Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
File: 5GWsyQgJ77RczaJQoQV2GElLhus.mft (raw, json)
Hash identifier: sWdHbF7OBBy/OSQuFjhAKKI5/zUhVr/L9kh5Qukimpg=
Subject key identifier: 9D:DF:C7:2C:70:14:8F:F9:76:3E:FC:0A:C1:8B:5F:75:66:D9:FC:D7
Authority key identifier: E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB
Certificate issuer: /CN=e465acc90809efb45ccda250a1057618494b86eb
Certificate serial: 0194BD4E705D04321897FC55CA4D9D1C8B0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:21 +0000
Manifest this update: Fri 31 Jan 2025 17:00:21 +0000
Manifest next update: Sat 01 Feb 2025 17:00:21 +0000
Files and hashes: 1: 5GWsyQgJ77RczaJQoQV2GElLhus.crl (hash: omHBukuyso37c4HEl8U4qrDQLbI6lB6r3Ip3dckf1i8=)
2: HXkMZsrBmT3pdly4pNHClnxxiAs.roa (hash: uINrlSFHfmPOAUFp+GFnrxpC6bCJm76Z7RhHxB80xWI=)
3: g56Uh-QZpNYvH0QrLNbigssPnrQ.roa (hash: wrpYwLhb1No98RIDJLncVQMkGDqMDtvmrpGIa2b7nWc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:70:5d:04:32:18:97:fc:55:ca:4d:9d:1c:8b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e465acc90809efb45ccda250a1057618494b86eb
Validity
Not Before: Jan 31 17:00:21 2025 GMT
Not After : Feb 1 17:00:21 2025 GMT
Subject: CN=9ddfc72c70148ff9763efc0ac18b5f7566d9fcd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2f:db:25:e4:cf:41:6b:e6:14:8d:5d:94:cf:
5b:88:40:75:33:29:81:e5:23:9d:6f:2c:f6:6b:5e:
bf:c9:5f:c7:c1:ff:aa:f8:27:bf:7a:e4:d5:f7:1d:
d1:74:17:eb:6c:32:d8:6e:f8:a4:15:eb:c4:6c:df:
0e:23:bf:f8:09:82:66:9d:24:d2:c9:0b:0c:7e:c7:
3b:85:0f:72:c1:27:ff:3c:bc:e9:d0:c3:5e:e8:b1:
ec:13:5e:8d:d3:4d:73:e1:7e:0a:96:0c:05:51:b4:
a9:1c:05:9d:32:6a:72:72:10:32:9f:c9:28:8e:2a:
56:93:33:65:89:da:91:32:1f:ac:35:b2:27:82:c3:
1b:ad:23:ca:ac:22:bc:ba:74:45:d2:ba:2f:49:d6:
87:16:d9:17:b4:94:3b:9a:8c:e0:58:a2:c2:3f:89:
40:dc:37:cd:a0:fc:4c:2d:b8:3d:7b:f4:af:b6:d8:
c4:b3:e5:4f:02:5f:be:77:38:6e:12:27:32:04:94:
72:eb:e9:2a:06:76:39:aa:7e:24:5d:9c:1b:ae:c2:
7f:86:44:3c:e3:1e:ed:60:cf:dd:f4:b1:e7:65:7b:
67:ca:32:e2:8f:a0:42:cd:7f:3b:ae:fe:3d:7c:56:
64:cc:4b:d3:67:be:50:f4:d9:9e:40:09:fd:64:37:
02:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:DF:C7:2C:70:14:8F:F9:76:3E:FC:0A:C1:8B:5F:75:66:D9:FC:D7
X509v3 Authority Key Identifier:
keyid:E4:65:AC:C9:08:09:EF:B4:5C:CD:A2:50:A1:05:76:18:49:4B:86:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5GWsyQgJ77RczaJQoQV2GElLhus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9ef60a-73ee-40e1-9006-c0b3b0f54beb/1/5GWsyQgJ77RczaJQoQV2GElLhus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:a1:9f:05:25:76:11:84:f1:be:f5:86:8f:47:8e:9e:77:f9:
9b:d2:74:fe:2f:23:80:87:d9:90:be:79:80:86:b2:2f:7f:04:
6b:9b:bc:b2:ae:f3:68:3b:40:af:71:3c:92:7c:19:d3:ec:e6:
e5:ab:dc:3c:0c:e4:8d:54:86:9e:bb:6a:15:54:55:35:93:37:
b8:f0:2e:79:93:09:4e:42:43:37:00:45:85:69:d9:8b:1f:c9:
b7:ca:10:b6:ed:0e:86:ef:25:12:d9:cc:e6:bf:a9:75:dd:90:
36:86:1d:c9:82:26:25:f8:41:89:f9:23:00:bf:ff:59:a1:88:
35:4d:1e:4e:e4:9a:3b:72:a1:e4:eb:bf:56:88:fb:20:58:c6:
4b:10:cb:12:99:bd:ff:46:18:ce:28:a6:5f:02:21:1d:f5:f1:
fa:ee:09:de:ee:96:7f:f8:e7:c5:a1:07:7b:1d:fe:df:a9:3c:
93:36:a6:cf:5d:56:f4:34:fd:29:ef:8c:e6:1b:25:26:3a:91:
d3:53:c2:b4:e3:39:52:5c:a0:91:6c:31:4f:4f:49:4a:6a:a9:
f8:b6:3f:2d:57:72:27:60:7d:56:a3:e1:e4:36:db:fc:6d:4b:
41:29:01:f0:8e:75:83:2c:31:1f:90:fa:18:32:41:46:a7:5e:
cf:d2:1a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:39 2025 by rpki-client