Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
File: 5aJ1VcGlxd3396zIOfpXeqfuepw.mft (raw, json)
Hash identifier: mAs2AJ7NB+BfqouU/ij9t6BLJd1D4+Q7hXDJg4YSyb0=
Subject key identifier: 31:67:12:57:4B:6B:B7:4C:6E:0B:99:BA:E9:1D:EE:E8:01:56:75:F3
Authority key identifier: E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
Certificate issuer: /CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Certificate serial: 0194BD17C1D31591A517E490201151563A71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 16:00:38 +0000
Manifest this update: Fri 31 Jan 2025 16:00:38 +0000
Manifest next update: Sat 01 Feb 2025 16:00:38 +0000
Files and hashes: 1: 5aJ1VcGlxd3396zIOfpXeqfuepw.crl (hash: BfIx2PYjQmEFKodLUf08jklgY7OKuLE5Cj3ECzS3MCU=)
2: 6UYJYSp_H1qb-Z1ShFc_cXl87FI.roa (hash: 7Wjn3rvrdmK/H1wlwqE+Z2pd0NQT1fwp/AaKLM/IzPg=)
3: jISWNsTxPdEjjPdMy-Whzlvb0Ac.roa (hash: La/cVhkJ14UaJXVbjX6BzXzgOteVwnmYx6tdmiaM0OE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c1:d3:15:91:a5:17:e4:90:20:11:51:56:3a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a27555c1a5c5ddf7f7acc839fa577aa7ee7a9c
Validity
Not Before: Jan 31 16:00:38 2025 GMT
Not After : Feb 1 16:00:38 2025 GMT
Subject: CN=316712574b6bb74c6e0b99bae91deee8015675f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:60:d0:c3:38:00:d7:c5:ff:c2:e3:c3:26:22:
03:ce:c2:46:1a:78:52:3e:26:38:0e:c7:f8:c3:3a:
e8:a9:05:2c:e3:b5:a4:03:41:fb:a2:0d:cd:0f:bf:
6c:12:4b:b3:8f:50:c7:5f:61:6b:45:fb:6a:94:0b:
a5:77:c3:be:ed:4a:f2:59:e1:34:c4:c1:bf:ef:82:
20:8a:74:ba:ef:7c:1e:93:fb:cc:a3:75:35:f2:65:
09:73:73:70:4c:02:27:73:1b:21:10:c1:a7:1f:ea:
a8:a6:5d:c0:c6:ec:73:ea:ed:58:2c:5e:f4:c9:3c:
15:17:46:68:82:7a:bc:b5:5e:c1:9b:94:63:4f:9b:
dc:7d:be:4d:fd:fc:ff:d9:47:4d:be:ba:a5:46:bd:
e8:c2:31:7d:e0:63:23:ff:b3:8c:b7:fb:12:26:2a:
1b:c7:89:d3:05:9a:74:4f:0a:8f:19:0a:35:d0:d4:
ca:96:fc:6b:c0:14:26:52:e1:b0:97:c8:15:2e:84:
02:d9:08:97:6c:a2:7f:b0:ab:fc:5a:f8:3c:2d:0b:
2e:96:44:34:b7:6b:9f:7a:6b:09:66:3e:bb:a8:ca:
57:10:cd:4f:17:b0:b6:92:3d:dc:66:64:a1:f2:1d:
da:c5:ad:bf:70:76:19:bf:67:90:39:d7:21:15:0f:
10:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:67:12:57:4B:6B:B7:4C:6E:0B:99:BA:E9:1D:EE:E8:01:56:75:F3
X509v3 Authority Key Identifier:
keyid:E5:A2:75:55:C1:A5:C5:DD:F7:F7:AC:C8:39:FA:57:7A:A7:EE:7A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aJ1VcGlxd3396zIOfpXeqfuepw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccd9a-c30e-4e8a-894a-fd71667a2b5f/1/5aJ1VcGlxd3396zIOfpXeqfuepw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:2c:41:08:e4:80:af:b9:59:1c:de:fc:17:91:6a:c8:8c:0e:
e3:57:45:63:c3:b2:d8:1f:2b:d2:31:e1:ef:16:06:32:b4:b2:
13:44:23:1f:f4:6d:16:88:d6:35:08:1b:5b:00:f8:79:38:bb:
3d:af:d7:31:fc:d5:14:61:7f:ce:b3:52:1f:a1:ad:ec:4a:5f:
48:d6:fe:ae:13:64:87:f0:e3:1f:a7:f9:2d:dd:e7:44:cc:8d:
7b:bb:31:8b:4d:c7:58:6a:36:48:44:05:6d:ca:59:20:9a:bf:
39:b0:06:ef:8e:c2:f0:6c:9b:79:74:59:23:af:76:f9:39:21:
8a:eb:b7:39:d7:58:3c:f0:4b:85:ef:c0:af:8c:7f:bd:ad:a3:
f3:97:ab:71:16:80:48:26:7b:ed:b3:31:f4:93:06:4d:41:43:
70:7b:0f:6e:fa:fe:83:ef:fe:52:f4:1a:76:71:88:ae:87:6e:
c0:8b:03:c5:b7:aa:25:39:d2:49:ac:94:f6:0e:6b:97:2a:aa:
02:09:d3:cb:e5:66:aa:f1:50:0b:06:6b:43:b9:44:50:c9:0c:
b4:26:d6:4c:d5:e9:f4:74:60:20:a1:fe:34:a8:af:e0:df:f1:
69:9b:60:9b:5b:fe:06:3b:fc:e1:e6:22:bb:5e:b2:1d:2d:04:
d7:ab:a5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:17 2025 by rpki-client