Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
File: 5TrZtDK7g9FBxIDe54vDX_R8tyw.mft (raw, json)
Hash identifier: FiAv4rYYgJsa3o8TNMoLs0p/YIwG8XjB4tTOKQB2MII=
Subject key identifier: 86:E0:23:05:F8:88:2C:65:BD:42:20:44:AF:2C:F1:A0:D0:DD:0E:2F
Authority key identifier: E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
Certificate issuer: /CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Certificate serial: 0194BC3BE3CE7D64E9D0566A0C8430861BB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:29 +0000
Manifest this update: Fri 31 Jan 2025 12:00:29 +0000
Manifest next update: Sat 01 Feb 2025 12:00:29 +0000
Files and hashes: 1: 5TrZtDK7g9FBxIDe54vDX_R8tyw.crl (hash: oHo7BdUry58k/3TXEdOkNhczBlWcKjJD9mRTtbc77Bk=)
2: FR3a7fbq59iIo0zAlvy5kzi1iZU.roa (hash: Z35c/JbC3hZCBf85VdNEpndC+c0TUxZMQxPjJSIsAQ0=)
3: suPxSfpNrh7z5_Ta2x6TjwnQ2sY.roa (hash: jrCuL3fpLVTl6VSsAmka/tgQrfuz/laa7SHWrZ9+ExE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e3:ce:7d:64:e9:d0:56:6a:0c:84:30:86:1b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c
Validity
Not Before: Jan 31 12:00:29 2025 GMT
Not After : Feb 1 12:00:29 2025 GMT
Subject: CN=86e02305f8882c65bd422044af2cf1a0d0dd0e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:49:3f:26:90:66:93:f9:88:8c:c5:9b:e2:34:
7f:fc:98:93:d9:0c:26:4d:15:2b:f8:e1:64:ec:d5:
7c:85:b1:58:6b:66:bd:ee:fe:c6:b3:50:13:31:43:
11:f8:0f:41:36:c0:ad:59:1a:d1:78:5a:40:71:6b:
8a:aa:1e:51:6e:01:a4:29:62:c0:dc:b3:38:4a:80:
9a:e4:4f:9a:2a:61:7c:2d:93:f2:88:06:3c:38:69:
0e:0a:61:c7:73:e5:df:c5:92:21:ba:e8:33:fc:72:
58:a4:0b:0d:71:2f:30:a9:5c:46:b1:61:bf:ed:e6:
7e:9c:86:26:2c:c1:f3:2a:13:b1:e5:b2:c4:5e:48:
d4:c7:ee:cd:9c:b9:d1:fe:a6:40:e2:ef:76:7d:55:
59:33:db:d7:e3:f6:6a:04:0b:81:46:aa:fa:f5:50:
88:c0:8a:7a:76:da:01:99:a0:38:82:22:52:61:eb:
1c:73:23:b4:0b:09:ec:e5:67:34:12:89:e2:57:7c:
c4:88:d0:e9:a8:35:bd:7f:29:01:54:47:0f:17:c0:
bd:56:15:e4:ed:0c:03:8f:39:e7:70:16:f9:76:4b:
7e:b0:ec:5d:02:29:3f:8c:7f:a4:5d:87:bb:20:23:
f4:81:80:35:43:30:02:a4:61:4f:b6:54:35:95:cb:
9e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E0:23:05:F8:88:2C:65:BD:42:20:44:AF:2C:F1:A0:D0:DD:0E:2F
X509v3 Authority Key Identifier:
keyid:E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:6a:c8:29:55:24:a3:21:4b:7e:64:82:f8:d1:b4:a0:4c:8f:
e7:00:4a:65:7d:12:e2:49:03:cd:f5:f6:0e:0f:3d:a8:a3:01:
08:fb:a5:36:52:42:55:e2:d6:8b:4b:98:ee:a5:e3:61:d1:53:
e0:ad:d1:79:f4:e7:f9:ee:c3:a0:bf:db:42:17:26:c3:77:63:
2b:29:88:2c:50:0c:10:82:4d:93:75:df:9e:95:e4:c4:19:95:
87:a4:11:85:33:c9:76:ff:09:4f:b1:f8:42:a4:a3:10:9b:ca:
b2:0d:8d:20:bd:68:35:5d:be:70:d1:06:b8:4d:4d:16:3f:28:
e4:0f:aa:00:07:d6:4c:76:1e:4c:2d:11:09:f3:69:e7:58:a5:
96:9d:21:c7:10:62:ed:ad:be:48:d0:72:28:49:39:ee:ce:5b:
2c:e6:27:88:a1:ac:63:33:7d:70:05:13:79:ca:84:b2:d9:5f:
b7:5e:6e:01:c9:a8:76:4b:07:84:39:ab:81:84:2e:6b:76:13:
8f:e8:62:1e:e1:3f:63:0d:f3:90:48:0d:4d:0b:03:b5:e5:7d:
d8:e1:28:a7:88:38:3c:53:b2:da:60:e0:f9:88:f8:d4:35:45:
07:f6:87:b8:b8:fd:8f:5b:fe:62:e5:c5:bc:6f:a1:55:d7:29:
eb:39:fb:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:17 2025 by rpki-client