Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
File: N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft (raw, json)
Hash identifier: VOl58u1QdArCoCe1UPOyluYt4oOYhGBcII5g1uS0Ols=
Subject key identifier: A4:F5:5C:02:0E:BC:85:15:F9:B1:69:AC:90:A8:9F:AA:0B:F2:68:3B
Authority key identifier: 37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
Certificate issuer: /CN=379cd67c0c18959239358553229e91f543cc5a5f
Certificate serial: 0194BC3C59A1A6DD078A65641C6547F95ED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
Manifest number: 140D
Signing time: Fri 31 Jan 2025 12:00:59 +0000
Manifest this update: Fri 31 Jan 2025 12:00:59 +0000
Manifest next update: Sat 01 Feb 2025 12:00:59 +0000
Files and hashes: 1: 4I-6pUBuhpnNk_pbMH3X7d2ARgw.roa (hash: sibDBbjHGj/0cV6Q2SgY8FXb2d2DZJUAVvA8r4si5j0=)
2: N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl (hash: 6ZEE7BPNtIvqPY0nrGzWazlltdzOgYELaxfKnQOCo/U=)
3: rWytEJ3FiAYVl_Gh2eAbgXCpgnc.roa (hash: N2Jpj3ow/5rvsnHjtA7tEJKRTrNoSnYmSjGqItrSpc0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:59:a1:a6:dd:07:8a:65:64:1c:65:47:f9:5e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379cd67c0c18959239358553229e91f543cc5a5f
Validity
Not Before: Jan 31 12:00:59 2025 GMT
Not After : Feb 1 12:00:59 2025 GMT
Subject: CN=a4f55c020ebc8515f9b169ac90a89faa0bf2683b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:26:4d:d1:94:8c:a6:a1:33:d3:fe:a1:54:96:
bc:87:0e:6e:3c:42:53:fa:d5:3d:97:06:0a:69:8d:
ef:96:31:1f:71:69:43:86:f8:3b:9a:74:9f:af:ea:
45:5a:04:3b:81:76:8d:bf:15:03:b3:4d:25:c8:bb:
92:91:71:b2:9a:96:8b:3b:27:2f:67:ea:81:5f:fb:
c0:3b:43:fe:81:2e:5f:c6:d8:06:35:b4:f2:66:11:
f8:53:05:8e:5c:a7:63:09:f4:2e:c1:de:6e:5f:57:
85:75:df:11:e3:91:f5:8e:c8:e3:9d:db:6f:6d:c6:
2f:66:64:98:85:45:ad:58:f6:b0:2f:9b:29:e3:10:
44:2e:d2:2b:b4:eb:79:1d:a0:3b:71:7c:19:b0:42:
a7:50:f9:c9:da:eb:05:85:9b:c2:de:9e:bc:d7:56:
90:46:2e:10:c1:1d:d7:a1:21:83:22:0f:fb:ce:69:
71:99:38:53:f5:56:7d:fb:27:36:be:ff:16:79:92:
a6:35:f6:18:f7:49:4a:13:18:da:bd:73:02:f7:ab:
55:1e:4b:f1:01:2f:5c:1f:d4:1a:34:18:1e:eb:cb:
46:69:45:48:9b:7e:0d:12:57:8a:d3:66:12:bb:74:
b9:9e:9e:dc:e1:85:6f:ad:f8:75:ed:ee:db:e2:0e:
c5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F5:5C:02:0E:BC:85:15:F9:B1:69:AC:90:A8:9F:AA:0B:F2:68:3B
X509v3 Authority Key Identifier:
keyid:37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e3:71:2e:3c:87:5e:3d:49:02:39:b2:e3:21:c1:62:f3:ce:
58:01:48:3c:19:c8:15:08:5c:12:a6:0e:24:93:b9:f4:09:f0:
30:aa:d9:c7:a9:97:33:49:78:67:24:32:7b:58:0e:1b:0e:f6:
7d:55:e6:2b:a4:3f:ed:44:dd:3c:ad:47:d8:cc:56:a0:1d:d6:
91:a8:0a:d5:f2:7e:29:0f:ac:8c:2b:2e:89:7d:0b:2b:93:b7:
74:88:9c:b8:e9:93:6e:d2:c1:da:c5:a2:bc:1b:be:8a:87:5b:
d1:30:ee:67:03:b0:8e:0c:72:60:9f:e9:3e:a5:b3:ae:93:cf:
fa:f2:1d:0b:43:bb:ac:ea:26:84:56:a0:50:2b:d4:32:f3:bc:
34:90:d6:08:e9:71:37:d3:3d:65:49:e7:3c:27:28:8f:4b:e6:
ea:d7:a4:2e:a2:07:3e:db:e8:a3:66:ac:2f:bf:24:29:01:98:
9e:e0:c1:32:3e:0e:85:68:31:59:e6:90:cd:8d:59:81:17:b2:
b5:18:68:23:2b:3f:65:25:47:0e:eb:6b:64:a8:07:47:b2:39:
b2:d3:00:78:69:87:35:d4:f1:8b:ae:ae:81:9c:d0:f0:d2:b1:
9c:2e:7d:23:0b:08:d5:1e:91:7a:53:60:0c:0d:8e:1a:e4:19:
b4:bb:a1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:38:27 2025 by rpki-client