Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
File: 5wn3YuCC6tPW1-TK4p77tNEvV14.mft (raw, json)
Hash identifier: m1fRrlrMuLpcB4AbBPVPAR0iI7yOqH1pq0xotJEu240=
Subject key identifier: CF:4B:ED:DC:1E:CD:CC:13:E9:16:FE:DC:82:00:D9:DE:B9:96:4A:6B
Authority key identifier: E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E
Certificate issuer: /CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e
Certificate serial: 0194BC0535D1AD910CAA02F182A2C5F3CC27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
Manifest number: 0A81
Signing time: Fri 31 Jan 2025 11:00:45 +0000
Manifest this update: Fri 31 Jan 2025 11:00:45 +0000
Manifest next update: Sat 01 Feb 2025 11:00:45 +0000
Files and hashes: 1: 0I90jYLDsjsh8A1WdLN05NbEjj4.roa (hash: Kf+mfo5G5myFzzGKcZGygmTNr3GGZjTxsLuEcsJyKBc=)
2: 5wn3YuCC6tPW1-TK4p77tNEvV14.crl (hash: 3grS0Dkfl1n3ITB+sMjUEsMe2XhwxMOLa/zdYS/Oh+w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:35:d1:ad:91:0c:aa:02:f1:82:a2:c5:f3:cc:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e
Validity
Not Before: Jan 31 11:00:45 2025 GMT
Not After : Feb 1 11:00:45 2025 GMT
Subject: CN=cf4beddc1ecdcc13e916fedc8200d9deb9964a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:87:d6:c9:72:30:b4:d3:b2:95:f1:44:19:e0:
1e:04:f1:c9:4d:59:92:3f:cd:bc:ab:08:0c:b0:94:
2d:63:30:d3:e8:9f:3c:ee:21:cb:bc:f0:6d:a4:07:
9b:25:75:6d:1a:c9:81:10:7c:fb:30:8b:ba:1a:c9:
61:e3:c0:de:7f:dc:8d:d6:3e:ff:8d:ef:ed:ca:dd:
d2:f0:f9:61:31:56:d8:fe:b2:04:81:7b:47:90:1a:
bf:6f:50:19:e2:f0:45:3a:5b:ba:5b:64:93:f5:7c:
76:d9:b0:ae:08:c5:7a:5f:55:f6:14:30:b1:5f:d2:
92:62:06:cb:4c:25:67:39:e4:2c:2e:13:9f:ea:4f:
80:1d:1d:28:02:b4:01:5c:4d:9b:af:d0:f0:c3:da:
22:17:6d:02:13:ed:59:8d:ff:e3:96:d0:53:e1:b2:
54:3b:38:f3:77:35:eb:fc:ce:16:6c:99:12:21:2d:
91:36:3f:76:aa:42:d1:8d:06:01:6d:87:11:57:94:
13:0d:a6:a9:05:db:94:4d:da:65:8a:08:90:b5:d5:
13:b7:d8:3c:8b:ed:3c:63:b4:ea:6c:98:3a:c4:c8:
21:39:db:ee:8e:e9:09:8a:02:af:15:69:aa:86:13:
de:97:9c:d5:36:58:09:46:52:5d:ae:9e:90:c0:26:
09:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:4B:ED:DC:1E:CD:CC:13:E9:16:FE:DC:82:00:D9:DE:B9:96:4A:6B
X509v3 Authority Key Identifier:
keyid:E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:c3:31:eb:d7:aa:99:52:3c:12:b2:e7:6d:07:9d:e6:97:98:
a9:fc:11:a5:87:7b:41:3e:1d:43:d2:7a:76:0e:06:db:5d:e1:
a1:78:43:da:47:c1:f8:cc:34:c8:b7:78:b8:01:39:39:2c:0d:
9c:cd:d5:73:8f:b5:37:a7:25:f2:c8:7c:aa:f4:9a:2c:e5:d6:
ec:c3:30:47:d7:e0:06:3a:4f:8e:9b:cb:70:e8:c8:d6:1f:aa:
1f:19:f9:9f:0e:26:e2:6c:8e:4d:61:94:dd:72:45:05:8f:1a:
a6:97:8f:dd:58:c1:ec:4d:53:f0:1d:92:44:dc:cd:47:ef:7c:
84:da:d8:d4:9c:38:63:5d:53:ad:55:21:08:62:7e:d9:8d:35:
66:3c:23:15:22:c1:0d:7b:ff:73:7b:39:85:01:1b:9e:6e:f8:
dc:7a:1b:97:89:8b:9c:0f:ec:9d:8d:a4:d1:7c:41:d1:77:34:
2e:6b:b7:35:2b:40:bf:4b:bc:8c:be:f9:1c:f7:61:59:e7:b2:
46:51:a9:42:c2:2c:b7:8c:62:65:9e:1c:bb:c3:96:db:be:d2:
82:2b:fa:d8:c2:cb:a5:bd:a3:c9:8c:a2:36:9e:41:fb:4c:5f:
b7:88:70:92:40:98:3f:41:50:47:2b:2c:46:6f:ef:fc:f5:0d:
06:70:a6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:14 2025 by rpki-client