Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
File: 5oClYQES3yA5h_MvDl4VrTXnENI.mft (raw, json)
Hash identifier: IktcGJvkcm90toE1iCzE2THK+OrlsFbCs45rmXEYggc=
Subject key identifier: 70:74:B2:5B:F1:25:3E:7D:08:F9:E6:C2:48:5C:4D:BE:4E:C3:84:8D
Authority key identifier: E6:80:A5:61:01:12:DF:20:39:87:F3:2F:0E:5E:15:AD:35:E7:10:D2
Certificate issuer: /CN=e680a5610112df203987f32f0e5e15ad35e710d2
Certificate serial: 0194BCA9B2939B1E3AF2663B11224ADC3E6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
Manifest number: 0404
Signing time: Fri 31 Jan 2025 14:00:25 +0000
Manifest this update: Fri 31 Jan 2025 14:00:25 +0000
Manifest next update: Sat 01 Feb 2025 14:00:25 +0000
Files and hashes: 1: 5oClYQES3yA5h_MvDl4VrTXnENI.crl (hash: 8fFJvM5HvP6xufWrL5h1dB76cGNm9eMsKMlZDPuNX+c=)
2: DhNK6wzjByDnasFkDiVozXApAMA.roa (hash: axPPgHJK+DsZDTes1Z8jvmiFkJ86vZLUMhnI7D0ebHM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b2:93:9b:1e:3a:f2:66:3b:11:22:4a:dc:3e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e680a5610112df203987f32f0e5e15ad35e710d2
Validity
Not Before: Jan 31 14:00:25 2025 GMT
Not After : Feb 1 14:00:25 2025 GMT
Subject: CN=7074b25bf1253e7d08f9e6c2485c4dbe4ec3848d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:03:27:80:e8:71:47:b4:5f:06:1d:f9:c4:32:
21:7a:cb:a3:78:87:75:12:52:69:70:62:a8:01:26:
73:52:17:da:f5:ff:f2:53:dd:e2:3d:b2:77:97:79:
92:4b:d5:c0:67:0a:44:db:af:3c:26:a0:4e:f7:28:
b6:5d:2a:31:7b:6d:d0:e2:5c:57:63:13:96:f5:95:
87:0b:64:a2:3c:61:80:bc:d8:3f:19:16:72:be:e9:
3b:5e:81:c7:b5:cd:77:69:93:5e:d0:d7:63:2c:ef:
61:b6:b6:d7:eb:8c:32:7b:ae:46:bb:6b:0f:98:ab:
43:b5:52:d6:7a:d2:15:f7:fd:80:c3:f3:65:6b:d4:
b0:a8:41:84:03:5a:47:2f:77:52:b8:cc:d9:57:62:
af:34:e6:3f:98:49:4c:ce:31:f2:1b:ea:6b:c6:03:
54:60:b7:ff:35:1f:86:15:65:ac:c7:01:b5:1a:bc:
7d:af:fe:78:dc:ac:26:37:36:a9:d1:de:3c:69:f5:
56:fd:c8:ef:30:88:f2:73:64:d4:e2:a8:74:a1:df:
38:d4:6c:7f:7b:c6:cd:25:26:98:0f:38:82:f3:97:
96:db:bc:2a:eb:67:c6:c7:4b:72:99:5f:ee:dc:18:
55:2f:51:40:1e:3d:b1:d8:e3:be:83:2d:53:db:fc:
86:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:74:B2:5B:F1:25:3E:7D:08:F9:E6:C2:48:5C:4D:BE:4E:C3:84:8D
X509v3 Authority Key Identifier:
keyid:E6:80:A5:61:01:12:DF:20:39:87:F3:2F:0E:5E:15:AD:35:E7:10:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:0e:5e:8c:b2:c9:00:18:7b:18:7e:be:37:eb:84:cb:a3:26:
51:02:59:4d:ab:a8:10:ac:19:20:68:2b:d8:f9:35:b7:bf:58:
64:ce:4d:9f:91:4f:7a:6a:c8:1a:a1:2d:4e:89:be:54:28:1a:
1a:00:1e:09:39:7c:cd:de:7d:41:c3:f7:21:e6:d7:e4:a6:ef:
28:13:68:58:e2:dd:99:16:1f:47:f8:1b:db:5e:b1:35:68:96:
6f:eb:b1:e8:b5:5c:9c:37:e8:5f:62:68:30:ac:0b:19:2e:e8:
43:bf:d1:2c:de:47:0e:a7:83:37:c3:6b:c3:c7:70:ac:d1:2e:
4b:3e:48:a2:60:0a:ed:37:6f:80:6c:ca:67:29:0b:df:e2:c2:
6f:97:b8:e1:38:5c:dd:bb:fe:bd:f4:7c:39:18:8b:28:d5:a6:
33:69:ae:d8:07:96:c6:ae:7a:20:63:6c:9d:8e:ad:cd:b6:ee:
45:c1:7b:d6:76:e8:18:1f:5f:5b:e2:2b:67:49:98:30:7b:74:
01:7e:46:7f:15:60:3c:7f:19:b7:2b:61:82:03:ad:d5:e4:72:
0a:fd:c2:23:68:60:aa:89:8a:43:ba:1b:51:7c:40:06:40:9e:
3f:26:4f:31:47:e0:a3:40:31:11:8d:36:c8:45:6c:e4:36:ad:
8d:a8:7f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:17:33 2025 by rpki-client