Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft
File: 5trj7-CjZ5faQ8vVj23_mcO73Y0.mft (raw, json)
Hash identifier: dbtq//vCecQRLcFzTwE14dAsF67JLWtTswEj9XWJPAA=
Subject key identifier: 06:F0:28:4F:0B:95:55:5E:C5:66:BC:F8:EF:96:9B:3A:A7:C4:1E:5D
Authority key identifier: E6:DA:E3:EF:E0:A3:67:97:DA:43:CB:D5:8F:6D:FF:99:C3:BB:DD:8D
Certificate issuer: /CN=e6dae3efe0a36797da43cbd58f6dff99c3bbdd8d
Certificate serial: 0194BD858C142904D4F4862A1B37D9740CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:33 +0000
Manifest this update: Fri 31 Jan 2025 18:00:33 +0000
Manifest next update: Sat 01 Feb 2025 18:00:33 +0000
Files and hashes: 1: 5trj7-CjZ5faQ8vVj23_mcO73Y0.crl (hash: 3/iomVhXkW9J+2+tvtB5vLTI6DlwrHFuQDUFel8/TCU=)
2: jtdGItGjIscVK6iUpNCTUSGRedQ.roa (hash: FnwkKHIg+SdV2PfeNPF4IQR2s2fhTwukNFGZU8AgQ9Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8c:14:29:04:d4:f4:86:2a:1b:37:d9:74:0c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6dae3efe0a36797da43cbd58f6dff99c3bbdd8d
Validity
Not Before: Jan 31 18:00:33 2025 GMT
Not After : Feb 1 18:00:33 2025 GMT
Subject: CN=06f0284f0b95555ec566bcf8ef969b3aa7c41e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c8:9e:e7:e9:21:92:f3:e4:46:54:4d:17:c9:
c5:7f:d8:d1:bd:5e:21:48:13:5f:4f:4b:a2:4c:ff:
e1:71:f0:61:7e:3c:9b:75:9c:e0:4b:76:00:54:a3:
d2:d0:65:01:cb:1b:5b:95:d1:6c:85:80:1b:ea:d7:
8a:c0:25:ae:88:85:75:a5:5d:5a:32:f4:d6:06:4a:
b5:04:44:da:14:94:ad:68:31:88:3d:3a:86:1e:ef:
5c:30:e2:e7:1c:ae:38:a8:9e:6a:42:d8:c4:de:8e:
15:60:1f:48:e1:78:0a:e8:05:72:99:a6:28:3d:2c:
14:34:22:99:2a:3b:37:b8:72:57:43:94:bb:11:61:
b5:9e:41:fb:62:72:12:b8:93:66:85:b1:67:6e:7e:
c9:03:07:3e:00:7a:ca:cc:a9:6c:7f:e4:6d:e8:2d:
cc:4f:91:56:2f:d5:28:76:b2:32:d4:53:5f:b8:82:
b4:e5:38:c1:1a:ca:b0:e9:01:7b:c6:70:a5:62:ab:
98:fe:a7:75:df:3d:bf:fc:ce:08:8f:45:81:d2:03:
16:40:70:eb:cd:f8:8b:56:94:aa:2a:e3:34:bf:32:
1c:61:0d:5f:6b:b0:1e:02:c6:d3:ef:4f:9f:48:c2:
fb:07:9e:02:62:b6:77:2c:aa:75:e3:65:af:13:44:
b2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F0:28:4F:0B:95:55:5E:C5:66:BC:F8:EF:96:9B:3A:A7:C4:1E:5D
X509v3 Authority Key Identifier:
keyid:E6:DA:E3:EF:E0:A3:67:97:DA:43:CB:D5:8F:6D:FF:99:C3:BB:DD:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5trj7-CjZ5faQ8vVj23_mcO73Y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d125fd-c39c-4272-8cad-6c2ffb4b61e6/1/5trj7-CjZ5faQ8vVj23_mcO73Y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:0a:3d:78:77:bb:18:d6:28:e2:f4:4f:30:c4:97:86:01:0e:
59:59:c3:2a:f0:23:cd:8c:95:70:63:77:c2:60:9f:c0:ef:e5:
41:83:26:34:2a:b0:b1:39:67:f9:09:5a:01:38:e6:9d:3a:83:
c7:f7:e7:49:a2:b8:d6:17:4c:1f:1b:56:52:4b:7c:f4:32:d2:
bc:5b:e1:05:97:e2:de:9d:70:2d:b4:4d:6a:cf:46:88:e3:00:
6a:f5:9e:aa:f0:7a:63:7f:7d:61:6a:3b:f8:e9:c4:9f:d8:a6:
67:af:be:b4:5a:1d:ef:6a:a0:a9:77:26:7f:77:d1:04:41:79:
0f:18:9a:5b:30:49:ac:19:7c:77:85:72:13:34:5a:f8:c7:a1:
05:c7:d0:67:bc:f7:7c:a6:14:79:7e:49:92:09:47:3c:33:4b:
e1:ea:75:cf:f0:78:0c:93:4e:52:5b:88:f0:59:a7:75:5a:75:
8a:ab:89:b6:ba:00:84:be:f2:06:82:55:bc:b4:77:36:85:2e:
ff:a6:17:d2:03:25:b4:5b:bd:a7:a6:5d:90:87:83:af:41:48:
a7:67:a8:22:11:a7:8f:33:a9:55:70:cd:d2:10:15:28:a1:18:
c9:fb:69:eb:9a:e2:6a:b9:fb:b5:07:dd:d8:83:7c:c7:f1:98:
e6:54:c5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:38:08 2025 by rpki-client