Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
File: 5F0K3ClN02bfatqIATTb0OaIzPc.mft (raw, json)
Hash identifier: 0GBnBblUYeZXpGqY58AZlC6oU9jTqBUJhWaW0N4Te6I=
Subject key identifier: 43:65:52:C6:B7:47:18:D7:54:83:F0:04:78:78:EC:A2:96:47:34:28
Authority key identifier: E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7
Certificate issuer: /CN=e45d0adc294dd366df6ada880134dbd0e688ccf7
Certificate serial: 0194BCA998B6E8BCB25AB47DB4CCA88B52DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:18 +0000
Manifest this update: Fri 31 Jan 2025 14:00:18 +0000
Manifest next update: Sat 01 Feb 2025 14:00:18 +0000
Files and hashes: 1: 5F0K3ClN02bfatqIATTb0OaIzPc.crl (hash: uq4WwUWLrPrbQLf4XAWBMpkoqe/ZU400WAyoqepVTK8=)
2: 6_MzG3BJa4ElBBdEF9-BTMf874s.roa (hash: JSnJz2i5mq2wdtkVMI+9lJsfr8mdn46eUbiIUghmOwI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:98:b6:e8:bc:b2:5a:b4:7d:b4:cc:a8:8b:52:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e45d0adc294dd366df6ada880134dbd0e688ccf7
Validity
Not Before: Jan 31 14:00:18 2025 GMT
Not After : Feb 1 14:00:18 2025 GMT
Subject: CN=436552c6b74718d75483f0047878eca296473428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e5:05:86:34:5c:3f:60:25:38:ca:65:07:1e:
2b:85:03:d3:d3:37:b5:f1:1e:c6:03:d6:4d:3c:cd:
ac:43:f9:86:7d:6b:bd:0b:23:55:93:cb:7a:54:ce:
28:8a:dd:ef:07:c1:32:da:d3:fa:04:59:58:99:0e:
67:e1:c5:24:35:3c:dc:92:62:8e:d9:a3:33:54:3a:
ce:b9:14:62:2b:cd:73:fa:4f:08:8f:3c:40:f0:21:
07:7d:0b:e7:a0:65:6c:28:5e:01:5a:7f:4d:c5:cb:
cb:fe:1e:8d:de:89:45:2c:f5:fb:9a:9f:60:5c:9f:
5f:b6:8f:06:ff:68:4f:52:d1:2a:1e:ee:eb:63:bd:
19:dd:83:64:73:dd:e1:27:57:9a:80:68:0e:f8:d4:
f0:ff:00:6e:63:d3:2b:5f:67:7c:67:2c:64:5a:d0:
6a:a4:14:00:97:5c:c9:21:bb:a3:96:1e:aa:5d:53:
d9:95:7b:b9:8b:e0:d0:ed:77:52:8a:ab:46:07:b1:
2d:0f:e1:25:90:62:07:ec:8f:4a:63:57:88:57:ec:
c6:73:30:75:61:34:32:33:82:09:3c:ec:5f:6b:8b:
94:c7:9c:f3:83:91:e4:8a:e5:ca:0a:92:13:3f:67:
b2:a8:65:3c:f6:25:62:eb:b5:d5:8d:81:e6:7a:e2:
e7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:65:52:C6:B7:47:18:D7:54:83:F0:04:78:78:EC:A2:96:47:34:28
X509v3 Authority Key Identifier:
keyid:E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:e4:f1:9e:e7:e6:2e:6f:00:00:8c:85:c2:eb:0a:90:71:22:
26:7e:47:b1:6c:86:c2:42:82:06:27:5b:64:86:88:70:d8:99:
f1:8d:8b:cd:50:5f:52:5c:ef:95:52:e8:fd:ce:86:fa:08:c2:
61:35:2b:58:bb:a3:18:ec:c9:6d:ba:37:b0:5b:c5:17:b8:64:
4c:e2:7b:6c:9c:e0:94:cb:ba:7e:a6:50:81:69:33:5d:42:49:
59:9d:66:53:4d:78:9d:17:12:7b:21:f3:58:73:4c:2d:f9:d6:
30:d1:44:ac:7d:3f:c2:59:04:7d:c0:1f:46:11:74:4d:db:70:
cc:79:8c:09:a1:8d:3e:f5:4d:08:8a:f0:46:26:ad:2d:a1:28:
fb:eb:3a:09:7d:b5:f2:91:43:50:37:26:1f:38:18:30:d1:76:
e4:c8:f6:17:72:c4:2a:0d:e6:e9:68:9c:e2:ab:dd:ac:77:ea:
db:52:03:df:18:2a:11:68:d7:b7:f6:d1:1d:2a:63:ab:ce:55:
89:ce:17:f5:15:ce:28:5c:f9:53:88:b7:02:94:48:df:86:cc:
37:d0:8d:38:82:c9:1b:b3:7e:5f:65:d9:aa:a0:18:1f:e3:0f:
7e:99:a5:00:be:41:70:60:94:36:68:73:e0:c2:f0:42:7d:fc:
67:15:1e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:53:39 2025 by rpki-client