Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft
File: 5YW66mL41gYmJIc4xF370iFzf0w.mft (raw, json)
Hash identifier: 470Nsn6p9vGEsls5GGBUW26pp8pWIl59OU+5TBiOj8A=
Subject key identifier: F3:DC:41:12:02:6E:DC:A3:BA:9E:E3:63:74:68:44:F2:AB:E7:E9:D3
Authority key identifier: E5:85:BA:EA:62:F8:D6:06:26:24:87:38:C4:5D:FB:D2:21:73:7F:4C
Certificate issuer: /CN=e585baea62f8d60626248738c45dfbd221737f4c
Certificate serial: 0194BC0514B342A1581D5B458EF6EF72630D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YW66mL41gYmJIc4xF370iFzf0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft
Manifest number: 13BA
Signing time: Fri 31 Jan 2025 11:00:37 +0000
Manifest this update: Fri 31 Jan 2025 11:00:37 +0000
Manifest next update: Sat 01 Feb 2025 11:00:37 +0000
Files and hashes: 1: 5YW66mL41gYmJIc4xF370iFzf0w.crl (hash: 5i41nwRjw8ELzbAGzs9oD+qrpA89zM6TZtltfku//zw=)
2: 8aYlnDZg4v75vC6LNHm5OghRmm0.roa (hash: ST2fwGD3DZOiSeI3vgn+uSP6XW7Dy6QYeIzwYCfP/n0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:14:b3:42:a1:58:1d:5b:45:8e:f6:ef:72:63:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e585baea62f8d60626248738c45dfbd221737f4c
Validity
Not Before: Jan 31 11:00:37 2025 GMT
Not After : Feb 1 11:00:37 2025 GMT
Subject: CN=f3dc4112026edca3ba9ee363746844f2abe7e9d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3b:21:f3:73:7d:64:a5:c9:0b:20:58:4d:b0:
30:fa:1b:b0:00:70:cc:4e:bd:93:ac:30:6a:78:89:
81:0f:e2:2a:26:89:a7:3d:0e:69:55:c0:16:9b:a7:
86:07:84:af:83:e3:2a:7d:af:1b:8b:45:db:2a:2c:
89:5b:5e:90:73:97:9a:04:2f:4d:ae:f2:72:7b:43:
35:70:d0:c7:da:04:c8:03:51:75:9c:fa:7e:bf:27:
04:ed:4c:28:38:eb:dc:eb:ae:d2:64:5a:30:bf:82:
78:c5:2f:49:8b:fb:92:88:28:01:19:e6:e6:09:59:
93:f8:a3:f2:40:ac:d2:8b:30:80:e6:a4:97:f7:13:
58:9e:70:8a:19:be:56:50:e8:ce:91:13:44:e7:36:
4c:ca:bf:b4:39:fd:08:ab:ea:f4:06:82:b8:09:ed:
14:d7:ef:82:e7:e2:6d:62:57:7f:12:77:33:3d:c7:
74:6c:bc:ec:70:eb:7e:a6:26:f0:f5:93:ba:47:17:
2d:a7:bc:bf:d9:4c:84:d8:18:45:da:57:47:6a:8a:
bf:bb:15:e5:9d:61:b4:a7:5c:b2:fd:e1:ff:9c:e8:
0c:2a:71:5f:78:db:65:8a:9c:48:aa:0b:e3:01:77:
84:cf:17:6d:32:1c:2a:ca:57:fe:51:05:66:5c:a6:
e0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DC:41:12:02:6E:DC:A3:BA:9E:E3:63:74:68:44:F2:AB:E7:E9:D3
X509v3 Authority Key Identifier:
keyid:E5:85:BA:EA:62:F8:D6:06:26:24:87:38:C4:5D:FB:D2:21:73:7F:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YW66mL41gYmJIc4xF370iFzf0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/bda3ef-4a2f-4ccc-b295-b22eb948515c/1/5YW66mL41gYmJIc4xF370iFzf0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:34:75:53:12:81:e2:79:94:f0:c1:cd:86:7d:b4:75:53:37:
39:df:29:43:04:32:5b:24:c5:f2:4b:70:9b:3f:06:6b:41:1b:
ae:a4:19:87:a4:88:e4:45:99:78:3b:98:f2:04:20:f3:79:68:
48:ac:a1:11:be:ab:08:ee:f2:f0:5a:60:46:09:28:d0:37:c9:
1d:e6:a7:58:71:9a:d7:4c:0e:dc:d9:55:6d:46:eb:ef:2f:9f:
74:92:a7:88:eb:7a:a3:25:d2:40:48:16:29:45:9a:d4:d1:46:
c5:bc:50:9c:e3:99:f8:98:0a:eb:a5:d2:4d:47:61:74:d4:ff:
99:fe:46:78:7d:c3:eb:52:7e:51:a8:b7:68:b2:e7:48:18:e5:
14:4c:7f:e1:ac:a9:bf:52:a0:6b:94:7d:1a:a0:5a:6a:af:71:
f1:e9:d0:39:cf:ea:02:3b:8a:4f:37:77:2d:8a:9e:bc:e2:7f:
1b:81:12:90:bb:2a:b0:99:95:d7:1a:55:61:db:63:e1:72:33:
d1:f8:1a:2c:08:da:f6:79:92:8b:75:3a:e6:4f:55:41:32:bb:
2b:b6:f5:51:9a:59:f4:12:0d:cf:92:ac:9c:67:01:32:af:16:
23:ba:c7:3b:f7:1d:f6:84:49:8e:ed:4a:d5:44:bb:2f:d8:23:
c1:55:96:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:40:23 2025 by rpki-client