
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
File: 5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft (raw, json)
Hash identifier: A5RlrZ84PkMBuWOuybNJoUrZAzbBm+CxvQATyx/SVRM=
Subject key identifier: 9F:E0:5C:B7:F8:6E:8B:8B:77:E4:E7:39:CD:63:4C:C1:DF:9D:DC:2C
Authority key identifier: E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42
Certificate issuer: /CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542
Certificate serial: 0194BD177FB3D6C88F25ACE9B3D6F0250C1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
Manifest number: 0E9B
Signing time: Fri 31 Jan 2025 16:00:21 +0000
Manifest this update: Fri 31 Jan 2025 16:00:21 +0000
Manifest next update: Sat 01 Feb 2025 16:00:21 +0000
Files and hashes: 1: 5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl (hash: GPsDwaTBmHjcm/49dYz3WaNc6+mYYgmc42i0hb3XzfM=)
2: H6bhT27iuFLhHVqQgSnkWJ-ZJeU.roa (hash: i2LnQkjhZAFSNChfBlCEm3RTe0uFLiWtEs5W37IjKHk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:7f:b3:d6:c8:8f:25:ac:e9:b3:d6:f0:25:0c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542
Validity
Not Before: Jan 31 16:00:21 2025 GMT
Not After : Feb 1 16:00:21 2025 GMT
Subject: CN=9fe05cb7f86e8b8b77e4e739cd634cc1df9ddc2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:15:99:25:14:65:07:ca:e8:53:10:19:c3:44:
a2:81:f3:f9:04:6c:4a:e6:10:04:e0:49:49:d8:df:
a1:8b:a4:0a:32:d5:7d:fa:27:3d:39:79:83:7b:fe:
85:be:ce:39:24:bd:ac:db:c9:a9:34:5a:83:43:43:
65:b8:84:15:17:33:5c:11:6a:1f:cf:9d:71:15:75:
41:89:d6:23:d0:20:3f:0b:06:6c:00:f5:ce:08:40:
57:b4:fe:10:03:4d:83:14:da:68:bf:d6:4e:4b:46:
b3:5d:17:cd:9b:7d:8b:d1:b7:5a:62:89:8d:65:a9:
58:2c:48:4c:f1:3a:2b:5b:b2:1e:03:16:56:f5:2d:
6b:1b:a1:bc:22:01:bf:53:71:cf:2f:28:69:95:c9:
c6:ee:65:b8:68:19:14:d4:a3:02:fa:b6:93:d6:8f:
44:d2:3b:a5:59:7a:79:30:36:82:c2:32:59:08:4e:
9a:05:64:2a:57:34:82:02:26:d2:3b:6c:be:2d:bc:
3a:1e:a8:2d:b8:45:2a:51:08:b6:e3:dd:4c:c4:b1:
15:d2:53:b2:1d:af:e5:72:6a:69:98:fd:7a:4f:2b:
cc:d4:1a:4f:7f:50:46:41:29:a6:35:f4:81:64:4b:
40:91:79:95:4f:d7:18:24:a3:28:46:42:ac:dd:95:
93:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E0:5C:B7:F8:6E:8B:8B:77:E4:E7:39:CD:63:4C:C1:DF:9D:DC:2C
X509v3 Authority Key Identifier:
keyid:E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d1:b6:20:55:cf:86:40:c7:70:11:94:8d:4d:19:a3:47:78:
dc:29:4f:ba:eb:83:3c:fa:bc:b6:75:0e:f3:81:d0:6c:5b:3b:
fb:d8:3d:15:ba:38:69:8c:e9:08:8a:4a:5e:2b:69:31:a2:52:
53:ee:29:b9:e5:71:ab:ef:23:59:31:95:63:c3:23:dd:92:ae:
60:c2:20:71:8c:35:df:7b:fa:7e:bd:bb:ac:0f:49:04:10:34:
0a:89:08:89:53:93:cc:14:21:b1:d5:bb:4c:b9:ea:66:0f:a4:
93:a7:4d:6e:23:bd:41:02:90:55:7b:d5:8d:13:53:68:48:38:
b9:e8:17:fa:0d:e9:70:b6:42:70:c3:73:54:74:3e:27:4f:e2:
7d:c7:d0:bc:05:7e:31:35:39:1c:59:27:4b:53:e5:58:b9:7d:
54:55:97:10:61:df:7f:21:26:6e:e6:11:d0:76:ed:47:e1:f5:
be:02:c6:ab:21:39:9a:53:5f:87:7e:ce:4c:bb:83:9d:1f:42:
f2:d1:91:bd:90:b4:9f:74:98:3a:e0:e5:ae:dd:5e:93:95:ed:
da:51:a6:7e:68:09:78:07:92:cf:f5:fc:4e:4e:41:75:aa:9c:
0c:41:cf:6e:69:46:6d:bd:9e:39:66:29:64:39:34:2b:c7:22:
2f:57:34:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:29:48 2025 by rpki-client