Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
File: 5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft (raw, json)
Hash identifier: ZoaX93cqsSjl60G0gm/jiL4B5v3R6twpTqWvS4UE2Vc=
Subject key identifier: 9A:12:65:FC:63:B2:C1:FC:C2:C4:3C:CE:92:2D:AF:8B:96:F9:19:AD
Authority key identifier: E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70
Certificate issuer: /CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170
Certificate serial: 0194BC05063122BF174BFCCA8FCC7382094F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:33 +0000
Manifest this update: Fri 31 Jan 2025 11:00:33 +0000
Manifest next update: Sat 01 Feb 2025 11:00:33 +0000
Files and hashes: 1: 5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl (hash: 80xbSY5vpCaG7uYxpGBDqfpjuIWD/gnM/LW9emOYgTc=)
2: TmGH7yXkMz-v6gHvCr9qE37nKcA.roa (hash: n1u54C/BtvIrlKmaScJ2jkmbHT4HONn1UuTucKaDW6g=)
3: k7UwqFFBmprxDA56kDwgmZFvA3g.roa (hash: oLwFA32V9FgAocZGOyNmCc1klUCv8GcjZUVDNdla0Jo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:06:31:22:bf:17:4b:fc:ca:8f:cc:73:82:09:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170
Validity
Not Before: Jan 31 11:00:33 2025 GMT
Not After : Feb 1 11:00:33 2025 GMT
Subject: CN=9a1265fc63b2c1fcc2c43cce922daf8b96f919ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:07:09:8d:d4:63:42:94:a6:46:d8:25:35:6a:
74:9c:b1:e5:41:3f:93:24:19:d4:3c:a1:22:01:f8:
31:32:d7:04:91:28:05:c5:a2:24:e7:28:72:32:21:
fe:0b:81:e8:06:1e:9a:20:23:57:ca:3f:63:fe:c6:
b8:4c:06:f1:22:9c:1a:90:1a:81:7a:33:7b:a9:70:
41:bf:57:87:75:24:2a:8f:61:04:8f:51:38:1c:d1:
40:8f:6d:18:6d:4b:3e:a9:1e:16:be:80:fa:0e:ac:
ba:93:59:9d:03:9c:21:a6:7c:6d:b6:95:5c:82:4d:
8f:14:bd:b2:93:e6:9e:60:2e:12:a8:ce:d4:8e:d5:
ca:53:1e:c8:71:f0:19:c5:c1:3c:31:eb:fb:1b:e8:
fc:f8:61:07:cf:3a:eb:2d:0b:4e:1a:ed:49:be:23:
d3:58:39:ac:6a:b5:90:17:ef:eb:27:60:1c:fd:1f:
a1:96:e6:a9:53:68:6b:a4:09:e8:5f:d9:a2:3b:ae:
6b:d4:f2:a8:2c:cc:d6:ed:64:37:5b:e3:db:a4:8f:
b2:bc:23:24:0b:ef:eb:f3:48:68:86:58:b9:d5:64:
3d:f4:32:b4:f5:7a:fe:f8:f0:f6:48:86:16:8e:06:
b5:af:27:88:8d:a0:f8:ad:2f:61:43:d4:95:fc:76:
e8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:12:65:FC:63:B2:C1:FC:C2:C4:3C:CE:92:2D:AF:8B:96:F9:19:AD
X509v3 Authority Key Identifier:
keyid:E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ff:7d:6a:62:e1:78:10:50:c9:04:cf:21:5a:7f:58:aa:8e:
7e:ed:2e:20:04:f4:26:6d:b7:20:9f:44:30:24:a5:75:86:f6:
a9:4a:f6:51:a5:78:c0:13:68:62:19:c8:10:02:69:77:76:3f:
44:b5:d8:44:30:ac:9c:49:c2:d4:5e:ce:7c:d7:46:a4:e3:10:
43:c7:63:f9:b6:ab:b2:78:c5:e8:1f:9b:97:78:da:a5:b0:25:
c5:61:40:4d:11:f9:b1:a8:54:3f:9b:05:ef:2c:ee:33:eb:d3:
72:63:19:f7:b8:a5:ef:5f:1f:b0:21:60:6f:b5:5c:f2:a6:a8:
67:2a:a5:c4:b3:a4:b1:95:bf:51:7a:20:6b:0f:fc:36:88:f9:
d6:1d:c7:b8:12:0f:e7:68:0c:56:9d:a8:4a:73:5f:fd:a9:77:
e3:ec:1b:b9:79:56:41:72:cd:8e:be:02:ab:52:ea:59:6e:30:
24:b3:f9:19:e9:63:c4:36:99:fe:aa:49:cc:e8:c8:60:fb:36:
e7:64:bc:bc:98:de:48:63:d3:4b:09:19:b7:81:31:48:0e:ca:
01:e8:cb:4d:59:4c:50:4c:6e:69:34:47:ef:2f:8a:77:36:49:
9b:3c:83:18:28:63:37:c8:80:0b:8b:29:91:0f:66:bf:02:9d:
77:66:41:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:26:52 2025 by rpki-client