Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
File: 5LTFOvZfC4OWuVtNB9TsTnvid-U.mft (raw, json)
Hash identifier: hLYtLPEMzae1oqmsbDn9bxJE20FLN7Bx7CyxOt/VhLo=
Subject key identifier: BD:6C:D3:76:20:86:A5:1E:5B:FE:1E:3A:05:D1:F6:7C:5A:CD:08:3D
Authority key identifier: E4:B4:C5:3A:F6:5F:0B:83:96:B9:5B:4D:07:D4:EC:4E:7B:E2:77:E5
Certificate issuer: /CN=e4b4c53af65f0b8396b95b4d07d4ec4e7be277e5
Certificate serial: 0194BD8561A82762E6147C574C41E0A25759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:22 +0000
Manifest this update: Fri 31 Jan 2025 18:00:22 +0000
Manifest next update: Sat 01 Feb 2025 18:00:22 +0000
Files and hashes: 1: 5LTFOvZfC4OWuVtNB9TsTnvid-U.crl (hash: bfMgDEMRgrgAs1QN11TRUncXIrwZFDxO11nMapW5Kx8=)
2: HPP-Y8CcP39de0XZZOWjFIJ96v4.roa (hash: wqE/NVLKIIjuJJuVTQbIHrmfJEIIZJeODzcidgoveO0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:61:a8:27:62:e6:14:7c:57:4c:41:e0:a2:57:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4b4c53af65f0b8396b95b4d07d4ec4e7be277e5
Validity
Not Before: Jan 31 18:00:22 2025 GMT
Not After : Feb 1 18:00:22 2025 GMT
Subject: CN=bd6cd3762086a51e5bfe1e3a05d1f67c5acd083d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:52:f6:74:eb:3d:9e:9b:6d:b3:9e:dc:f3:fd:
a2:4e:7b:7c:a6:49:16:8e:f5:02:63:85:20:06:87:
a9:01:8a:de:6e:54:66:f8:16:10:84:3f:a6:c0:e2:
96:5f:3e:a4:be:9b:84:94:f4:1e:63:aa:6c:b1:70:
50:97:77:50:f5:8d:9e:b9:13:51:64:10:1e:cf:42:
27:27:3f:43:4d:9f:38:57:1c:c0:e2:89:50:b5:d9:
34:4f:c8:a1:41:40:25:71:bc:1a:50:60:7c:d8:6b:
85:a4:db:be:e0:b5:a4:6c:d5:20:8f:e6:6e:12:34:
d8:4d:41:0a:04:b0:05:e5:ba:cb:58:ad:f8:36:6b:
17:94:38:e6:01:01:e0:4b:df:b8:f5:96:b6:78:57:
47:68:ad:9e:65:c4:59:64:4a:63:9d:fe:7b:cb:36:
e4:c4:07:7b:b4:c6:ba:ea:30:e7:95:0d:dc:f6:03:
5b:ea:1c:2d:44:8d:e8:f0:73:55:d1:e5:89:ba:7a:
cd:93:fc:59:df:b2:6a:ac:b6:8f:8e:2f:45:f6:c7:
1e:e4:59:d7:03:f6:78:96:fa:ee:5e:c9:b0:b7:2f:
02:a1:1d:25:cc:fc:c2:8c:89:d7:dc:65:02:27:4e:
ce:13:22:c5:54:fd:ad:96:72:e6:35:89:21:ea:3f:
8d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6C:D3:76:20:86:A5:1E:5B:FE:1E:3A:05:D1:F6:7C:5A:CD:08:3D
X509v3 Authority Key Identifier:
keyid:E4:B4:C5:3A:F6:5F:0B:83:96:B9:5B:4D:07:D4:EC:4E:7B:E2:77:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LTFOvZfC4OWuVtNB9TsTnvid-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/46aabf-dad0-4d76-a5b5-88db0125a6b8/1/5LTFOvZfC4OWuVtNB9TsTnvid-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:36:e8:ed:54:d1:45:c5:16:0a:be:73:5c:24:11:56:5b:91:
8e:ea:80:1d:61:8c:5a:4b:7a:0d:01:30:11:eb:f2:81:04:1f:
22:e5:ad:86:23:a6:d7:f3:2c:5a:cf:3e:3d:7f:4c:57:8a:6f:
ba:47:f4:b6:0c:b0:28:9b:c7:a8:af:1f:6f:81:5f:23:37:c8:
3c:db:c5:76:43:6c:9a:8f:13:2b:63:87:6f:23:11:db:64:4d:
29:fd:83:72:e1:7e:14:9e:24:e0:3b:d3:78:b3:76:0a:61:76:
57:5f:af:22:43:13:a1:dc:c7:1f:06:76:55:32:bc:94:46:a1:
7e:04:32:79:62:1e:05:76:e6:b1:c7:0c:77:d3:cd:d0:9c:a1:
65:52:75:8f:cf:28:23:83:d8:ff:c7:e4:04:d3:9c:5d:81:07:
b1:21:3b:3e:1d:0e:0e:23:44:08:be:3b:4f:bc:71:91:66:89:
30:01:69:40:51:6d:00:1a:a3:2c:23:b8:35:74:80:c2:b8:2f:
b0:91:32:bb:c8:01:e8:f9:90:f4:a5:7a:a4:1d:61:05:bc:6d:
07:55:23:fb:b4:14:d9:f7:17:9b:6a:5f:8f:1e:6f:b2:c9:17:
49:c8:ae:e2:03:f9:b3:1d:37:23:5c:f9:89:2f:48:45:d3:f1:
27:1b:f2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:17:47 2025 by rpki-client