Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
File: 5XB6RVkqydFxmoV2lgMXeCm0bgo.mft (raw, json)
Hash identifier: VUyLS5powBKT+gta8VWqVbWjUYnL2P6rdJ6j4GRVVEg=
Subject key identifier: B0:1B:AE:0A:81:1B:88:4E:10:9E:F2:14:AA:4B:64:EC:3D:58:11:92
Authority key identifier: E5:70:7A:45:59:2A:C9:D1:71:9A:85:76:96:03:17:78:29:B4:6E:0A
Certificate issuer: /CN=e5707a45592ac9d1719a85769603177829b46e0a
Certificate serial: 0194BC3C193A8C27CEF9CEF7C589C659DE53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
Manifest number: 0A28
Signing time: Fri 31 Jan 2025 12:00:42 +0000
Manifest this update: Fri 31 Jan 2025 12:00:42 +0000
Manifest next update: Sat 01 Feb 2025 12:00:42 +0000
Files and hashes: 1: 5XB6RVkqydFxmoV2lgMXeCm0bgo.crl (hash: xl4EzE+aV98738EBp8FA4yC/hQ6nfAI3mPkDtwivxmc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:19:3a:8c:27:ce:f9:ce:f7:c5:89:c6:59:de:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5707a45592ac9d1719a85769603177829b46e0a
Validity
Not Before: Jan 31 12:00:42 2025 GMT
Not After : Feb 1 12:00:42 2025 GMT
Subject: CN=b01bae0a811b884e109ef214aa4b64ec3d581192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:65:54:82:0b:9b:41:0c:a3:72:4f:2a:63:15:
45:05:6f:21:70:c9:7f:b6:3c:a9:12:46:ef:5e:3e:
64:fc:6b:da:df:46:9a:0a:b3:49:1d:e7:f2:f6:aa:
c6:0f:ff:87:54:9e:96:09:84:c7:a1:cb:ad:c0:48:
f6:1d:a6:a4:5e:ff:0b:83:f5:cb:92:cf:86:92:2a:
23:1a:8d:93:1f:9e:31:8a:9d:c4:1c:f7:2c:5a:bf:
9e:f0:2d:5c:f4:01:58:0d:56:5e:3d:43:e2:09:06:
94:4c:a7:61:71:61:29:39:42:54:d6:bc:89:47:2f:
c9:4a:fb:85:b4:ef:12:e2:eb:00:c4:94:8f:4a:ec:
01:af:12:b2:b2:a1:fd:37:a7:17:cf:2d:fd:95:63:
5e:d6:98:61:25:64:80:de:6f:c1:a7:47:71:0a:a4:
4a:34:fa:86:31:20:47:e7:f0:9e:fe:34:8e:bb:27:
a2:78:df:4e:f8:b5:eb:8f:83:da:fe:5a:00:7e:04:
a9:63:a5:3b:3e:72:4c:f0:72:6e:09:86:cb:be:7c:
fe:6b:8d:90:f3:ad:ed:7f:a8:79:bb:a9:4f:6f:9c:
85:99:ac:1f:ab:ea:c7:91:61:37:7f:3d:9f:20:36:
00:87:3e:13:a2:22:60:42:8a:df:dc:c6:40:79:3c:
7a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1B:AE:0A:81:1B:88:4E:10:9E:F2:14:AA:4B:64:EC:3D:58:11:92
X509v3 Authority Key Identifier:
keyid:E5:70:7A:45:59:2A:C9:D1:71:9A:85:76:96:03:17:78:29:B4:6E:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c2:06:06:18:1e:8b:2b:f9:d6:47:f0:35:96:33:ee:8d:99:
21:e1:35:0c:6b:b0:9d:b2:c0:9e:1a:aa:a8:7e:96:da:ea:9d:
5a:e6:d8:2f:e0:35:6a:2d:3e:1b:d1:bb:20:cc:c2:7b:cd:fb:
50:82:25:8b:98:08:dd:35:dd:7f:95:f1:4a:f5:d3:ca:3c:c5:
8f:0a:98:b8:e8:60:13:1d:c8:66:96:57:b5:95:bc:17:89:e3:
05:ea:9f:14:b2:41:aa:8e:7c:20:22:fd:f7:e8:5e:2f:2c:bb:
44:9e:f6:69:8f:b1:33:b5:48:0f:49:40:56:fe:c9:0a:2c:99:
88:a7:22:d8:01:78:14:c2:a0:77:15:1c:e1:6c:1f:7d:6c:ec:
29:97:17:47:1e:cb:01:ad:2d:f9:b1:15:71:67:d3:a6:70:ba:
5e:ba:89:f9:11:a9:a7:26:dc:f8:fc:12:d4:7b:62:9a:79:ae:
86:45:18:0d:3f:a5:20:2c:19:93:90:32:04:55:2a:97:f0:74:
54:3c:94:b7:b2:c5:60:12:43:be:b4:07:be:58:8a:ad:a7:5f:
4b:19:73:32:02:e4:f8:a2:6d:93:7a:b4:d0:57:4a:8d:69:95:
93:69:f5:a1:8a:04:0c:1d:27:09:c5:8a:63:91:e8:5c:5b:c2:
ef:8f:1d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:05 2025 by rpki-client