Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft
File: 5iq6ZBCCl1gsyujnuobyz8nh1ao.mft (raw, json)
Hash identifier: ywlY9xMoJD8zfjkVvW5A0uwUPgOr5iEZvPUHrOvSi1o=
Subject key identifier: 7B:DF:80:7C:12:90:48:E1:EC:93:9D:B8:3E:44:68:71:C9:40:91:B4
Authority key identifier: E6:2A:BA:64:10:82:97:58:2C:CA:E8:E7:BA:86:F2:CF:C9:E1:D5:AA
Certificate issuer: /CN=e62aba64108297582ccae8e7ba86f2cfc9e1d5aa
Certificate serial: 0194BC05339ED67FC3AA72E3ECE4717FF6A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5iq6ZBCCl1gsyujnuobyz8nh1ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft
Manifest number: 042B
Signing time: Fri 31 Jan 2025 11:00:44 +0000
Manifest this update: Fri 31 Jan 2025 11:00:44 +0000
Manifest next update: Sat 01 Feb 2025 11:00:44 +0000
Files and hashes: 1: 5iq6ZBCCl1gsyujnuobyz8nh1ao.crl (hash: G6dN4nCUXXRVV5NazF3eH8eh9Z39Pxaw6yG6JeZCEpA=)
2: 7C47IJ6PzEDLOdL0QvIP0xqQesA.roa (hash: ISA+HvV+2Juv2ntFCKzEfQOpWZqwF1hA9L7d5xR7Wl0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:33:9e:d6:7f:c3:aa:72:e3:ec:e4:71:7f:f6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e62aba64108297582ccae8e7ba86f2cfc9e1d5aa
Validity
Not Before: Jan 31 11:00:44 2025 GMT
Not After : Feb 1 11:00:44 2025 GMT
Subject: CN=7bdf807c129048e1ec939db83e446871c94091b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:77:0d:a9:03:5e:fa:3e:50:7b:89:dc:4d:f6:
87:1e:18:d1:26:f2:82:07:44:f5:3f:21:5a:8d:c9:
72:e1:48:02:49:c6:60:f8:18:ca:c1:6b:9d:66:62:
5b:70:50:2b:cf:5a:bf:b3:3e:02:85:12:0f:cc:1f:
09:43:51:e4:aa:b2:6e:18:37:2f:99:79:06:bc:34:
b8:08:10:76:48:d8:c1:08:c9:b7:52:a9:61:11:37:
7b:86:9e:ca:1e:e5:c7:b8:e3:97:d7:71:d1:2f:56:
88:3c:b7:10:8f:58:6e:7b:86:de:c1:8d:bd:e8:be:
13:d7:bd:53:76:78:f7:01:20:77:5d:f6:ac:01:5b:
d4:4f:6c:0f:00:00:b1:99:4d:e1:5e:87:5b:59:aa:
b6:ec:f1:e8:49:50:48:fb:de:cc:65:8f:4a:12:5d:
76:d1:22:2b:a2:12:0a:eb:32:6c:29:e3:3b:79:7e:
6f:3d:5e:fa:fc:06:97:01:46:80:a3:a6:90:f1:f2:
98:b8:b2:60:ac:9b:80:75:f2:c3:62:ee:90:35:db:
0a:0b:a3:1a:00:2f:4d:9a:bf:37:88:0e:df:72:a5:
10:9b:b1:62:21:8f:a6:b3:12:17:74:8f:9e:79:7b:
d1:8e:01:6c:1d:a8:21:05:ae:6b:b5:31:ec:27:bb:
d2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DF:80:7C:12:90:48:E1:EC:93:9D:B8:3E:44:68:71:C9:40:91:B4
X509v3 Authority Key Identifier:
keyid:E6:2A:BA:64:10:82:97:58:2C:CA:E8:E7:BA:86:F2:CF:C9:E1:D5:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iq6ZBCCl1gsyujnuobyz8nh1ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6470ac-1809-4d59-8714-73bdcb9de755/1/5iq6ZBCCl1gsyujnuobyz8nh1ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:8e:8c:ed:e4:49:3e:f2:f3:0b:bc:55:47:4d:57:ed:00:f8:
7a:b1:e3:cb:c5:e9:30:06:76:65:2a:35:0a:7c:23:1a:d9:ee:
ef:66:c5:c1:05:71:3c:3d:b2:27:d3:f4:9f:42:cd:c7:f7:7d:
8d:43:a9:5b:61:fe:67:3b:34:94:14:08:b1:91:d1:83:e8:38:
19:f4:26:48:76:40:c9:8f:14:94:f1:19:34:49:02:b3:b6:5c:
bc:41:93:93:76:97:32:49:27:46:e5:10:2d:9b:d5:2b:09:03:
d4:8c:5e:5c:8d:fd:7f:84:43:30:16:e1:41:34:d8:e7:15:82:
5f:bb:ce:ce:bb:45:33:31:d2:f6:c7:24:cc:e7:06:31:4b:19:
07:03:f5:ab:1f:25:59:ab:61:e1:c6:e2:3e:4c:be:75:1b:61:
3c:4b:71:6f:b7:71:57:3f:42:71:5b:f1:a2:21:ca:5e:d6:8f:
b3:dc:4a:24:cc:04:5c:92:aa:a2:fd:4a:8a:ea:02:4c:f6:70:
a1:3c:29:6e:da:38:af:54:35:21:b6:5f:e9:76:99:24:53:15:
29:4a:d6:21:ab:92:23:fa:ef:43:63:f3:d6:0d:81:3c:c4:e6:
c9:74:1f:7e:6f:58:60:06:95:4f:93:d7:54:81:3c:28:1f:c7:
e1:93:7f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:27:45 2025 by rpki-client