Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
File: 5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft (raw, json)
Hash identifier: sqmXFQBF87kvRmwDkMR2SpJR3CVAqSXGMjOPr93aQjU=
Subject key identifier: B5:5A:7E:0A:81:D4:6C:B8:4B:BA:52:C5:FC:29:04:46:A3:2C:D0:CC
Authority key identifier: E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94
Certificate issuer: /CN=e5a6794b91b81406412a137870bfde3b170de094
Certificate serial: 0195E0EAFB5B7FB40EE74CB5FE314213D984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
Manifest number: 0FA2
Signing time: Sat 29 Mar 2025 08:00:50 +0000
Manifest this update: Sat 29 Mar 2025 08:00:50 +0000
Manifest next update: Sun 30 Mar 2025 08:00:50 +0000
Files and hashes: 1: 5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl (hash: mzQN0sSIwSf2YGSOsHIi5spPCzYjQO7cVpHDC2+NVWA=)
2: F2wMIUjJA3quoSXko94UBe524io.roa (hash: ohOfNDpG7k23hMoeoYfuhVGMBn9BMoNT8oiUfgHvVI4=)
3: bE9Rz-JEgnY1OAj9NvLaQK985n4.roa (hash: oGUETehCghwYm99EJnoOLB6Ay5aT0Q2AYzU5/8NcyJg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:ea:fb:5b:7f:b4:0e:e7:4c:b5:fe:31:42:13:d9:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a6794b91b81406412a137870bfde3b170de094
Validity
Not Before: Mar 29 08:00:50 2025 GMT
Not After : Mar 30 08:00:50 2025 GMT
Subject: CN=b55a7e0a81d46cb84bba52c5fc290446a32cd0cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e8:6c:9b:7d:83:ec:0e:ec:64:cc:e4:19:f5:
04:17:e6:21:c9:1c:9a:90:61:83:fd:24:c3:6c:03:
c6:ff:9e:47:fa:ec:82:64:3c:97:84:2f:e6:34:65:
a8:c1:49:41:8a:4e:fe:ec:1d:fa:b3:e1:ed:d0:a8:
2f:23:08:a0:a2:6f:39:e0:df:34:a5:8d:51:9e:2d:
5c:fa:20:65:68:8a:e4:27:3d:0e:c8:6f:54:95:55:
5b:71:11:46:40:1f:9e:63:d4:07:22:74:3e:24:fa:
36:db:98:0b:2f:2c:76:00:47:5a:b8:4e:92:40:20:
4a:be:89:2e:a3:f0:18:3b:71:32:a2:ee:1f:ea:20:
91:f5:91:3d:b4:ce:ba:12:33:d4:29:ba:1c:08:88:
5c:86:ff:73:ef:5a:79:37:cd:ba:45:1c:04:ec:19:
8a:6a:56:80:71:1e:27:a3:90:18:07:b0:83:03:56:
4b:6c:fb:e1:dc:94:f7:c2:e1:92:75:3b:fa:54:1c:
75:e4:01:d8:05:29:ed:60:df:b2:3e:76:b7:70:39:
e0:f5:19:1c:7b:1b:d0:63:ed:b4:81:d2:5d:31:4f:
51:c4:16:0c:8c:61:36:73:67:bf:12:92:83:a3:8d:
4b:0b:0b:8f:cc:58:ce:c3:5f:40:28:1e:d9:8e:bd:
88:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5A:7E:0A:81:D4:6C:B8:4B:BA:52:C5:FC:29:04:46:A3:2C:D0:CC
X509v3 Authority Key Identifier:
keyid:E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:12:3c:12:9d:e1:f6:01:3f:cb:f7:92:36:58:bd:48:96:58:
52:0b:11:98:18:d8:62:b3:35:ba:a6:99:3b:d3:a6:e5:b8:72:
94:f1:94:73:27:21:a4:44:7b:92:d8:f7:98:10:01:59:0b:51:
1c:36:91:4e:ca:03:e7:e0:09:4c:dd:01:19:9c:86:c6:5f:d3:
14:53:01:23:b5:26:ed:36:8f:30:0a:9b:0e:b3:04:0b:1d:12:
fd:45:8f:aa:ca:1e:a9:66:fd:cc:92:01:91:e1:76:91:b2:e4:
10:c9:07:27:e8:d8:3c:c3:ab:e0:d0:0f:40:7b:2a:dc:82:83:
df:63:04:fe:29:3b:ee:cb:1b:e6:04:2c:16:0b:aa:a5:03:a1:
db:3d:81:af:91:bb:32:2d:f2:3d:1e:b4:27:dd:0f:47:6d:fd:
16:d9:88:de:27:43:42:53:a6:1b:93:8f:29:4e:5f:9c:13:ec:
09:04:d1:8d:c0:8e:65:f6:a3:d4:58:b1:dc:95:b8:b2:86:cb:
d3:e3:60:cc:53:15:e7:c2:fb:78:d9:fd:f5:10:9d:21:94:04:
2e:ff:42:00:d8:c4:81:a4:db:82:de:ea:c8:d9:1c:e4:4c:3a:
9b:f1:3d:6e:05:01:87:b7:08:90:83:34:4d:f2:ae:29:27:af:
c3:3e:83:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 03:44:16 2025 by rpki-client