Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft
File: 5I2jNbByU21Y5rfN9M2xZEW8vDM.mft (raw, json)
Hash identifier: 1LZ6CcYa31wMc+4mJPfMvdW8WpFxO+gkJwsJ8rq19B4=
Subject key identifier: A1:FB:38:83:E0:73:D3:D7:78:44:7F:20:59:2E:47:9D:7C:C1:46:4E
Authority key identifier: E4:8D:A3:35:B0:72:53:6D:58:E6:B7:CD:F4:CD:B1:64:45:BC:BC:33
Certificate issuer: /CN=e48da335b072536d58e6b7cdf4cdb16445bcbc33
Certificate serial: 0194BC04CB5F6C4887C64E1A95ADC8A54C2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft
Manifest number: 04E9
Signing time: Fri 31 Jan 2025 11:00:18 +0000
Manifest this update: Fri 31 Jan 2025 11:00:18 +0000
Manifest next update: Sat 01 Feb 2025 11:00:18 +0000
Files and hashes: 1: 5I2jNbByU21Y5rfN9M2xZEW8vDM.crl (hash: McWKZGthRdXkYcvkpys85xVkwQNrlB7INb9H072L+HQ=)
2: 7ut39nDY5rv5Se7wwlOpxKsRN38.roa (hash: T38kEZlJJOWtX13bv0pjv6eTHzUXA4juujWye9qIGUI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:cb:5f:6c:48:87:c6:4e:1a:95:ad:c8:a5:4c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e48da335b072536d58e6b7cdf4cdb16445bcbc33
Validity
Not Before: Jan 31 11:00:18 2025 GMT
Not After : Feb 1 11:00:18 2025 GMT
Subject: CN=a1fb3883e073d3d778447f20592e479d7cc1464e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:56:c1:c4:f3:5e:d1:4d:2b:ff:3c:fd:70:48:
65:40:65:e3:74:2d:d4:5d:62:a2:59:3a:21:34:c2:
6a:58:ad:a3:c2:9d:0e:68:75:47:0d:9a:8a:fc:a5:
66:5f:27:69:95:59:45:d5:e4:f9:19:55:35:78:f1:
a6:29:a7:a4:91:e5:c9:bb:4c:95:58:e0:d7:37:85:
bf:0c:61:46:c2:de:12:ae:8f:7e:b4:b3:4f:1a:b6:
ea:d4:f8:cb:74:21:fe:3d:51:1f:e1:d3:e4:42:09:
ff:75:b6:9e:06:4a:a5:da:d4:d3:0f:2d:02:da:17:
a8:ab:ac:45:4a:36:f0:9f:5e:03:bc:e9:60:64:b4:
57:44:28:7e:d3:d0:12:0d:87:73:d7:fe:2f:68:bd:
ad:f2:ec:48:22:f2:8d:a6:d0:0f:76:47:b1:e1:f3:
94:67:87:d4:d0:70:8b:b6:bb:b1:9f:27:d1:53:65:
71:d0:91:81:80:c7:27:35:5c:2a:39:2a:79:d6:e0:
13:85:5f:f4:eb:2b:54:51:e2:90:58:c3:9e:91:1f:
35:3e:86:05:87:0d:43:de:a9:b7:18:a7:33:6d:39:
2c:37:52:41:13:80:85:8d:97:c6:c0:ec:41:e9:8d:
eb:95:7d:cd:e7:b0:eb:a1:b2:71:86:e6:c7:1e:31:
7f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:FB:38:83:E0:73:D3:D7:78:44:7F:20:59:2E:47:9D:7C:C1:46:4E
X509v3 Authority Key Identifier:
keyid:E4:8D:A3:35:B0:72:53:6D:58:E6:B7:CD:F4:CD:B1:64:45:BC:BC:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:48:7e:87:ef:85:0c:98:d5:2d:36:72:c3:84:54:ad:22:6f:
0f:34:6f:e4:5b:c2:2b:35:67:d7:81:50:0f:b5:f0:3b:15:f4:
78:3b:cd:14:eb:f6:25:61:3c:63:6f:ef:2a:2f:44:b6:01:1a:
d6:ee:0b:94:b8:dd:c3:34:25:72:9d:5c:d5:d0:04:fb:dd:25:
3a:a0:c6:2f:98:bb:43:57:6b:af:bf:e6:ca:e9:cd:46:db:49:
92:66:a2:3c:3c:bf:84:1b:34:b0:1d:78:87:2c:08:d8:35:71:
17:36:18:ec:63:a6:8b:57:87:15:58:2b:6a:eb:be:a6:e8:68:
5b:f7:d3:bd:0d:92:91:3e:f5:fa:2f:ed:1a:bb:da:91:57:92:
dc:3c:44:b9:e0:a1:1f:76:a7:ec:a5:76:ab:7e:31:5a:9a:94:
4d:9c:6b:5c:f3:14:66:72:1a:18:c3:49:c5:37:5a:b4:89:86:
53:d5:84:25:84:80:41:91:ba:5d:0f:e3:36:15:fc:be:d9:81:
4c:21:d8:47:d3:91:34:c0:37:21:32:c6:f2:6b:a9:2b:9f:5d:
f3:02:17:29:a6:61:79:c8:fb:6b:8a:ba:d1:6a:2f:06:4d:af:
d8:84:8b:3c:47:22:a2:d4:98:bb:9d:9a:ae:6a:17:f0:ab:1e:
0c:3b:0b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:32 2025 by rpki-client