Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft
File: 5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft (raw, json)
Hash identifier: VdWDkq1zLKWESajpc7+ghq+XDBw36GCDWioqflANTiU=
Subject key identifier: 65:6F:ED:69:F8:18:83:4F:8B:23:27:D9:4F:C7:61:5C:AA:A4:96:AE
Authority key identifier: E4:79:AF:17:16:DC:46:1E:5B:B3:F8:76:21:5B:CB:94:E8:80:8B:A0
Certificate issuer: /CN=e479af1716dc461e5bb3f876215bcb94e8808ba0
Certificate serial: 0194BBCF0351D65CD182F1E39A9B88AC00FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 10:01:33 +0000
Manifest this update: Fri 31 Jan 2025 10:01:33 +0000
Manifest next update: Sat 01 Feb 2025 10:01:33 +0000
Files and hashes: 1: 5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl (hash: x8Y3UUpXXU+tOssU4sj19uY9/vGSp0DGAqNW7Uq6jTM=)
2: PsjhieTymPBMhbBeD2G4Eb2tiXM.roa (hash: bN6R2jhfh/x3ks5vaycX08tQPelsEHr78ADbPw3Z954=)
3: b_wZ8vjY3m-nqcgia8Q1-09feRc.roa (hash: tIRWyoM1DUPvrXEJ2hmu6whNi1gGh3fnMsdJLxUNaQ4=)
4: db-V4RFiWk-DRMRx23Yi5GGB828.roa (hash: nklnqznrcypY4CcHnGmzs30m8K1faHbW1Og3XBCrp1c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:03:51:d6:5c:d1:82:f1:e3:9a:9b:88:ac:00:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e479af1716dc461e5bb3f876215bcb94e8808ba0
Validity
Not Before: Jan 31 10:01:33 2025 GMT
Not After : Feb 1 10:01:33 2025 GMT
Subject: CN=656fed69f818834f8b2327d94fc7615caaa496ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b9:cf:a4:9c:29:cb:63:a3:07:60:7e:b5:7c:
b7:ce:3c:b6:23:2d:f6:49:52:de:da:b2:b6:04:b0:
ac:1c:cd:22:48:b6:42:44:2d:b8:53:70:56:9b:1e:
05:32:75:60:3c:b0:9d:99:11:9c:88:9d:13:42:b9:
63:3a:bb:d0:24:75:6f:99:b8:87:c5:ec:ba:82:dd:
ab:aa:68:cd:e5:9a:e0:62:2e:80:0c:42:4c:32:e5:
a5:57:c5:6b:e2:95:68:91:56:ff:32:b7:31:19:aa:
b7:c1:9f:31:9d:ec:10:ff:af:67:9d:e1:b1:14:85:
d4:98:67:3a:a5:e6:1b:8d:94:c2:6d:fd:ef:3c:94:
e5:3c:f1:de:a3:4c:9e:00:36:66:a1:db:7b:60:79:
95:12:5e:b7:7d:69:71:50:40:13:09:e2:6e:b9:9d:
16:d1:00:a8:4e:04:59:4e:47:9a:ca:29:5f:07:e0:
20:d7:3b:6f:44:88:5c:b6:6a:a3:5a:a7:9e:80:72:
05:cc:80:0c:0e:d2:a8:87:0c:e3:2a:07:00:c5:79:
c6:2c:06:75:0c:5e:76:72:a2:c7:f7:bc:c5:e1:c3:
a9:2c:dc:7d:c9:2f:ba:fd:e6:a0:65:80:08:eb:58:
bf:e1:84:2c:d1:67:a7:79:c0:ad:f5:62:97:96:bf:
e0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6F:ED:69:F8:18:83:4F:8B:23:27:D9:4F:C7:61:5C:AA:A4:96:AE
X509v3 Authority Key Identifier:
keyid:E4:79:AF:17:16:DC:46:1E:5B:B3:F8:76:21:5B:CB:94:E8:80:8B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:2e:96:e3:a7:e2:fa:48:5b:06:8e:ea:9b:97:c1:cc:ef:ca:
16:f4:e1:27:db:45:ac:8a:7a:e3:03:12:0c:ad:0c:d5:ef:e4:
62:6c:ab:44:b2:90:8c:a5:6b:50:67:1a:90:09:a8:eb:a6:a5:
54:8a:b2:4a:51:e3:49:f5:d8:41:87:3c:b7:73:cc:bd:51:0c:
9d:ab:8d:80:0a:e2:77:e7:61:ec:07:b1:ea:87:39:0e:b5:26:
a6:5d:f2:73:e8:ee:db:d8:a0:36:68:94:b1:80:3e:1b:7e:2b:
5c:ea:b4:9e:7f:ab:ad:a0:66:d8:7c:97:34:b2:3a:e3:bd:2e:
2f:83:c1:22:db:0a:41:d7:a0:4d:c1:aa:4c:22:07:82:3b:fd:
17:66:52:b1:fb:b6:99:c9:3b:4e:b0:9a:b4:56:87:54:70:73:
f5:25:be:80:fd:c2:c8:1c:96:5d:63:19:78:cb:95:c6:da:b7:
e5:14:23:f5:e9:af:eb:ed:e2:24:00:df:0b:bd:65:7b:94:ce:
66:79:86:57:94:67:97:99:7d:84:d5:b8:37:8a:af:fe:00:bb:
22:69:bf:8f:53:0d:af:6b:74:d3:0d:a4:ef:94:52:d5:fd:24:
6d:51:ab:ca:da:98:70:ec:22:e2:9b:b3:e2:53:59:e7:0b:cf:
93:36:8d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:10:34 2025 by rpki-client