Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
File: 5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft (raw, json)
Hash identifier: 1ePXohyqJEO/DXAKLKbBmlfdNSDF+lvOSx3zAL/OIcg=
Subject key identifier: F3:DB:9C:98:35:8F:BA:84:86:35:5E:7D:4B:FB:8A:03:F0:B9:EF:70
Authority key identifier: E4:20:2A:3F:C1:A8:E8:5C:9D:FD:2D:65:D3:19:A8:0D:D1:FB:91:7D
Certificate issuer: /CN=e4202a3fc1a8e85c9dfd2d65d319a80dd1fb917d
Certificate serial: 0194BD4E580286D7B6DE91E3A472FF3874AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
Manifest number: 0F83
Signing time: Fri 31 Jan 2025 17:00:15 +0000
Manifest this update: Fri 31 Jan 2025 17:00:15 +0000
Manifest next update: Sat 01 Feb 2025 17:00:15 +0000
Files and hashes: 1: 5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl (hash: +2eyKGdYH+66+d+QVu1n2hV3yUuakOkT2vUAJLiXmrM=)
2: n3Rb7e4leVAV_P84v_-RNrezbUU.roa (hash: nU0WMWHhxMdmntA6B1n8DiXNUPiYR3E/XJsxM+pnKTc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:58:02:86:d7:b6:de:91:e3:a4:72:ff:38:74:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4202a3fc1a8e85c9dfd2d65d319a80dd1fb917d
Validity
Not Before: Jan 31 17:00:15 2025 GMT
Not After : Feb 1 17:00:15 2025 GMT
Subject: CN=f3db9c98358fba8486355e7d4bfb8a03f0b9ef70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f4:38:7f:63:f5:03:67:6f:d2:32:26:5b:4b:
64:37:2a:0f:35:3c:49:f4:c1:20:55:6f:4e:ee:5f:
20:3d:af:95:44:d6:15:a8:a1:e9:85:af:7a:8b:71:
ac:30:7c:ff:e6:4a:95:17:0d:4a:de:4f:30:67:7a:
2b:0d:99:a5:db:b7:da:36:28:1f:6e:80:7e:da:c1:
01:a7:23:8c:d1:68:d2:07:3f:e0:06:78:4e:77:6e:
49:79:dd:f7:cf:4c:af:dc:d0:bb:d5:5f:12:44:f3:
dc:b2:61:ac:bc:bc:6e:05:47:20:e3:d9:52:6d:64:
d5:d3:a3:b2:f8:36:f6:5a:80:f2:9d:a3:40:e4:78:
36:24:e8:1d:bf:09:d6:9b:b8:f8:04:e2:40:50:2f:
a2:2a:04:b2:5e:00:1a:18:83:ea:63:38:d5:49:90:
2d:5d:7a:27:67:f8:b9:75:db:18:66:34:20:78:e4:
95:d7:40:85:e8:83:c7:f3:fc:e9:21:cb:8a:fc:59:
88:32:40:58:89:db:ce:a9:a1:9c:6a:a3:42:33:06:
31:44:0c:b0:a1:d6:de:6f:d6:41:98:eb:1a:ac:dd:
5a:dc:46:a4:4e:15:c2:0d:4a:be:94:a4:35:87:2b:
e7:b8:64:be:8c:3e:07:6d:38:5e:5d:dc:14:f3:df:
25:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DB:9C:98:35:8F:BA:84:86:35:5E:7D:4B:FB:8A:03:F0:B9:EF:70
X509v3 Authority Key Identifier:
keyid:E4:20:2A:3F:C1:A8:E8:5C:9D:FD:2D:65:D3:19:A8:0D:D1:FB:91:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:68:95:21:af:f4:05:48:1d:69:2f:10:ea:f4:bc:52:f6:97:
9d:94:ed:01:65:d4:d0:d9:97:d9:3e:10:1e:8f:65:30:92:6c:
80:34:e1:7c:25:c3:a8:e0:e0:14:8b:86:4d:49:c6:9a:7f:aa:
de:a3:5a:dc:25:5e:f8:62:ea:61:a4:ba:c0:66:bf:88:2b:b9:
9d:01:da:9e:63:1b:40:d3:8b:4c:f5:e1:7a:1d:19:37:a6:b2:
61:04:81:ee:8a:00:16:b4:4e:08:96:14:da:6e:89:b9:29:f9:
2e:4f:1f:81:7a:b1:36:28:7f:a0:bf:1a:77:2d:0c:12:78:a3:
a5:10:5b:66:3b:5a:63:da:3d:9c:e3:a1:d2:47:b4:de:34:fb:
42:cd:57:2a:ae:a8:2f:73:5c:1c:c8:37:43:c7:d3:6d:64:08:
83:0f:2b:22:1e:0e:76:08:a5:cf:6d:e8:a8:7e:2d:3b:e1:b5:
e6:27:72:81:16:b2:67:fd:34:cf:5a:b0:dd:53:46:82:b4:1d:
e3:96:03:d7:a0:fe:79:2d:df:40:b7:67:45:2e:c2:eb:89:90:
cd:2c:a4:70:09:30:bd:c6:f5:42:4d:bd:5a:29:4f:a5:d5:9e:
14:25:41:60:a2:7d:26:5d:05:2e:0c:40:ac:e4:f7:97:3f:80:
61:6d:13:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:45:08 2025 by rpki-client