Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
File: 5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft (raw, json)
Hash identifier: MApkr0m1J4NVgdDxAm+TlfC+OXRmnjGfRrdPcE18bV8=
Subject key identifier: 06:2C:C7:D8:89:8A:2F:64:E6:0B:44:BA:E4:EF:80:99:C9:61:71:F3
Authority key identifier: E6:7B:C1:2B:36:85:71:6D:8E:F6:56:7E:21:90:41:94:37:7B:E1:E5
Certificate issuer: /CN=e67bc12b3685716d8ef6567e21904194377be1e5
Certificate serial: 0194BC72B8F4002501FD2CFE5F409EFEE629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 13:00:22 +0000
Manifest this update: Fri 31 Jan 2025 13:00:22 +0000
Manifest next update: Sat 01 Feb 2025 13:00:22 +0000
Files and hashes: 1: 5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl (hash: 9vFfpaNCwDlNNk4mbTbWhE09k8NUlE6hnQuK3kjF9hk=)
2: CK8AO5cGK3UQexwKT4OQnvAc618.roa (hash: FFxKHiRId03ta3Wbr3GQyhjQH1qxb15B+KbsuejkB8s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b8:f4:00:25:01:fd:2c:fe:5f:40:9e:fe:e6:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67bc12b3685716d8ef6567e21904194377be1e5
Validity
Not Before: Jan 31 13:00:22 2025 GMT
Not After : Feb 1 13:00:22 2025 GMT
Subject: CN=062cc7d8898a2f64e60b44bae4ef8099c96171f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:af:1c:4e:b5:d0:aa:20:67:36:e8:ee:82:3e:
7a:7f:95:5d:8e:6b:29:42:df:b9:a7:56:8a:5a:a4:
72:c7:28:88:d1:08:53:6f:3d:88:04:a2:c8:3d:02:
84:5c:99:07:35:5a:b9:4b:c8:45:ed:ab:e1:af:71:
a1:4e:8b:86:b9:d9:df:25:14:35:ee:ee:d9:17:a6:
34:44:b8:cc:fc:c0:f8:3e:a4:c8:b0:c7:fc:54:b9:
1c:30:e8:01:ee:75:1c:b4:dd:5d:38:22:1a:f2:9e:
68:60:a1:dd:1b:95:bf:4f:22:49:ea:6d:eb:de:14:
4e:5b:c4:0b:d4:f2:54:61:7a:f8:a9:7b:30:6b:97:
2c:bc:be:67:1b:2b:49:34:1a:82:92:8d:dd:af:2b:
20:a5:3e:51:bc:10:a2:a3:98:8c:8d:6a:f8:c4:54:
6f:25:1a:0e:d4:b3:0b:70:4e:b7:8c:6b:d8:21:09:
3b:71:32:77:0f:3c:20:12:2b:ea:e6:f6:3a:a7:e9:
aa:e9:43:f9:8b:09:db:1a:43:cb:6c:25:1a:00:c6:
d6:40:02:13:eb:88:b8:06:03:98:eb:cc:5d:52:96:
72:f2:72:fb:04:00:f2:02:d3:9b:77:8e:7c:5f:97:
ac:c3:48:f6:e9:35:14:c2:38:cf:a3:db:67:4f:3d:
d2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2C:C7:D8:89:8A:2F:64:E6:0B:44:BA:E4:EF:80:99:C9:61:71:F3
X509v3 Authority Key Identifier:
keyid:E6:7B:C1:2B:36:85:71:6D:8E:F6:56:7E:21:90:41:94:37:7B:E1:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nvBKzaFcW2O9lZ-IZBBlDd74eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6afa85-367a-4efd-a311-41172b249740/1/5nvBKzaFcW2O9lZ-IZBBlDd74eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:37:39:fc:67:94:0f:1e:27:1d:87:31:23:2d:43:ac:d8:7b:
f0:74:cc:3b:87:a8:21:bf:85:da:2e:dc:b1:41:12:85:48:c4:
ed:60:06:ed:0c:4f:1e:12:ea:75:cc:c1:fd:9d:71:64:6c:e2:
1b:03:cc:3a:4c:32:14:81:a7:30:7e:5f:ac:92:7f:b5:0c:86:
50:92:9c:f2:69:7c:a1:9a:5b:e4:9c:a2:4c:0a:15:1b:bb:78:
d0:3c:ef:ce:4a:32:99:27:a0:6f:6a:bd:cf:90:52:cc:35:34:
41:04:9f:ed:58:e7:3c:55:ca:8f:75:74:76:6a:d2:e5:a9:4e:
d2:d9:e4:16:69:4b:c1:d0:10:fd:3c:d4:00:92:03:ad:40:c6:
da:1e:84:6c:fe:4a:9a:d1:52:09:73:0a:ba:e9:bb:45:a2:13:
d9:96:97:9a:91:f8:c6:3d:e2:10:58:62:ac:1c:ed:08:65:d7:
ad:d1:2b:14:cf:58:05:c8:d3:d3:75:2f:ed:bd:79:b3:ed:2d:
b9:a1:69:23:ef:00:ad:63:dc:e8:59:13:2a:cf:5e:59:41:2e:
de:ab:e2:60:31:ca:48:70:3f:4f:98:ef:d7:d5:1a:83:76:bc:
ec:d0:ee:05:ef:9a:39:5d:69:7a:25:38:d0:19:44:00:25:a3:
c8:91:20:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:35:47 2025 by rpki-client