Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
File: 5YBcX-NFAofc3mreDZyVWLphXjI.mft (raw, json)
Hash identifier: pB0OzCylch61iDZiEq8bXTg1qpCMrKnwZr2D8hSdKCQ=
Subject key identifier: 7B:24:9D:E2:83:68:26:FD:09:4D:55:B6:CC:48:0F:D0:2A:27:9E:22
Authority key identifier: E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32
Certificate issuer: /CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32
Certificate serial: 0194BBCEACBD96210CC79B4BBF7048992E11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
Manifest number: 0F6A
Signing time: Fri 31 Jan 2025 10:01:11 +0000
Manifest this update: Fri 31 Jan 2025 10:01:11 +0000
Manifest next update: Sat 01 Feb 2025 10:01:11 +0000
Files and hashes: 1: 4smvePH69FAYNSdSIOq-IbOCEOY.roa (hash: YP4Y8XIxmd6gqrm+p+MzPpn8EJXfmEHsFE9JRUt3QgM=)
2: 5YBcX-NFAofc3mreDZyVWLphXjI.crl (hash: f8CB8Hzo4pvuFjY3O2F7KMqTSO6LENp9AQiNBVgKOH4=)
3: bslnxciGSGjp5x3mv5ejIjp-fOk.roa (hash: aguWPYFuH/8n3kD28WuYVtoo2iM5Q/UCEREfJbZ73y8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ac:bd:96:21:0c:c7:9b:4b:bf:70:48:99:2e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32
Validity
Not Before: Jan 31 10:01:11 2025 GMT
Not After : Feb 1 10:01:11 2025 GMT
Subject: CN=7b249de2836826fd094d55b6cc480fd02a279e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:93:f2:2a:14:03:44:1b:6a:fd:7d:ec:79:3d:
c7:d5:e3:43:17:31:6f:b1:9f:34:99:56:5f:63:99:
2d:7e:e1:c2:9f:bf:eb:1f:04:e9:dc:44:a2:ca:64:
27:42:10:97:9b:2b:cc:d8:57:33:88:a4:33:6b:5e:
7c:9a:ee:ad:76:aa:5a:bb:2c:0e:a4:07:8b:0f:9f:
a8:a6:46:24:f4:5c:86:bf:62:bf:70:df:1f:fe:66:
d8:ca:59:b5:55:1f:8a:b5:e3:60:17:31:21:3d:a7:
9f:f3:ad:7e:9b:0e:79:94:15:1c:c2:6c:ed:ec:19:
77:5c:5f:72:8f:14:7d:c8:43:5b:01:a4:85:b1:5c:
eb:98:d2:55:42:ad:1e:19:81:10:89:dd:e7:a8:f4:
41:13:af:99:ca:b7:29:a1:d1:c8:9c:1e:19:33:e5:
e3:70:22:d5:28:bb:47:76:98:3c:9c:11:11:01:5d:
c2:32:da:07:eb:18:be:a6:59:1e:17:f9:9c:88:15:
79:90:c1:fa:2f:dd:c8:da:f3:59:19:9a:07:73:29:
3f:f3:11:92:3c:c7:a3:bc:8e:3e:07:c6:75:fa:6f:
f7:48:05:fd:f7:98:cb:7c:21:d3:88:1b:b5:e0:66:
f6:5b:2e:01:da:8b:24:53:4e:05:5b:aa:d4:47:f3:
71:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:24:9D:E2:83:68:26:FD:09:4D:55:B6:CC:48:0F:D0:2A:27:9E:22
X509v3 Authority Key Identifier:
keyid:E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:97:65:f8:43:e2:f8:a4:2e:59:bb:12:15:fd:6c:19:55:77:
3c:3f:ad:bf:af:d8:94:e5:10:ad:4c:af:d5:6a:88:20:7d:c4:
3c:c4:20:3f:45:c4:09:1b:82:be:af:df:26:b3:08:02:81:0e:
02:fd:17:a4:91:e6:1d:96:fa:09:03:1f:30:80:ab:45:8b:66:
8e:49:80:d8:6a:24:41:05:70:95:90:5d:56:23:d2:8f:e4:71:
55:ab:14:02:af:37:7b:8d:15:87:1d:be:3f:fe:88:ce:25:f6:
dc:5b:5d:e7:67:de:cd:2a:2b:88:87:ba:4d:ce:2d:8b:47:e3:
9d:4e:79:07:1d:b9:34:69:45:f9:d1:f0:1f:1d:72:f2:0c:e9:
16:27:27:c6:fa:17:5a:0f:d7:34:fd:17:a0:5d:00:a4:e6:f9:
99:89:98:29:b5:00:73:d9:18:cd:ee:91:71:19:a1:22:90:8d:
1e:b2:31:cc:84:13:ab:2b:39:7f:31:2c:79:34:f8:d7:3a:1b:
e9:5d:4f:0d:f2:61:54:56:4c:36:ce:d8:fe:6c:8a:f4:b8:6c:
c2:b5:24:30:be:c3:57:fd:90:b2:31:c2:96:74:62:f2:ca:bf:
e0:46:7f:a6:e0:56:e2:6a:9f:2a:42:c4:e8:82:eb:ad:8e:a9:
d7:e5:40:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:11 2025 by rpki-client