Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
File: 5jAHYU9ncAssp21gtJQreo5LXOQ.mft (raw, json)
Hash identifier: Qmtr8p1Y/QlhiC/6YrkjcDhfMcdPENE2JdCB5c3ZgFQ=
Subject key identifier: F0:92:D7:CD:40:24:0A:C3:B2:DD:AF:57:4B:77:A7:9A:1F:81:D3:EF
Authority key identifier: E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
Certificate issuer: /CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Certificate serial: 0194BC3C7C207A61387BC5D9E01E9935AB62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
Manifest number: 0561
Signing time: Fri 31 Jan 2025 12:01:08 +0000
Manifest this update: Fri 31 Jan 2025 12:01:08 +0000
Manifest next update: Sat 01 Feb 2025 12:01:08 +0000
Files and hashes: 1: 5jAHYU9ncAssp21gtJQreo5LXOQ.crl (hash: e73R0ikIS80WZcUC9Tm0iTcpKRr+ejYcehFU1Vsjk0w=)
2: KFEMCZhH126h5EdMOEzOYR3jl7A.roa (hash: i0lu4HO1DlJaiLzdVoxYyKbrNJlxsepiYz5nfS8kc00=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:7c:20:7a:61:38:7b:c5:d9:e0:1e:99:35:ab:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e63007614f67700b2ca76d60b4942b7a8e4b5ce4
Validity
Not Before: Jan 31 12:01:08 2025 GMT
Not After : Feb 1 12:01:08 2025 GMT
Subject: CN=f092d7cd40240ac3b2ddaf574b77a79a1f81d3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:18:62:0a:b5:47:cc:72:71:10:a9:ec:aa:44:
8f:24:d1:e4:da:8d:b6:49:18:6c:eb:b8:a8:cf:c7:
2c:b5:4d:d5:6d:f9:3e:de:62:c7:bc:07:11:a2:16:
7e:66:59:b2:2b:43:b4:9d:34:16:33:3c:3a:86:99:
ec:29:42:38:ad:50:e0:c3:d4:99:c9:30:d3:2c:69:
d2:a2:9b:a2:ca:d9:47:f1:37:42:fc:29:66:98:b8:
c0:d0:3d:f2:06:05:0c:5b:8a:c1:49:b7:70:90:0b:
bc:f0:d0:10:d8:34:35:65:21:ec:c5:75:60:5c:4f:
b7:7c:b7:ea:45:41:0b:ac:15:fc:cb:ad:71:4e:73:
04:bb:6a:ac:19:59:34:ba:0f:ca:96:ae:e4:a0:72:
5a:9e:5d:10:91:8a:5c:94:7e:b7:c2:56:c6:82:8f:
70:8d:4b:2f:b7:b2:5b:76:91:95:1b:62:2c:42:ae:
14:e3:75:9d:65:21:f2:63:16:4b:57:a6:a9:8b:f7:
9a:1d:88:5d:45:06:00:da:93:b4:bf:e3:78:25:d9:
6e:2f:1c:eb:26:38:76:90:85:38:0b:ed:e4:86:fd:
d5:99:a2:6f:dc:8b:70:59:3e:6d:ae:16:95:07:8c:
0f:db:ac:51:3d:3d:75:5f:06:fb:59:c3:c8:38:3b:
43:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:92:D7:CD:40:24:0A:C3:B2:DD:AF:57:4B:77:A7:9A:1F:81:D3:EF
X509v3 Authority Key Identifier:
keyid:E6:30:07:61:4F:67:70:0B:2C:A7:6D:60:B4:94:2B:7A:8E:4B:5C:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jAHYU9ncAssp21gtJQreo5LXOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0423db-f233-4922-8024-b21110d8ffa1/1/5jAHYU9ncAssp21gtJQreo5LXOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:20:8d:8d:3f:48:7e:e4:24:c9:d4:91:4a:8c:f9:74:88:43:
ad:7c:81:60:e1:45:59:13:d3:3f:02:1a:19:cf:e9:0e:bf:0d:
f3:48:f8:d9:aa:32:6e:9c:e2:77:ff:68:d7:bd:e7:58:0c:1f:
e3:87:8b:7a:15:79:13:67:27:12:96:11:9a:38:d2:5c:71:00:
ad:cc:85:47:23:10:ce:be:2b:fd:5c:11:c8:a3:29:89:a6:b3:
d3:3c:41:fa:42:da:62:ca:f9:56:c2:d9:ac:5f:c6:99:7c:52:
4c:7a:fd:b0:29:86:16:6e:da:6f:c7:7d:64:e1:bf:af:8e:4f:
0f:45:a8:fc:4d:31:60:c5:3b:b9:03:f3:75:1b:19:50:53:49:
70:c4:dd:94:cc:65:99:84:ce:f2:c6:41:51:45:f8:e7:08:f5:
d1:66:db:30:be:e2:6a:7a:bd:14:ca:9c:bc:38:a6:5a:bd:52:
c3:23:a9:b2:26:b8:05:a5:77:2b:90:5c:a5:c6:9a:8a:3d:4d:
09:85:02:e9:7d:a9:ff:61:95:2e:cc:c3:8a:5c:0c:14:6a:19:
d1:ff:e2:6c:ec:e2:1e:07:87:f4:df:7b:05:c7:bb:ac:fc:81:
9a:b5:c0:d5:9d:cf:6d:a0:ec:dc:bc:ef:21:2a:8e:23:1a:02:
42:f9:2a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:11 2025 by rpki-client