Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
File: 0q5eM4eU5g1di1I72yto7ErHYs4.mft (raw, json)
Hash identifier: qpHLr8bSf2juALfVk9yuIHugEzf7P5uYYyW+PJ+rrmg=
Subject key identifier: BB:62:03:83:89:1C:AB:D2:96:C4:ED:2D:A2:0A:B9:52:FA:B1:F0:5D
Authority key identifier: D2:AE:5E:33:87:94:E6:0D:5D:8B:52:3B:DB:2B:68:EC:4A:C7:62:CE
Certificate issuer: /CN=d2ae5e338794e60d5d8b523bdb2b68ec4ac762ce
Certificate serial: 0194BC72AB8D4BD2055A26CDE9A943222692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 13:00:18 +0000
Manifest this update: Fri 31 Jan 2025 13:00:18 +0000
Manifest next update: Sat 01 Feb 2025 13:00:18 +0000
Files and hashes: 1: 0q5eM4eU5g1di1I72yto7ErHYs4.crl (hash: vijXGU1IgpLmimZ2OwXdiy7gJY5nx/gy7Fj3LfSFHLM=)
2: 5JInjtJs-s2-yK_dBCuc4HDNHSk.roa (hash: JUxQOg0RzN7jHCpHsSZf+phi3+AooD9Ty47K9VLPoKw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ab:8d:4b:d2:05:5a:26:cd:e9:a9:43:22:26:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ae5e338794e60d5d8b523bdb2b68ec4ac762ce
Validity
Not Before: Jan 31 13:00:18 2025 GMT
Not After : Feb 1 13:00:18 2025 GMT
Subject: CN=bb620383891cabd296c4ed2da20ab952fab1f05d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:17:10:4e:9b:ee:20:8f:b8:2a:6b:4a:5a:37:
b4:7d:66:31:a7:7a:65:ac:94:32:2e:9b:23:fb:dd:
cc:42:ed:7f:7f:77:52:50:b9:b8:9d:77:ae:32:c8:
e2:95:ea:f2:88:80:02:2f:61:e0:ae:55:ab:6a:7d:
46:49:e7:fe:49:58:ed:24:56:65:fc:42:fe:86:26:
c2:39:9a:4b:b6:99:b3:47:e2:61:3c:15:90:b5:99:
6c:65:6e:e3:8a:4f:51:a7:4a:03:2f:bf:5b:5f:2e:
4b:78:cf:0e:eb:cd:fc:d0:aa:c0:b6:88:37:23:9e:
9c:7c:d1:1e:bd:67:1c:37:c6:89:10:b6:56:f1:a0:
a7:d9:fc:f1:a3:cd:d7:ab:45:f1:84:5f:00:e1:d1:
5f:ef:41:0a:64:f8:30:59:9c:89:6f:43:27:ce:4d:
f5:07:7b:21:be:7b:9d:08:db:df:d9:88:48:73:32:
fc:6d:02:50:d5:7f:57:ea:b8:3e:d2:07:ee:30:93:
50:2c:7f:f5:17:2d:f9:b8:b7:61:a1:14:cf:f3:d1:
84:98:8e:6b:bf:92:99:f0:27:cd:2e:ef:d5:e0:c7:
84:e2:f0:74:6b:b6:c5:4c:c9:e1:a3:05:07:29:01:
81:a9:e2:7b:d9:f1:aa:66:37:d8:73:b0:17:87:ec:
fd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:62:03:83:89:1C:AB:D2:96:C4:ED:2D:A2:0A:B9:52:FA:B1:F0:5D
X509v3 Authority Key Identifier:
keyid:D2:AE:5E:33:87:94:E6:0D:5D:8B:52:3B:DB:2B:68:EC:4A:C7:62:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a3:e5:89:d5:69:20:5b:78:be:00:85:9b:4d:9c:f9:fb:82:
71:a1:09:d8:87:57:8c:f3:6d:51:d0:53:a0:d7:5d:57:ce:af:
95:fe:52:c4:99:b2:4a:aa:82:74:b5:41:54:38:a0:51:a1:55:
4d:b5:3f:33:b7:39:05:c4:e0:a2:a6:e3:54:73:21:46:6b:92:
a8:e4:fb:18:66:b2:2c:cb:3b:1d:c0:ac:f4:63:f9:6d:b9:25:
ac:ae:6e:3c:60:6c:6c:de:c4:8f:86:f6:8a:17:8b:bd:8c:7d:
c2:f4:de:4a:7c:f3:23:ed:4c:9e:ac:0b:7a:ce:02:6e:8e:16:
f2:b8:c3:62:c5:ad:26:9e:3c:55:62:75:a0:27:cc:49:e8:b6:
32:ec:b0:56:fd:88:d5:cf:07:fa:bd:25:a1:90:96:b8:4d:29:
02:1a:ad:ca:b6:14:3f:e1:c5:08:09:f6:57:45:75:7b:89:82:
2d:f5:9a:87:a3:42:21:b4:6d:92:30:66:aa:c8:cd:fb:2f:f6:
70:8a:6f:15:20:bf:9c:dc:50:8d:51:ca:2b:9b:7e:13:91:4f:
44:4d:f9:2e:5c:5b:e7:f3:24:65:ea:5a:6e:46:eb:ec:ec:66:
e0:82:4a:e0:ab:f3:e2:7e:c5:dc:01:1d:93:82:a1:8f:c7:c4:
d5:6c:a0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:21 2025 by rpki-client