Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
File: w5VnlKe5iREVrTr5RXPnlhsWS6w.mft (raw, json)
Hash identifier: wOYg/6cR1U2cvSETrUCjOwSiefd2S+5RYmBCn5mDR0o=
Subject key identifier: 5B:70:CA:06:E5:C3:AE:48:48:2A:72:20:96:50:00:02:76:84:99:F5
Authority key identifier: C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC
Certificate issuer: /CN=c3956794a7b9891115ad3af94573e7961b164bac
Certificate serial: 0194BD8573DC0EC1B95E549235F1E84498B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
Manifest number: 081B
Signing time: Fri 31 Jan 2025 18:00:27 +0000
Manifest this update: Fri 31 Jan 2025 18:00:27 +0000
Manifest next update: Sat 01 Feb 2025 18:00:27 +0000
Files and hashes: 1: w5VnlKe5iREVrTr5RXPnlhsWS6w.crl (hash: h61ZEOfQuc3BqAKQSe0MUsoz8ILW6mHHAmdpfplpT+M=)
2: xkG5C9EIic15eorp2Y7XuYpkcx4.roa (hash: n8lCWGpUNBjTbXMolc03Z+2CnsqT94fJsmtCrFN913U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:73:dc:0e:c1:b9:5e:54:92:35:f1:e8:44:98:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3956794a7b9891115ad3af94573e7961b164bac
Validity
Not Before: Jan 31 18:00:27 2025 GMT
Not After : Feb 1 18:00:27 2025 GMT
Subject: CN=5b70ca06e5c3ae48482a722096500002768499f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:19:30:ef:78:6a:45:8e:9b:c9:c4:70:b5:cb:
c3:7a:d2:5b:45:34:ab:e8:78:ca:8f:92:39:3f:0d:
d0:e9:39:a4:25:b2:af:17:c9:d6:37:04:3a:d1:bc:
60:0b:12:26:9f:ae:96:0e:f8:1d:de:e1:2c:23:6d:
c7:70:ed:17:66:38:ed:72:0e:3c:4d:48:55:64:33:
88:9c:d8:d9:c7:30:20:2d:bd:f3:c3:ef:d8:40:b3:
87:bb:86:d7:5b:4b:2b:89:aa:60:95:19:dc:71:77:
12:28:c1:e7:ab:e5:42:12:ff:67:b8:1f:22:05:60:
e8:83:a9:4d:61:e0:a0:b4:7c:6f:8f:5a:47:80:4e:
99:0e:01:37:c8:44:b9:ce:6d:d8:bf:35:2b:77:9a:
42:36:1c:bb:3c:53:f5:a3:3d:fa:a4:d0:2c:38:f2:
b7:70:e8:17:5e:f1:9a:0c:cb:7f:78:d6:c3:78:5f:
a4:2a:2f:17:c6:3e:83:16:9d:e9:98:3f:00:c8:5a:
e2:c2:cb:d5:0d:71:3d:d5:fe:5f:6f:8b:9c:d8:08:
a6:bb:11:3b:ef:85:d2:5c:c0:ae:21:91:55:de:96:
7a:6c:70:11:f7:49:41:ae:b4:da:80:6b:c7:2f:ea:
5b:6a:93:c4:1a:5a:a3:58:d0:f0:dc:11:d1:be:0c:
65:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:70:CA:06:E5:C3:AE:48:48:2A:72:20:96:50:00:02:76:84:99:F5
X509v3 Authority Key Identifier:
keyid:C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:70:96:4a:60:a8:02:6e:2c:19:a0:07:92:7f:06:8a:2e:2f:
f0:fa:ad:38:5d:da:e0:3f:44:31:c0:8f:ae:d4:9d:48:bd:0e:
71:53:c6:19:87:77:30:26:55:4d:4d:55:41:4e:6b:b4:60:ea:
69:fa:b3:62:22:a5:85:8a:2c:6d:1e:7b:db:6e:1b:87:b0:00:
2b:ef:d1:90:8f:be:44:c6:3c:e3:fd:73:d0:5d:5e:3f:82:fc:
05:7a:3e:9e:55:98:25:57:ec:59:b3:29:0b:e5:20:c3:86:f2:
f6:7e:b6:4f:1b:fa:3b:be:26:9a:9f:c0:e7:a1:14:9d:dd:99:
f0:35:88:34:63:ea:21:cd:dc:b3:0f:f0:2f:78:ea:bd:45:5a:
df:81:c5:d8:68:51:96:d2:ab:62:12:fc:de:c9:b6:4c:18:e9:
58:4d:79:71:9e:38:d8:ef:ed:9b:0a:0c:df:42:38:b1:b3:26:
43:c7:92:4a:19:3a:df:ce:15:fc:e0:b0:65:7d:dd:00:7c:8b:
de:fb:1b:79:04:2d:e2:98:1e:7c:a1:dc:2b:d8:92:45:38:6b:
3e:a8:82:b9:9d:45:1f:c2:28:24:5f:59:d7:93:88:51:11:ee:
16:2f:d5:56:0d:d8:4d:05:3c:91:63:a1:56:92:c9:fb:dc:4d:
30:51:d8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:05:55 2025 by rpki-client