Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/ad5542-3bd3-484a-b899-3dac87d88044/1/5sra_asxVjtyLxA-JwnK0xZQ74U.mft
File: 5sra_asxVjtyLxA-JwnK0xZQ74U.mft (raw, json)
Hash identifier: ExdleLWT/zTAbcvNw2UmoR+5ZpHz5/4yktWF6iUMjZE=
Subject key identifier: BA:2A:ED:D5:75:3E:9B:4F:A6:C9:3C:99:2C:6E:07:D8:1A:54:91:8E
Authority key identifier: E6:CA:DA:FD:AB:31:56:3B:72:2F:10:3E:27:09:CA:D3:16:50:EF:85
Certificate issuer: /CN=e6cadafdab31563b722f103e2709cad31650ef85
Certificate serial: 0191DB2A938F5810BF99F7AD82E6F00CBAE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5sra_asxVjtyLxA-JwnK0xZQ74U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/ad5542-3bd3-484a-b899-3dac87d88044/1/5sra_asxVjtyLxA-JwnK0xZQ74U.mft
Manifest number: 17
Signing time: Tue 10 Sep 2024 09:01:26 +0000
Manifest this update: Tue 10 Sep 2024 09:01:26 +0000
Manifest next update: Wed 11 Sep 2024 09:01:26 +0000
Files and hashes: 1: 5sra_asxVjtyLxA-JwnK0xZQ74U.crl (hash: XfzFWmSVlo1nc9GigQ1egtjb6eSAJUP5FlLMAZnLNzY=)
2: LyVHuzBBYij5WG6Fbv6FIJoXj-0.roa (hash: tt/9uc5FVzM1s03vovcrR2bVZg9qtf0feWt9Gdw+ol8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:db:2a:93:8f:58:10:bf:99:f7:ad:82:e6:f0:0c:ba:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6cadafdab31563b722f103e2709cad31650ef85
Validity
Not Before: Sep 10 09:01:26 2024 GMT
Not After : Sep 11 09:01:26 2024 GMT
Subject: CN=ba2aedd5753e9b4fa6c93c992c6e07d81a54918e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ac:32:ae:2b:66:a0:80:cf:85:3c:98:dc:d3:
44:94:d7:e3:8b:ea:ea:51:92:c2:03:53:a7:aa:67:
98:68:9b:22:37:15:77:f9:dd:70:16:d9:9b:29:74:
87:0a:f2:70:98:95:88:78:ad:c4:22:ec:a0:dc:93:
9f:ac:2e:f7:bc:38:78:9a:c4:82:07:33:af:9e:d2:
a4:14:f8:4e:0e:92:16:b9:cf:1f:89:73:9e:ff:ed:
fc:f9:43:94:b6:ef:a7:e5:59:ec:a0:c5:b7:62:1b:
00:47:b3:d3:e4:03:e5:bf:4d:51:25:06:06:38:a4:
80:82:6d:5e:62:f6:34:fc:78:90:c5:f4:37:a0:85:
3d:c6:fc:6e:80:8d:5a:0d:f2:f5:7c:9f:72:d3:22:
26:bd:4c:cb:6e:66:27:68:6e:9a:2c:35:2f:1d:e1:
ca:a1:aa:ff:08:63:88:5d:14:87:a8:8d:be:4b:fd:
85:4f:cb:9f:52:36:7b:f1:a3:b9:86:d4:b9:f1:57:
f9:41:ab:7b:3a:e2:eb:75:60:28:a5:40:14:5a:e4:
55:df:37:08:9f:00:04:f5:f6:da:b2:f4:75:4a:30:
fb:7b:2d:dc:4e:e1:51:59:c2:b1:6c:d8:5a:86:c8:
1d:bc:ee:fc:1f:40:a9:d3:1d:a4:4e:75:27:90:9d:
03:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2A:ED:D5:75:3E:9B:4F:A6:C9:3C:99:2C:6E:07:D8:1A:54:91:8E
X509v3 Authority Key Identifier:
keyid:E6:CA:DA:FD:AB:31:56:3B:72:2F:10:3E:27:09:CA:D3:16:50:EF:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sra_asxVjtyLxA-JwnK0xZQ74U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ad5542-3bd3-484a-b899-3dac87d88044/1/5sra_asxVjtyLxA-JwnK0xZQ74U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/ad5542-3bd3-484a-b899-3dac87d88044/1/5sra_asxVjtyLxA-JwnK0xZQ74U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:98:bc:9c:cb:06:47:85:9c:38:2d:a6:db:4e:7a:cd:aa:e6:
02:97:33:62:26:cc:2c:4f:1a:d5:e9:80:06:3d:ad:4b:a5:6c:
62:64:89:5d:f5:5d:8a:06:6f:00:6e:b8:20:5c:71:f5:6e:32:
5d:70:c6:1b:0a:03:31:bc:e2:31:d8:e8:40:d2:ca:6d:46:01:
44:f7:2d:af:3f:20:7e:d5:81:55:c2:67:4a:a0:f6:c6:a2:10:
62:a1:15:2b:79:46:36:5b:c7:fa:52:a8:66:82:bf:04:6b:0d:
80:c7:e2:78:76:7d:f2:42:be:ae:9b:c8:29:74:13:1c:e5:d2:
73:20:5f:b6:df:95:f4:b7:22:b4:33:a7:eb:b1:db:1e:ef:7f:
b0:1e:bb:19:c2:ab:6d:2d:7a:35:ea:87:ed:68:e9:d2:2e:dd:
88:1c:57:33:60:85:f4:6a:3c:af:a9:29:7d:50:cb:f1:02:c9:
d3:5d:ff:e9:b5:f1:69:17:5d:77:35:39:47:89:3a:88:db:20:
58:99:3c:e3:9c:d4:e0:e4:d0:40:a7:63:a5:15:55:e0:59:30:
a7:8b:d4:e1:cd:e1:9a:6e:a2:1e:72:ba:ef:5e:62:5b:a0:e0:
3c:7c:49:db:49:cc:8a:8c:20:b9:52:c6:da:e5:21:67:c3:b0:
33:f2:3c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 03:18:00 2025 by rpki-client