Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft
File: 5vOOPoarVh-g3TywmnDWGyykR0A.mft (raw, json)
Hash identifier: YD2VB/0JpvkXdX66yB0/hbHAgUzAP6AGfQEy7GUG7cE=
Subject key identifier: A9:22:7E:06:D8:8A:42:01:5C:7D:33:55:6D:35:2C:E0:93:04:17:AA
Authority key identifier: E6:F3:8E:3E:86:AB:56:1F:A0:DD:3C:B0:9A:70:D6:1B:2C:A4:47:40
Certificate issuer: /CN=e6f38e3e86ab561fa0dd3cb09a70d61b2ca44740
Certificate serial: 0194BC3C54935C67E78B2E9A831132F68AA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vOOPoarVh-g3TywmnDWGyykR0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft
Manifest number: 01D0
Signing time: Fri 31 Jan 2025 12:00:57 +0000
Manifest this update: Fri 31 Jan 2025 12:00:57 +0000
Manifest next update: Sat 01 Feb 2025 12:00:57 +0000
Files and hashes: 1: 5vOOPoarVh-g3TywmnDWGyykR0A.crl (hash: NhfgQ3FmVLZawtpMpiS9zQno5AKYopuZgs0j3Jxfr2w=)
2: l3aNToPytPwYHgxWfH_Fxe7l9-8.roa (hash: rud0x/u1K9V6C61gkvZO4dPUmEXcZ8EJf2+cgfvlR5g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:54:93:5c:67:e7:8b:2e:9a:83:11:32:f6:8a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6f38e3e86ab561fa0dd3cb09a70d61b2ca44740
Validity
Not Before: Jan 31 12:00:57 2025 GMT
Not After : Feb 1 12:00:57 2025 GMT
Subject: CN=a9227e06d88a42015c7d33556d352ce0930417aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:82:77:68:bf:f3:49:34:cd:13:f2:a5:41:f5:
59:74:b4:0e:fc:fa:00:4d:cf:0c:be:13:ba:ee:22:
13:59:7a:a4:fc:88:36:9b:1e:ac:d1:b7:19:8f:27:
23:e7:2f:4e:58:7f:df:0a:ff:d1:50:48:a3:e5:da:
a8:85:ac:a6:cc:c3:82:43:b7:53:2e:60:d0:b0:50:
41:a4:75:62:ea:fd:13:e0:c1:44:00:b5:94:60:e0:
f0:10:b1:7b:e1:f0:57:85:a0:db:fe:8a:11:93:ac:
94:4d:41:dd:bf:b4:05:b3:c5:40:38:be:d4:76:8b:
c3:ad:ec:a4:4f:6c:8b:cd:4a:f1:d3:29:f9:0f:5b:
3f:35:13:f1:af:70:26:84:c6:bc:a8:88:00:8e:19:
dd:bc:40:25:03:0f:69:93:98:53:ac:6e:5b:73:f4:
d1:c5:31:4b:c9:7b:94:3f:4b:6b:f4:7e:bf:74:29:
c5:ed:de:17:74:55:4e:b2:e0:1b:c0:29:0c:17:29:
e1:67:08:65:a7:ad:23:34:f5:c0:80:39:6e:70:b0:
55:1c:ef:c0:e1:0a:b8:2d:19:e3:9d:e5:a5:ca:94:
03:4f:34:10:a4:04:5b:4c:76:ba:08:88:f0:9c:f9:
56:f5:e0:a5:51:12:87:cf:10:e9:9e:a2:a2:02:7a:
cd:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:22:7E:06:D8:8A:42:01:5C:7D:33:55:6D:35:2C:E0:93:04:17:AA
X509v3 Authority Key Identifier:
keyid:E6:F3:8E:3E:86:AB:56:1F:A0:DD:3C:B0:9A:70:D6:1B:2C:A4:47:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vOOPoarVh-g3TywmnDWGyykR0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d1:2d:6f:89:7c:cc:d5:56:e0:ff:38:78:60:e5:99:d1:0f:
44:99:f1:87:c3:2e:be:26:e4:76:98:91:a4:8e:14:8f:d6:4a:
54:d4:1b:ec:fd:f3:63:37:9d:cc:47:7a:87:57:58:15:98:1f:
a9:eb:f1:f2:4f:78:bc:d8:e1:59:eb:67:d2:ab:ac:df:a4:e4:
b2:d5:00:8b:f4:cd:6b:ce:64:e1:a1:5d:12:da:ef:64:74:b5:
90:3a:4c:f9:72:f0:6a:7b:da:ab:3d:0c:c0:a0:e1:e5:a8:b8:
b6:23:5c:5c:5a:dd:1e:d6:cc:e8:18:b1:22:e8:60:a1:30:20:
7c:6b:ad:d1:6c:f5:d5:50:b7:27:bf:f7:c6:91:18:80:88:9f:
77:c9:d8:37:a6:a3:da:9b:c5:db:db:c6:8a:55:92:70:f7:f9:
bf:1c:43:eb:ac:1c:f1:2b:43:83:c7:58:60:6a:f3:dd:fd:39:
0c:f2:57:77:47:a5:cf:ac:31:bb:1d:e0:8a:79:f8:ea:db:f6:
74:16:2a:26:c2:d3:86:71:8a:3e:8d:08:17:c6:53:a0:41:de:
d9:d5:0b:86:a4:f8:39:e0:a5:ae:e2:f5:ef:ed:2a:11:91:b3:
1c:0f:c2:e4:fb:1e:ff:41:60:e3:91:6f:5d:6a:67:8b:72:a6:
22:e5:42:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:22:36 2025 by rpki-client