Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
File: 5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft (raw, json)
Hash identifier: lLwoTHmFe3EZjrXQrZ9zDi1b056vlGsAvvOBPM6VxmY=
Subject key identifier: 74:D7:8A:E8:D2:63:8F:43:52:DC:D0:34:EB:95:5A:0C:4F:9C:C9:68
Authority key identifier: E6:23:29:9E:E4:7B:4F:61:2D:B9:0A:14:F9:5E:40:76:7A:E0:66:57
Certificate issuer: /CN=e623299ee47b4f612db90a14f95e40767ae06657
Certificate serial: 0194BBCEC55C05EFA3B44D52185FB9FA18CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
Manifest number: 10BB
Signing time: Fri 31 Jan 2025 10:01:17 +0000
Manifest this update: Fri 31 Jan 2025 10:01:17 +0000
Manifest next update: Sat 01 Feb 2025 10:01:17 +0000
Files and hashes: 1: 25SW2pj3F9sQQZMDR2RMcEngkMc.roa (hash: sf46s/kdJrtglYzmsHfLJakYVODfs50Q1cZVZ793qWE=)
2: 5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl (hash: LEm9eDMhQZPddlelHn1vQtgtRX+E0PH1qEfMNCwvoj0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c5:5c:05:ef:a3:b4:4d:52:18:5f:b9:fa:18:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e623299ee47b4f612db90a14f95e40767ae06657
Validity
Not Before: Jan 31 10:01:17 2025 GMT
Not After : Feb 1 10:01:17 2025 GMT
Subject: CN=74d78ae8d2638f4352dcd034eb955a0c4f9cc968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:54:a1:85:4a:55:29:1f:8f:48:d3:1a:07:5d:
45:b0:b4:16:ef:bd:b7:bb:d1:a3:e2:77:2a:a8:b5:
bf:7c:71:4d:9a:e2:57:4d:98:ed:38:d4:c3:24:43:
07:da:c3:88:7d:58:b3:9f:5a:18:cb:86:69:3f:bf:
3a:14:76:03:f1:93:df:c0:9c:b7:e5:d5:41:38:1d:
82:26:3c:0e:cf:a1:44:cc:36:f7:93:be:d5:47:cf:
bc:c5:24:13:32:c2:16:d0:0b:9b:5e:62:12:3a:63:
e0:c1:d9:f3:e2:00:d5:f1:39:ff:a1:56:92:dc:3d:
c8:50:7d:37:53:79:55:27:19:b6:97:db:05:a6:36:
4a:4d:f7:11:46:7b:86:76:53:50:1d:52:dd:0e:f4:
64:ec:49:fb:65:f5:ac:04:5c:49:be:20:2e:f4:78:
43:fa:42:bd:be:04:c7:37:18:eb:e9:4b:e2:d1:b1:
66:87:9e:3d:32:73:02:ff:d5:2c:f1:2c:6c:6f:37:
35:e7:77:1d:9c:a8:dc:22:37:25:95:af:44:3f:7d:
6b:03:39:87:88:ad:75:4e:5a:5a:62:80:6c:14:ea:
56:c1:44:c8:62:3f:67:d0:09:41:e8:8d:7f:01:f2:
e4:4d:e0:d9:9e:34:03:61:92:66:4e:5c:a2:37:cf:
64:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D7:8A:E8:D2:63:8F:43:52:DC:D0:34:EB:95:5A:0C:4F:9C:C9:68
X509v3 Authority Key Identifier:
keyid:E6:23:29:9E:E4:7B:4F:61:2D:B9:0A:14:F9:5E:40:76:7A:E0:66:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iMpnuR7T2EtuQoU-V5AdnrgZlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f37203-f172-459f-8315-82f25ac6887f/1/5iMpnuR7T2EtuQoU-V5AdnrgZlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:1c:ac:a9:28:08:39:b4:72:4c:28:fb:71:d6:75:d3:82:1a:
83:78:e5:8f:f9:a4:72:07:98:c7:38:a2:8b:72:fe:b6:46:65:
8b:e3:3f:94:5f:a7:6f:4e:cf:8f:9f:e5:5a:d2:b3:50:44:ee:
14:0e:dc:85:27:4c:93:c5:cb:33:d2:42:68:eb:e6:47:c8:76:
f3:eb:df:87:1e:90:4e:81:60:20:e7:0f:04:1c:24:ad:fc:d2:
f1:85:39:25:61:56:ae:56:8d:2a:8b:b3:14:13:da:f3:67:78:
cc:34:6c:1c:c1:e1:ec:7a:63:23:c1:da:e4:4c:45:9a:87:b7:
ae:39:f6:a1:0b:2c:e7:0b:5b:23:07:d0:26:0f:61:aa:bf:14:
5f:56:cd:58:47:83:89:bb:47:5a:c9:2f:d7:b7:29:39:1f:86:
35:6e:2a:27:a0:12:dc:96:fb:b7:ea:ff:53:bb:43:6e:e6:8a:
83:bc:7b:7f:bd:91:ed:31:7b:96:6a:9e:4c:bf:57:a0:2c:5c:
cb:d1:7c:23:89:27:30:11:09:e4:e8:70:68:5b:f0:fa:18:7e:
7c:c3:b4:ff:77:a6:9c:39:0f:e5:02:12:ce:00:43:9d:96:91:
a3:2b:9d:93:d1:04:d3:51:8e:b2:ec:51:b0:fd:88:9c:42:d9:
bf:2c:a2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:56:50 2025 by rpki-client