Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
File: 5tF7E2U_8ePngi6x5eChf01PeIE.mft (raw, json)
Hash identifier: 2fNr6mQp89y1KlVhaU4tGLGxh++LinT2rO5rcgnncLg=
Subject key identifier: 8A:F9:E2:FD:63:61:D4:A6:DA:A8:DF:ED:60:F1:13:7A:0E:4C:26:5C
Authority key identifier: E6:D1:7B:13:65:3F:F1:E3:E7:82:2E:B1:E5:E0:A1:7F:4D:4F:78:81
Certificate issuer: /CN=e6d17b13653ff1e3e7822eb1e5e0a17f4d4f7881
Certificate serial: 0194BCA9A887BF4A7AFCA0A7F342081AB8E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
Manifest number: 0A40
Signing time: Fri 31 Jan 2025 14:00:22 +0000
Manifest this update: Fri 31 Jan 2025 14:00:22 +0000
Manifest next update: Sat 01 Feb 2025 14:00:22 +0000
Files and hashes: 1: 5tF7E2U_8ePngi6x5eChf01PeIE.crl (hash: r0cnoOAPQm5yWWIpMmBXqyXof6DkjVk++vS4ZOHmpcs=)
2: MwlTna0ke4fMkgBxDifihFV6g70.roa (hash: UKWdlo0uXeQ4k7xeAT+wCpraLRrIa922Ee9c18u5sVI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a8:87:bf:4a:7a:fc:a0:a7:f3:42:08:1a:b8:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6d17b13653ff1e3e7822eb1e5e0a17f4d4f7881
Validity
Not Before: Jan 31 14:00:22 2025 GMT
Not After : Feb 1 14:00:22 2025 GMT
Subject: CN=8af9e2fd6361d4a6daa8dfed60f1137a0e4c265c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3e:0d:6a:4b:50:3f:9a:53:5b:1e:20:03:46:
3c:72:02:86:7a:a7:3d:a7:b0:df:2a:94:68:a8:c9:
25:4f:b2:37:86:e2:19:ba:9e:ae:63:60:f3:22:96:
2f:42:d1:91:e5:44:b6:06:fa:a6:cb:25:65:e3:55:
94:49:6c:e5:ac:97:c1:e3:81:f8:e3:3b:0c:dc:5f:
d6:84:d9:60:cb:bc:95:d0:23:31:94:d5:6f:8e:22:
99:2f:e6:a3:c9:98:b6:93:5e:fa:09:6b:62:87:e0:
32:66:55:24:ae:7d:26:84:07:71:7e:1f:a6:2a:d3:
53:a2:ee:d2:f9:1a:4a:dc:31:55:a2:1f:90:3b:2f:
b4:17:d6:49:11:27:98:1f:72:6d:ef:72:99:55:f7:
68:21:a9:8b:4a:80:98:38:a1:d2:7d:d8:69:7b:33:
70:e5:80:72:ca:89:88:84:da:73:d8:21:78:18:b6:
2e:12:c9:bc:42:36:79:e0:4a:4f:39:bb:e7:05:84:
df:c2:bf:d3:90:0c:57:af:34:4c:31:ae:c0:eb:dc:
25:c6:5c:49:c1:30:88:cd:52:a9:e6:ed:1a:b3:23:
73:9a:83:32:fa:64:26:08:7c:87:67:43:da:45:d0:
23:9b:9f:19:60:9a:2c:65:9f:88:d9:2c:15:60:00:
a5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F9:E2:FD:63:61:D4:A6:DA:A8:DF:ED:60:F1:13:7A:0E:4C:26:5C
X509v3 Authority Key Identifier:
keyid:E6:D1:7B:13:65:3F:F1:E3:E7:82:2E:B1:E5:E0:A1:7F:4D:4F:78:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:34:9c:40:c2:84:b9:95:4f:ef:89:e1:2e:4c:24:ad:b8:d3:
a8:f7:13:51:7d:0d:a8:56:ff:f0:de:e1:18:39:24:50:a0:37:
1e:17:99:85:5a:9d:9c:c6:99:68:ad:18:10:8c:c1:ba:44:c6:
96:78:c6:ab:fb:83:13:75:8c:65:7b:51:6e:d0:c2:f1:75:8c:
b4:38:64:eb:97:33:d9:0d:40:ee:3d:92:37:c0:b4:11:fd:b2:
24:68:f1:ce:ea:d8:9c:3f:db:40:46:74:23:c8:7c:61:91:ba:
d2:d4:5a:05:17:92:3e:3e:53:d1:27:ad:d4:68:a5:88:5f:61:
92:9a:c8:ad:c1:5e:e4:9d:1a:cd:9f:79:5a:ca:e9:05:21:a3:
28:1d:3f:4a:2e:2b:33:22:fa:79:e4:ce:30:07:da:25:e0:12:
97:68:df:71:c9:5b:5b:e9:3b:e4:87:fb:1f:b0:82:10:6f:3e:
24:a5:af:c8:cb:a3:c7:c1:07:8b:e7:73:e0:ad:5f:64:e9:13:
e5:fd:7f:81:f6:fa:40:7b:46:60:a7:3f:e9:8e:a1:84:c6:7b:
e4:97:41:55:c4:6e:ca:17:93:cb:06:57:ef:0e:6b:a6:57:d5:
97:11:5f:f3:da:2f:b1:2e:81:83:dd:74:a2:9c:e9:5b:9b:74:
60:a0:85:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:52:58 2025 by rpki-client