Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
File: 5NsDAf4kYcbeP3GNhHy13HwAstI.mft (raw, json)
Hash identifier: 8CLdCuXt92JB181NyCsoYifNgnq4Kj7DcP1FwVsFRpQ=
Subject key identifier: C9:FC:6B:0B:9B:96:6E:7D:B9:9F:DD:B1:3D:3E:38:C6:3B:18:34:4F
Authority key identifier: E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
Certificate issuer: /CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Certificate serial: 0194BD4EA6822532257DC2C6F95E74814BAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
Manifest number: 1010
Signing time: Fri 31 Jan 2025 17:00:35 +0000
Manifest this update: Fri 31 Jan 2025 17:00:35 +0000
Manifest next update: Sat 01 Feb 2025 17:00:35 +0000
Files and hashes: 1: 5NsDAf4kYcbeP3GNhHy13HwAstI.crl (hash: Ybm1lqUNCRu6Ryz8vImBq85W6dIpf99V1M5jwGexq7s=)
2: _XjaBTnGilvxo492cNgJd58fijk.roa (hash: 9Lk0tQib0MF/TXW1qYNyMKPFWzbGaF3+CQ2+XIAZq0E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a6:82:25:32:25:7d:c2:c6:f9:5e:74:81:4b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4db0301fe2461c6de3f718d847cb5dc7c00b2d2
Validity
Not Before: Jan 31 17:00:35 2025 GMT
Not After : Feb 1 17:00:35 2025 GMT
Subject: CN=c9fc6b0b9b966e7db99fddb13d3e38c63b18344f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cd:b3:8a:6b:3f:3f:51:0c:1a:8b:5d:fe:1a:
17:29:49:3b:22:f6:4b:61:c4:05:25:56:37:e8:01:
04:44:b6:da:00:80:8f:64:03:5a:37:06:96:47:44:
a8:8f:2a:33:3e:76:8e:ff:f1:e6:fe:ee:fd:bc:97:
e2:a1:01:37:a2:4a:84:07:23:a9:a0:85:38:ed:d4:
dc:ca:34:4e:ea:57:ed:a5:10:5d:02:4f:5c:23:8c:
9f:25:7a:18:a8:27:97:ab:37:83:d2:37:99:cf:af:
7c:3e:1d:1d:a8:cb:85:fb:a6:b3:24:ba:e3:ba:2f:
f8:4c:c9:f7:ad:bd:7b:23:9d:d0:46:e6:5d:61:06:
ec:f0:cd:2a:72:54:54:a3:6d:c8:bd:60:21:51:15:
db:eb:99:20:85:42:0e:75:6d:51:d2:7d:28:a7:f2:
54:13:b1:c1:3f:32:eb:26:48:9f:09:16:9a:51:2e:
88:56:ec:7d:09:30:97:cf:8d:dc:48:b7:c1:9f:1d:
86:33:fa:da:ce:3b:5f:74:24:16:e5:f8:b5:12:cd:
f4:f2:67:44:dd:fa:0b:ad:fb:54:32:d7:ba:95:65:
24:33:d9:65:d4:6f:ca:56:f4:04:9d:38:80:23:15:
2f:e4:d5:14:be:57:87:d6:eb:6e:76:ed:83:54:7c:
5e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:FC:6B:0B:9B:96:6E:7D:B9:9F:DD:B1:3D:3E:38:C6:3B:18:34:4F
X509v3 Authority Key Identifier:
keyid:E4:DB:03:01:FE:24:61:C6:DE:3F:71:8D:84:7C:B5:DC:7C:00:B2:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NsDAf4kYcbeP3GNhHy13HwAstI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6e6405-dbe7-42b2-887c-ffdebec8f505/1/5NsDAf4kYcbeP3GNhHy13HwAstI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ed:92:d8:de:3d:98:98:55:c4:21:a3:9f:ed:04:47:d3:78:
9c:1a:f8:8b:10:4f:91:64:40:72:b3:73:61:73:9e:07:c4:0a:
28:ef:73:a6:ae:e3:f5:97:6d:e0:53:f7:b5:b6:05:16:82:82:
4d:bc:69:69:e1:ce:55:df:bf:c5:4f:99:91:68:50:e7:5b:4b:
4a:03:26:36:91:f3:1c:9a:6a:05:71:a4:a2:34:17:90:fe:4d:
53:dc:13:05:8b:a2:ba:70:55:14:ca:91:0b:eb:11:83:41:ed:
08:fb:fc:ec:e3:69:52:d6:55:f8:62:e4:38:4c:e1:d5:80:ea:
a1:c3:a5:d6:a2:cf:8f:c0:d0:66:e4:0b:1d:1a:27:ab:f5:0c:
56:69:69:9d:47:05:17:ac:b4:d4:e4:da:68:ef:4a:fa:b0:ff:
1b:d1:66:40:10:2f:6f:bc:69:cc:70:5e:57:84:59:b5:52:ce:
0a:a5:46:3f:b4:c1:a8:8a:69:09:cd:20:5b:02:94:aa:9f:e6:
9c:37:52:68:bb:0b:36:4b:0d:3c:e3:17:99:cc:6f:f7:f2:fb:
80:d3:0b:5c:49:f3:f0:c3:ff:93:31:44:f8:9f:78:80:32:a7:
3b:72:c9:e4:fc:e3:e6:da:b4:90:24:c6:74:70:aa:4d:df:eb:
ca:09:d8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:26:29 2025 by rpki-client