Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.mft
File: ROzsULCd1G04TQgbUH0juv71HJw.mft (raw, json)
Hash identifier: XCLbH69iWIImbGseGBPdbIBdXNsq5Y87jZ+4K4jnFj8=
Subject key identifier: 66:DB:33:DF:7E:F4:5F:B2:9D:BF:45:F4:2E:53:AA:60:B2:1F:D3:73
Authority key identifier: 44:EC:EC:50:B0:9D:D4:6D:38:4D:08:1B:50:7D:23:BA:FE:F5:1C:9C
Certificate issuer: /CN=44ecec50b09dd46d384d081b507d23bafef51c9c
Certificate serial: 0194BC72CCB1E9F3CE6106A0B7686293FAF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROzsULCd1G04TQgbUH0juv71HJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 13:00:27 +0000
Manifest this update: Fri 31 Jan 2025 13:00:27 +0000
Manifest next update: Sat 01 Feb 2025 13:00:27 +0000
Files and hashes: 1: ROzsULCd1G04TQgbUH0juv71HJw.crl (hash: yLOEwe39fDzgnHD5zIeayfcGiT3ddu1ASewJGCUZHZk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:cc:b1:e9:f3:ce:61:06:a0:b7:68:62:93:fa:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ecec50b09dd46d384d081b507d23bafef51c9c
Validity
Not Before: Jan 31 13:00:27 2025 GMT
Not After : Feb 1 13:00:27 2025 GMT
Subject: CN=66db33df7ef45fb29dbf45f42e53aa60b21fd373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4d:6a:17:4d:1b:f5:99:7a:df:ac:25:8e:a6:
12:87:4d:c3:41:0c:0e:20:49:82:47:f5:5c:6a:af:
62:74:9d:7f:a7:55:78:e0:76:bf:65:c1:36:d3:22:
4e:25:ab:15:32:a6:8c:a2:9b:89:2e:74:a5:30:ef:
22:d1:97:b7:e8:cc:a5:cb:11:1d:d4:4b:3f:d0:3a:
bc:0d:df:59:b4:12:4a:e0:e8:9c:a7:1b:0e:83:b7:
11:e1:5b:fe:e8:e2:b9:26:03:47:76:09:fc:ae:60:
cf:f8:eb:90:88:c4:67:f7:1d:52:1a:22:29:62:cc:
13:6e:5d:f5:b7:2f:c4:58:b2:cc:85:8b:34:33:74:
e3:94:76:bb:e8:a0:e4:fc:71:06:fd:43:73:2b:e9:
3b:d8:72:6f:5c:53:22:81:d6:00:b8:5f:79:44:f2:
df:c7:42:eb:73:17:60:f7:01:44:11:d2:07:f3:93:
7e:5c:3c:15:b2:ad:f6:8e:83:c3:d3:70:f0:eb:e9:
dd:ad:ea:b9:8b:d7:0d:fd:b6:9a:ab:58:fa:5a:f2:
ea:05:ce:87:ef:01:c5:d0:56:f4:e6:6b:38:7a:87:
41:e9:ea:e4:dd:64:06:34:5e:20:90:f6:40:81:ac:
e8:37:9b:65:2f:3e:57:05:47:de:d0:78:09:dd:34:
aa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DB:33:DF:7E:F4:5F:B2:9D:BF:45:F4:2E:53:AA:60:B2:1F:D3:73
X509v3 Authority Key Identifier:
keyid:44:EC:EC:50:B0:9D:D4:6D:38:4D:08:1B:50:7D:23:BA:FE:F5:1C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROzsULCd1G04TQgbUH0juv71HJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:bb:28:77:a3:c1:04:a9:a8:89:91:b9:66:96:6a:94:cd:bf:
ee:98:e7:13:1e:07:e0:9a:5e:73:93:12:75:c7:b8:67:45:2f:
0e:a6:74:86:4b:57:db:a4:92:70:0a:f4:16:1d:8e:b7:7b:a1:
f1:80:ee:51:67:29:61:7e:47:d6:50:82:c3:de:92:df:1f:d6:
d8:94:f9:dc:bf:51:93:77:30:23:92:16:8b:86:5c:ef:9d:ac:
61:94:95:a6:95:75:4b:5f:82:15:54:2d:0b:40:40:ec:78:92:
ee:44:cc:03:ed:db:c9:92:44:0e:5b:96:49:6f:00:11:7f:0d:
76:25:8f:e6:df:ae:1c:6a:94:61:a6:4c:1d:4b:bb:62:2b:01:
0b:14:44:f8:27:7e:9a:e6:99:e9:c1:3f:f9:75:2f:6b:86:4c:
af:b1:9e:b7:3f:76:04:b4:a9:70:0f:a0:19:87:a2:7a:36:ce:
9d:36:d7:08:3c:df:c9:b6:9d:86:5f:37:e7:3c:29:28:66:d7:
d9:9c:0b:4a:15:1e:10:8b:36:70:b5:e5:63:76:30:c8:ba:fc:
6e:3c:bd:4e:17:90:56:6a:e7:79:ec:93:00:d0:b9:e9:b9:15:
59:0b:73:6d:42:69:a6:83:d3:1d:42:c6:ca:f4:6b:cf:a6:d0:
32:4a:42:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:25:47 2025 by rpki-client