Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft
File: 5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft (raw, json)
Hash identifier: Xi7s53OPJAaWSiQattRnnWVv9q+OeRtTdqUmt6uR1EY=
Subject key identifier: 5E:18:92:BF:99:98:3C:55:B4:60:FF:22:2D:33:8E:69:D8:B0:95:FA
Authority key identifier: E6:CC:65:C2:7C:23:29:8B:0C:5A:0E:0B:C7:4B:A5:10:34:A7:04:C8
Certificate issuer: /CN=e6cc65c27c23298b0c5a0e0bc74ba51034a704c8
Certificate serial: 0194BD8539370FCBAE83DAD32FF109DDEA2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 18:00:12 +0000
Manifest this update: Fri 31 Jan 2025 18:00:12 +0000
Manifest next update: Sat 01 Feb 2025 18:00:12 +0000
Files and hashes: 1: 5sxlwnwjKYsMWg4Lx0ulEDSnBMg.crl (hash: 0k31VIkUvAnvLUOL8AygVCYts9vqknJKhK41qZ0uuK8=)
2: xw1wxyD1fMrJTbgYiyQiF0uQJK0.roa (hash: TVVXOUY13A6nRw+KZkyghJdyM7alOs0fCSWauNlbS0U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:39:37:0f:cb:ae:83:da:d3:2f:f1:09:dd:ea:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6cc65c27c23298b0c5a0e0bc74ba51034a704c8
Validity
Not Before: Jan 31 18:00:12 2025 GMT
Not After : Feb 1 18:00:12 2025 GMT
Subject: CN=5e1892bf99983c55b460ff222d338e69d8b095fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:48:6e:a9:2b:c7:49:e2:69:de:76:be:b1:db:
30:5d:a5:32:5d:4a:14:aa:f3:0f:07:5d:d2:13:29:
f6:b4:21:3a:4a:a0:2b:5f:3a:b7:f9:51:09:76:a5:
81:55:8c:f3:22:7e:1a:09:f1:ec:34:e9:8e:77:69:
9d:a7:59:cd:23:d4:a4:70:54:6a:80:04:55:b9:69:
f6:22:14:a7:19:59:f6:ce:51:48:6c:88:3d:d1:b0:
ed:df:42:52:03:d3:04:95:20:b9:67:9e:50:98:81:
45:b3:16:4d:7e:8d:89:89:ff:68:9d:23:ba:c7:3b:
1f:09:7a:17:33:2c:18:0c:19:07:6b:e9:0e:23:c7:
07:52:9c:15:1b:ac:dc:c4:10:f1:71:b4:bb:b6:36:
0a:b2:60:fa:17:bc:22:a0:cb:0e:9c:2a:f0:e1:bc:
99:c8:3f:87:64:ef:b2:c7:fd:9f:c6:f1:cc:ed:50:
cb:ea:e4:b6:68:b8:41:98:89:34:53:a5:c8:c7:e0:
8d:b3:67:9f:da:31:3b:2a:21:31:32:6f:83:5f:6d:
54:69:a3:c6:a8:76:83:c4:38:f6:8a:e7:c6:69:f0:
90:0a:6d:ad:7f:29:93:2b:bf:87:5b:4a:7c:32:2a:
18:25:67:91:a7:9a:d1:cb:03:95:93:02:39:c1:67:
b3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:18:92:BF:99:98:3C:55:B4:60:FF:22:2D:33:8E:69:D8:B0:95:FA
X509v3 Authority Key Identifier:
keyid:E6:CC:65:C2:7C:23:29:8B:0C:5A:0E:0B:C7:4B:A5:10:34:A7:04:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0e8bad-121c-4a56-96cd-aacfc0dbed12/1/5sxlwnwjKYsMWg4Lx0ulEDSnBMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:cd:3a:2e:e8:38:f1:0c:f9:25:3f:87:23:2b:f2:e4:7c:b9:
05:a0:f0:01:b4:41:af:e6:a7:29:85:96:86:6f:44:9b:c5:fe:
a8:c4:77:1e:5f:33:ff:02:36:df:24:a7:c3:0d:77:82:8c:a0:
4f:31:a6:78:bc:2f:4e:d6:25:71:fc:77:5e:54:81:91:82:22:
99:88:56:09:99:66:39:45:86:d2:f3:14:17:d2:0c:52:ec:1c:
2e:c6:1b:39:d3:fb:9c:36:a3:ba:fb:b3:54:48:6a:7d:00:ee:
b9:06:dd:63:1c:9f:88:67:28:64:fe:91:2b:18:c1:28:70:29:
cd:23:db:2f:33:e6:13:fc:d5:de:48:92:8b:de:b3:9e:5f:2a:
65:79:2f:2b:4a:dd:f0:4e:6d:14:d2:46:3e:ec:65:63:ea:ed:
67:e7:bf:f5:6b:ff:dc:d8:d2:27:83:ac:04:e7:92:6b:a9:a5:
d2:1b:83:46:8b:e5:6a:b4:31:22:6a:08:c7:cd:97:d6:d6:99:
45:10:3b:b0:3f:18:8b:6d:5e:78:e7:af:0b:91:e7:83:c8:e7:
d8:0e:2b:1f:e4:c6:57:70:d8:1e:bc:7c:9b:08:d5:ec:4c:64:
f1:59:45:4c:da:e4:c9:70:a5:2f:dc:88:f8:9c:9f:f1:c1:8a:
69:22:e9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:48:51 2025 by rpki-client