Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
File: 5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft (raw, json)
Hash identifier: Xj+OmVE8ESCcg30sdxhaa7HeOFqEZYFo3nsSyiFEPuU=
Subject key identifier: 46:71:93:E6:15:2C:68:C2:9F:86:D0:7C:14:3B:77:51:A0:B0:63:E8
Authority key identifier: E5:77:31:EA:85:7B:90:3A:A4:0A:8E:5F:D8:D8:84:46:50:5B:52:33
Certificate issuer: /CN=e57731ea857b903aa40a8e5fd8d88446505b5233
Certificate serial: 0194BD17674080FE8F7AFC98F50085FE3312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:15 +0000
Manifest this update: Fri 31 Jan 2025 16:00:15 +0000
Manifest next update: Sat 01 Feb 2025 16:00:15 +0000
Files and hashes: 1: 5Xcx6oV7kDqkCo5f2NiERlBbUjM.crl (hash: TQPl2Aj/vJ+b0bjopmdMgla+7rbyMJIjM8dzoVhMhGA=)
2: orFnLXI1TH7Jt_MUuyCNlezlJcQ.roa (hash: hsQhpxV8CsTitmZs0YwImGnMA+twiLDEhUnDv5rariM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:67:40:80:fe:8f:7a:fc:98:f5:00:85:fe:33:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e57731ea857b903aa40a8e5fd8d88446505b5233
Validity
Not Before: Jan 31 16:00:15 2025 GMT
Not After : Feb 1 16:00:15 2025 GMT
Subject: CN=467193e6152c68c29f86d07c143b7751a0b063e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f2:3a:eb:ab:0d:2e:c4:a0:84:86:e4:0a:2b:
02:c0:fe:bb:1d:33:ba:da:a5:e2:3f:3a:3f:38:96:
aa:5a:67:e3:ea:12:c4:1b:6d:ec:4b:0b:45:b4:b6:
37:a9:f5:d9:44:ab:2a:c0:f9:f4:cc:f9:54:44:c3:
63:94:82:11:32:e1:1d:c2:b9:5e:fd:d1:b2:79:fb:
c9:b9:dd:9f:12:7e:e5:24:64:95:98:86:29:16:8f:
0c:41:85:db:81:f0:b5:48:3e:fa:13:ac:4c:a7:9a:
50:c0:1f:fd:53:1b:6b:7d:e4:f9:d2:74:2c:05:f8:
c7:17:95:34:ca:64:e5:a8:ad:8a:75:39:12:2a:bd:
5c:c9:98:8c:ca:8a:08:89:f6:49:a3:fc:be:56:2e:
36:ec:10:1b:d0:3b:ef:0e:80:67:f6:7e:9b:e6:88:
90:d3:ad:12:ba:7e:db:5b:bf:79:06:f0:9a:83:f1:
73:8d:43:c4:3f:fa:88:ea:3b:7d:d7:6c:69:37:3e:
98:55:1d:a0:7a:0d:72:cb:64:82:1b:c5:a5:06:99:
f7:b5:3b:92:03:7d:c1:45:bb:63:fe:3e:94:8f:69:
1b:1f:2f:5a:bb:62:b6:bf:d4:86:48:4c:4d:a0:2c:
d7:26:9c:dd:46:f3:fd:7c:3c:21:2c:d2:d2:57:9f:
42:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:71:93:E6:15:2C:68:C2:9F:86:D0:7C:14:3B:77:51:A0:B0:63:E8
X509v3 Authority Key Identifier:
keyid:E5:77:31:EA:85:7B:90:3A:A4:0A:8E:5F:D8:D8:84:46:50:5B:52:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:12:d3:aa:44:19:77:14:aa:fd:e3:36:73:75:a8:b1:2b:f4:
78:99:44:40:06:39:a2:3f:33:1b:1b:4e:1d:2e:8a:e0:e4:56:
f9:bf:07:9b:53:62:93:fc:09:8a:2e:7d:7c:47:df:8c:25:6b:
03:c8:7a:6b:0e:81:09:8c:e0:a9:c6:54:54:79:e0:a4:00:9f:
37:f4:9a:b6:45:51:f7:6b:14:d1:51:71:b0:41:6b:48:c0:a3:
0b:76:d3:83:0d:27:09:86:65:ed:38:8d:82:bf:70:3a:50:3d:
23:35:d5:51:ee:a9:2d:4f:db:e9:03:4d:34:69:ec:0b:b7:79:
6c:81:f3:51:b6:62:89:b9:19:dd:00:8a:22:de:86:33:43:7a:
1b:c5:4e:8f:c9:b3:52:1b:95:28:a8:4d:26:84:72:36:0b:f6:
96:db:f1:90:b9:3e:57:34:eb:29:3d:c6:e6:5e:bb:f7:1a:aa:
60:fb:3a:87:38:06:58:2a:65:b7:02:23:81:1f:99:7a:33:a8:
5b:8a:a5:44:3f:74:99:c5:a7:fe:18:1f:1e:ec:3e:18:6f:a7:
77:2f:ce:8e:7e:a2:f3:be:c7:2d:96:30:87:fe:c9:02:0f:09:
45:46:5f:c2:24:c8:10:c1:8f:6b:8c:3c:2a:23:a4:3f:49:bb:
cc:1c:2a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:18:51 2025 by rpki-client