Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
File: 5QxErpgedJLTuiHihHIIAYA5jWQ.mft (raw, json)
Hash identifier: AUBz4lyRGcnpkXTXCkty4rifeS0c2kZo4OzIsz4KDdM=
Subject key identifier: C0:89:5D:1A:B5:E5:F7:C4:C0:73:8A:ED:81:9A:FB:B8:3B:F8:EA:CC
Authority key identifier: E5:0C:44:AE:98:1E:74:92:D3:BA:21:E2:84:72:08:01:80:39:8D:64
Certificate issuer: /CN=e50c44ae981e7492d3ba21e28472080180398d64
Certificate serial: 0194BD4E5D55A74E27029E6E2D29A58D07C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 17:00:17 +0000
Manifest this update: Fri 31 Jan 2025 17:00:17 +0000
Manifest next update: Sat 01 Feb 2025 17:00:17 +0000
Files and hashes: 1: 5QxErpgedJLTuiHihHIIAYA5jWQ.crl (hash: N6Ybjs08XgwRQ3hPNMTTJv2JZO4ldWjTqnljVpOdJZU=)
2: XqJnQtK-Eb1fVOe5J4HfD-Z2VPA.roa (hash: JXjpjJMP71nmxtEw4MnCOZWcY+ewObU/MkJxejPuf3g=)
3: ZU5mIuhec-w4R0nc_UEougNeTzM.roa (hash: Ryu8faEPK4CmfRJ6AZyYHPiiRBpNAisMzS6dIeA5uz4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5d:55:a7:4e:27:02:9e:6e:2d:29:a5:8d:07:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50c44ae981e7492d3ba21e28472080180398d64
Validity
Not Before: Jan 31 17:00:17 2025 GMT
Not After : Feb 1 17:00:17 2025 GMT
Subject: CN=c0895d1ab5e5f7c4c0738aed819afbb83bf8eacc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:13:c5:9b:5f:24:ff:70:16:ef:2f:41:d0:1a:
23:83:1c:74:f7:fa:e0:5e:a4:a1:f3:64:1f:9b:b1:
9c:9f:a3:96:1e:c4:d1:68:af:2e:44:c5:77:42:f4:
2d:0a:ce:6c:4e:f7:5f:4d:72:ab:89:4c:ba:bd:79:
5f:c8:33:1f:11:5c:d1:47:d4:8d:ac:bb:fd:96:66:
db:af:13:6f:05:d2:93:52:9c:86:b2:c9:89:ed:3e:
a0:52:5f:09:46:7a:dc:8e:aa:3a:e1:3f:14:ca:8f:
f7:d6:03:ce:5f:fe:f2:0b:c6:97:38:9c:16:8b:69:
f5:5f:2a:e5:5b:1b:bd:af:0a:ca:45:6b:1a:9d:4c:
f7:45:ab:49:80:41:f3:c9:29:d2:dd:50:4b:cf:92:
53:14:37:cb:57:d6:0e:b1:22:8e:a0:cf:d1:e0:95:
9f:e9:67:6c:22:9e:4b:a4:2d:ad:01:be:c6:4c:c0:
59:92:38:3b:c7:ee:db:56:3e:dc:ed:1d:74:37:f7:
11:2e:d0:9d:da:ea:02:6f:4b:d6:90:62:ff:d7:ad:
9a:e7:b8:7a:3d:5d:07:b0:69:cc:4e:13:64:bd:20:
78:88:b5:c7:86:dd:72:96:85:7b:36:2b:5c:81:ec:
76:f7:f5:61:7c:b7:f2:b6:66:e3:dd:9c:53:0f:77:
28:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:89:5D:1A:B5:E5:F7:C4:C0:73:8A:ED:81:9A:FB:B8:3B:F8:EA:CC
X509v3 Authority Key Identifier:
keyid:E5:0C:44:AE:98:1E:74:92:D3:BA:21:E2:84:72:08:01:80:39:8D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:5d:02:90:98:e2:03:c8:01:d0:18:e4:ab:a5:99:a8:46:56:
ab:21:ca:96:2c:7c:b1:5c:27:98:f4:ae:3d:57:b1:57:4e:17:
e3:68:66:a6:7e:1a:5b:6a:25:47:c9:57:52:7f:bf:1e:51:d9:
98:2e:37:94:f2:d6:5a:5a:88:1d:d5:ed:e1:5d:26:39:52:10:
db:02:ba:f0:bb:7a:11:c9:bd:26:28:da:89:d0:ea:d6:39:e1:
d7:9d:51:28:4f:67:8e:f7:a0:69:82:17:f1:b0:45:7e:1d:e8:
cb:29:0e:83:ce:99:31:6b:19:93:3c:e9:1d:ed:87:8d:fb:ef:
da:23:28:b0:4c:ea:cc:db:b2:93:04:93:f6:fb:65:b9:d2:59:
4a:e2:3b:f8:e7:80:36:62:40:7b:b7:f5:f1:8f:66:db:f9:10:
93:69:e0:a0:1d:62:ad:d8:f2:40:6a:bb:78:49:84:7c:b5:f0:
c3:5d:19:ff:8f:1d:a7:2d:77:0d:6a:c3:d9:ff:bd:11:64:e9:
2f:75:c9:4c:a8:28:d2:4a:f1:b1:e6:6d:15:c4:ff:f5:69:f0:
d8:88:8a:33:7f:5a:44:90:79:32:03:50:e2:fc:5f:b3:67:b1:
27:91:3b:b3:50:51:b0:9e:64:ac:2e:fe:f2:9c:a8:d7:53:84:
bf:8c:58:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:03:22 2025 by rpki-client