Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft
File: 5Mx247VHf_1CoP5LjHg6rS-W_nA.mft (raw, json)
Hash identifier: s+OzwVV+/pktx0+shnaahKV0Y4c1kubo+e+hJpFY3Io=
Subject key identifier: 24:D9:C8:72:78:5C:FD:C8:57:6C:BE:9E:64:19:0E:63:B5:BB:01:46
Authority key identifier: E4:CC:76:E3:B5:47:7F:FD:42:A0:FE:4B:8C:78:3A:AD:2F:96:FE:70
Certificate issuer: /CN=e4cc76e3b5477ffd42a0fe4b8c783aad2f96fe70
Certificate serial: 0194BBCE60799A396107020B5C9681B98283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mx247VHf_1CoP5LjHg6rS-W_nA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft
Manifest number: 074C
Signing time: Fri 31 Jan 2025 10:00:52 +0000
Manifest this update: Fri 31 Jan 2025 10:00:52 +0000
Manifest next update: Sat 01 Feb 2025 10:00:52 +0000
Files and hashes: 1: 1tTKxE7bwQfchkwslQXxnYbzsJg.roa (hash: 5+EJxKuD23N+Q8WaFwzZJ+wyeA6DdNR0OHPQg7+6ADs=)
2: 5Mx247VHf_1CoP5LjHg6rS-W_nA.crl (hash: gjjLWPNiyDvXKFmfuWw/C9XPeFGJNwiAP2dOy1q9TsM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:60:79:9a:39:61:07:02:0b:5c:96:81:b9:82:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4cc76e3b5477ffd42a0fe4b8c783aad2f96fe70
Validity
Not Before: Jan 31 10:00:52 2025 GMT
Not After : Feb 1 10:00:52 2025 GMT
Subject: CN=24d9c872785cfdc8576cbe9e64190e63b5bb0146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:80:65:db:f8:24:45:1e:43:94:d8:b7:f6:1a:
b8:f0:6f:6d:c4:b3:24:a1:cb:d8:88:16:54:4b:eb:
b9:45:c3:aa:f5:c4:15:05:40:f4:30:ea:90:b2:8c:
28:8a:b9:bf:63:58:24:e6:fd:d0:b2:21:b1:a5:09:
b0:d7:f3:3b:63:a0:fa:7c:87:20:0b:53:d1:58:d8:
20:58:7f:cd:81:b7:95:50:67:c0:3c:30:97:bb:a5:
4d:c8:41:0b:53:18:f6:77:4c:f7:69:c0:79:76:19:
4b:fc:e9:65:b1:3c:7c:8a:89:35:c1:42:4d:6f:64:
c6:96:c2:ef:ce:e8:ff:7f:29:b0:a2:b4:e9:e9:ed:
5e:07:90:ce:d9:76:cb:fa:92:e0:39:fa:a1:6c:e6:
4c:fd:18:72:e7:08:6c:e3:2c:d7:2c:22:18:23:f1:
e7:3d:47:55:4f:42:06:d7:94:84:bb:8c:63:44:f5:
ea:1c:48:3a:62:1a:5d:f8:bf:4b:ba:44:93:59:0e:
41:9b:16:a8:b1:cf:94:21:b8:ed:15:1a:05:05:54:
1f:ae:42:0b:69:20:03:af:ba:48:04:ef:c9:3e:51:
25:9d:7c:1d:01:8d:4c:35:96:86:73:ea:55:7f:4e:
64:17:50:b0:01:84:ff:a5:03:e4:19:86:fa:89:17:
c4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D9:C8:72:78:5C:FD:C8:57:6C:BE:9E:64:19:0E:63:B5:BB:01:46
X509v3 Authority Key Identifier:
keyid:E4:CC:76:E3:B5:47:7F:FD:42:A0:FE:4B:8C:78:3A:AD:2F:96:FE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mx247VHf_1CoP5LjHg6rS-W_nA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:64:04:ae:d0:74:3f:e7:34:c3:41:64:ef:35:ba:df:e5:02:
8f:0e:f5:19:c8:7d:e9:5d:23:7f:49:e5:a1:55:e2:28:18:43:
76:c3:ef:0b:2e:83:7c:a1:5f:b3:a0:47:e1:93:1f:bc:8b:1f:
a3:c7:24:56:21:16:03:ec:5e:0b:c5:7f:73:56:e8:32:16:1a:
62:45:cc:af:dc:46:12:3c:37:9b:2a:c2:1f:58:3a:05:23:81:
bf:2e:c3:fa:68:34:1b:7c:c5:80:71:96:04:e2:25:f3:8d:1e:
43:56:11:f1:45:4b:90:3f:78:df:ee:45:b1:6e:08:24:0c:86:
fc:f0:2a:43:ad:16:bc:17:97:2d:e6:97:0f:74:f7:9e:bb:1d:
b5:a8:89:f3:47:b6:88:77:98:d7:3d:f1:f6:73:f3:de:bb:af:
0a:e4:87:c8:a2:d6:c6:69:57:09:17:59:60:6d:2d:49:d2:e7:
79:5b:27:0d:4e:f2:ec:a0:0b:bd:b7:14:d6:a1:de:f5:d4:65:
c3:a7:7b:bc:a4:55:57:5e:d6:0d:4c:3a:cc:b6:9f:df:2a:71:
04:18:47:cd:2a:38:42:73:4a:c0:10:17:33:2a:6a:e1:a2:b7:
3b:61:70:99:ed:f3:be:8b:e5:d4:b2:fb:a0:03:a6:c0:c1:1b:
a3:af:ed:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:19:42 2025 by rpki-client