Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
File: 5KnudPLZhMiKs7ma5x0LfHuvgVA.mft (raw, json)
Hash identifier: 6qHUY2O7ISHPRu0jUrZJZQE2jfqImgP6k0Zqg7idbxk=
Subject key identifier: EC:03:53:BD:71:5A:23:1E:C3:4B:64:43:A7:EF:04:60:FF:E7:5B:D9
Authority key identifier: E4:A9:EE:74:F2:D9:84:C8:8A:B3:B9:9A:E7:1D:0B:7C:7B:AF:81:50
Certificate issuer: /CN=e4a9ee74f2d984c88ab3b99ae71d0b7c7baf8150
Certificate serial: 0194BC04B959C6EDD7B8816772B54AA3E55F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:13 +0000
Manifest this update: Fri 31 Jan 2025 11:00:13 +0000
Manifest next update: Sat 01 Feb 2025 11:00:13 +0000
Files and hashes: 1: 1kmQygnKJuFomMWscO7_tmV5MPY.roa (hash: 1R7F/hqJ/U8XRXU5qTBNp/iBMwQ2HNOAJ68qC4TlDwI=)
2: 5KnudPLZhMiKs7ma5x0LfHuvgVA.crl (hash: tVZGVW+s4ZAZbqZN0IhuTP8dVl8H3Sn/xSggHPxYPv0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b9:59:c6:ed:d7:b8:81:67:72:b5:4a:a3:e5:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a9ee74f2d984c88ab3b99ae71d0b7c7baf8150
Validity
Not Before: Jan 31 11:00:13 2025 GMT
Not After : Feb 1 11:00:13 2025 GMT
Subject: CN=ec0353bd715a231ec34b6443a7ef0460ffe75bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e0:e8:82:3b:37:f6:85:f8:db:66:6e:89:5b:
c4:d0:de:3b:25:f2:78:ec:88:53:29:0c:3a:5e:84:
77:b7:6c:b2:f0:68:e7:c0:e5:34:ed:9d:fa:db:25:
85:41:3f:df:ed:49:5e:16:fd:87:97:ee:41:e2:b9:
23:cb:d7:a0:cf:41:c0:47:7d:53:cc:7a:fc:82:7b:
24:c7:cb:f1:ca:aa:ca:d4:f5:db:40:fe:54:f3:10:
8e:75:ee:24:6a:b5:46:7e:80:9d:b1:b9:23:6c:5b:
1f:92:1b:29:37:ea:ff:c5:2f:13:06:d5:fe:96:df:
32:22:dc:d5:11:91:77:18:30:cf:af:e7:35:97:02:
bc:b5:1c:a8:40:5e:7e:21:8f:38:75:b2:2d:a9:1b:
07:b6:79:62:61:e0:0a:ab:e0:20:3d:62:54:81:ff:
1e:9b:d4:53:81:48:c0:20:1b:45:8b:be:0e:78:8b:
62:a5:0b:dd:dd:67:fe:bd:22:1e:45:7e:77:2d:f4:
bc:2c:06:0b:d9:23:1e:00:87:5a:00:03:31:71:c8:
7d:60:45:a1:ce:e2:39:2c:93:18:43:0d:6e:1f:3f:
65:1c:e3:95:30:bd:b1:0c:92:c4:c9:76:3c:d9:57:
e1:45:84:2c:b3:01:34:23:dd:a3:d7:85:f3:53:7f:
cd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:03:53:BD:71:5A:23:1E:C3:4B:64:43:A7:EF:04:60:FF:E7:5B:D9
X509v3 Authority Key Identifier:
keyid:E4:A9:EE:74:F2:D9:84:C8:8A:B3:B9:9A:E7:1D:0B:7C:7B:AF:81:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KnudPLZhMiKs7ma5x0LfHuvgVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/eadc95-daaf-4776-9be8-d2c0be448561/1/5KnudPLZhMiKs7ma5x0LfHuvgVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:f4:80:cf:91:40:6c:3b:ed:8b:7c:e3:67:1c:61:4c:4c:56:
4d:c9:1b:07:f8:e6:d2:18:c3:63:a5:01:c3:cb:93:e6:33:3b:
40:f0:89:46:87:ac:fd:0a:5c:6a:a6:57:33:1b:82:e6:23:55:
1c:46:b2:61:4c:7d:c4:84:e4:7a:76:8e:3e:ca:34:25:08:f4:
b9:d5:30:ca:25:73:e9:26:14:a1:d4:93:0b:7b:90:5a:47:75:
3f:e7:c9:2a:31:da:2c:cf:c8:d4:55:56:0e:27:94:9a:3d:17:
b3:a4:be:c9:8e:7b:be:68:75:ec:ca:d1:9c:4b:59:86:9b:41:
23:d5:35:27:41:f1:79:8b:4c:ea:0e:e6:8e:1b:f9:01:cd:c7:
ec:0a:75:c5:4b:bc:b4:8c:6f:f5:c7:2e:7a:fb:86:d4:e4:fd:
6d:46:d9:14:f6:1e:ea:db:45:5d:60:65:9b:8f:06:ce:e8:ed:
98:90:da:3d:49:5b:bd:8f:9e:ce:fa:52:98:c2:67:98:5a:06:
a2:d7:b3:fd:3d:13:d3:61:bb:e9:ef:12:52:77:bd:24:a2:27:
cb:c6:73:3b:58:3e:d2:0e:ab:c5:3b:54:83:5d:30:0f:92:61:
b4:59:e0:80:3f:53:5b:b7:63:35:fa:fe:c0:31:d1:ec:7c:50:
8a:bd:e0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:11:32 2025 by rpki-client