Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
File: 5vqg0vXewCAfVeQJecGQm223fDs.mft (raw, json)
Hash identifier: p7Zy69eIWw2aZrSXV5KKTJIXkYiKcGAIpevngWAg2MU=
Subject key identifier: 4B:DF:C8:D7:88:24:A3:9A:37:A9:40:A0:CC:10:D8:B3:B5:1E:8D:35
Authority key identifier: E6:FA:A0:D2:F5:DE:C0:20:1F:55:E4:09:79:C1:90:9B:6D:B7:7C:3B
Certificate issuer: /CN=e6faa0d2f5dec0201f55e40979c1909b6db77c3b
Certificate serial: 0194BC3C626E479DD6D32C44A876DD1B899D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 12:01:01 +0000
Manifest this update: Fri 31 Jan 2025 12:01:01 +0000
Manifest next update: Sat 01 Feb 2025 12:01:01 +0000
Files and hashes: 1: 5vqg0vXewCAfVeQJecGQm223fDs.crl (hash: c6ajsvtT1XqPumFdKqlpZQBJplzUvCq7sVrlor3MGlg=)
2: 6DW1a6m05hh-gzCp-p2Th_jROrQ.roa (hash: DVwz9dCE2VA6PR9eWz/ZL0YuKXs4l+SQG40TAFfVI+w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:62:6e:47:9d:d6:d3:2c:44:a8:76:dd:1b:89:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6faa0d2f5dec0201f55e40979c1909b6db77c3b
Validity
Not Before: Jan 31 12:01:01 2025 GMT
Not After : Feb 1 12:01:01 2025 GMT
Subject: CN=4bdfc8d78824a39a37a940a0cc10d8b3b51e8d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f5:1e:99:12:d5:25:97:77:48:33:89:2a:4f:
42:4f:f4:e2:31:1a:d7:8c:b2:94:8d:d5:54:01:3e:
e3:cb:ce:d4:f1:c0:67:87:60:72:bb:fb:54:09:24:
0f:22:64:26:6e:28:e9:ca:0d:e1:4d:1d:a5:06:bd:
63:cc:50:88:f6:2f:a8:64:ee:c4:32:2e:99:cd:8c:
9d:37:d9:86:e4:eb:fb:65:74:72:e0:b8:64:a9:72:
36:f8:12:af:76:4b:da:dc:55:87:07:1f:0c:ef:ca:
b8:16:e4:2d:6d:6a:04:01:a0:44:c9:4b:b2:2e:9f:
9b:be:3e:0e:67:54:15:fe:c2:ec:9a:78:c8:ee:72:
f7:b3:b6:4f:49:41:6d:ca:b6:8a:18:a1:54:db:9f:
bc:27:1f:df:ac:73:52:39:26:73:79:f2:c1:7f:7b:
07:0d:79:05:ce:c8:08:dc:f3:9f:0e:0b:9a:4e:ba:
86:4b:81:70:f5:de:57:40:eb:3c:ce:03:a7:63:10:
85:f7:3c:47:45:33:9a:7f:b7:f8:9b:9b:67:1d:ac:
2f:c1:63:92:cb:db:ac:b4:fc:f0:7d:90:22:e4:a6:
52:70:cc:c2:01:56:d6:60:4b:34:84:25:59:24:57:
9c:59:ae:c2:64:f2:38:db:ce:17:0f:3d:13:41:fa:
5c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:DF:C8:D7:88:24:A3:9A:37:A9:40:A0:CC:10:D8:B3:B5:1E:8D:35
X509v3 Authority Key Identifier:
keyid:E6:FA:A0:D2:F5:DE:C0:20:1F:55:E4:09:79:C1:90:9B:6D:B7:7C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vqg0vXewCAfVeQJecGQm223fDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/097748-5cc8-450f-9fbb-8c8d10e8eabc/1/5vqg0vXewCAfVeQJecGQm223fDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f3:cb:c8:e9:4d:cb:c9:56:eb:34:c7:27:b8:8f:40:7c:2a:
c2:0c:80:55:ba:6f:72:00:fb:43:b4:e8:2d:04:fd:55:79:5c:
fc:fd:f2:69:02:5b:cc:8e:db:0b:a5:f8:da:72:56:09:90:9b:
16:9c:0b:b5:81:8d:84:43:55:1b:53:f2:dd:65:0b:07:9e:19:
99:28:b7:80:54:4f:50:27:db:88:35:8c:ba:ab:7c:15:2a:db:
2d:2a:a6:ee:46:0d:05:c6:6b:90:f1:14:51:25:1b:f7:35:6c:
02:29:e9:ba:e8:b8:a1:ae:81:51:5d:91:9e:7a:d1:3b:71:96:
12:96:3a:a6:13:f5:f9:38:88:b5:3d:d0:f5:46:1f:84:9e:16:
f0:6d:7a:53:3a:e8:55:15:e8:00:6c:2f:bb:db:6e:51:71:6a:
c0:8b:95:b4:5a:20:63:4d:b8:26:a1:c2:6c:02:26:d0:37:16:
b1:be:19:ae:80:95:b4:79:39:86:41:28:2d:21:b8:c8:a3:3f:
5d:08:74:02:66:45:50:dd:45:79:74:bf:d5:4b:e1:26:89:01:
83:d0:08:5e:11:13:8c:22:1b:1b:12:fd:27:bf:39:1e:b0:ef:
0b:e7:4d:be:d8:30:4a:19:23:d4:e6:75:d3:15:77:0f:6c:38:
e6:aa:92:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:19 2025 by rpki-client