Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
File: 5q1QzkYdtcs3pYPnKbcVSZjssRc.mft (raw, json)
Hash identifier: M1rp4uqlBrNkGlI2xyxk306toGc743Ww4ojgVUG7b+M=
Subject key identifier: F7:6F:7E:60:27:33:76:3A:DE:84:97:18:F5:23:67:E0:FD:11:84:3A
Authority key identifier: E6:AD:50:CE:46:1D:B5:CB:37:A5:83:E7:29:B7:15:49:98:EC:B1:17
Certificate issuer: /CN=e6ad50ce461db5cb37a583e729b7154998ecb117
Certificate serial: 0194BBCDD7136427D7C5A5760CEF8A0ECC58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5q1QzkYdtcs3pYPnKbcVSZjssRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
Manifest number: 01DE
Signing time: Fri 31 Jan 2025 10:00:16 +0000
Manifest this update: Fri 31 Jan 2025 10:00:16 +0000
Manifest next update: Sat 01 Feb 2025 10:00:16 +0000
Files and hashes: 1: 5q1QzkYdtcs3pYPnKbcVSZjssRc.crl (hash: 7ZOOeM5GBE87/YXWRhVxJ0t36W+Nfa52QEqD0RUVhVg=)
2: IGFfOsfuRBLRoDQXZrvrXPV6GDg.roa (hash: GBdaIeCW55nvw4wNP3jzu/1bBBTCqNE/C3I0UV/65Vc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d7:13:64:27:d7:c5:a5:76:0c:ef:8a:0e:cc:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6ad50ce461db5cb37a583e729b7154998ecb117
Validity
Not Before: Jan 31 10:00:16 2025 GMT
Not After : Feb 1 10:00:16 2025 GMT
Subject: CN=f76f7e602733763ade849718f52367e0fd11843a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5b:ec:7e:49:05:b1:6f:93:4d:94:5e:41:48:
c7:c8:a5:93:a4:c1:5f:17:c5:6e:60:ad:96:90:b6:
c0:49:81:ca:a1:1f:c8:94:65:70:c8:d3:98:59:b5:
5b:8d:b1:4d:18:0c:9a:da:a4:a8:38:32:bb:16:aa:
a2:1b:91:bc:00:46:a6:34:89:c7:f8:3f:ed:b3:fe:
23:95:94:e8:c3:33:da:c2:e6:a9:3d:d2:1b:2f:7b:
f0:96:56:5b:70:ed:ff:61:5e:4f:2d:be:d2:35:97:
95:88:4c:5f:c0:ca:6c:80:39:52:a0:c9:52:c3:91:
e1:23:36:17:4b:e6:1c:76:10:e5:5c:35:e5:94:18:
76:58:d2:32:30:79:03:b0:08:f6:dd:d5:4a:b9:10:
0b:fc:d1:51:69:32:af:38:58:8f:fb:f3:44:db:7b:
fd:30:90:7b:7f:41:36:e0:95:7f:75:f6:d4:94:3e:
08:a9:95:12:27:88:73:ed:20:bd:b2:9b:95:ec:a5:
6e:7d:f6:c7:78:db:17:c7:e2:53:9b:a2:24:cc:30:
1f:d2:45:69:ae:4b:26:62:12:eb:d3:b3:19:d9:92:
2e:0c:6d:65:05:a5:4a:e1:c8:74:05:30:d5:90:c2:
ac:2b:53:5b:d1:c8:a4:0c:49:d7:de:37:93:3e:28:
e7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6F:7E:60:27:33:76:3A:DE:84:97:18:F5:23:67:E0:FD:11:84:3A
X509v3 Authority Key Identifier:
keyid:E6:AD:50:CE:46:1D:B5:CB:37:A5:83:E7:29:B7:15:49:98:EC:B1:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5q1QzkYdtcs3pYPnKbcVSZjssRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:4b:53:09:5f:c4:a9:be:22:6d:34:a7:63:2f:7d:c5:9c:56:
df:ef:c4:31:6a:ea:a9:98:6a:c7:f4:bd:1f:52:69:23:30:42:
6c:be:89:f4:6f:5c:ac:f6:d4:b5:4b:75:60:9e:b5:d2:85:a4:
2c:6a:0f:06:40:20:f7:f7:4a:32:ff:68:6a:2e:87:10:57:c9:
50:0d:1b:50:63:54:7a:a8:35:16:ed:88:c0:9a:a4:e0:6e:52:
d3:9f:69:0a:06:64:c6:8c:7a:33:47:58:6a:5e:a5:2c:1b:11:
ad:1f:74:a2:c2:ef:b4:31:ce:3b:3c:3e:38:8d:76:d7:88:bc:
62:e7:7c:22:1b:6c:97:8c:ee:35:a8:75:1e:05:0f:c1:7d:9b:
95:6c:57:cf:58:43:27:c6:97:86:0c:4c:73:77:8f:9d:9c:e6:
81:2a:11:c5:12:b3:b5:f0:70:9a:09:c5:a9:b1:14:f1:16:d2:
46:f4:05:53:7d:49:1c:f0:81:2a:40:bd:29:88:d0:82:0a:b7:
9f:a4:92:38:81:34:8b:56:5c:a9:cf:a0:1e:b3:ac:da:a3:73:
b2:80:a6:92:64:95:81:74:cc:a8:1d:06:65:f9:4f:48:b9:32:
28:e9:aa:ca:23:73:fe:56:c0:d9:e2:61:dc:76:18:f7:e9:0f:
27:7f:61:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:38:01 2025 by rpki-client