Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
File: 5zqbo56LjiuL9OiCUq-_3czN0aE.mft (raw, json)
Hash identifier: 1sb+rNktd0SEnoJ71S61TGv4gCliLaHfYKAXXdT/6p8=
Subject key identifier: 2A:93:29:2F:B1:EC:7E:00:C3:F7:47:34:43:5C:F1:11:44:AB:6F:63
Authority key identifier: E7:3A:9B:A3:9E:8B:8E:2B:8B:F4:E8:82:52:AF:BF:DD:CC:CD:D1:A1
Certificate issuer: /CN=e73a9ba39e8b8e2b8bf4e88252afbfddcccdd1a1
Certificate serial: 0194BBCEE2060B0A7C98127FE6AE6B84C0D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
Manifest number: 0D51
Signing time: Fri 31 Jan 2025 10:01:25 +0000
Manifest this update: Fri 31 Jan 2025 10:01:25 +0000
Manifest next update: Sat 01 Feb 2025 10:01:25 +0000
Files and hashes: 1: 5zqbo56LjiuL9OiCUq-_3czN0aE.crl (hash: xt92OPpCHVrTtyNUj80y2jSdLrIKwH5Rz7H8jEZ/OMI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e2:06:0b:0a:7c:98:12:7f:e6:ae:6b:84:c0:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e73a9ba39e8b8e2b8bf4e88252afbfddcccdd1a1
Validity
Not Before: Jan 31 10:01:25 2025 GMT
Not After : Feb 1 10:01:25 2025 GMT
Subject: CN=2a93292fb1ec7e00c3f74734435cf11144ab6f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e2:60:aa:fb:85:cd:78:d6:01:13:8f:99:ea:
10:df:80:cf:2e:19:09:23:ca:98:61:ee:08:c8:93:
62:fd:c7:d5:b1:86:c4:80:e8:af:4e:62:bf:fb:28:
a4:d0:73:4a:fd:76:6a:05:68:a3:74:52:8f:77:cb:
b8:c3:b9:cb:1a:66:11:42:48:47:32:aa:d5:92:6d:
a2:d9:f8:dd:75:e9:b6:a1:6d:d5:bf:f7:68:98:d3:
a7:c8:3a:ba:ae:87:31:b0:36:6d:41:ec:a1:fe:68:
f5:36:ee:cb:26:a8:ca:b9:4b:2c:d4:9c:93:e9:c8:
a1:ed:e9:81:00:7f:78:49:55:bd:72:4c:e2:c6:44:
fd:f3:e7:52:4c:63:7d:90:ba:26:ac:48:aa:48:1b:
ef:01:46:7a:5e:bc:4e:02:01:c6:c9:57:66:4e:d6:
7c:96:4f:f2:d0:e6:6c:99:c3:59:fd:82:4d:6e:69:
b9:e0:b2:c2:9d:97:cf:41:07:d0:66:d1:d6:1d:ea:
17:43:7b:e8:38:8e:1b:44:17:55:a9:87:ca:95:e4:
76:6e:52:3e:5e:29:b7:8e:c3:4a:98:e8:f4:94:40:
8e:05:1c:e5:3a:a7:f1:33:36:79:64:49:c7:3c:ef:
ac:22:26:f2:89:7f:86:26:b9:5e:85:b8:35:b4:85:
a4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:93:29:2F:B1:EC:7E:00:C3:F7:47:34:43:5C:F1:11:44:AB:6F:63
X509v3 Authority Key Identifier:
keyid:E7:3A:9B:A3:9E:8B:8E:2B:8B:F4:E8:82:52:AF:BF:DD:CC:CD:D1:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e1:82:51:5d:0b:7f:a1:9b:29:76:c9:1c:eb:82:3e:c5:4a:
c2:0a:57:9c:a9:75:1f:f1:4b:64:23:4a:80:bd:19:07:2a:c9:
cc:29:df:9b:5d:46:c4:0f:e4:d5:59:8e:23:04:17:f8:44:04:
0d:f0:22:33:b0:f2:b0:65:c5:1f:87:70:07:6e:b9:66:9b:b9:
84:ca:3f:d4:e5:27:e0:96:4d:10:20:ed:93:e2:67:da:7e:cd:
29:3d:cb:80:51:c1:07:6d:fe:c2:92:6f:94:e3:50:d8:9d:11:
a1:f1:2b:d8:21:86:54:82:bd:da:e6:e4:c6:fd:9e:33:75:b2:
66:30:91:91:3f:ea:ec:7b:8d:1d:0b:62:d8:55:ab:87:8b:c1:
c1:fe:3f:1d:36:07:3e:7e:dd:e1:27:7f:a9:de:12:aa:7a:32:
e4:ef:8f:8d:32:b7:e7:81:77:47:2b:98:12:34:96:41:34:cf:
98:b0:2e:db:0d:2a:b2:6d:99:40:ae:27:90:4a:65:17:3d:ac:
51:9c:42:9a:e9:20:35:ad:28:77:4c:b6:e8:d7:67:45:22:22:
f0:c1:5f:45:5b:d5:ae:8d:85:e8:79:27:81:76:bc:4c:c1:42:
70:72:64:0b:72:b4:af:6d:c6:15:11:fe:38:3c:92:e2:a9:26:
a7:f0:a0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:23 2025 by rpki-client