Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
File: 5YBpdIdI6a69e-QFh9gUDv3lW2s.mft (raw, json)
Hash identifier: Eu61bWqfzPw1FA6Ux7NFtu6FiutR2OQ7FuRkIGGApDw=
Subject key identifier: 13:0D:B9:9B:70:AC:35:78:76:EB:50:9E:F2:72:1D:59:F8:76:4B:D0
Authority key identifier: E5:80:69:74:87:48:E9:AE:BD:7B:E4:05:87:D8:14:0E:FD:E5:5B:6B
Certificate issuer: /CN=e58069748748e9aebd7be40587d8140efde55b6b
Certificate serial: 0194BCA9A80F112BA3C19F4BB070039D2DE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 14:00:22 +0000
Manifest this update: Fri 31 Jan 2025 14:00:22 +0000
Manifest next update: Sat 01 Feb 2025 14:00:22 +0000
Files and hashes: 1: 5YBpdIdI6a69e-QFh9gUDv3lW2s.crl (hash: PbvXCm3IhIWLkWtSIsUx75FPEzTW6OB7JatGL8NbXIc=)
2: vmkVgb9N_5wAEFtAOAjwuSdx1Xs.roa (hash: To73D5BDmwWuULrYV7q3UmXkLh1DadkYNkNoo+AcLqo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a8:0f:11:2b:a3:c1:9f:4b:b0:70:03:9d:2d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58069748748e9aebd7be40587d8140efde55b6b
Validity
Not Before: Jan 31 14:00:22 2025 GMT
Not After : Feb 1 14:00:22 2025 GMT
Subject: CN=130db99b70ac357876eb509ef2721d59f8764bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8c:04:f2:ea:54:ea:25:8f:86:cd:a6:8e:9c:
a0:c3:b3:1f:7b:41:8e:9b:b0:32:49:a9:9d:f8:26:
82:ad:58:09:d1:10:77:23:d2:57:d5:5b:dd:01:61:
a9:e1:1c:33:33:00:0a:9c:c7:71:50:80:7b:86:2d:
40:0e:4e:d7:46:4c:ff:67:32:4f:95:80:1a:a0:d5:
46:3c:8a:56:89:b2:70:92:8c:26:f1:dd:1a:2d:8a:
92:e7:b2:4a:aa:74:b4:55:cf:42:d2:43:b2:51:31:
30:d0:6c:e8:a9:78:09:d7:d5:f2:63:66:99:a7:6f:
18:91:9a:70:36:ec:71:36:d9:a4:67:02:9b:6a:cb:
54:a6:6a:f9:f0:aa:79:51:35:59:06:8a:f3:8e:ff:
67:40:e8:fd:ee:1f:83:7e:5d:e2:f5:fe:c7:25:08:
55:d4:83:dd:14:19:af:e4:61:60:88:04:3d:9a:bb:
50:f9:ca:2a:20:c3:d9:92:f4:9a:2c:32:25:b5:41:
c6:c2:2b:27:b1:a8:02:87:76:bf:a5:e9:fd:32:0f:
d3:88:ba:cc:9c:db:2f:f8:ef:90:d2:df:10:e2:d6:
6f:7b:06:5f:16:55:4e:db:ec:b6:1a:d1:84:53:64:
83:da:77:d5:70:c0:7a:a4:f8:1b:65:4e:fe:c7:a3:
cc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:0D:B9:9B:70:AC:35:78:76:EB:50:9E:F2:72:1D:59:F8:76:4B:D0
X509v3 Authority Key Identifier:
keyid:E5:80:69:74:87:48:E9:AE:BD:7B:E4:05:87:D8:14:0E:FD:E5:5B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YBpdIdI6a69e-QFh9gUDv3lW2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efd80-7db3-4e52-ad76-0f896ebca4f8/1/5YBpdIdI6a69e-QFh9gUDv3lW2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:49:71:8c:ce:82:eb:bc:05:3b:e1:a4:49:d3:87:6e:b5:b1:
40:ab:5c:21:f4:d5:85:12:d5:67:c2:b8:43:03:1e:a5:3e:5a:
89:70:64:88:94:12:7e:77:6a:ee:d3:75:e8:5a:5e:bc:72:a0:
61:e4:73:2f:b7:38:25:58:72:9f:c8:e0:72:c9:93:98:ae:2c:
09:5c:09:c8:7c:90:b9:f9:d1:f7:02:bf:ea:3e:a0:9c:ae:ed:
59:27:d8:ed:3f:05:a7:be:e6:ad:43:44:81:0c:3e:b6:31:f1:
6f:9d:d2:d8:11:84:51:23:3d:3d:3d:88:8a:f2:aa:e7:65:73:
58:b8:77:54:aa:49:76:7e:4f:53:1d:72:60:28:3c:99:70:3f:
11:ce:af:00:58:6f:28:1a:28:64:42:25:e6:b8:11:f7:f8:f6:
3f:f7:f9:d3:9c:f8:6b:70:ff:c8:6f:55:85:d5:36:01:7e:49:
4c:54:96:0f:b9:39:14:41:ec:f8:50:d8:39:7a:5a:a6:b3:ae:
f3:e1:25:22:65:c7:a2:eb:bb:f2:41:8b:06:69:60:10:ba:f3:
5c:f5:2f:25:f2:4c:99:2d:76:49:3f:01:42:72:69:b2:0f:c0:
ab:e0:0f:af:db:06:ba:cb:f9:1d:4c:4b:41:49:a9:80:6c:08:
e7:b2:b9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:48:40 2025 by rpki-client