Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
File: 5ag7QLP019MfszaNr6yhGZpEmJI.mft (raw, json)
Hash identifier: yrepIq5+CdreNAcNYNf9juM/4HqsBDaT2/ux6+EYi0E=
Subject key identifier: B1:91:A1:C7:1C:C8:08:14:6E:49:5B:E2:14:D8:EB:48:8A:68:80:06
Authority key identifier: E5:A8:3B:40:B3:F4:D7:D3:1F:B3:36:8D:AF:AC:A1:19:9A:44:98:92
Certificate issuer: /CN=e5a83b40b3f4d7d31fb3368dafaca1199a449892
Certificate serial: 0194BC3C316E5ACE3970F6127CF0296FE2FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
Manifest number: 043D
Signing time: Fri 31 Jan 2025 12:00:48 +0000
Manifest this update: Fri 31 Jan 2025 12:00:48 +0000
Manifest next update: Sat 01 Feb 2025 12:00:48 +0000
Files and hashes: 1: 5ag7QLP019MfszaNr6yhGZpEmJI.crl (hash: 7GgI6exlqFnp5JZnteAI5Dq+t24plhpZoz06Pbjm3sY=)
2: dFZMO2VP4AqySbEQh3NK_Is5BKQ.roa (hash: ROKbXrppvP4A8pHGDyWRJNx07Y7g4bd+83JBnGx3icI=)
3: g6-XvIXV3Eql3Coxvc-nq6Kly9Y.roa (hash: 2JhAFiPl0wmw6ysVFMQAoRoFcSMoEuXFJFM5vnLJ2+M=)
4: h1oyUSQHfCUnNhv3GPjMusMqBOQ.roa (hash: zVnvi6OzjNH5JWYjXPv16C0I43oqAW042jfOToOeKNM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:31:6e:5a:ce:39:70:f6:12:7c:f0:29:6f:e2:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a83b40b3f4d7d31fb3368dafaca1199a449892
Validity
Not Before: Jan 31 12:00:48 2025 GMT
Not After : Feb 1 12:00:48 2025 GMT
Subject: CN=b191a1c71cc808146e495be214d8eb488a688006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:20:89:57:34:2b:a3:90:f9:47:3f:f9:68:8a:
95:09:9b:21:d8:48:84:c8:68:da:c5:ab:23:9e:5f:
3d:a8:52:28:ab:0f:31:c6:36:ad:fa:a0:7c:1a:05:
79:0d:19:d4:f9:a9:5f:77:21:fa:4a:02:31:57:80:
aa:e7:ed:be:50:57:4c:15:bb:5d:17:3b:a0:41:50:
25:dd:9f:51:0b:76:99:4e:75:ce:eb:5f:56:52:bf:
52:2d:00:a1:fc:59:c2:a1:91:36:75:19:6e:26:f5:
5d:eb:a8:5c:2b:1f:cb:32:e2:c5:1e:10:e6:e6:e0:
17:1a:33:8f:3e:ef:4e:82:20:33:22:b2:48:91:8f:
41:f7:d0:ff:25:33:ac:3c:07:4b:b2:80:e7:55:ef:
63:6a:5b:b3:45:19:a2:3c:81:fd:6d:1e:d9:bc:f2:
e4:34:12:19:d2:49:5c:04:10:59:e1:3b:1e:e4:16:
cb:3f:4f:b2:60:ee:a1:19:80:90:fd:33:69:3d:3f:
6f:3a:be:ea:05:59:f5:5c:66:44:3e:90:a8:8c:e3:
72:38:63:0a:0a:1e:21:da:22:61:f8:72:eb:6a:fb:
0f:d6:7e:89:c6:06:e5:88:a2:4c:0d:9f:9c:11:2d:
03:79:52:fc:75:06:d8:86:c5:dc:cc:0d:39:50:58:
15:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:91:A1:C7:1C:C8:08:14:6E:49:5B:E2:14:D8:EB:48:8A:68:80:06
X509v3 Authority Key Identifier:
keyid:E5:A8:3B:40:B3:F4:D7:D3:1F:B3:36:8D:AF:AC:A1:19:9A:44:98:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:06:8b:e5:b6:d8:84:ea:ca:14:fc:c0:63:aa:a0:04:1a:f3:
73:13:49:47:8c:e2:da:dd:3f:42:25:b0:27:72:ee:55:b9:d6:
cb:c1:ba:59:55:16:1a:23:cc:ee:e9:5a:21:a1:38:1b:ac:cf:
58:96:55:89:8c:58:5f:e2:a0:43:cb:eb:65:d4:b4:6b:8a:c6:
66:d5:42:b9:32:cb:f6:69:61:b8:ad:2a:28:f9:48:a1:09:09:
25:fc:45:e2:00:9f:b6:5a:30:82:70:9a:35:90:27:ca:30:30:
ce:1b:09:0f:1b:a9:99:5a:fb:1b:66:3f:2e:1f:61:f5:09:fe:
4f:db:d7:b2:ea:ec:23:6b:ad:6b:e6:59:18:8b:3a:57:4f:f7:
ed:fc:b4:ba:5d:a9:7a:a1:c9:1f:c9:dc:05:90:58:ff:a5:73:
54:d3:6b:81:2f:37:36:3a:de:53:61:43:e8:1f:69:8d:24:b9:
aa:cd:f6:a5:8e:3d:71:64:b8:29:0f:1b:a2:c1:ba:73:70:51:
e5:a0:2f:64:d6:73:81:99:a4:5a:e9:05:88:5d:21:f3:e1:d0:
5b:b2:5d:ae:30:b1:65:20:8c:dc:f6:6a:db:1e:96:1e:f5:e9:
6d:47:1a:ef:b3:48:04:17:83:c1:e8:6e:ce:3d:9a:48:4e:b1:
df:ce:c9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:46 2025 by rpki-client