Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
File: 5NJxw_qQOlkP31SJlEnmmPLpxjI.mft (raw, json)
Hash identifier: dCPpbPNH3xD7EBjcA0MQKxmR+DR8J4JQvZ5p8WHSGrs=
Subject key identifier: D7:92:80:FC:7C:E6:5F:57:55:0A:99:94:CC:84:7F:ED:FB:4F:B4:6E
Authority key identifier: E4:D2:71:C3:FA:90:3A:59:0F:DF:54:89:94:49:E6:98:F2:E9:C6:32
Certificate issuer: /CN=e4d271c3fa903a590fdf54899449e698f2e9c632
Certificate serial: 0194BC3C5B046C4D1C6AFED7409D6374838A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:59 +0000
Manifest this update: Fri 31 Jan 2025 12:00:59 +0000
Manifest next update: Sat 01 Feb 2025 12:00:59 +0000
Files and hashes: 1: 5NJxw_qQOlkP31SJlEnmmPLpxjI.crl (hash: mw1rO4CFudl8Mj+d3C9+3gTFm6Ehlr+GEA8IteR4LXk=)
2: uY1QhTOWxV4UKC9D82RM9yb0zNE.roa (hash: Bvx8t4Oi0CQUF3Zey6rE/7ccr+hwq753xh5wAVW5P6Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5b:04:6c:4d:1c:6a:fe:d7:40:9d:63:74:83:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d271c3fa903a590fdf54899449e698f2e9c632
Validity
Not Before: Jan 31 12:00:59 2025 GMT
Not After : Feb 1 12:00:59 2025 GMT
Subject: CN=d79280fc7ce65f57550a9994cc847fedfb4fb46e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1f:e9:34:e5:da:ab:ef:51:3d:17:ac:d7:59:
d0:79:30:2c:d3:2a:45:99:03:c2:a9:7a:41:6d:bb:
7a:48:16:75:dd:db:c6:09:69:1a:ad:a1:fb:2a:b7:
b1:79:57:88:ff:83:1c:24:2f:8d:78:62:20:3a:d6:
ca:aa:d7:ab:d2:0f:8a:d5:ef:56:7e:e3:bf:15:e8:
05:27:43:42:e1:d1:92:35:10:f5:21:5f:13:a6:e0:
5a:f2:06:c4:bb:00:35:34:75:e0:c8:97:fb:da:a2:
20:fe:6d:42:f2:b9:94:5c:5c:9b:e2:dc:cb:74:a9:
10:86:a4:db:2f:43:e9:74:0d:a2:61:d6:18:ae:e2:
a6:e6:ef:e0:95:ae:28:e2:b2:e2:58:7d:54:68:a0:
56:4b:27:07:cf:f2:b9:c9:32:63:b9:c3:ec:c4:bf:
d0:14:f1:2e:cc:71:0b:30:f8:b3:a4:73:75:11:86:
d1:ce:3c:d2:84:e2:bc:58:c8:ae:a4:65:66:d8:07:
cc:5a:fa:05:46:e1:92:8f:a2:d3:54:77:4e:61:b9:
43:c8:fb:4b:ea:b8:ce:d3:f1:0d:a3:21:22:96:47:
e6:af:9f:67:91:b1:e5:5e:d2:00:6e:cf:eb:09:79:
58:62:85:d9:f1:05:f2:97:55:33:e9:f0:9a:dc:c1:
1b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:92:80:FC:7C:E6:5F:57:55:0A:99:94:CC:84:7F:ED:FB:4F:B4:6E
X509v3 Authority Key Identifier:
keyid:E4:D2:71:C3:FA:90:3A:59:0F:DF:54:89:94:49:E6:98:F2:E9:C6:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:27:7d:a7:eb:30:09:82:64:a1:ad:0d:e5:ec:81:ca:dc:b6:
dc:d9:9a:d5:c3:ba:21:40:33:13:8a:51:43:9a:03:76:87:48:
01:1e:58:c4:7c:ea:10:a8:d7:10:12:5b:de:ca:fd:87:bb:9d:
e5:59:90:e1:0f:44:43:81:1f:15:f0:d9:35:7f:74:f9:a4:c8:
f9:4c:5a:7d:60:67:22:33:72:f2:63:ce:98:37:a7:aa:61:97:
33:02:9f:93:47:c4:70:df:97:5b:93:89:01:15:34:30:2b:40:
c2:6d:aa:13:b5:24:c0:d2:b2:67:50:be:ed:06:91:2b:a2:45:
5a:fa:6a:9a:22:c6:18:a8:23:97:fa:d8:a2:c0:c2:9d:ed:76:
f9:45:1e:06:c9:f3:36:a6:d1:5a:19:e6:24:e0:bb:3f:3e:87:
b1:2f:2d:c7:dc:4d:40:63:fe:12:b9:26:74:91:87:45:67:19:
b9:6b:61:2a:41:38:9c:59:de:8d:61:75:0b:83:3a:23:3a:6a:
90:33:5e:c2:95:2d:3f:d9:81:44:89:44:ca:e8:3a:ac:54:36:
d1:7a:5a:b5:26:94:1e:a9:9c:c9:b0:10:fb:be:6e:9a:78:ac:
fe:28:a8:83:2e:83:1e:4e:21:36:1e:63:42:75:8d:e4:32:22:
77:e8:f6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:59 2025 by rpki-client