Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
File: 5RZFNJeeYKVkcBIysuUgCIlUJgY.mft (raw, json)
Hash identifier: L8TyrDSX77euyyPJzrr2F3oQIEiCE9jC0jraSWZBXJo=
Subject key identifier: A8:03:AD:61:4A:AA:6A:50:39:F3:0D:6A:F4:75:A2:4C:59:1A:85:9C
Authority key identifier: E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06
Certificate issuer: /CN=e5164534979e60a564701232b2e5200889542606
Certificate serial: 0194BCE0C05B7C0C28809114F8ABBCB792D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
Manifest number: 04D7
Signing time: Fri 31 Jan 2025 15:00:33 +0000
Manifest this update: Fri 31 Jan 2025 15:00:33 +0000
Manifest next update: Sat 01 Feb 2025 15:00:33 +0000
Files and hashes: 1: 5RZFNJeeYKVkcBIysuUgCIlUJgY.crl (hash: 4O2QV01ot2GBdQR9HswrCQcHzUyLhapcQf96h5mETrI=)
2: d099hTA9N0rBX0a4mIMTtvx7dLM.roa (hash: LT02ny7o04CIcPy2ptlO2f83f/uDQvGL+KruqdAn2tw=)
3: jfgLmk_8BZt8FNL99fA-Isnp7jU.roa (hash: 3hldq5xpp8oSt4a5EF6tgPHwrwLntpc0Iw/stE0N/MY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c0:5b:7c:0c:28:80:91:14:f8:ab:bc:b7:92:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5164534979e60a564701232b2e5200889542606
Validity
Not Before: Jan 31 15:00:33 2025 GMT
Not After : Feb 1 15:00:33 2025 GMT
Subject: CN=a803ad614aaa6a5039f30d6af475a24c591a859c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1c:a4:6e:6e:80:6d:32:14:b8:6b:b7:97:81:
75:82:5e:7e:ad:d4:d3:5e:3a:19:ba:48:a8:33:c0:
8a:3b:25:45:1f:47:60:58:3e:78:53:ea:cf:21:e7:
06:b0:b9:be:2d:fc:5c:33:57:c9:cd:fd:3c:d6:c8:
9e:47:fb:7d:a3:e8:2e:54:24:5b:1a:5a:b5:4d:f5:
6b:e1:c6:f1:d9:41:14:3d:5d:56:f4:1e:71:90:66:
1b:bb:8c:37:ae:51:82:e8:bc:3c:24:91:71:c2:d2:
d8:be:08:59:85:db:09:17:82:20:09:de:69:7d:a9:
ca:ad:47:d4:fa:81:dc:e8:19:2c:a3:81:56:8d:45:
3e:c4:5f:a5:d3:1f:e1:f1:aa:df:8a:73:16:0f:60:
b1:bd:06:5a:cd:50:66:cb:26:ba:a6:5b:87:91:59:
34:91:ba:f3:fa:64:0b:b3:63:3d:10:c6:94:ae:e0:
7a:02:89:26:c1:69:13:ea:08:ff:a9:76:43:ba:96:
f5:29:89:fa:3c:df:f0:e2:ca:ca:5b:41:1c:d1:61:
6c:7e:7b:b9:41:e4:15:a5:5f:91:48:db:96:3d:9d:
be:b5:30:4a:71:6e:27:66:12:09:63:c1:6c:15:f4:
04:29:e2:1b:48:84:57:dc:d6:c3:67:83:af:7b:be:
db:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:03:AD:61:4A:AA:6A:50:39:F3:0D:6A:F4:75:A2:4C:59:1A:85:9C
X509v3 Authority Key Identifier:
keyid:E5:16:45:34:97:9E:60:A5:64:70:12:32:B2:E5:20:08:89:54:26:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5RZFNJeeYKVkcBIysuUgCIlUJgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e77d7b-bc0f-4635-8101-d1eeb29c951b/1/5RZFNJeeYKVkcBIysuUgCIlUJgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:c5:7d:6c:9b:56:6c:85:c7:5c:33:bd:b7:23:54:26:f4:13:
47:a6:1e:13:26:ee:f0:02:14:3b:aa:2d:f3:a8:81:fe:de:e0:
e8:be:3e:02:b1:04:50:c8:53:17:4c:68:b4:11:a4:89:bf:18:
9a:e1:7a:0c:d0:a4:4b:60:28:0e:8a:3c:3c:cc:06:0d:83:bf:
f4:63:d9:bf:2b:04:22:0f:fb:42:ef:fb:57:96:5b:5e:bb:e5:
d7:b5:0d:4b:26:bf:ba:27:04:d7:d8:2a:37:b9:ab:4c:15:14:
99:5c:ad:9a:2e:13:07:25:07:43:59:ee:74:cb:fe:6b:e0:35:
a9:41:20:32:73:f0:84:ec:c1:c5:45:95:48:d5:a3:33:98:6f:
6e:51:bc:d9:b5:a6:97:ef:11:fc:45:68:e7:b5:d3:11:5f:91:
c3:3e:9c:9d:46:3b:81:55:50:74:39:42:93:aa:57:b8:a6:b6:
23:2b:b8:34:3c:b7:07:ee:95:78:a4:11:2f:c4:cd:2c:a3:21:
85:02:5f:3a:16:37:46:81:72:cd:ab:2e:40:e0:f5:ce:51:43:
49:30:2c:dc:03:d0:0c:63:43:3d:9e:b7:12:23:5e:bc:40:46:
99:98:f1:e4:0b:04:fe:94:1b:43:df:29:bf:97:1d:f8:d9:0d:
e1:51:e2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:04:57 2025 by rpki-client