Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
File: 5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft (raw, json)
Hash identifier: kxfE389Uxs1xHP6W3LsZ8VMQuFBm+pzVBkCiM3+vwqg=
Subject key identifier: B8:D6:00:50:A0:36:2F:EB:7B:B1:E7:7E:E3:47:1B:BB:F4:67:1D:71
Authority key identifier: E4:C7:48:24:34:A4:57:B0:48:B7:D6:26:1D:DD:80:95:C5:C0:90:20
Certificate issuer: /CN=e4c7482434a457b048b7d6261ddd8095c5c09020
Certificate serial: 0194BBCDC79204A53E08E17BEECAF2068951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
Manifest number: 065C
Signing time: Fri 31 Jan 2025 10:00:12 +0000
Manifest this update: Fri 31 Jan 2025 10:00:12 +0000
Manifest next update: Sat 01 Feb 2025 10:00:12 +0000
Files and hashes: 1: 5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl (hash: 06jKAn9h4VCj1lS3iyNN3Ltb365WZwjZ9W8UDPduzuA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c7:92:04:a5:3e:08:e1:7b:ee:ca:f2:06:89:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c7482434a457b048b7d6261ddd8095c5c09020
Validity
Not Before: Jan 31 10:00:12 2025 GMT
Not After : Feb 1 10:00:12 2025 GMT
Subject: CN=b8d60050a0362feb7bb1e77ee3471bbbf4671d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a8:87:52:4e:06:a3:11:47:0b:23:05:80:f3:
f2:c6:59:89:2f:15:51:cf:0f:95:34:25:76:53:13:
58:13:4a:b5:df:dc:10:c8:51:a9:e4:4c:8b:6d:5d:
92:f8:44:7a:15:03:2e:50:ff:8c:9c:d4:86:06:fe:
b3:c9:c9:8c:fe:9f:27:64:f3:63:37:10:a6:3a:f8:
c7:12:fd:68:e5:d8:de:46:76:93:9d:91:e8:28:f9:
23:c2:a9:06:62:c5:e1:41:aa:17:17:02:78:8b:fd:
cc:f4:a1:af:c9:bf:fc:b9:b4:c1:0c:35:70:8f:3d:
da:17:60:21:e6:76:8c:0c:c2:75:29:16:3a:52:8a:
a7:d5:94:11:58:73:b4:33:87:6c:a3:e6:86:6e:23:
b6:9e:72:0b:9b:8c:81:05:62:44:01:53:c0:d0:45:
5a:73:f8:43:1a:e2:db:46:a5:cb:37:0a:b2:1b:3f:
a8:17:8d:37:bc:fe:c6:7a:fa:06:b1:31:7f:c6:b1:
79:2a:d5:c5:18:ba:95:1f:d1:a1:3a:6c:8b:d6:ab:
65:02:c7:54:b0:10:dc:0c:5f:1e:65:ad:4c:8a:1c:
1a:af:63:cc:58:ba:af:60:ea:ea:ae:05:17:94:83:
c9:4f:e3:43:87:25:49:cf:94:60:fd:8a:8f:ea:3c:
51:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D6:00:50:A0:36:2F:EB:7B:B1:E7:7E:E3:47:1B:BB:F4:67:1D:71
X509v3 Authority Key Identifier:
keyid:E4:C7:48:24:34:A4:57:B0:48:B7:D6:26:1D:DD:80:95:C5:C0:90:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MdIJDSkV7BIt9YmHd2AlcXAkCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ede36d-bf5b-4435-b3e5-c4508b555071/1/5MdIJDSkV7BIt9YmHd2AlcXAkCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:aa:e5:e6:20:4d:2c:99:26:13:54:8d:cb:24:cd:71:87:27:
ba:e4:f2:bd:d9:aa:09:03:ea:dc:21:ad:b9:42:d3:05:9e:83:
fa:5b:7f:2a:a3:74:3d:11:2b:7e:bc:fe:e1:f6:4c:de:2d:f9:
cd:73:a8:4d:4a:5b:17:77:2c:30:3c:80:60:0f:f4:13:6d:0f:
26:fd:e5:45:9e:82:00:96:86:a7:e7:46:84:e6:25:58:0e:26:
8a:9c:26:a7:d8:92:94:e7:e8:bf:7b:f4:c9:66:b1:4b:68:f8:
d3:62:89:5f:2d:63:65:1f:7d:fc:cb:06:b8:b8:fb:f3:a3:98:
31:09:6c:8d:0d:ad:17:82:cc:72:4e:9a:59:1c:87:c9:65:b3:
e6:21:37:f7:cf:74:0f:ce:98:68:05:c2:13:50:2f:cf:ab:aa:
c1:53:fd:05:90:60:4a:68:b5:0b:9e:0f:37:6e:64:08:0b:63:
d0:83:a5:86:27:14:47:18:87:b1:f3:ac:36:37:72:bc:eb:83:
6b:4d:49:0e:cc:de:7c:2c:83:af:5c:69:c7:a0:7e:57:a3:0c:
47:9f:83:f4:d2:a9:3d:77:d8:29:70:2d:69:36:0d:4c:a7:52:
35:52:4e:f3:5b:b9:13:e5:b3:44:cf:cb:db:b5:17:f0:51:b7:
60:59:41:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:36:45 2025 by rpki-client