Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft
File: 5HZ7Uea0grnnp0g2YqXb7huNhaA.mft (raw, json)
Hash identifier: GP2XHufvKRKDoZxl0Apd8O0oLz582hcWQsRBn1UmMdo=
Subject key identifier: 33:28:1C:30:4A:BD:60:C5:82:FE:E8:B0:32:2C:E6:AD:1F:FE:7C:13
Authority key identifier: E4:76:7B:51:E6:B4:82:B9:E7:A7:48:36:62:A5:DB:EE:1B:8D:85:A0
Certificate issuer: /CN=e4767b51e6b482b9e7a7483662a5dbee1b8d85a0
Certificate serial: 0194BCAA3EC09EC1BAEF9E80151761E9AE25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:01:01 +0000
Manifest this update: Fri 31 Jan 2025 14:01:01 +0000
Manifest next update: Sat 01 Feb 2025 14:01:01 +0000
Files and hashes: 1: 1-2kAM8E1UL_Pvf9Vzt6AdGfyh8o.roa (hash: Ohp9jg/lWKCAW1pqYiDBNHfJGsbI7n6Nnedeq9nVw0Y=)
2: 5HZ7Uea0grnnp0g2YqXb7huNhaA.crl (hash: cwzBTxFPvL+bIXjTIeqxoEgjI3MuEHaYdGhF3uiqdeA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:3e:c0:9e:c1:ba:ef:9e:80:15:17:61:e9:ae:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4767b51e6b482b9e7a7483662a5dbee1b8d85a0
Validity
Not Before: Jan 31 14:01:01 2025 GMT
Not After : Feb 1 14:01:01 2025 GMT
Subject: CN=33281c304abd60c582fee8b0322ce6ad1ffe7c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:93:3d:05:14:96:09:f8:ac:cd:fe:bb:d4:ed:
0b:52:28:d7:fc:18:0c:3d:d4:25:ff:31:0e:88:4c:
5c:df:57:6b:97:a6:4d:72:15:98:a5:ea:ae:5c:42:
78:ac:e7:e6:71:f6:55:1b:1d:65:01:e1:f9:b3:34:
02:8d:18:a8:2b:c7:58:89:18:e4:be:6d:e9:43:e5:
9d:7a:f3:0d:bf:e5:59:c7:0c:33:7c:9a:09:e5:2e:
d1:97:4b:ea:27:dc:c9:25:e5:65:2e:cc:e2:0c:4c:
5d:23:cc:7a:61:e6:d1:79:82:df:24:4f:41:67:fe:
c6:bc:e4:77:d9:4a:8e:b7:86:b4:30:09:3f:47:d0:
2f:7b:eb:95:b2:1b:e3:5d:0d:41:a5:25:c4:60:e8:
7e:5a:45:7d:33:62:68:9a:b1:10:8b:35:24:59:e6:
aa:01:54:11:c5:f3:75:95:95:51:52:ea:72:65:64:
be:d3:2c:ac:ae:9d:c1:15:08:c0:f1:b4:a0:26:60:
37:76:86:6b:2e:8a:37:9f:91:e9:fc:e4:53:d3:80:
82:5a:14:79:e0:6c:55:01:60:b8:c8:7e:3d:75:73:
82:92:47:fa:e5:fc:53:e6:1b:2c:f4:41:0c:48:e4:
e9:19:0e:b8:32:09:35:19:e3:d1:6f:dd:f7:2a:8f:
b2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:28:1C:30:4A:BD:60:C5:82:FE:E8:B0:32:2C:E6:AD:1F:FE:7C:13
X509v3 Authority Key Identifier:
keyid:E4:76:7B:51:E6:B4:82:B9:E7:A7:48:36:62:A5:DB:EE:1B:8D:85:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c2:e4:37:61:2a:49:7b:6d:1a:30:34:93:7e:12:53:c0:1e:
48:f3:e6:a7:93:05:0b:4b:83:95:08:9a:1d:cb:9e:73:74:4a:
10:5c:a8:f4:3b:be:0f:e9:ac:b8:96:b9:42:b2:21:f9:fe:b3:
49:df:e1:62:2e:5a:14:db:53:95:96:17:4c:da:ab:63:a4:45:
f4:0e:0d:a2:d3:0d:a9:35:a5:97:5a:76:72:f1:1f:1b:d9:d1:
9c:a9:c1:d2:66:d1:f3:91:b6:82:17:46:68:1b:ba:be:14:5b:
bf:e2:f3:84:fd:73:54:e0:67:f2:cc:02:56:28:66:eb:ee:d2:
0e:80:34:85:6c:af:77:d3:02:da:e6:d5:d9:bc:89:09:31:0e:
73:d7:a6:24:43:a1:16:27:1f:cc:50:26:2a:8b:e1:f0:4c:33:
15:f3:20:db:78:e0:79:98:8f:e0:56:e3:41:ab:ae:26:dc:d1:
1d:8d:d1:15:29:65:cc:5e:97:ef:19:83:6a:61:8b:8f:9d:85:
3d:6b:ef:5d:a3:3e:ff:dd:cb:2f:b3:c5:92:c7:c1:59:76:08:
5e:cf:da:ca:c4:5e:86:cd:47:96:ad:1c:40:ab:ab:d9:c5:0f:
c5:71:bf:8a:a0:d6:3c:88:44:13:4c:88:5b:e1:19:ec:d0:66:
ef:a0:32:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:35 2025 by rpki-client