Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
File: 5yHQ6mg8xnWULAmPWcQRyGDorto.mft (raw, json)
Hash identifier: v8/y5KD9js6cNVNRiX9RcEkPmpd1mfc+kgZHrB+JPiI=
Subject key identifier: FB:96:46:7A:44:8E:F6:00:6C:A2:8D:84:FB:D6:3F:75:45:19:E9:E7
Authority key identifier: E7:21:D0:EA:68:3C:C6:75:94:2C:09:8F:59:C4:11:C8:60:E8:AE:DA
Certificate issuer: /CN=e721d0ea683cc675942c098f59c411c860e8aeda
Certificate serial: 0194BCE063BFC260EAD18898FC388AC99F7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
Manifest number: 0B
Signing time: Fri 31 Jan 2025 15:00:09 +0000
Manifest this update: Fri 31 Jan 2025 15:00:09 +0000
Manifest next update: Sat 01 Feb 2025 15:00:09 +0000
Files and hashes: 1: 5yHQ6mg8xnWULAmPWcQRyGDorto.crl (hash: jrwbHkNh5SJ9l+YD982szB93CmQKQVCZsHOPjWX/5Yc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:63:bf:c2:60:ea:d1:88:98:fc:38:8a:c9:9f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e721d0ea683cc675942c098f59c411c860e8aeda
Validity
Not Before: Jan 31 15:00:09 2025 GMT
Not After : Feb 1 15:00:09 2025 GMT
Subject: CN=fb96467a448ef6006ca28d84fbd63f754519e9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:af:d2:3d:05:b4:8a:20:a2:06:d7:2c:d8:7d:
23:ef:cc:a1:50:ea:a1:10:82:ec:9e:ab:08:3e:c7:
b7:f8:6e:9a:6c:e9:c8:02:61:9e:bb:f1:c8:8b:20:
89:98:c9:c7:30:fc:a1:ac:36:f1:bd:c3:00:23:e8:
3c:44:a7:4e:9c:c5:dc:db:4f:6d:e8:d3:62:60:e8:
fa:6e:a7:5f:13:50:7c:c7:f7:9c:61:0b:aa:be:ef:
e4:80:6b:78:1c:26:1f:95:a6:b1:7c:e0:98:23:d1:
10:6f:11:79:b5:e1:65:68:fa:88:18:2b:f2:8a:b1:
83:a4:ae:d9:a1:df:4a:b7:d2:c5:98:79:50:d3:2c:
74:d8:5c:49:b2:3d:72:7c:04:97:7c:17:24:46:a4:
fb:74:ad:b0:e6:29:90:46:e8:34:e0:9d:84:71:49:
e1:cf:3a:7c:4b:b0:98:2d:93:de:95:34:25:d4:3e:
f4:17:56:db:ce:ee:e6:a2:c4:4c:44:df:1a:09:fe:
ba:20:c8:40:7b:d7:fa:0c:f3:83:9b:bc:d8:f6:4c:
8e:6a:71:f8:5b:5d:c9:6d:de:85:89:2b:88:ff:ea:
57:1f:07:f2:a2:24:7c:ca:d9:a1:90:46:df:3b:df:
3c:2c:24:d7:4a:25:e8:a3:ec:06:36:c6:9e:18:57:
33:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:96:46:7A:44:8E:F6:00:6C:A2:8D:84:FB:D6:3F:75:45:19:E9:E7
X509v3 Authority Key Identifier:
keyid:E7:21:D0:EA:68:3C:C6:75:94:2C:09:8F:59:C4:11:C8:60:E8:AE:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5yHQ6mg8xnWULAmPWcQRyGDorto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/841257-9d93-4918-a8ae-72ca13dfad2b/1/5yHQ6mg8xnWULAmPWcQRyGDorto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:87:11:2f:95:bd:15:98:9e:96:50:36:7e:41:e7:d1:e7:c4:
dc:05:dc:f9:19:5a:64:f0:ce:4f:2d:59:be:6a:d8:42:85:e6:
3b:6b:1e:4a:ae:91:7d:2e:a6:57:54:c6:68:8a:39:b4:51:8a:
2e:c2:dc:69:de:5b:fb:01:51:31:3a:ea:58:a3:98:df:fb:5c:
56:38:6d:c3:95:f8:e1:7b:ec:b9:d9:2a:d2:bc:59:28:1f:49:
1a:0c:66:b5:a2:32:2d:8d:69:8c:67:91:d9:1c:a9:19:f3:9f:
00:ee:85:5f:88:93:de:af:2f:0d:40:25:04:f6:7c:80:88:b4:
e9:26:78:05:42:87:a6:a8:61:8d:4f:98:0f:0a:6b:6e:55:e7:
bb:2a:ed:fa:35:57:46:30:ee:4f:d1:52:9b:31:29:6b:33:ad:
30:cb:6b:c8:cd:86:e2:84:ff:bd:02:5f:f9:89:c0:5f:22:b1:
57:35:62:28:41:1b:43:1d:82:81:6c:af:31:53:46:fe:7c:44:
58:5f:25:c2:e9:df:1f:35:42:f5:29:6a:40:a7:5c:30:fb:a7:
89:db:79:74:60:c0:05:b6:d5:a1:8e:52:e7:3e:64:c2:d4:4d:
b4:94:44:ad:fa:63:42:13:19:bf:ea:dc:29:70:22:6f:54:f3:
f9:7d:e2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:38:37 2025 by rpki-client