Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
File: 5hvX3R-KyLQZK6eKWSNItd0KGmY.mft (raw, json)
Hash identifier: 4SpiBygc6QwAfWVRVxgptz1RXzEGxO5vfoB7MLHGwss=
Subject key identifier: 1E:B4:D2:CF:FE:99:D2:58:B9:8F:BA:D0:59:64:14:1F:0D:9F:43:FC
Authority key identifier: E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
Certificate issuer: /CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Certificate serial: 0194BCE0839E85C682F00AE09FD476FAC2D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
Manifest number: 10CB
Signing time: Fri 31 Jan 2025 15:00:17 +0000
Manifest this update: Fri 31 Jan 2025 15:00:17 +0000
Manifest next update: Sat 01 Feb 2025 15:00:17 +0000
Files and hashes: 1: 2sfbpTFq0DQ2ocw7VVE3LVSDIlg.roa (hash: bGHxMUrGetZJKedW/fXRi55NBwExBw0dc8Dq21HOgOY=)
2: 5hvX3R-KyLQZK6eKWSNItd0KGmY.crl (hash: UrbHg0ZD2X7H/11ISsNCtdmKvLOCh0y2GY5ZykLb9kE=)
3: F8PtMRv-e6nREGszq9sbkJV_Kts.roa (hash: +n0+96obQJHfnpZ5fXZoRpPeMFlicL38jLddAnTRZlk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:83:9e:85:c6:82:f0:0a:e0:9f:d4:76:fa:c2:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61bd7dd1f8ac8b4192ba78a592348b5dd0a1a66
Validity
Not Before: Jan 31 15:00:17 2025 GMT
Not After : Feb 1 15:00:17 2025 GMT
Subject: CN=1eb4d2cffe99d258b98fbad05964141f0d9f43fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:55:dc:2b:9b:f1:cf:6a:1f:cf:3f:55:27:00:
74:79:fb:b0:87:2c:9f:80:4e:f8:44:9f:48:18:cc:
7a:9a:f2:7f:8a:4e:b4:0a:90:68:79:11:af:9c:17:
f8:f8:02:30:58:c2:1e:e9:32:46:6c:d3:8b:20:c9:
61:d0:5f:9a:4f:56:c7:49:b3:33:5b:1a:d2:98:9f:
f3:89:46:b9:f3:eb:ef:35:71:91:63:6e:32:d2:32:
0d:b0:19:ff:f1:64:a0:86:b8:b8:4f:f8:d9:e8:f1:
25:30:3a:32:88:8a:ed:00:e6:c1:87:37:09:2f:10:
4d:ab:43:76:a8:e7:1b:e7:68:45:22:06:43:eb:c7:
bc:c3:3d:80:38:b7:bd:ac:c5:bc:b7:80:dc:6a:02:
f4:ab:bc:c7:25:7a:b4:5f:46:cc:be:12:71:a1:de:
8b:e9:68:f2:f9:5c:f4:d2:1a:43:4e:23:14:28:db:
08:63:bd:aa:c3:98:01:b1:17:a4:9b:7d:e8:70:25:
65:a9:d0:b0:bf:a0:7d:47:cc:47:55:8b:51:27:93:
de:e0:6c:46:04:85:03:ac:7b:4f:93:9c:86:33:ea:
9b:1f:28:54:15:b9:8d:12:78:89:f9:08:57:de:65:
0e:e6:90:47:cd:59:75:a6:3b:62:ec:eb:79:62:63:
4c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B4:D2:CF:FE:99:D2:58:B9:8F:BA:D0:59:64:14:1F:0D:9F:43:FC
X509v3 Authority Key Identifier:
keyid:E6:1B:D7:DD:1F:8A:C8:B4:19:2B:A7:8A:59:23:48:B5:DD:0A:1A:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hvX3R-KyLQZK6eKWSNItd0KGmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4acc15-bba0-4459-9667-de9b2f8f7e29/1/5hvX3R-KyLQZK6eKWSNItd0KGmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:5a:0d:1c:32:c8:81:c4:0b:8e:c3:0d:4a:25:09:b0:11:5e:
a8:f9:4e:13:ed:56:5c:1d:d0:cc:ba:b0:14:dc:5e:08:e3:23:
1b:bb:fb:99:32:a9:c1:bc:a5:41:cd:95:27:51:43:67:f3:f1:
bf:b5:e4:e3:82:25:ac:73:f0:ae:c4:cf:a3:37:d1:55:af:78:
dd:9b:28:d3:2d:85:c7:a8:2a:50:2b:2e:ac:21:17:79:47:18:
cc:b1:68:09:80:2e:c0:d1:1c:8b:ea:b8:91:fc:06:e0:0a:d4:
8f:e7:0d:15:db:98:a6:b1:40:04:83:fe:e3:3d:71:0e:81:ac:
62:d1:a3:a7:99:45:c0:0f:5a:a0:92:26:87:54:ea:39:f7:4c:
51:b1:d0:99:3d:25:f1:f1:1b:5c:ab:0d:78:13:02:5d:64:ff:
c1:fd:50:e3:3e:d2:e4:22:2f:7c:aa:0e:79:22:79:42:39:2b:
ba:99:ba:cb:c3:51:5f:41:fd:90:58:0b:3a:50:18:9a:f9:6a:
8c:a4:ce:59:82:07:28:51:34:31:a0:08:aa:83:81:03:95:88:
32:e0:10:b1:b1:9b:d1:70:ad:1e:3b:1a:9c:24:e9:20:2f:04:
02:1a:39:76:c4:4a:6b:0d:d6:85:b1:05:61:60:73:e4:25:ef:
be:d8:d1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:14 2025 by rpki-client