Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
File: 5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft (raw, json)
Hash identifier: 3chd6IHVnwWAG+oYCFw6H8bnlUh/6JEhCxaY2pjf/Sw=
Subject key identifier: 5D:EE:38:D5:CD:56:D3:C9:68:D0:80:68:AE:F3:A2:5C:95:95:69:E7
Authority key identifier: E4:74:06:F4:98:2B:61:82:4C:8F:D4:4B:81:ED:E0:A9:9F:C7:24:E0
Certificate issuer: /CN=e47406f4982b61824c8fd44b81ede0a99fc724e0
Certificate serial: 0194BD17F95D1EC44B1882C5F68B8D18E5E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HQG9JgrYYJMj9RLge3gqZ_HJOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
Manifest number: 08DF
Signing time: Fri 31 Jan 2025 16:00:52 +0000
Manifest this update: Fri 31 Jan 2025 16:00:52 +0000
Manifest next update: Sat 01 Feb 2025 16:00:52 +0000
Files and hashes: 1: 5HQG9JgrYYJMj9RLge3gqZ_HJOA.crl (hash: NBt6T44B1REOyHyFTyD2oAGZZOcWUdtcKlgnPIupvEM=)
2: uzOfDn3na_0H4FMYAvULbyI0B6c.roa (hash: uAuwh9KcLGGG4HeIvB3vA//BXxot+F12ayTtv/6riqk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f9:5d:1e:c4:4b:18:82:c5:f6:8b:8d:18:e5:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47406f4982b61824c8fd44b81ede0a99fc724e0
Validity
Not Before: Jan 31 16:00:52 2025 GMT
Not After : Feb 1 16:00:52 2025 GMT
Subject: CN=5dee38d5cd56d3c968d08068aef3a25c959569e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:26:94:12:92:2c:41:d4:9c:09:da:00:a6:5b:
3d:2c:8f:d4:1e:7d:44:0e:aa:09:ad:0a:cb:18:51:
dc:8e:a2:84:a0:c3:40:dd:f1:dd:2b:e1:36:88:06:
44:dd:59:40:77:1a:6a:c1:f7:13:93:0d:65:f6:60:
09:5c:dc:be:d4:1c:55:4a:65:97:e4:ea:cb:27:3c:
ae:a7:15:44:88:fe:3c:4f:a1:02:d2:59:50:ef:48:
59:2e:e4:8c:98:d1:cc:b1:ab:8a:32:37:c5:ed:a7:
f5:72:d2:99:53:c1:9f:9e:ce:9a:9f:f5:fa:07:6b:
23:13:8f:0b:84:7c:df:32:6b:35:0d:ea:50:56:98:
9e:54:7a:ed:c8:d0:95:b1:38:2b:cb:3b:c6:ed:64:
4b:95:c2:f7:49:74:48:68:b1:95:8e:58:54:db:1d:
2b:20:69:15:a1:dd:0f:ce:91:aa:30:f1:80:a2:77:
f9:a7:3b:70:79:27:bc:fe:a4:f9:d1:71:b9:59:ab:
ac:9d:93:da:82:97:28:d2:4a:7b:58:33:f7:9d:ec:
2f:01:a9:57:ce:c3:79:ee:96:a6:58:75:af:04:b5:
0a:03:b1:71:f6:91:0d:99:18:0e:ab:84:51:fc:84:
4c:f8:87:52:81:c9:e4:56:56:a2:ea:49:fc:e8:67:
ef:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:EE:38:D5:CD:56:D3:C9:68:D0:80:68:AE:F3:A2:5C:95:95:69:E7
X509v3 Authority Key Identifier:
keyid:E4:74:06:F4:98:2B:61:82:4C:8F:D4:4B:81:ED:E0:A9:9F:C7:24:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HQG9JgrYYJMj9RLge3gqZ_HJOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/9d64ff-d4da-4dc9-8825-7118f8384c77/1/5HQG9JgrYYJMj9RLge3gqZ_HJOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a1:df:e9:ab:fe:c7:f8:5d:ab:a2:ba:21:6e:59:cf:cc:0f:
62:65:e8:a5:32:9a:36:e2:71:8d:bd:f2:57:dd:6c:c3:51:c8:
94:1f:7a:d9:98:c7:d8:11:d6:6f:89:61:ee:f2:66:0b:2a:a5:
e6:e7:18:14:39:8e:b9:37:b7:a4:f2:ba:3a:83:ed:0c:cd:5a:
a1:4a:23:ca:df:72:03:38:52:38:1a:44:ce:1d:48:0b:41:3e:
4f:0e:96:12:9a:ea:2e:02:5f:57:f6:aa:65:2f:cd:ed:d9:6b:
d6:48:5e:c0:86:9b:ea:f1:78:80:c7:5e:44:d8:6e:e1:5a:f2:
f5:93:c2:2c:01:4a:a3:4e:49:42:a3:a8:d8:3a:47:5f:20:43:
55:63:3f:8d:97:a2:54:79:0b:bf:73:df:40:00:3a:06:a7:ca:
2d:89:6c:db:f5:b3:2b:81:29:b4:61:ad:78:38:ba:1d:17:56:
ed:80:ee:d1:1e:12:ed:e7:86:25:f4:1f:f5:52:11:64:7f:a4:
aa:b2:9e:1a:bf:6c:08:d1:18:b6:d1:db:0f:88:98:19:04:ea:
e8:72:43:a6:02:af:7d:a6:73:7e:66:15:a8:dc:c6:bd:ba:38:
26:27:03:14:d7:85:75:48:b1:e7:e0:5b:c3:d5:e3:db:db:5d:
d3:83:2e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:10 2025 by rpki-client