Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
File: 5n17NXAHcGQBPaGOKeaQzUyb1xA.mft (raw, json)
Hash identifier: EMggj8rpMEIQQ9oKvLw4gMqsajgBwUlwR7yKKbWN6z4=
Subject key identifier: D9:C8:58:7A:08:28:D1:71:E6:20:0F:4F:1C:B0:4A:F3:BF:96:57:8E
Authority key identifier: E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10
Certificate issuer: /CN=e67d7b3570077064013da18e29e690cd4c9bd710
Certificate serial: 0194BCE0CB53602322251B6B0CE44D5E8EB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
Manifest number: 010E
Signing time: Fri 31 Jan 2025 15:00:36 +0000
Manifest this update: Fri 31 Jan 2025 15:00:36 +0000
Manifest next update: Sat 01 Feb 2025 15:00:36 +0000
Files and hashes: 1: 5n17NXAHcGQBPaGOKeaQzUyb1xA.crl (hash: k+4y3JS8rYGGnBPhBDLY94xTab0znbAzuspm1lUkqBw=)
2: UXfwFJz04X4XmU1ABHkr-Q0ovq0.roa (hash: vTofq9wYPlysSoUgx6HvDr7C9PTa+inohQrNa6Pfbqs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:cb:53:60:23:22:25:1b:6b:0c:e4:4d:5e:8e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e67d7b3570077064013da18e29e690cd4c9bd710
Validity
Not Before: Jan 31 15:00:36 2025 GMT
Not After : Feb 1 15:00:36 2025 GMT
Subject: CN=d9c8587a0828d171e6200f4f1cb04af3bf96578e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1f:ff:e0:55:df:ab:06:67:1e:f0:5d:5a:c4:
58:7f:ae:76:91:3d:5f:49:39:52:73:78:23:c3:26:
ff:7c:c6:78:c0:84:7d:00:54:1d:b6:e8:88:f0:b0:
e6:57:c6:7b:47:10:5d:c7:2b:e1:6e:c7:74:d3:2c:
cc:f0:3b:4e:e5:39:30:6c:ec:aa:3b:f7:d0:d1:dc:
a3:0c:af:45:f9:1f:69:26:a8:f7:5d:ab:37:42:4e:
02:c5:e4:9b:d5:6b:bf:0d:34:ae:67:72:af:5b:f3:
df:4f:7c:b7:80:82:69:ac:4e:0f:db:5c:4b:dd:9f:
fb:7b:7d:aa:d1:2d:9e:a1:83:bb:49:71:fe:17:16:
16:47:81:43:8c:4a:62:53:b9:77:f5:16:5b:bd:e3:
2a:78:67:2d:82:53:c8:78:77:60:b0:8c:65:9f:c8:
02:cb:58:90:ff:91:19:32:06:40:11:fe:7b:56:3f:
d2:9b:ae:b1:eb:af:e5:24:55:8c:e5:09:f2:c1:a1:
3c:99:8a:3d:2a:1a:5e:ea:e4:cf:83:a7:eb:0a:96:
a5:a6:5c:5e:81:d8:2f:9f:f3:ff:12:32:a3:a9:7c:
f9:96:cc:ba:21:d8:85:b3:5f:53:b7:a9:de:18:ea:
04:a8:51:4a:ab:24:34:08:79:68:7e:39:03:4c:88:
ef:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C8:58:7A:08:28:D1:71:E6:20:0F:4F:1C:B0:4A:F3:BF:96:57:8E
X509v3 Authority Key Identifier:
keyid:E6:7D:7B:35:70:07:70:64:01:3D:A1:8E:29:E6:90:CD:4C:9B:D7:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5n17NXAHcGQBPaGOKeaQzUyb1xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eb7e0c-59a1-4f93-8b27-ac4883e47665/1/5n17NXAHcGQBPaGOKeaQzUyb1xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:20:54:3e:b0:82:8b:20:8f:c5:47:7a:1a:50:be:ed:ce:1e:
70:da:60:b4:cf:04:9a:51:4e:b7:66:67:18:39:9e:80:d7:aa:
cf:16:d2:0c:35:31:0d:5a:8e:44:34:d1:2e:39:91:f5:eb:c2:
53:67:7d:37:08:80:56:10:ac:6c:dc:22:7c:49:9e:4d:ef:7c:
b4:f4:02:d3:86:ea:9e:66:a5:ea:e8:45:ec:e6:c7:d9:43:fd:
d9:a9:56:5b:87:d1:05:dc:76:45:13:c0:c8:7b:63:bd:cf:88:
f9:9a:21:34:ed:af:16:87:64:5d:27:a8:cf:d9:bc:c9:ed:70:
90:3c:aa:39:25:40:0e:74:93:63:de:f9:a4:a6:80:2c:34:13:
35:9d:c2:57:7d:19:d6:3f:e1:34:b4:6f:aa:2f:53:fe:58:35:
a4:88:2f:12:a6:20:1d:47:39:5a:f7:0b:68:ea:5d:62:41:5f:
8e:ca:98:7a:f4:52:86:29:47:99:fa:79:60:3c:66:d9:fc:fa:
ed:c5:cc:6b:0a:db:90:67:90:76:73:7b:4c:17:33:f3:70:c3:
23:6c:1c:4f:6d:9a:26:2b:9b:ec:51:ec:12:d3:47:d6:7c:70:
dd:fb:c8:c7:15:6f:cb:97:f9:5f:ff:b5:65:6d:1e:c2:d4:76:
d8:6d:1a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:01 2025 by rpki-client