Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.mft
File: p5TNL5F05CFpMaEF2yYayqOTinw.mft (raw, json)
Hash identifier: 5Obn15H/k1SBXILI1R8oqU6WIO31qqtHiQFNLsfDvcU=
Subject key identifier: 73:87:2B:8C:45:A1:D4:2F:8D:31:F4:34:4B:4A:3A:7C:DA:65:47:CB
Authority key identifier: A7:94:CD:2F:91:74:E4:21:69:31:A1:05:DB:26:1A:CA:A3:93:8A:7C
Certificate issuer: /CN=a794cd2f9174e4216931a105db261acaa3938a7c
Certificate serial: 0194BCA994F5AE891E7E316E7823A767F0DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5TNL5F05CFpMaEF2yYayqOTinw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.mft
Manifest number: 1144
Signing time: Fri 31 Jan 2025 14:00:17 +0000
Manifest this update: Fri 31 Jan 2025 14:00:17 +0000
Manifest next update: Sat 01 Feb 2025 14:00:17 +0000
Files and hashes: 1: LIOiMNle0vsipx0T1V6aKGTU24U.roa (hash: 1KJvdL1wmyRojBeJyRsEQwf+KBGdNnm/q4xYqP+PnmE=)
2: p5TNL5F05CFpMaEF2yYayqOTinw.crl (hash: dn5YuxBM2oU+lCd+HyGlFoIS9ctgdJD6sjbbsGNzGYg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:94:f5:ae:89:1e:7e:31:6e:78:23:a7:67:f0:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a794cd2f9174e4216931a105db261acaa3938a7c
Validity
Not Before: Jan 31 14:00:17 2025 GMT
Not After : Feb 1 14:00:17 2025 GMT
Subject: CN=73872b8c45a1d42f8d31f4344b4a3a7cda6547cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:bb:3f:c3:76:e1:00:93:01:5a:9c:be:21:af:
63:8b:e5:7e:31:06:0f:0c:10:d9:a5:3d:0f:1b:8d:
f0:30:31:52:f9:f8:32:68:97:d7:95:0f:53:90:7d:
27:60:01:a1:24:f3:2f:93:f2:70:0d:30:b0:4a:4b:
3c:13:ba:cd:92:9f:b0:b0:db:82:4c:83:b4:56:32:
15:ee:da:aa:a5:f1:75:db:55:12:62:c6:e1:b8:ec:
0c:a4:cd:ea:99:cf:1e:58:cf:28:03:b6:f5:b3:3f:
a5:67:06:ab:b3:8b:d4:c7:a4:80:74:be:2d:0e:e0:
ec:0b:40:4e:47:80:48:17:bd:a8:a4:0f:8c:c5:06:
08:f8:35:05:6e:f7:2f:86:02:16:48:6d:5b:0c:af:
66:2d:a3:08:f6:bf:ce:f4:fb:4e:f7:98:5f:b9:2f:
30:34:61:2e:5d:6d:4a:39:bd:18:10:ab:2d:b6:a6:
eb:dc:c1:66:09:df:c7:7a:94:5c:44:ac:5e:55:46:
72:a5:29:3e:d5:5f:27:12:8e:ab:eb:aa:24:4a:05:
9e:a2:d9:f1:84:99:75:5a:73:05:7a:c0:ec:c5:9e:
16:04:73:c9:9e:a5:c8:ef:7c:d5:62:89:5d:5d:3a:
30:35:81:7e:fa:f9:ce:38:d7:8c:2c:97:cf:94:14:
ed:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:87:2B:8C:45:A1:D4:2F:8D:31:F4:34:4B:4A:3A:7C:DA:65:47:CB
X509v3 Authority Key Identifier:
keyid:A7:94:CD:2F:91:74:E4:21:69:31:A1:05:DB:26:1A:CA:A3:93:8A:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5TNL5F05CFpMaEF2yYayqOTinw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:41:9c:35:9a:24:8a:d8:d2:da:ce:5d:c9:26:78:e3:44:22:
03:cc:26:ec:3f:a1:95:63:63:f5:1b:61:50:1c:bc:bb:c5:77:
72:00:85:39:2b:d5:94:6f:61:e2:1e:dc:76:a2:79:38:e2:6f:
31:05:24:94:7e:f1:32:67:01:82:21:1d:15:b1:98:a4:84:c4:
a4:aa:75:e4:f7:5d:2c:a1:31:d0:eb:f1:2e:7a:67:99:6e:81:
4e:cb:67:83:4d:02:01:2e:c2:bb:1c:bd:42:c8:b2:a4:fe:5e:
4b:e5:ef:83:b7:8c:1d:ef:06:46:dc:d1:f8:4e:0e:7e:eb:da:
d6:26:a9:6c:a1:cc:3a:d4:b9:a4:3a:aa:1b:86:e4:3d:fe:b0:
de:3c:15:b8:1e:da:f5:22:63:de:66:c0:8a:67:2c:9a:3f:fa:
2e:4a:a3:a9:83:f7:35:fc:7b:4e:c2:37:85:29:77:cb:34:11:
23:f1:a7:04:54:42:d3:0f:7d:1b:e2:5c:b4:3b:d2:61:fa:ff:
5e:90:d6:42:17:72:28:88:12:0d:d1:7b:b1:58:fd:03:3b:0d:
3d:57:53:81:13:ee:4c:08:26:e0:20:35:1d:e8:01:02:f7:a6:
c8:e8:a6:54:6d:fa:01:97:15:15:f4:b5:ef:4a:4b:4e:03:08:
72:06:42:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:14 2025 by rpki-client