Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
File: 5UGkwVK194bWI9hcQUZSmc3aM4k.mft (raw, json)
Hash identifier: UtVcMEChHnvlU7pckAXpjxPRVYFePAwP8qKs2rQnN5s=
Subject key identifier: B4:60:38:C8:69:2C:6D:C3:FD:B8:C5:2D:90:A5:91:6C:A7:97:45:63
Authority key identifier: E5:41:A4:C1:52:B5:F7:86:D6:23:D8:5C:41:46:52:99:CD:DA:33:89
Certificate issuer: /CN=e541a4c152b5f786d623d85c41465299cdda3389
Certificate serial: 0194BD4E599E6F7E49ECFB2F86E651F6A8D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 17:00:16 +0000
Manifest this update: Fri 31 Jan 2025 17:00:16 +0000
Manifest next update: Sat 01 Feb 2025 17:00:16 +0000
Files and hashes: 1: 5UGkwVK194bWI9hcQUZSmc3aM4k.crl (hash: fTOyPT1o+7yM/XXlhR7yu6HvuvIyE7u+hq9O6Nezm0Y=)
2: kenow9ooVwL0t4IuHSVvvQIsN8M.roa (hash: tJkXtVd1TBPTWkBnhiKcyLiHlQeoQgvy5+UbWV83vUY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:59:9e:6f:7e:49:ec:fb:2f:86:e6:51:f6:a8:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e541a4c152b5f786d623d85c41465299cdda3389
Validity
Not Before: Jan 31 17:00:16 2025 GMT
Not After : Feb 1 17:00:16 2025 GMT
Subject: CN=b46038c8692c6dc3fdb8c52d90a5916ca7974563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:55:12:02:fe:42:39:2e:a6:49:25:fd:0b:b8:
53:69:1f:de:e3:64:ba:79:ee:aa:ae:15:da:44:fd:
4b:eb:c5:d3:8c:02:ea:63:be:92:59:ae:f0:8f:38:
ba:2a:fd:3c:0a:6a:f8:b2:9e:97:6b:0e:b2:8e:23:
cf:02:d2:ac:b9:59:62:f8:54:6f:92:55:04:bb:4d:
9d:e5:d6:79:84:0d:3d:9a:9a:c0:12:86:92:86:7b:
03:0c:9e:a1:7f:de:8a:af:17:6a:bf:37:04:ff:9a:
3c:51:99:88:2a:f2:39:1f:56:ef:97:eb:4d:da:d2:
5e:25:6d:23:6e:a8:47:7e:ff:4f:1f:f6:82:2e:2f:
00:47:36:51:05:4c:c6:41:0d:c3:5d:02:31:b4:27:
92:2c:f2:12:e0:d0:67:a9:39:e7:fd:55:ab:21:06:
f9:09:48:a4:e7:4a:65:26:ed:e1:23:ba:2f:1e:1c:
12:ed:49:04:1c:42:93:69:7f:37:ea:41:54:cd:06:
55:78:99:7e:55:5c:e2:08:ee:3c:45:45:6d:8b:79:
2d:31:3b:7f:a8:9a:12:7c:f2:ec:91:1e:74:00:86:
3f:15:53:3a:90:97:35:b1:f4:65:86:f6:bf:88:b3:
4f:9a:26:b5:b0:37:6d:7a:70:31:71:a4:18:30:71:
f0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:60:38:C8:69:2C:6D:C3:FD:B8:C5:2D:90:A5:91:6C:A7:97:45:63
X509v3 Authority Key Identifier:
keyid:E5:41:A4:C1:52:B5:F7:86:D6:23:D8:5C:41:46:52:99:CD:DA:33:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5UGkwVK194bWI9hcQUZSmc3aM4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d71269-4b56-4572-a711-d84ecb2505c4/1/5UGkwVK194bWI9hcQUZSmc3aM4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ba:2e:e4:55:46:5f:bd:a4:85:89:a4:14:68:a9:3b:73:f1:
a5:54:d7:fb:55:8e:c6:d8:05:c4:f5:c8:22:61:37:c1:bb:a0:
e1:37:e8:03:3d:3e:04:76:de:81:4c:ff:9f:44:d7:6b:d4:4f:
56:ae:0a:89:3e:bd:5c:25:5b:53:bc:ec:23:cb:7e:9e:a2:66:
34:f6:f2:6a:7a:3a:74:8e:ba:ae:94:9e:41:7c:4f:6b:7f:27:
f3:81:e5:5c:62:4e:69:40:cf:cc:6f:77:86:88:77:77:df:c8:
2a:a5:70:08:05:df:b8:c2:79:1b:3d:cf:99:8a:35:90:85:4f:
19:a5:f2:b2:84:ac:69:a4:7d:3b:59:0b:92:b7:22:b4:6f:87:
73:98:a2:5b:7b:89:60:a4:10:a4:b9:3f:28:95:bd:15:aa:4c:
02:20:5d:aa:c5:48:1e:b4:a2:8a:bb:49:95:be:2d:9e:71:09:
a6:37:42:6f:5b:1f:b7:fe:94:6c:b5:3c:da:82:84:dc:65:1e:
01:43:0b:f5:c7:7e:f9:8f:c6:21:c1:82:aa:45:29:d4:b1:4e:
36:3a:ec:c9:d4:9d:41:04:27:ee:45:f9:fa:c8:1d:ee:39:31:
3e:99:44:fb:cf:32:97:8f:87:3e:3b:9b:05:f0:5a:fe:dc:2b:
71:75:15:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:31 2025 by rpki-client