Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
File: 5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft (raw, json)
Hash identifier: jtSpzZfSWU0c7lvaoi3Lw6+hzDaWgiGOxZTLM8InaX4=
Subject key identifier: EC:63:4C:4A:DB:75:C6:64:9B:91:DE:D5:5B:AE:F6:83:60:1F:D8:A1
Authority key identifier: E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94
Certificate issuer: /CN=e5a6794b91b81406412a137870bfde3b170de094
Certificate serial: 0194BBCEF11348E5F415014C1095DC6106CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
Manifest number: 0F0A
Signing time: Fri 31 Jan 2025 10:01:28 +0000
Manifest this update: Fri 31 Jan 2025 10:01:28 +0000
Manifest next update: Sat 01 Feb 2025 10:01:28 +0000
Files and hashes: 1: 5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl (hash: fPiqn2Ugr75fBtnt8di6Nlwzqz4QkR2WkWSLjNFPn3U=)
2: F2wMIUjJA3quoSXko94UBe524io.roa (hash: ohOfNDpG7k23hMoeoYfuhVGMBn9BMoNT8oiUfgHvVI4=)
3: prPQPBCGBqBpkoabw_55gzUQ7HY.roa (hash: yixWji3yzDQEZNnpPankPdWbD3OL+QTc7sxfow3xQl0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f1:13:48:e5:f4:15:01:4c:10:95:dc:61:06:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a6794b91b81406412a137870bfde3b170de094
Validity
Not Before: Jan 31 10:01:28 2025 GMT
Not After : Feb 1 10:01:28 2025 GMT
Subject: CN=ec634c4adb75c6649b91ded55baef683601fd8a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:15:9b:89:27:aa:02:0e:18:c0:d2:31:80:37:
b9:be:10:d0:08:1d:b4:e9:a6:ca:82:65:12:36:e9:
52:99:70:db:73:e7:97:74:d5:88:3a:e2:e1:6b:34:
66:ed:30:61:8a:1b:16:f7:c8:72:6b:37:98:1c:bf:
1b:81:bd:68:d9:9f:0c:11:c0:de:e0:01:e4:6b:fa:
f2:64:f8:1b:be:63:2c:3c:b4:bf:db:ce:74:c4:cc:
9e:82:82:0e:88:9e:ab:f8:f6:b8:36:66:37:b0:93:
b1:eb:94:69:35:e9:f1:ef:24:4a:05:9a:d7:ae:01:
ca:cf:c3:1e:84:2e:0e:82:5c:bf:25:af:58:04:ff:
74:61:1d:38:5c:e3:40:db:e0:8b:34:88:70:59:b9:
bb:b2:c1:4c:b3:4d:ec:06:a9:f5:a2:f3:51:f2:f0:
a1:0f:35:56:8c:f0:e1:97:80:e6:34:a6:1b:fd:26:
5d:05:99:31:92:07:02:45:b6:53:c9:86:31:b8:c1:
ab:2d:e5:92:84:91:7e:ed:44:4f:dc:26:c9:77:db:
00:77:e2:86:ce:2f:eb:89:e6:45:fd:a7:62:37:66:
3b:d2:56:61:1b:ed:1e:9f:94:83:97:14:a5:c2:69:
85:9a:d9:0a:89:75:14:15:c2:12:5a:c2:98:a4:22:
f9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:63:4C:4A:DB:75:C6:64:9B:91:DE:D5:5B:AE:F6:83:60:1F:D8:A1
X509v3 Authority Key Identifier:
keyid:E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:4f:d7:bc:61:3d:32:7d:15:d6:21:7f:1b:ea:1d:e6:5c:70:
01:5e:f2:ff:94:06:04:bf:ec:11:f1:e3:df:85:c0:aa:bc:24:
f0:f7:4b:ce:f7:ae:88:d6:3e:10:26:f6:c9:ff:2b:eb:67:ea:
87:86:30:6c:22:09:85:9f:c6:69:d6:01:a9:c7:22:36:19:fe:
00:f9:c2:24:f2:d9:69:eb:3c:b3:93:ac:55:20:4a:3b:23:52:
71:a5:29:0d:13:45:90:bf:3f:15:b8:95:cd:e9:96:2b:23:8c:
e9:c4:d7:40:9c:0c:df:62:1e:d2:8f:b6:0f:3e:bb:7b:a3:b5:
b7:2c:9d:26:fd:c5:ea:ff:02:2f:a1:c1:3f:c3:1a:41:e3:04:
1e:d0:8d:af:29:f6:56:a4:ea:6e:fa:3d:55:ef:42:ad:b9:fb:
9d:94:69:81:21:39:05:51:df:9e:16:37:91:69:e2:86:c5:53:
9d:d7:7f:8f:e3:19:c3:23:ad:99:dd:e5:52:1b:1a:ca:d1:bf:
19:21:80:4a:ff:33:97:e9:fd:c6:5c:b9:35:1f:e7:56:4b:4a:
af:13:34:c3:23:8d:44:8c:8c:dc:03:bc:d2:10:6f:76:5a:aa:
de:0c:a6:f3:f3:b9:f6:3c:23:da:d6:30:5b:0e:df:3c:e5:f4:
9b:c8:7c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:06 2025 by rpki-client