Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
File: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft (raw, json)
Hash identifier: 1USxvtEa8xUZU/wbjnpazhfh15qLLCaKvRB1VFe4muU=
Subject key identifier: D9:5B:CD:14:52:19:2E:77:AC:CA:D8:2D:8A:63:35:E3:D2:D7:68:A0
Authority key identifier: E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
Certificate issuer: /CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Certificate serial: 0194BD17A07FE2473F1584910008298DED74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:29 +0000
Manifest this update: Fri 31 Jan 2025 16:00:29 +0000
Manifest next update: Sat 01 Feb 2025 16:00:29 +0000
Files and hashes: 1: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl (hash: HqCmvu6M64EkUckhkfD8dEH4xZDzmeeCYSjlMGcsWyg=)
2: H9LigG1-eoyksArBLiDVRw0BhjU.roa (hash: oha3QLmkXpQFYs1KCF6A8sqvDCo/E/9M5bF7ey6N14M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a0:7f:e2:47:3f:15:84:91:00:08:29:8d:ed:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Validity
Not Before: Jan 31 16:00:29 2025 GMT
Not After : Feb 1 16:00:29 2025 GMT
Subject: CN=d95bcd1452192e77accad82d8a6335e3d2d768a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:09:d6:85:af:7f:de:b7:e4:01:48:bf:44:b6:
6b:5d:7e:c8:4c:f0:bb:74:8a:1f:c0:1e:fd:d3:d7:
bd:e2:da:c1:65:ce:61:f5:ee:78:fb:2f:72:ff:9d:
0c:09:ce:cd:50:b3:aa:72:3a:8e:32:69:05:71:fc:
3b:25:91:89:59:36:85:b1:5e:cf:8f:af:94:af:2e:
fd:02:76:0b:49:4f:6f:0f:72:60:74:d7:09:f6:ff:
b0:d6:9f:e0:f3:30:09:b0:a7:dd:06:c5:97:df:a4:
de:30:6d:48:14:23:18:65:93:08:76:4a:30:c9:49:
bb:ce:54:38:c2:47:9f:a8:fa:9b:dc:83:a2:5f:df:
fd:16:fe:80:29:93:35:e0:11:7e:ea:43:43:6e:a2:
55:94:95:75:09:bb:3b:c8:7b:6e:9c:f8:6b:8c:fa:
23:b3:f6:6c:8e:bc:6b:ce:5b:4e:76:5c:c9:68:c5:
61:8b:b6:0b:a5:bc:ea:73:9b:7d:2b:40:fc:bb:a4:
2d:e7:08:62:20:98:41:62:44:7b:93:05:06:fd:d8:
92:c0:1c:b8:bf:22:0f:52:96:ed:0c:6a:8f:1f:3e:
05:63:7f:ea:55:30:3a:db:4a:0d:ee:29:32:39:1d:
e7:60:4f:b6:5c:7b:9b:b3:e0:95:7c:bd:86:f5:42:
a9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5B:CD:14:52:19:2E:77:AC:CA:D8:2D:8A:63:35:E3:D2:D7:68:A0
X509v3 Authority Key Identifier:
keyid:E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:2c:6e:d5:38:da:a1:70:2d:99:f7:56:1a:9b:22:c9:13:96:
36:50:7a:82:02:ee:2d:44:7c:0f:4f:5b:6c:c3:11:d7:3a:55:
be:56:49:87:45:34:2e:36:7d:1f:82:bf:0b:04:59:cd:9a:e9:
64:60:64:28:3d:d2:b2:fc:50:a2:67:15:56:bd:de:38:f4:4e:
27:70:d1:7c:fc:66:32:37:07:f1:b8:37:03:20:73:f2:90:4f:
27:c6:d5:dd:95:b1:db:83:47:12:b6:bd:65:d7:e9:28:e4:08:
ca:9a:d7:62:d0:db:4f:aa:f3:7f:86:69:c8:8c:2b:f2:a4:72:
6e:fa:d4:ce:a7:07:47:3f:48:07:3f:30:1e:10:b9:45:d8:3f:
78:ff:8a:4d:ee:00:f4:9d:b2:8c:03:ed:c7:66:6c:5e:b1:06:
df:0e:b2:f3:01:aa:b5:94:ee:73:42:aa:92:77:39:ee:0a:6b:
5a:c0:e5:fb:6e:4d:36:90:5b:4b:d0:b7:5e:28:7c:42:0a:8d:
13:39:2c:23:a3:5d:68:1f:48:90:84:ad:5b:ee:90:43:df:00:
13:22:b3:cf:fd:90:21:71:3a:b1:9e:50:46:3c:56:1e:d7:a4:
ea:cc:9b:7d:25:fe:2b:0c:75:b7:6e:50:e0:de:3b:4f:5f:05:
55:2b:1c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:43 2025 by rpki-client