Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
File: 5fmtISzWWrTuK46bP4uDPDkA6n0.mft (raw, json)
Hash identifier: Nqqxu6v57YHE0TRvD3L4MLcF2A8v8xEAKx16O2bF1BA=
Subject key identifier: 03:1B:30:18:62:FF:A5:30:A9:D3:34:02:2A:43:3B:56:40:1A:1B:4E
Authority key identifier: E5:F9:AD:21:2C:D6:5A:B4:EE:2B:8E:9B:3F:8B:83:3C:39:00:EA:7D
Certificate issuer: /CN=e5f9ad212cd65ab4ee2b8e9b3f8b833c3900ea7d
Certificate serial: 0194BD4E76E207C7D9CE396409AF00D353AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5fmtISzWWrTuK46bP4uDPDkA6n0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
Manifest number: 076D
Signing time: Fri 31 Jan 2025 17:00:23 +0000
Manifest this update: Fri 31 Jan 2025 17:00:23 +0000
Manifest next update: Sat 01 Feb 2025 17:00:23 +0000
Files and hashes: 1: 5SbPyjmIYXelitOmA1AVO3bhm0Q.roa (hash: 1XIxpyYBD9DDRIa0BTpbMKp2ZvPzaojB9NovyRazhxQ=)
2: 5fmtISzWWrTuK46bP4uDPDkA6n0.crl (hash: KT9eWnbpqcmCE+kMChh9d6doXQOvb9jgVTJhZUuNQQ4=)
3: 7HHw1TGIKZGT4OMQXJ2kcRpWokQ.roa (hash: MAqlIYjH1775SsM1oEUQoqGZ7ZtgZ752pYJj6tU1DkU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:76:e2:07:c7:d9:ce:39:64:09:af:00:d3:53:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f9ad212cd65ab4ee2b8e9b3f8b833c3900ea7d
Validity
Not Before: Jan 31 17:00:23 2025 GMT
Not After : Feb 1 17:00:23 2025 GMT
Subject: CN=031b301862ffa530a9d334022a433b56401a1b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fa:d7:ed:8d:01:10:2a:ab:d4:5c:e4:ec:7b:
a1:da:cd:33:3e:a9:48:1a:a1:7a:8b:ab:65:3f:0a:
04:24:c5:49:e1:78:2d:0f:a3:77:7b:82:4b:2e:28:
24:16:1e:fe:3d:08:e2:b7:0a:ec:c8:9f:3b:da:2e:
d0:05:1d:9e:e3:39:e9:f1:91:d2:b1:69:89:d6:a6:
f2:5d:0b:45:b4:f0:5f:d4:cc:bb:45:67:cd:8c:6b:
88:4a:ae:f4:0b:47:2d:5e:30:55:a5:96:22:17:d3:
4b:49:56:50:33:a9:69:9b:07:1f:4d:14:c3:9c:7e:
08:c9:f9:a5:71:60:fb:88:85:b9:da:c4:91:ac:14:
83:49:87:7e:e8:ef:0b:09:19:64:d4:a4:af:2a:fe:
a5:53:56:69:63:aa:64:84:7b:2b:ac:c8:a0:3d:d9:
82:94:b9:7a:6b:20:f9:18:10:24:e6:6b:2f:48:40:
14:bc:30:17:12:bf:5b:b6:08:a9:c6:81:e2:53:68:
ab:c5:05:c6:89:9e:c2:88:0c:12:f4:85:70:5f:b9:
41:bb:4c:9a:9f:23:e8:54:b1:d9:aa:4d:0f:40:61:
ca:80:7f:a1:14:ca:55:04:97:a8:ce:45:f3:10:a0:
2c:e4:ed:da:be:02:c9:f9:92:ca:f9:5b:7e:f0:ab:
db:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1B:30:18:62:FF:A5:30:A9:D3:34:02:2A:43:3B:56:40:1A:1B:4E
X509v3 Authority Key Identifier:
keyid:E5:F9:AD:21:2C:D6:5A:B4:EE:2B:8E:9B:3F:8B:83:3C:39:00:EA:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5fmtISzWWrTuK46bP4uDPDkA6n0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f80926-e9a9-41f9-95a0-9b813a2002aa/1/5fmtISzWWrTuK46bP4uDPDkA6n0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:d3:5b:20:93:8e:78:00:b9:14:ee:96:d3:27:0f:0e:d3:19:
14:09:cb:2b:29:2e:3f:41:61:88:05:e8:22:ce:92:1b:84:56:
a0:5f:99:cb:b1:fa:03:8d:6e:65:59:c4:b7:5d:db:11:0b:76:
d8:99:d5:87:60:96:29:18:2c:0e:22:37:fb:ee:1d:d5:8e:05:
79:31:6c:5f:6f:08:6e:8b:ef:d1:9e:78:b1:e8:04:cb:f3:58:
05:05:0a:8c:bd:c4:5b:af:c1:7a:fb:48:7c:d0:2c:43:e1:d2:
4b:a8:83:4b:db:0d:46:eb:a8:01:0e:53:34:8c:c5:dd:4d:37:
31:e4:ce:af:90:7a:34:0c:f8:78:1d:56:8e:63:a0:bd:ec:db:
0e:c1:82:16:21:0d:8d:69:fc:23:63:7b:37:31:39:ee:e2:0b:
4e:0e:54:c2:d4:10:5a:5a:61:fa:bf:b8:e0:c6:d9:01:eb:68:
1b:f6:4e:85:da:16:09:7c:e1:1a:ff:ae:a7:b9:cb:70:04:c3:
23:1d:66:29:02:38:dd:ea:39:43:36:e8:03:6b:b5:8e:48:75:
25:66:3e:4f:de:4a:6b:e5:2a:40:51:a8:a8:f4:7a:1e:ba:f1:
85:2b:15:75:16:12:97:ad:f0:5a:1d:c5:87:d0:04:94:af:a2:
31:82:e5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:55:11 2025 by rpki-client