Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/5b-MGBsoDj0oKNobJHe5ECNVlVo.mft
File: 5b-MGBsoDj0oKNobJHe5ECNVlVo.mft (raw, json)
Hash identifier: uwRIPFb1zM06yIEnxXk15yJtKQfzbk72TylNZ80K6L8=
Subject key identifier: 17:25:E8:0C:BF:A9:8D:BE:E5:94:59:82:46:85:BE:DD:E1:94:BB:4E
Authority key identifier: E5:BF:8C:18:1B:28:0E:3D:28:28:DA:1B:24:77:B9:10:23:55:95:5A
Certificate issuer: /CN=e5bf8c181b280e3d2828da1b2477b9102355955a
Certificate serial: 0194BC052DEE1D5D3B75044A434FC88E6256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b-MGBsoDj0oKNobJHe5ECNVlVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/5b-MGBsoDj0oKNobJHe5ECNVlVo.mft
Manifest number: 1311
Signing time: Fri 31 Jan 2025 11:00:43 +0000
Manifest this update: Fri 31 Jan 2025 11:00:43 +0000
Manifest next update: Sat 01 Feb 2025 11:00:43 +0000
Files and hashes: 1: 5b-MGBsoDj0oKNobJHe5ECNVlVo.crl (hash: 3vy8ffjyBEz9wym0iZRcRL80sOWXF+2QtxImR84m2b4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:2d:ee:1d:5d:3b:75:04:4a:43:4f:c8:8e:62:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bf8c181b280e3d2828da1b2477b9102355955a
Validity
Not Before: Jan 31 11:00:43 2025 GMT
Not After : Feb 1 11:00:43 2025 GMT
Subject: CN=1725e80cbfa98dbee59459824685bedde194bb4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:eb:a4:dd:53:51:32:cd:82:26:34:9f:3d:bb:
90:67:19:f4:0f:d3:06:1b:22:c7:77:cc:c8:c2:b8:
37:da:ae:11:7d:2d:85:fe:6c:37:4b:71:3f:d8:17:
42:60:3a:2e:16:0f:3a:e8:f9:8c:7a:d1:5b:9f:0c:
e9:15:65:74:db:79:6b:98:5c:a3:06:0f:ab:0b:a3:
5f:67:88:c2:a6:fc:da:34:af:76:81:8e:fa:eb:f3:
3a:3e:ae:7a:c3:53:73:c1:b3:49:b0:67:ed:29:b2:
95:56:5e:da:48:93:bc:c8:6f:c6:2f:7e:b0:76:c4:
75:f5:29:6c:be:ce:54:b0:b2:92:6c:32:35:86:5a:
25:3d:ae:7a:7f:7b:92:b0:fa:34:15:af:2d:80:5d:
a3:31:bb:e5:68:bb:70:69:7e:31:fd:e2:f2:c5:3c:
ad:5c:52:f5:d5:56:40:82:ac:f5:0c:88:bf:3e:16:
c4:3f:cd:37:7a:40:71:b7:2c:c2:cf:fa:2a:cf:47:
b3:2a:42:e4:4a:69:a0:36:c7:cd:96:e1:58:2a:20:
6d:43:e8:ad:32:1b:7d:eb:61:ea:75:03:e2:2f:8b:
d6:0e:b8:4e:f2:fb:42:4c:e8:dc:db:c9:d9:01:3a:
de:10:cb:5e:67:dd:f4:be:8d:59:2b:76:e9:6d:10:
81:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:25:E8:0C:BF:A9:8D:BE:E5:94:59:82:46:85:BE:DD:E1:94:BB:4E
X509v3 Authority Key Identifier:
keyid:E5:BF:8C:18:1B:28:0E:3D:28:28:DA:1B:24:77:B9:10:23:55:95:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b-MGBsoDj0oKNobJHe5ECNVlVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/5b-MGBsoDj0oKNobJHe5ECNVlVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5f4524-234c-491b-9964-182f1bac640a/1/5b-MGBsoDj0oKNobJHe5ECNVlVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:2b:a0:65:14:1c:68:37:2a:da:5e:32:e3:82:ff:f5:d6:47:
17:71:89:42:0f:30:4f:d5:4a:79:88:1d:65:6e:29:a8:04:3a:
9e:83:56:4c:71:2a:da:1f:0f:af:73:44:35:c0:93:4c:6f:0d:
1b:22:1d:f3:03:a0:57:28:4b:b0:23:4f:35:63:0b:ae:8e:ca:
34:b0:06:c4:f7:64:b6:0a:39:01:e2:e6:e8:4d:ee:db:b2:c5:
f3:42:e1:20:fa:88:04:3d:25:f9:fd:15:23:5d:97:88:7e:6b:
1e:82:ee:f7:0d:85:44:5e:2b:d9:71:40:e4:a0:31:60:d6:dc:
37:63:30:ff:de:24:0f:d8:b4:d2:f3:b1:a2:9f:b8:74:9b:86:
db:6e:eb:cd:5b:68:c1:d8:ba:66:8b:37:d1:90:41:18:92:e5:
9f:6f:8e:d4:37:4d:8e:b9:dc:3a:c4:65:e9:98:c4:72:5b:5f:
da:db:1a:27:b9:79:dc:5e:6d:9f:b1:c0:bc:04:fd:b1:4d:31:
a9:7c:e5:d3:da:68:98:c9:28:0b:89:e4:20:10:0f:ef:f6:e6:
4c:aa:ae:76:77:93:b1:86:fb:92:b4:f1:cf:c6:36:d9:63:63:
11:05:aa:de:23:ed:e8:57:a5:74:55:f7:33:1e:63:0b:92:21:
80:ad:61:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:56:36 2025 by rpki-client