3d:b8:b8:11:96:
89:d3:56:e7:e9:56:24:6f:16:89:96:95:10:3b:37:
23:95:c5:f9:de:28:7a:8d:c4:3d:4a:70:0a:1b:a5:
21:31:d5:df:25:93:f3:5a:af:a0:d2:7a:48:31:6c:
0a:58:9c:13:87:b4:4f:7b:08:10:8c:ae:3b:f7:c5:
09:21:48:4d:d5:a6:85:75:05:fc:96:09:1f:7a:55:
75:b3:2e:13:84:41:c9:db:f7:da:18:83:57:87:d5:
31:78:a4:5d:9b:13:de:09:c6:1f:43:c9:ee:39:e6:
bd:b8:f4:07:7c:7e:27:30:d1:cb:a0:cf:e9:36:d8:
c3:2f:13:17:3c:88:07:33:45:04:35:1e:f0:64:13:
97:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B2:70:70:50:4F:0D:B3:12:60:FF:19:53:F5:F0:39:F3:7D:ED:2B
X509v3 Authority Key Identifier:
keyid:AF:93:4E:C6:94:AF:68:13:4B:75:14:C1:0D:CD:13:85:7B:45:9E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5NOxpSvaBNLdRTBDc0ThXtFnjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99be80-152c-4b65-8b32-0718aa8dd9a7/1/r5NOxpSvaBNLdRTBDc0ThXtFnjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:13:a6:6a:92:b9:c1:6e:ac:83:35:14:20:33:1c:ea:82:88:
b8:6e:cd:c6:e4:a1:a1:cc:99:bc:34:a6:55:1b:aa:8b:a0:32:
db:fc:9f:ec:e0:24:d3:79:80:7d:22:56:c2:9c:38:53:1f:ac:
66:c9:9d:be:2e:77:37:2a:6a:20:29:80:81:72:02:c4:4c:ef:
77:85:30:03:09:15:71:42:c4:a2:00:f5:93:b0:a8:53:fb:81:
b0:78:9d:41:69:4b:d5:d9:24:1f:9a:73:1a:7c:83:53:5b:44:
c2:e8:70:6f:2d:a5:c3:9e:56:3e:ec:d3:31:9e:65:69:b6:0e:
8e:e4:59:6a:9f:c2:52:35:e2:0b:25:cc:11:1a:17:60:57:73:
9b:ca:78:5a:be:f2:f8:df:67:51:aa:3c:dd:fb:f7:4f:5c:b4:
04:0f:b7:29:52:fb:9f:1d:56:3a:9a:06:ce:e1:0d:74:0b:bb:
ff:3b:98:46:ca:de:72:7a:25:40:65:dd:72:1f:57:f5:e1:0d:
e6:74:20:e9:5c:ca:84:97:cf:24:6a:7d:55:16:dc:8e:66:ce:
b0:b2:b1:57:e1:ff:2b:7e:02:d1:43:5e:e2:4e:d6:a5:b4:f9:
03:20:be:b4:9e:14:e3:b1:c2:73:b1:2f:b0:b8:bc:49:d1:90:
67:31:56:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:58 2025 by rpki-client