Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
File: 5sLg0_3CFaOJxwQ8paGga-LFWO8.mft (raw, json)
Hash identifier: 7hLSnD49/nXVAT3eS4ILT6Kd8cNcppjcb2VwDWwUUfU=
Subject key identifier: 5B:8B:2A:A9:10:2D:BC:86:61:56:A1:70:C7:20:57:BC:E8:63:A5:86
Authority key identifier: E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF
Certificate issuer: /CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
Certificate serial: 0194BC04AC2FD7755450806F3353490BCEAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
Manifest number: 06D0
Signing time: Fri 31 Jan 2025 11:00:10 +0000
Manifest this update: Fri 31 Jan 2025 11:00:10 +0000
Manifest next update: Sat 01 Feb 2025 11:00:10 +0000
Files and hashes: 1: 5sLg0_3CFaOJxwQ8paGga-LFWO8.crl (hash: Esm5YQGuIuh+ExeWGWKKENL3prQnTlndl3jkTIko8Gw=)
2: l-4qAsUCkGFbwteiyRBxdvoP-po.roa (hash: dKClKp5j7jx13pZIwUub4jyvJ+85eelDdQGxj9dbOjc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ac:2f:d7:75:54:50:80:6f:33:53:49:0b:ce:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef
Validity
Not Before: Jan 31 11:00:10 2025 GMT
Not After : Feb 1 11:00:10 2025 GMT
Subject: CN=5b8b2aa9102dbc866156a170c72057bce863a586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fd:08:06:ea:98:80:6e:54:49:33:3b:72:dc:
57:48:14:24:3e:ff:ee:ee:d2:29:bf:6a:b2:9c:4c:
28:9c:9d:85:50:aa:a6:e5:98:56:40:1d:ae:d7:b9:
28:87:e7:46:f9:cb:bd:05:4b:d5:f5:58:00:c2:75:
9e:4b:4e:c0:6e:0a:10:d9:21:a9:52:2a:91:3a:92:
e5:ac:e2:49:cd:8a:ab:8f:59:73:3a:8e:7c:b1:9f:
5e:17:9f:99:01:c1:e5:72:64:7d:9d:ec:1d:8a:c1:
22:88:8c:5d:f6:d9:f1:f1:98:2a:b3:40:f3:82:08:
43:75:83:a6:93:6c:08:b6:e8:8d:1b:af:de:eb:0b:
50:5d:05:fb:ef:33:f3:ef:47:96:f2:7e:77:9c:9d:
a5:df:ba:58:f1:b8:f4:00:77:57:75:de:7d:08:37:
03:59:8e:0c:63:12:04:73:29:24:fb:c4:2a:aa:cc:
25:7d:a1:0d:12:b3:a7:a6:d1:5d:d5:d2:06:2d:75:
d0:59:4f:2d:ec:f6:32:a6:10:43:94:c8:e9:fa:91:
7d:17:ef:4f:16:a6:a3:5a:16:1f:0b:78:da:a4:1e:
3c:d8:0b:8f:27:37:fa:8a:bd:11:29:6e:e9:4d:15:
51:d0:09:15:b8:5b:f0:ac:d7:17:bb:94:58:4b:1c:
9f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8B:2A:A9:10:2D:BC:86:61:56:A1:70:C7:20:57:BC:E8:63:A5:86
X509v3 Authority Key Identifier:
keyid:E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:00:a0:61:e4:cd:60:ce:25:94:72:6d:1a:52:45:79:68:d5:
e4:00:81:47:1a:63:5f:ae:83:57:52:56:7d:3b:5c:3c:11:c9:
b5:76:0c:ab:40:f4:ba:97:a6:3f:c1:88:79:1f:93:b0:e2:dd:
09:51:3b:98:c7:21:01:5c:a4:56:13:db:6d:fe:c7:da:e0:f8:
b5:03:77:f6:3e:90:99:6f:12:b2:7d:18:f3:55:fa:2d:bd:eb:
b8:53:3b:36:05:78:0b:a4:0b:75:4b:91:a3:d2:df:ea:77:48:
ee:24:5e:76:a7:ed:1f:e7:2d:1f:9f:49:77:18:ef:f1:51:56:
59:54:6b:81:c1:e7:98:49:a8:d3:d4:0d:6e:c7:aa:94:b9:42:
1a:01:92:d2:ba:a5:01:2b:67:06:75:5d:a4:43:9c:08:af:d6:
07:15:f6:1f:7d:04:68:56:a7:84:fb:6a:7d:d1:6c:ea:36:97:
58:86:ed:5c:8c:6a:a1:b1:70:e7:89:ce:bb:d9:58:ef:07:bf:
5c:cd:10:24:42:4e:77:b0:69:4e:6f:9f:39:95:24:85:2e:54:
89:f3:8f:26:98:f8:28:a2:3a:fe:98:08:05:07:5b:06:8e:02:
23:6c:01:cc:f1:38:90:26:71:c9:21:c5:94:14:41:47:52:33:
42:5b:fc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:45:54 2025 by rpki-client