Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
File: 5nXaCc0660yTfGP1NfM_1X0MIZE.mft (raw, json)
Hash identifier: o/DDHihNnaN9jTlCvHr5bmsn94hqhuYCF5mHC+fLjP4=
Subject key identifier: 0E:9F:88:FA:EB:32:5A:33:80:BC:4B:55:63:50:55:D5:46:D4:C6:33
Authority key identifier: E6:75:DA:09:CD:3A:EB:4C:93:7C:63:F5:35:F3:3F:D5:7D:0C:21:91
Certificate issuer: /CN=e675da09cd3aeb4c937c63f535f33fd57d0c2191
Certificate serial: 0194BC04E90E620D6CC8A191AA861F3AA3B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
Manifest number: 1256
Signing time: Fri 31 Jan 2025 11:00:25 +0000
Manifest this update: Fri 31 Jan 2025 11:00:25 +0000
Manifest next update: Sat 01 Feb 2025 11:00:25 +0000
Files and hashes: 1: 5nXaCc0660yTfGP1NfM_1X0MIZE.crl (hash: ENygtuyVXAJnJzrCzyqDcMzfMBAZ1ytWQgEW55uZWco=)
2: oxEuvUfcJ-buwPGzC9O9kYsePss.roa (hash: CDgIKWYLWk0SZTYTZrPpXT0JXuPlKzi9XhIJznqGoHY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e9:0e:62:0d:6c:c8:a1:91:aa:86:1f:3a:a3:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e675da09cd3aeb4c937c63f535f33fd57d0c2191
Validity
Not Before: Jan 31 11:00:25 2025 GMT
Not After : Feb 1 11:00:25 2025 GMT
Subject: CN=0e9f88faeb325a3380bc4b55635055d546d4c633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e2:eb:76:d3:64:9a:94:8a:ab:84:29:16:62:
52:e5:46:63:f2:81:72:00:0b:4b:2e:ad:55:f6:dc:
67:26:cd:5c:40:40:8b:4f:27:0d:58:7a:ee:ea:59:
df:ac:a9:14:68:5c:a1:cc:34:df:a0:a2:d4:91:47:
ec:12:a6:3e:87:38:6d:18:18:db:40:40:a4:ec:dc:
44:ed:f3:04:fa:c0:cf:07:e0:48:fb:0a:7f:e3:3a:
dd:ba:16:fa:70:7b:1f:a2:94:6b:3b:b6:2a:37:91:
b4:89:ff:50:8a:7a:8a:6c:84:09:38:c6:13:12:b7:
04:15:85:61:ac:ed:b2:e0:b2:7e:9a:03:62:e0:03:
ed:08:14:f1:6c:2d:2a:10:6d:df:83:c1:4d:7d:2a:
49:66:a5:21:bf:03:35:d7:4f:23:b3:ce:c6:ff:96:
b1:7e:01:d7:ef:fe:4d:15:21:f2:53:c3:1a:b0:a9:
4d:07:f8:4a:69:93:79:a9:78:f7:62:d0:1b:0e:68:
4d:7b:55:de:11:7c:38:78:ac:8e:e8:f1:53:d9:f4:
ff:60:95:3b:84:3d:c0:9a:39:bc:c3:3b:bf:58:52:
32:3d:3a:d4:74:38:53:a5:23:c1:5c:bf:f9:45:96:
12:7c:0d:a4:1d:fe:1d:10:31:6a:0e:ab:3d:67:bd:
84:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9F:88:FA:EB:32:5A:33:80:BC:4B:55:63:50:55:D5:46:D4:C6:33
X509v3 Authority Key Identifier:
keyid:E6:75:DA:09:CD:3A:EB:4C:93:7C:63:F5:35:F3:3F:D5:7D:0C:21:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:46:ac:e2:10:f2:37:0f:d2:57:ac:ac:e1:f2:51:c4:aa:63:
a1:53:c3:81:b5:af:dc:83:54:e8:23:09:f8:2a:8a:c9:54:41:
c3:a6:53:74:85:06:d3:0a:1f:38:72:c8:96:c8:25:4f:4d:cd:
03:b8:dc:a3:40:bc:5d:6b:05:00:ad:0d:4f:ec:8c:62:46:cc:
98:ef:e5:dc:12:75:b6:c2:7e:fa:98:10:d4:e9:e6:59:84:54:
58:f9:d5:41:ee:f0:00:86:e3:d3:fe:a0:1b:d6:b9:f1:4f:44:
7a:19:03:f7:f7:7a:07:90:c6:40:59:da:23:8e:06:0f:33:21:
97:74:11:b3:f4:d0:c5:14:4f:be:0f:51:49:f0:e7:80:f9:74:
c6:6b:52:77:b9:73:d0:a7:41:e1:4f:aa:b0:b2:cb:cb:bd:e0:
62:e1:b5:bf:ca:50:4a:6a:22:0d:3a:ee:52:67:7e:9a:51:f3:
d9:05:17:a6:f9:c5:67:2d:ac:2f:bc:7a:2d:70:63:38:b4:e3:
7a:f6:79:2e:b7:63:97:19:63:9a:00:55:b8:f0:ef:3f:54:a3:
3e:8e:c3:d2:42:c8:16:ba:20:60:18:32:17:1c:72:fa:b9:0a:
3d:2d:3c:bc:3f:36:30:e6:d1:a7:6a:f3:16:30:ee:cd:44:12:
68:4e:2a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:43 2025 by rpki-client