Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
File: 5pXPs2_lofOEzHeK4pmsq4HCe_o.mft (raw, json)
Hash identifier: /kuYlX8NMLgd4u9jsnJ8jvI7Au7ymq+LEWlyvpnrqsw=
Subject key identifier: 4F:D5:F2:34:2C:AD:FE:F7:67:73:56:EB:6F:97:C8:17:92:6D:62:D8
Authority key identifier: E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
Certificate issuer: /CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Certificate serial: 0194BC04F55E0BF2391B56C42A992EF2FF1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:28 +0000
Manifest this update: Fri 31 Jan 2025 11:00:28 +0000
Manifest next update: Sat 01 Feb 2025 11:00:28 +0000
Files and hashes: 1: 5pXPs2_lofOEzHeK4pmsq4HCe_o.crl (hash: G2rERYibxobY/1MJFUKrfmp48W+78cCZ/Gv6TxDiibs=)
2: QdF1_Zq92wXCrTWLXFHsTX1fLOE.roa (hash: 3ntgOindNlTLmT1RU6YRq18wFcBPHz2TO/Rc5iQY6kw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f5:5e:0b:f2:39:1b:56:c4:2a:99:2e:f2:ff:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Validity
Not Before: Jan 31 11:00:28 2025 GMT
Not After : Feb 1 11:00:28 2025 GMT
Subject: CN=4fd5f2342cadfef7677356eb6f97c817926d62d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:32:33:77:c7:d1:22:44:17:db:c5:71:48:64:
67:87:1e:bf:1a:b5:bb:ce:d3:36:51:14:e7:b8:d4:
64:08:f9:55:af:b0:b0:2b:15:5b:97:ad:ab:55:4f:
3d:e7:a6:cc:ad:0d:2c:cb:06:3d:33:bc:c1:f7:ce:
40:ee:6f:c3:49:e5:cf:e8:74:73:6b:18:54:37:58:
56:8b:c5:d1:88:47:81:d2:2f:09:07:c0:5f:6a:aa:
9a:59:bf:f1:63:0e:04:d3:58:f0:b0:32:fa:c6:95:
f5:08:e3:74:0c:32:76:29:d3:21:64:be:38:42:34:
12:88:c4:b7:4e:07:7f:35:9e:93:10:8c:cf:a0:fe:
1b:cb:e2:98:9e:a3:df:33:3a:b2:44:91:d7:c3:b0:
a9:0b:81:83:9b:98:25:29:f9:41:05:c6:fc:f4:9e:
71:02:fb:7b:67:41:57:9a:47:2c:0d:bd:32:59:5a:
42:82:c5:27:ff:a5:1e:88:4a:01:7d:10:c6:86:e1:
17:a7:48:83:2a:b4:04:69:93:f0:38:54:07:2a:eb:
0f:ce:da:9d:f4:22:e8:0c:a7:e1:4f:51:a2:51:50:
eb:f8:fa:f5:a0:66:b3:50:cb:9f:3c:2a:53:fc:5a:
71:16:83:fa:45:82:e0:8b:0e:8d:02:bf:d4:c0:92:
6d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D5:F2:34:2C:AD:FE:F7:67:73:56:EB:6F:97:C8:17:92:6D:62:D8
X509v3 Authority Key Identifier:
keyid:E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:36:0c:1b:10:2c:0f:37:68:3f:61:64:d8:fc:e6:60:6e:0b:
9b:56:4f:f7:82:85:62:bc:be:d6:90:f7:ee:38:30:f0:3d:76:
7a:f6:c3:44:f5:da:bc:20:e6:39:b0:0e:c1:2a:b2:8e:28:8a:
1e:05:97:e9:a7:85:5c:61:06:b2:9a:70:94:9f:d2:a5:98:5c:
56:02:f6:ca:8f:75:1b:3d:31:01:95:a8:f1:11:dc:01:96:47:
ae:63:3e:33:99:e5:c2:c3:f6:a5:23:89:08:70:55:ce:c6:7f:
b7:f0:92:b2:49:85:a3:f1:61:56:00:9b:ae:25:de:ce:89:f4:
a1:f2:4c:a1:3c:c0:39:c8:86:fe:78:62:68:18:6e:4a:94:0d:
f6:6f:ad:4c:fa:0d:17:40:af:78:49:d7:01:b7:53:d9:64:45:
bd:17:79:db:6b:ab:17:e1:84:a4:bf:f2:3d:de:08:b7:8f:b3:
8d:a3:51:16:c9:68:7d:ef:8c:2e:a4:c3:2a:7b:95:05:a4:41:
e1:96:e7:40:c1:11:2d:39:12:91:91:9c:3b:ec:6b:8b:3d:13:
a0:bd:f8:7b:41:02:e5:89:ae:ae:b1:66:54:df:92:9e:eb:e7:
6e:6f:7a:93:59:a6:b3:c4:43:5b:b5:77:ae:0e:39:b6:b3:25:
27:2e:10:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:56:38 2025 by rpki-client