Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
File: _5JbpaQQRnlkY0z_SvrXelbaRyI.mft (raw, json)
Hash identifier: ZyHHF46F8ZEvq/kNzhWAoJXJd8BTv39e5CC+5Yk+p4I=
Subject key identifier: 5A:AD:BD:21:28:C7:D2:6B:3A:06:29:55:B0:7C:DC:7C:21:59:49:3A
Authority key identifier: FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22
Certificate issuer: /CN=ff925ba5a410467964634cff4afad77a56da4722
Certificate serial: 0194BCE0EEF2233F5197175E4EC7B8021C8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
Manifest number: 02B9
Signing time: Fri 31 Jan 2025 15:00:45 +0000
Manifest this update: Fri 31 Jan 2025 15:00:45 +0000
Manifest next update: Sat 01 Feb 2025 15:00:45 +0000
Files and hashes: 1: 9w0Rti9UPZRyrIWU5NOMy8Ud8C0.roa (hash: ZfEurcdpYDkivnXtecQQ+AVyXc0rQ0W3ilxhEsJxMBc=)
2: _5JbpaQQRnlkY0z_SvrXelbaRyI.crl (hash: VivRnjHvwOh6xsEQVHTXdaBDbCVQSpwhY8fWxUi755c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ee:f2:23:3f:51:97:17:5e:4e:c7:b8:02:1c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff925ba5a410467964634cff4afad77a56da4722
Validity
Not Before: Jan 31 15:00:45 2025 GMT
Not After : Feb 1 15:00:45 2025 GMT
Subject: CN=5aadbd2128c7d26b3a062955b07cdc7c2159493a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:35:29:22:cf:60:bc:87:33:13:10:12:84:a5:
34:13:31:9c:d6:61:96:d2:32:11:27:c9:b1:f8:ee:
0c:b7:20:25:11:01:d5:04:4f:aa:43:57:ce:a8:e3:
34:c5:27:d2:83:86:ee:bf:cb:bb:ac:88:59:2d:64:
10:f7:01:bf:d6:e0:ac:6d:33:25:eb:58:ed:39:63:
42:eb:81:34:5a:ed:f7:0c:cd:a4:34:13:26:42:34:
b9:db:13:24:4b:39:e8:54:37:4d:6c:9e:52:ae:f4:
0e:6a:7f:d9:f0:40:ea:af:f9:2f:92:cb:43:77:75:
f5:81:d1:24:e7:e8:9d:d7:52:8f:69:64:e3:df:dd:
55:ee:74:8f:ce:3a:c0:7d:4d:0c:ca:56:a3:20:72:
bf:d3:c3:bc:30:fa:f3:07:72:41:aa:14:31:c7:e3:
3f:e6:36:70:0a:9f:76:f5:1e:f6:66:24:ee:5f:6a:
02:e7:1d:5e:19:53:f7:ac:aa:20:64:ad:8a:d1:1b:
c0:50:2c:7c:45:47:38:47:58:1c:db:55:9c:b7:e3:
7f:e2:f0:aa:63:ca:b9:bd:84:dd:d0:fa:ea:74:05:
00:66:17:6b:d6:9c:0b:1f:43:b7:67:f1:86:ed:38:
89:88:7e:6c:1c:2b:d9:34:76:d8:fa:87:4b:18:96:
81:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AD:BD:21:28:C7:D2:6B:3A:06:29:55:B0:7C:DC:7C:21:59:49:3A
X509v3 Authority Key Identifier:
keyid:FF:92:5B:A5:A4:10:46:79:64:63:4C:FF:4A:FA:D7:7A:56:DA:47:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5JbpaQQRnlkY0z_SvrXelbaRyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c68e5f-8efa-43ff-890f-272960bc4322/1/_5JbpaQQRnlkY0z_SvrXelbaRyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a5:98:15:7b:17:0f:2f:ea:9f:31:98:cd:ac:1b:7b:ba:88:
20:2d:c8:e3:d3:38:d8:ae:b6:b2:1e:95:32:b9:5b:4c:a5:fd:
39:6f:02:04:96:dc:22:f4:91:ce:ae:26:97:ad:53:ae:58:26:
54:f9:8d:f8:a9:07:da:5a:f3:4b:63:07:92:6b:24:2c:d1:03:
ea:d8:24:dd:02:9d:75:94:e9:7c:ac:15:44:5f:8a:1d:2f:f4:
b7:ae:3a:86:4b:0b:30:97:e7:2c:c3:11:ad:93:c0:bd:0f:f8:
1c:5e:30:3e:99:7b:20:d3:57:1a:58:42:5c:7c:64:f8:81:47:
29:bb:45:4e:ba:01:6c:cb:9c:8d:13:df:93:bb:eb:27:e3:9a:
2e:24:c8:0e:3e:ca:6c:96:ad:ca:96:f7:95:a8:48:a3:75:06:
37:89:60:d3:aa:d6:15:51:af:cc:90:7d:a0:37:09:61:8e:00:
ef:bc:05:ec:50:92:01:ce:41:d6:2b:c4:57:08:3f:81:db:ca:
29:3e:a4:46:be:98:5b:a0:de:d0:cd:88:51:b7:b9:3e:aa:25:
42:88:11:25:e2:2a:a1:31:04:03:84:32:89:3d:4d:12:09:fc:
4f:4a:8d:9f:2b:48:11:f9:9e:56:1f:f8:06:7e:ad:8f:84:05:
0d:9a:30:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:56:24 2025 by rpki-client