Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
File: 5z3xVch6WQrB5ThUTPM1bk_IF0g.mft (raw, json)
Hash identifier: bEdCM81q6ziifYxaU0mNONSEo0kAKc88iwpQ6mmr1JI=
Subject key identifier: 74:27:C5:8A:78:AA:C2:A2:86:C3:D6:EA:4D:D0:11:0E:95:B8:07:AD
Authority key identifier: E7:3D:F1:55:C8:7A:59:0A:C1:E5:38:54:4C:F3:35:6E:4F:C8:17:48
Certificate issuer: /CN=e73df155c87a590ac1e538544cf3356e4fc81748
Certificate serial: 0194BC72B4035AC60053400EC29038B5A955
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
Manifest number: 13CC
Signing time: Fri 31 Jan 2025 13:00:21 +0000
Manifest this update: Fri 31 Jan 2025 13:00:21 +0000
Manifest next update: Sat 01 Feb 2025 13:00:21 +0000
Files and hashes: 1: 5z3xVch6WQrB5ThUTPM1bk_IF0g.crl (hash: fiqKpvAG2FRgR6qLq9jjNmCcAEBQS4IR6wKHIGun0dc=)
2: pOwukpz6uQtAZQ26wgZyWA0w-Pc.roa (hash: 0LNaJ+BbQgNK+Ci6/J4w+3/assiqy/xOnI28WaXKzkw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b4:03:5a:c6:00:53:40:0e:c2:90:38:b5:a9:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73df155c87a590ac1e538544cf3356e4fc81748
Validity
Not Before: Jan 31 13:00:21 2025 GMT
Not After : Feb 1 13:00:21 2025 GMT
Subject: CN=7427c58a78aac2a286c3d6ea4dd0110e95b807ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8e:71:b8:89:cf:1b:5a:79:d5:35:06:e6:e3:
7d:b2:7c:8a:c2:e0:f9:2a:70:87:50:fb:c9:ad:6c:
57:0e:57:52:cc:05:d0:92:f6:72:de:3c:11:18:df:
4c:9c:ed:6a:55:15:8d:ca:4a:8e:b2:66:37:10:f4:
4b:b2:cf:80:ce:45:6e:f8:e8:f1:4b:5b:40:91:f1:
65:46:18:be:bd:92:c5:4f:65:67:c2:48:e8:e2:6d:
87:31:76:c9:66:82:1d:8f:fc:81:26:c9:5c:c2:25:
83:7d:3d:9c:a0:01:32:f6:db:74:8d:5e:52:2c:e8:
3d:c7:c8:fe:74:89:6f:62:2e:65:d1:50:6a:b7:24:
93:21:e9:02:48:17:f2:af:c3:97:d0:94:a9:dd:35:
06:1d:5b:3c:5a:25:46:ef:d4:aa:c8:e6:bb:fe:e4:
80:66:d4:5c:43:8f:38:e7:cd:fc:55:af:11:c9:81:
34:9f:62:d6:a0:b3:e4:ca:e0:aa:3c:f7:69:0e:6b:
ea:30:52:c7:4c:b2:8e:56:15:3b:f5:ef:87:36:2c:
e1:6e:49:73:54:75:61:cf:80:c4:e8:f4:5a:7c:5f:
f5:46:19:b5:16:b3:98:69:6c:eb:5f:ac:65:41:4e:
a5:11:b4:1e:06:ec:0c:80:95:73:74:7f:36:ac:fd:
e7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:27:C5:8A:78:AA:C2:A2:86:C3:D6:EA:4D:D0:11:0E:95:B8:07:AD
X509v3 Authority Key Identifier:
keyid:E7:3D:F1:55:C8:7A:59:0A:C1:E5:38:54:4C:F3:35:6E:4F:C8:17:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5z3xVch6WQrB5ThUTPM1bk_IF0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/bc57ff-ab1b-4651-95b4-ddd7bf93d356/1/5z3xVch6WQrB5ThUTPM1bk_IF0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:8b:0d:e9:da:db:c2:54:25:19:b8:f1:a1:9d:1f:65:72:b6:
e9:7e:bd:0e:53:12:69:b2:f6:a2:56:ac:3d:20:65:97:44:e9:
a0:ca:a6:db:31:ec:52:f6:35:43:d9:28:39:ab:98:ca:d0:6b:
0d:0e:1c:9f:5f:d2:63:ae:cf:d6:69:c6:ca:45:e8:29:f8:8e:
b2:95:8a:c3:f5:a5:ac:93:9f:cc:e1:b4:cd:9d:ee:b2:9e:af:
fd:ba:be:10:d3:50:c5:5c:c7:36:39:ab:69:f7:b4:64:50:1f:
82:38:f5:ab:fa:1c:d9:84:ce:4f:d9:7b:95:75:a1:51:dd:90:
2c:ce:ae:f2:2e:b8:59:b3:9d:52:8f:b1:da:62:78:aa:40:e0:
76:bb:74:bc:df:34:52:6a:93:fb:5f:a3:2d:0d:38:ae:0d:97:
c5:6e:d7:1a:40:14:76:f9:b8:07:3f:b2:cb:1b:d2:56:59:72:
40:98:40:c9:05:79:61:d5:9d:54:92:0f:61:87:53:2b:f4:97:
d0:44:de:da:05:41:b9:7b:2c:ab:32:79:21:15:d2:d6:31:39:
d8:82:7e:dc:c2:d6:27:46:1e:8c:ea:79:43:e1:6a:b6:61:48:
24:af:75:4d:2e:87:55:c3:97:d4:bc:87:cb:d9:71:4e:a7:08:
85:42:ba:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:01 2025 by rpki-client