Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
File: 5b86csrW9LPcMFtMvjEIcFHZg_Y.mft (raw, json)
Hash identifier: 70ZNBssBMQrrylSJZrLiUT9/UwfOtEIA88MD3vHcxtc=
Subject key identifier: D0:59:E0:D1:DB:05:4A:AC:AF:A3:96:CE:D6:6B:E3:1A:14:52:32:FD
Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
Certificate issuer: /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Certificate serial: 0194BD4EABDF09364818F5AFBE6DC1F4CFEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
Manifest number: 0D2D
Signing time: Fri 31 Jan 2025 17:00:37 +0000
Manifest this update: Fri 31 Jan 2025 17:00:37 +0000
Manifest next update: Sat 01 Feb 2025 17:00:37 +0000
Files and hashes: 1: 0RZPruEGTKhoR1hKNPIRExdYXzg.roa (hash: Ylgp4cjK+Zluy/09si0hlIXpapeYNCr3ajFNEzNms3k=)
2: 5b86csrW9LPcMFtMvjEIcFHZg_Y.crl (hash: oJszWzHnJDBvf+KLI27z+GO6uqa2U1GJsxeOU2glT4c=)
3: FZgBPNc92MthOGwVWSdqr1P0HSA.roa (hash: KZQtxJF/nJvZgDa2DTtteEZwkrQ1v1OtGNXAavMBEZw=)
4: NouaPvm_pxgnZaSsMDeuuZIRGjs.roa (hash: nYpFZsLrdwqDrsUOTj47eXoiORRIxveHjZpyk2lUbWs=)
5: OBptCDujhrFn2SrCcEwy97BPYtY.roa (hash: C9FAoMOfl33Y5YMYZlPSULjykOtMmVezf3moKM1AAMg=)
6: VwQVaP5PIxPzgzQslxsV-wlq09Y.roa (hash: WHonlIhX4uSQGOOrCo26yMPlgaauP4nxJI/ozD4levU=)
7: XdxSdG11uJFuStkGGDZEuqDpedA.roa (hash: cY0Wtfs/4ERYCWgjaGMffb7og7Xm7Edv+oFQtm2dqsY=)
8: gjjNG2AUNgoUUT8zwJCb0qV39gA.roa (hash: gKOOsRGMh8IWKlduiqod4keZzvv275i5NBRO12AH9MA=)
9: xUGm3kpTiMAlzgkonjqufuYlmQk.roa (hash: 3q3AXsJge0KIrT2tTs/ggx0aF7QEDS7JWPpyt1gZZ38=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:ab:df:09:36:48:18:f5:af:be:6d:c1:f4:cf:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Validity
Not Before: Jan 31 17:00:37 2025 GMT
Not After : Feb 1 17:00:37 2025 GMT
Subject: CN=d059e0d1db054aacafa396ced66be31a145232fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:55:d3:f0:5c:7e:35:ed:bf:b0:db:c0:73:c3:
2d:53:97:a2:b4:c7:65:f3:fc:06:bc:30:0b:88:34:
2b:ba:bf:f4:5f:b5:c4:96:59:f4:48:e1:0e:93:29:
c3:e2:a2:a7:91:9b:fa:9b:98:1f:9f:4b:77:bd:b6:
03:a0:88:96:e6:38:d5:b1:da:a6:8c:22:df:c0:e4:
f9:1d:9f:5a:e9:e4:8f:b2:97:6f:34:7c:f2:d4:2e:
f6:2c:6b:d9:f3:fb:5d:2e:2b:48:13:f5:85:8f:5b:
16:cb:6e:3b:0e:50:dc:01:e9:96:44:52:e6:f9:d8:
04:b2:2f:4c:9b:66:04:33:7c:93:0c:62:8f:f0:e5:
31:52:39:04:22:57:a2:0b:3f:a8:e4:34:fd:a8:5e:
8a:9a:6f:fe:e9:9b:b1:54:6c:a5:e5:d1:0c:a3:9d:
68:5c:2d:f8:bf:58:6e:a1:5d:fa:19:af:ac:cb:67:
a3:ac:64:f4:02:98:c2:50:2f:ef:f1:d5:e0:af:8a:
10:7d:ed:11:4b:e2:c3:d8:b6:84:1b:e2:b2:db:8e:
9c:78:a9:90:b7:2e:cd:ba:76:85:15:29:29:4c:d6:
9d:f3:af:89:14:cd:6a:6e:9b:8e:dd:54:0a:3f:2a:
b9:79:42:9c:db:cb:ee:4a:f0:74:04:f4:94:3f:cf:
63:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:59:E0:D1:DB:05:4A:AC:AF:A3:96:CE:D6:6B:E3:1A:14:52:32:FD
X509v3 Authority Key Identifier:
keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:0e:59:1d:7c:9a:35:77:0f:dc:29:12:75:2f:ff:02:a9:f2:
86:de:74:ed:02:a4:2c:0a:cd:13:b8:a5:a7:15:ea:d4:f0:43:
2f:1d:f1:6e:05:ed:1f:d3:4b:63:7b:82:25:67:55:77:a0:a0:
ac:cb:41:69:f1:3b:dc:f1:36:93:11:43:40:d5:3b:15:04:1e:
d1:d4:39:67:68:ad:8e:2f:b4:3a:84:ce:92:8d:e4:f8:88:33:
30:22:85:80:f9:2d:4e:31:68:1f:a2:1f:ce:9b:1a:79:05:04:
f1:6e:af:34:85:1b:6b:f5:59:8e:fa:4f:a1:67:9e:60:60:08:
ff:c8:e8:36:de:0c:92:af:a1:08:45:d7:25:b3:94:96:53:c9:
d4:09:f2:3e:20:4e:be:9a:02:bf:10:8a:1c:98:4e:20:17:e5:
62:13:b4:0e:7b:33:de:06:b8:8a:aa:86:d8:99:fd:73:8a:76:
a1:d9:f1:53:80:5b:6c:e3:10:d2:03:02:e6:90:13:7d:c3:7f:
7b:ab:b1:dd:9b:dd:73:99:ce:dd:12:a0:99:84:c8:68:f2:f8:
4c:b8:d2:5f:1b:e4:b9:f4:ab:74:27:c6:b3:0f:86:32:8c:2a:
26:a0:cb:d0:31:4a:b7:ae:c8:dd:69:ae:d8:f6:11:a4:2a:d4:
71:66:0e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:20:50 2025 by rpki-client