Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
File: 5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft (raw, json)
Hash identifier: LPfQ8YNzmg3IuKkawgYM7doBYRGw8rlVu/M3gl+kVcc=
Subject key identifier: D5:A3:49:8A:D2:91:8C:38:6C:37:5E:FC:CF:C3:3B:ED:A7:88:7E:C8
Authority key identifier: E6:73:FF:10:D7:A5:54:FC:51:A7:F9:9C:1F:61:E1:CE:EF:99:85:BC
Certificate issuer: /CN=e673ff10d7a554fc51a7f99c1f61e1ceef9985bc
Certificate serial: 0195E00F7DC79CD773E3145D97E88A346B72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
Manifest number: 0DB0
Signing time: Sat 29 Mar 2025 04:01:06 +0000
Manifest this update: Sat 29 Mar 2025 04:01:06 +0000
Manifest next update: Sun 30 Mar 2025 04:01:06 +0000
Files and hashes: 1: 5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl (hash: q9urqRBLp5hF1bYWiA7iM4HepG2yeIoQs/Krx516BUQ=)
2: 99MFFBjF3Dc4zTlDGHUkWaGScYw.roa (hash: WeTl8ArSSJSSsmY/ooHSrE+g99Jv4JYzfunEC3Fj5PM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:7d:c7:9c:d7:73:e3:14:5d:97:e8:8a:34:6b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e673ff10d7a554fc51a7f99c1f61e1ceef9985bc
Validity
Not Before: Mar 29 04:01:06 2025 GMT
Not After : Mar 30 04:01:06 2025 GMT
Subject: CN=d5a3498ad2918c386c375efccfc33beda7887ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:69:83:54:8b:ad:c4:1f:14:d7:12:4c:0a:65:
4b:8a:11:7a:f6:b9:f0:e7:8a:6b:06:a1:3a:40:57:
b0:16:2c:a6:f2:78:03:c2:64:c2:34:03:54:39:c0:
84:21:80:01:6c:46:09:57:92:ca:eb:68:7b:e1:97:
56:33:15:eb:87:e3:01:a0:a2:e6:a6:8c:71:50:c8:
ea:d8:64:cb:e1:bf:9c:da:f8:a7:1c:e9:02:4a:23:
6e:fb:38:63:94:eb:a5:0b:06:39:f8:9a:e1:e6:4a:
97:c0:fc:44:56:d0:22:ad:71:7e:d6:4f:94:15:b5:
b8:bd:f7:07:ad:d9:c0:09:5e:d1:90:e9:6e:12:f0:
d7:34:cc:e0:dd:e1:59:05:6b:81:51:9c:54:e3:08:
6d:76:56:78:df:ae:f0:d3:85:c5:e4:47:f9:9c:03:
0a:55:6f:91:60:1e:4f:50:0f:26:38:7a:d0:23:fe:
5e:74:c4:82:8d:31:51:2d:c2:bb:76:d6:31:63:37:
58:63:73:a2:54:92:39:04:d1:6d:37:59:32:2f:94:
e8:4f:ae:13:ee:89:71:c1:db:e7:dc:f9:db:67:15:
8a:d3:44:16:2f:8a:c2:36:2f:91:c1:19:ca:9f:98:
b4:68:1e:14:73:b9:3d:c0:d0:c6:8e:55:61:ea:3a:
d6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A3:49:8A:D2:91:8C:38:6C:37:5E:FC:CF:C3:3B:ED:A7:88:7E:C8
X509v3 Authority Key Identifier:
keyid:E6:73:FF:10:D7:A5:54:FC:51:A7:F9:9C:1F:61:E1:CE:EF:99:85:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:79:a4:f1:42:a0:08:c8:1f:84:25:1a:e3:e3:f9:4f:90:be:
11:0c:34:db:e6:cd:bd:e0:ee:a7:50:fb:39:f2:c8:65:14:66:
07:43:40:c2:58:c5:16:59:44:9e:f4:4a:7a:e8:13:d3:8d:46:
5c:d4:ae:76:24:c9:e3:92:e7:c1:b5:30:52:3f:17:a5:ae:83:
3d:07:c5:d9:0f:06:ea:04:a8:89:7f:93:6c:95:59:0e:13:2b:
56:29:a8:42:11:d7:40:02:47:fc:28:b9:72:83:58:f0:b6:a5:
4c:cd:3a:d6:fd:9d:05:e5:01:f9:6e:d1:1a:0c:4e:f1:d4:73:
83:5d:c4:e0:b1:b6:62:6d:d0:dd:0d:9f:99:39:d2:c1:05:ef:
a4:ce:cc:c5:a9:83:93:74:44:82:48:ab:1d:ad:00:39:f2:89:
62:ca:29:04:de:85:45:f9:24:41:22:61:8b:ad:8a:5d:e0:36:
01:77:f8:50:20:73:6c:8d:c3:a2:85:85:30:55:65:7f:33:b1:
7c:79:85:b2:51:80:30:aa:00:96:8c:46:c1:73:4c:48:18:70:
9b:29:33:af:9d:91:94:5c:08:3f:3f:3a:6e:57:f1:c5:11:c9:
53:7f:5e:e6:21:ac:4b:52:42:29:ff:3a:b7:c3:a7:d8:fd:ef:
6c:c9:cd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:15:50 2025 by rpki-client