Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.mft
File: 553FQ1otyX42X_SVcMBNUT9vztI.mft (raw, json)
Hash identifier: IKfDxdPEk8QckOPB1Pk1+QRNqOZuzgTJp7t4Kf4zVvQ=
Subject key identifier: 5F:3D:8B:88:EB:9A:8C:F2:06:CD:56:15:57:34:F5:80:38:21:5D:03
Authority key identifier: E7:9D:C5:43:5A:2D:C9:7E:36:5F:F4:95:70:C0:4D:51:3F:6F:CE:D2
Certificate issuer: /CN=e79dc5435a2dc97e365ff49570c04d513f6fced2
Certificate serial: 0194BD4E775C0ECBAA5E18C99979ED742CC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/553FQ1otyX42X_SVcMBNUT9vztI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.mft
Manifest number: 0D7B
Signing time: Fri 31 Jan 2025 17:00:23 +0000
Manifest this update: Fri 31 Jan 2025 17:00:23 +0000
Manifest next update: Sat 01 Feb 2025 17:00:23 +0000
Files and hashes: 1: 553FQ1otyX42X_SVcMBNUT9vztI.crl (hash: 4AzqKKpRzHYY8eCQMMyXnpuyyYIt+dQGX8BqEcg6r/Q=)
2: Ojwfa5xEijMvd_j_LAOzs7vnqW4.roa (hash: BXNYaUB0Zfc7mvCgmarWMLrgrg5dZOzYs8T6+u6yFW0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:77:5c:0e:cb:aa:5e:18:c9:99:79:ed:74:2c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e79dc5435a2dc97e365ff49570c04d513f6fced2
Validity
Not Before: Jan 31 17:00:23 2025 GMT
Not After : Feb 1 17:00:23 2025 GMT
Subject: CN=5f3d8b88eb9a8cf206cd56155734f58038215d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a2:6d:16:a4:16:13:03:68:d4:41:98:81:40:
90:64:70:50:31:bc:f5:34:f3:dd:95:2c:37:ce:11:
3d:1d:e1:36:e7:22:bb:23:ed:fd:e6:3b:62:f1:5a:
00:8a:b6:4e:0c:09:e5:c5:53:ca:ec:a5:7d:8b:b5:
ac:92:fc:d4:e4:ac:07:b8:cf:41:58:fb:30:a4:57:
a6:73:88:31:96:ee:bd:bc:9c:6e:5a:46:98:e6:54:
aa:8c:97:0a:4f:7e:4f:d4:17:df:43:42:7b:4d:44:
4a:83:ca:17:26:32:97:03:f6:0a:fa:db:19:a6:aa:
3d:e6:1f:02:40:dc:b4:cb:38:a9:6f:98:03:4a:42:
04:4b:9f:b1:a4:a2:4d:61:50:0c:05:60:2a:70:cb:
c8:5d:4f:c4:79:a5:4f:7c:01:54:58:8f:3b:91:88:
ba:7c:ce:7f:f5:81:04:1c:a3:85:24:9f:53:dc:d3:
5c:bf:70:08:ce:44:da:ec:9a:f6:00:a0:7c:48:55:
6e:73:03:82:56:d6:8b:66:78:fa:8b:fd:cb:1a:4a:
86:73:16:6d:39:92:9a:a7:19:c8:35:54:c5:f2:45:
c0:e2:f5:1d:61:f2:c7:96:4d:3a:43:5b:5c:ad:26:
c5:68:a5:01:a4:79:e1:0a:e1:43:61:74:ba:d8:23:
62:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:3D:8B:88:EB:9A:8C:F2:06:CD:56:15:57:34:F5:80:38:21:5D:03
X509v3 Authority Key Identifier:
keyid:E7:9D:C5:43:5A:2D:C9:7E:36:5F:F4:95:70:C0:4D:51:3F:6F:CE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/553FQ1otyX42X_SVcMBNUT9vztI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:03:24:f2:78:04:a6:6b:8b:c9:73:2f:c0:e0:34:d6:ff:42:
97:a5:3e:84:3c:49:2b:b4:58:ce:53:1a:44:d1:f2:ee:aa:f3:
95:2c:a9:cd:75:a3:5c:b9:95:e4:1f:46:3d:e4:49:0c:57:64:
79:04:0a:7b:d1:61:f8:20:2d:47:eb:26:16:69:14:40:28:7e:
c4:fe:43:31:3b:4e:a8:71:c0:bd:49:c9:06:8c:f0:ae:57:f2:
a4:14:e5:bc:e9:2e:fb:bc:32:6c:e5:62:44:42:da:9e:53:66:
04:7f:64:91:5c:7a:dc:f6:f3:ca:bf:be:c8:76:f4:07:9b:e3:
35:68:02:3c:ad:79:1e:09:75:42:e0:17:85:25:79:3c:9b:1a:
1b:cf:36:b4:66:44:91:35:af:8e:90:95:1b:0a:91:e7:0c:83:
92:99:25:80:1b:d3:77:3f:1c:20:d4:e4:c2:67:19:64:4a:be:
55:bc:2b:f8:56:2e:5d:2b:60:c4:06:99:f9:1c:c5:37:da:6b:
8a:d4:ab:bb:ef:6b:21:4a:18:2e:a0:6c:5d:22:6f:5f:3c:7c:
e3:fd:6d:78:8a:9d:d9:bb:8a:3b:49:b3:2f:87:8a:30:a2:21:
ca:01:5c:a0:12:44:7b:ef:43:8c:fb:ef:ca:62:05:d5:d5:c7:
91:25:01:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:26:19 2025 by rpki-client