Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
File: 5tM83lfaCcfZM3ce6hQllAdvmiM.mft (raw, json)
Hash identifier: r9GKwBNenFb6zET5l2JnQbuxM2jxntz8KrSMh3Ta5ec=
Subject key identifier: E8:F7:2B:62:19:A0:91:2C:53:E2:05:86:E5:6A:6B:3B:4E:76:AC:E3
Authority key identifier: E6:D3:3C:DE:57:DA:09:C7:D9:33:77:1E:EA:14:25:94:07:6F:9A:23
Certificate issuer: /CN=e6d33cde57da09c7d933771eea142594076f9a23
Certificate serial: 0194BD17478762313D7822BC7FF63D5EBE1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 16:00:06 +0000
Manifest this update: Fri 31 Jan 2025 16:00:06 +0000
Manifest next update: Sat 01 Feb 2025 16:00:06 +0000
Files and hashes: 1: 5tM83lfaCcfZM3ce6hQllAdvmiM.crl (hash: nz3P9JDD4s8JlOhpekBJFxxeBcqsGfvURwD5d9wT8SA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:47:87:62:31:3d:78:22:bc:7f:f6:3d:5e:be:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6d33cde57da09c7d933771eea142594076f9a23
Validity
Not Before: Jan 31 16:00:06 2025 GMT
Not After : Feb 1 16:00:06 2025 GMT
Subject: CN=e8f72b6219a0912c53e20586e56a6b3b4e76ace3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3b:d9:83:d3:6e:c7:b8:d0:48:16:c9:d8:aa:
f3:a1:4e:87:6d:7d:90:b3:3e:11:38:a0:01:84:32:
25:d8:8e:b4:a9:ec:3c:b6:e9:51:cd:e8:cf:5a:6c:
a3:9c:0b:5c:f1:80:1c:ba:7c:22:ed:e0:99:59:fe:
93:69:9f:3e:99:5b:72:8c:de:93:68:d0:ac:16:a3:
8a:c0:e8:35:3c:69:bc:e4:d8:10:95:69:8f:99:4b:
c7:e5:d2:1b:3e:0b:fb:e5:e8:23:73:eb:5a:37:63:
ee:a2:e3:31:59:56:0e:13:a4:70:2b:74:04:71:48:
cf:d5:ca:05:3a:4c:37:29:f3:a8:a9:4c:1f:78:af:
02:52:7d:a0:4d:08:d0:70:44:48:b3:92:96:7f:0a:
14:3e:4c:60:ad:79:14:57:03:85:89:75:7e:91:fe:
86:de:0b:04:d6:46:fe:51:1c:ed:f2:8f:2e:1e:42:
95:32:26:64:19:f6:fc:2c:1d:ce:15:d2:e7:a5:93:
b8:01:fb:f5:28:4e:59:1b:39:93:1c:01:8c:0b:35:
a3:dd:3c:c0:54:24:2e:95:5b:74:75:89:e8:ad:bc:
86:11:59:13:0d:14:5e:28:4b:61:82:53:42:f7:a8:
b1:f3:a5:f0:e0:50:39:3a:fd:b7:82:a6:26:4e:94:
9a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F7:2B:62:19:A0:91:2C:53:E2:05:86:E5:6A:6B:3B:4E:76:AC:E3
X509v3 Authority Key Identifier:
keyid:E6:D3:3C:DE:57:DA:09:C7:D9:33:77:1E:EA:14:25:94:07:6F:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:57:da:4e:06:fc:87:b3:99:e0:2d:e6:df:b3:58:0b:67:03:
94:02:07:b9:be:f1:9c:46:d5:46:1b:dc:46:27:e8:d1:74:d4:
6b:df:67:16:50:e6:ee:0d:7c:2f:d5:29:93:cc:a7:7a:5c:28:
19:e2:60:28:1b:e3:bf:08:61:07:f0:c9:72:fc:e7:67:ff:39:
67:89:11:24:53:fd:94:d8:7d:c2:50:31:d9:56:16:c3:29:66:
c3:4d:cc:c2:c6:b3:0e:86:bf:61:bf:c0:58:40:5b:37:bc:9a:
91:13:e4:86:92:69:1e:fc:9b:dc:bb:82:6e:20:35:02:da:13:
a7:ef:93:31:de:c3:e9:52:42:57:99:4f:8f:f7:26:1a:c5:58:
45:86:e4:16:be:44:02:1f:de:84:2d:47:76:9c:5a:b9:90:73:
02:68:5d:70:4b:53:51:56:04:e4:e6:58:54:91:11:f8:f4:48:
c9:d8:22:28:31:02:b5:f4:74:ec:61:de:e5:bf:ac:76:1f:52:
31:70:14:5f:03:42:6a:0d:17:8e:26:71:7d:3b:74:8d:c9:45:
c7:9a:9f:8e:2f:0f:5b:b3:e8:5f:09:88:4c:15:0d:74:66:7c:
c3:4b:66:b7:a7:ef:98:f0:37:31:f2:5e:ad:38:90:49:95:a1:
e6:53:b7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:18 2025 by rpki-client