Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
File: 5gFfHiAENZyudla5aK2ypUpDTx4.mft (raw, json)
Hash identifier: WR+MNgMOzBFYKb8mLAJY23IaE6jeb3UqUkoJ3D7bw2Q=
Subject key identifier: D9:45:3D:16:44:A8:D2:2F:42:E3:AF:6A:6D:BF:F3:CC:0A:E9:28:A7
Authority key identifier: E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E
Certificate issuer: /CN=e6015f1e2004359cae7656b968adb2a54a434f1e
Certificate serial: 0194BBCDE1017B402F28A5BBBDFE5AC6910E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:19 +0000
Manifest this update: Fri 31 Jan 2025 10:00:19 +0000
Manifest next update: Sat 01 Feb 2025 10:00:19 +0000
Files and hashes: 1: 5gFfHiAENZyudla5aK2ypUpDTx4.crl (hash: LtfG+i4C+FNll1HTQ0Am2gi60ICGVheTe71sJiXd0ws=)
2: MvZ9UpTU1jkxQ9uFTXHU8G59uDg.roa (hash: kL1zPGLwfZE8020kfHibTnemsjFNFBdHlurHXKEnCxs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e1:01:7b:40:2f:28:a5:bb:bd:fe:5a:c6:91:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6015f1e2004359cae7656b968adb2a54a434f1e
Validity
Not Before: Jan 31 10:00:19 2025 GMT
Not After : Feb 1 10:00:19 2025 GMT
Subject: CN=d9453d1644a8d22f42e3af6a6dbff3cc0ae928a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:51:6a:fd:c4:12:aa:25:d5:55:77:83:98:ef:
e4:60:43:a7:dc:1e:57:9d:2f:91:3c:30:19:23:d0:
ca:68:c1:cc:b9:0f:e0:31:4f:04:8f:dc:b5:4e:b3:
32:d5:e9:a2:15:e6:d6:b0:17:66:50:47:3d:a6:8c:
19:52:af:36:2c:ee:0f:5e:78:35:df:55:3b:92:a1:
53:16:43:e4:e6:87:4e:d5:2f:35:68:0f:2b:e7:d1:
b7:c5:89:83:9d:a4:73:c1:fb:2a:8a:6b:da:df:e5:
93:fc:5d:5e:0a:94:ce:55:0f:20:d5:58:ef:25:32:
19:ae:a0:2e:54:71:0b:99:c4:e3:8e:ca:34:02:09:
14:67:81:fe:2f:e9:c5:df:4e:f6:51:37:99:f1:c7:
12:1d:3b:f1:b1:09:e9:79:ed:ad:61:58:64:d7:b7:
6f:f1:7d:f1:84:15:77:68:58:be:98:33:0d:51:48:
17:5b:a4:05:55:5a:5b:6b:17:ba:86:76:8a:1f:48:
f9:31:fb:53:46:d0:0f:80:95:64:61:5d:46:7e:1d:
dc:27:ec:2e:a5:68:b1:69:34:12:75:b0:91:14:16:
15:14:fb:19:ba:7e:81:0c:ad:f4:9c:80:f7:4b:f1:
17:b2:45:7c:c6:86:b0:62:13:62:33:f4:33:2a:25:
53:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:45:3D:16:44:A8:D2:2F:42:E3:AF:6A:6D:BF:F3:CC:0A:E9:28:A7
X509v3 Authority Key Identifier:
keyid:E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:f3:83:f1:0c:35:d2:6d:02:f1:f1:3c:9e:4e:6b:60:b3:56:
39:d6:3d:00:8b:3b:5a:dd:eb:ec:50:54:82:38:88:0d:2f:de:
f7:82:c6:a6:aa:18:90:fe:53:84:78:20:6a:f9:4a:b4:d6:4a:
c8:0f:de:0b:3e:41:b5:be:45:fa:ba:71:ae:c6:fa:60:33:e6:
31:6b:57:66:86:25:b9:4a:ea:e1:e7:a1:ac:b7:4f:ce:67:90:
10:28:3e:6f:63:76:df:59:40:74:ab:1a:8f:24:ad:8f:b4:c4:
3a:49:4f:e2:ba:83:b0:f5:1c:c3:23:fb:4f:17:48:41:3a:99:
70:b3:e0:d4:97:1f:b2:9e:60:b7:86:80:0a:94:e3:d4:4a:18:
bd:c0:fa:f6:c3:9c:b1:65:96:4e:85:c0:af:32:0a:20:da:3e:
69:6f:5b:5b:9a:18:c3:ad:10:b0:f9:49:d1:6f:be:33:65:6b:
90:b3:b5:78:6d:af:af:62:56:4f:b1:44:20:f5:16:16:ad:4c:
1c:78:91:2c:ff:5b:73:d1:73:2f:2b:3e:11:bc:a4:3b:84:be:
d1:5d:22:60:1f:78:1b:b4:15:07:68:ab:b3:a9:ec:2e:06:ba:
a7:8a:81:2b:26:28:3d:de:fd:b4:f0:02:38:9f:f8:b2:1a:27:
6b:40:c5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:53:36 2025 by rpki-client