Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft
File: RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft (raw, json)
Hash identifier: U1uCmbno7QJIIbU7lADRPDbgD8V6SaGPOpd4CeD+84w=
Subject key identifier: A1:DF:18:38:E3:15:4B:19:1B:D3:4D:5E:C4:2B:CB:17:39:73:BC:11
Authority key identifier: 46:54:F3:E6:92:7E:C4:C7:C9:7D:0F:23:6A:8C:24:53:4A:7F:CD:D4
Certificate issuer: /CN=4654f3e6927ec4c7c97d0f236a8c24534a7fcdd4
Certificate serial: 0194BCAA0425A1603BD57BA7BD76B79955DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft
Manifest number: 0571
Signing time: Fri 31 Jan 2025 14:00:46 +0000
Manifest this update: Fri 31 Jan 2025 14:00:46 +0000
Manifest next update: Sat 01 Feb 2025 14:00:46 +0000
Files and hashes: 1: RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.crl (hash: lhk9jRuT+u+OQlScUBkhpDr/aIjSSGRuk5AA2A7jFQ8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:04:25:a1:60:3b:d5:7b:a7:bd:76:b7:99:55:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4654f3e6927ec4c7c97d0f236a8c24534a7fcdd4
Validity
Not Before: Jan 31 14:00:46 2025 GMT
Not After : Feb 1 14:00:46 2025 GMT
Subject: CN=a1df1838e3154b191bd34d5ec42bcb173973bc11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5b:94:8b:f9:fb:6f:02:d1:68:ad:4e:bb:f6:
e2:5a:b6:da:f7:ed:82:fe:9d:9c:a4:90:dd:72:e9:
3e:8f:26:fa:da:70:7f:5d:ee:be:03:d8:8d:c2:57:
58:9c:1c:76:cd:38:a5:2a:cf:64:e4:14:05:ac:63:
7b:fa:29:5b:0a:d8:49:ee:d3:e5:95:46:b4:fb:98:
be:b9:9c:ab:2c:93:6d:82:21:4a:8f:26:5f:69:cf:
c6:51:88:13:9a:83:d0:d2:bf:f7:e8:9f:1a:7f:81:
16:63:45:f9:bb:cd:4a:c9:52:d6:76:9f:cc:ca:bc:
7f:23:68:16:c1:98:f5:50:97:37:c7:15:74:7f:75:
80:b9:53:b8:3b:d8:84:10:25:ce:64:de:7b:39:97:
a9:7e:11:f9:3a:13:a8:d9:a5:e6:20:a0:67:85:9a:
7b:14:36:23:8c:d6:85:a4:e0:ff:f8:77:b7:59:a9:
b2:b2:b6:1e:ef:63:2f:ea:c4:27:49:34:00:08:0a:
3d:b0:46:a9:0e:93:45:6f:cb:bc:32:5c:01:5c:72:
bd:7a:28:21:24:c2:42:b6:4b:2e:d1:7d:fc:e0:d2:
87:f3:c5:81:eb:ea:cb:5a:dd:9a:0c:02:d9:96:36:
59:5c:64:af:6e:42:3c:f7:af:f1:dd:c2:5a:b4:9d:
9b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:DF:18:38:E3:15:4B:19:1B:D3:4D:5E:C4:2B:CB:17:39:73:BC:11
X509v3 Authority Key Identifier:
keyid:46:54:F3:E6:92:7E:C4:C7:C9:7D:0F:23:6A:8C:24:53:4A:7F:CD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:9e:d7:6f:35:a6:09:58:36:ee:87:5a:97:9d:ec:e0:dd:ab:
31:55:38:6b:e3:16:df:29:c7:d9:cc:c2:2d:ec:a0:03:49:26:
38:7c:51:63:2c:6b:95:17:eb:89:cc:aa:bf:99:36:da:37:b8:
9f:5f:90:14:30:23:eb:9a:3b:08:4b:8b:97:05:ce:67:cf:43:
65:b5:20:14:3a:d7:d3:10:e7:45:40:69:dd:2f:8f:2e:24:0c:
2a:58:6b:85:bd:b3:f8:ae:2a:d8:fc:b2:f6:aa:70:23:e8:b1:
a3:28:76:ad:7c:47:3f:25:09:1d:81:df:c8:29:38:a0:5e:f1:
9e:b8:39:45:9c:07:87:ea:fa:1d:bb:47:51:8e:40:cc:f0:bd:
e3:47:41:1f:91:86:b3:be:48:ee:9f:a0:23:54:0c:cb:8e:5a:
c3:be:58:6e:07:12:6f:25:aa:7b:04:27:2d:f6:89:fb:8b:d9:
98:29:f9:2d:5e:5c:89:c6:e4:1d:f6:fa:77:00:08:13:67:3a:
aa:3b:44:e3:83:4f:d5:55:a4:a3:23:5f:2e:24:bd:cd:b7:90:
e1:a2:6f:27:1c:e2:97:84:a9:31:ec:e9:55:80:ac:fa:40:56:
be:64:de:6b:03:17:5d:c4:35:a4:36:9f:e5:20:08:16:78:82:
28:90:84:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:37:21 2025 by rpki-client