Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
File: 5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft (raw, json)
Hash identifier: ZDgbNyo0v2Qn2SCh1JPgGVP9wXTXJChmXdqPhBMZ7UU=
Subject key identifier: 21:B6:A8:94:A0:58:13:AC:36:0A:94:D6:A4:43:F3:FE:DF:B6:3E:89
Authority key identifier: E5:72:9E:E8:96:36:BA:34:FE:56:BD:72:E7:58:F5:82:AD:E7:0E:52
Certificate issuer: /CN=e5729ee89636ba34fe56bd72e758f582ade70e52
Certificate serial: 0194BBCEF505E707BBDF43D802616D4FA350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
Manifest number: 3D
Signing time: Fri 31 Jan 2025 10:01:29 +0000
Manifest this update: Fri 31 Jan 2025 10:01:29 +0000
Manifest next update: Sat 01 Feb 2025 10:01:29 +0000
Files and hashes: 1: 5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl (hash: H8O1hdBfvVkxD/mxtILTT99F35ja7mqZAZWDjRS4K04=)
2: GqkvkcQA2bbgQwHJ2b6jWAleiGg.roa (hash: EGM2nICbqAUwB5CP81F3mXlaWH5q4kAR9J7Mx82LHRQ=)
3: U_pf5mr7mVogKbgEVCSPIKt6P1Q.roa (hash: A+REPWck5DlDgbp9k+f3tR4pBhovVcICYPMhumJUrjo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f5:05:e7:07:bb:df:43:d8:02:61:6d:4f:a3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5729ee89636ba34fe56bd72e758f582ade70e52
Validity
Not Before: Jan 31 10:01:29 2025 GMT
Not After : Feb 1 10:01:29 2025 GMT
Subject: CN=21b6a894a05813ac360a94d6a443f3fedfb63e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3d:87:f9:6f:2c:69:16:15:0d:df:42:5a:04:
7f:99:01:c6:8a:5f:f9:e2:d9:a6:75:29:7f:e8:a0:
35:1b:a1:0f:cd:2a:59:3b:ef:ee:6f:61:c5:c1:a8:
5c:98:22:70:62:50:15:90:f3:33:9f:ec:79:15:b0:
39:8d:8e:90:10:e8:d9:dc:5a:87:d7:87:1e:cd:50:
3e:9d:ec:31:c6:92:13:ae:21:4f:11:62:c1:72:e9:
a4:e1:f6:5e:7a:c3:9e:59:d6:bc:32:49:78:10:cb:
22:aa:16:51:7c:45:4e:4a:c6:2a:cc:21:ef:79:98:
12:36:1d:01:93:df:f0:43:fc:67:dc:58:a4:a8:d0:
c9:56:bf:a5:9d:85:95:e6:b5:9e:18:3a:91:da:51:
94:42:35:ef:72:fb:86:0e:a4:e2:58:20:00:7d:11:
9e:54:52:d1:5a:0f:3d:89:b8:f8:10:17:df:d3:23:
a9:d4:60:85:d7:82:a6:94:5b:74:cb:b9:54:10:46:
f6:42:b8:19:d8:8b:c4:0a:8e:42:a1:27:24:a5:b7:
9b:57:cd:f9:15:56:78:d3:cb:2c:fe:4e:a7:77:9d:
52:a4:82:6c:1f:7e:6a:50:76:a0:63:dc:b4:7a:41:
8e:1f:e5:d5:6e:35:27:68:5b:0c:39:e0:f5:6e:b3:
89:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B6:A8:94:A0:58:13:AC:36:0A:94:D6:A4:43:F3:FE:DF:B6:3E:89
X509v3 Authority Key Identifier:
keyid:E5:72:9E:E8:96:36:BA:34:FE:56:BD:72:E7:58:F5:82:AD:E7:0E:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XKe6JY2ujT-Vr1y51j1gq3nDlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a17ae7-8e86-43fd-b850-c138bd1c171e/1/5XKe6JY2ujT-Vr1y51j1gq3nDlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:f5:cf:8c:56:4b:92:5e:3f:fb:da:b1:86:73:fe:49:08:a1:
b7:c0:a6:5b:89:f7:26:2a:46:df:f9:9e:43:a6:bf:50:f4:15:
fd:31:97:d1:c6:4c:a6:45:f8:62:4e:d2:29:eb:97:e4:3d:d7:
cf:23:fc:7e:ac:77:16:94:a8:66:fb:d7:6c:60:cc:64:9a:88:
cc:63:6f:9e:6b:f3:ae:54:df:92:11:da:51:c8:ab:4c:c0:cf:
d2:e2:33:d2:bd:e0:b0:ed:6c:7e:40:bb:23:1b:c2:bc:82:7f:
0e:d4:87:6f:1d:56:5b:af:f8:61:d4:9a:09:95:0c:80:59:6f:
ba:4d:8c:81:32:b7:5b:43:5f:2b:3e:59:50:41:33:14:86:b9:
92:24:c2:eb:7b:2b:34:95:74:8e:b4:eb:d8:d3:70:5d:b2:a9:
82:b8:6d:d6:e2:1c:29:df:e9:86:98:d2:fd:7c:29:c0:c5:83:
d5:af:06:3b:ee:11:2c:4d:58:9c:19:4e:02:ab:29:58:30:f2:
2c:13:44:96:ce:d6:54:1c:0d:bd:4f:8d:f7:30:5e:71:f2:fc:
a5:31:60:ad:42:33:80:b7:74:99:b3:02:48:e4:f3:ef:ed:71:
0d:1b:93:72:2a:32:ab:ef:6c:c3:cb:70:8d:d3:c4:89:43:ff:
42:d9:cf:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:38 2025 by rpki-client