Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft
File: p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft (raw, json)
Hash identifier: UV3cXOiZtGjRMF4RF6vZ+ZGXHF2zgbB9wYJMmAoeOX0=
Subject key identifier: 47:98:61:AB:2C:F7:8C:A5:CA:0C:28:27:DB:3F:34:04:0D:F4:21:87
Authority key identifier: A7:96:7D:76:C2:D4:67:20:D4:CF:AC:04:59:FA:3C:3D:22:00:50:44
Certificate issuer: /CN=a7967d76c2d46720d4cfac0459fa3c3d22005044
Certificate serial: 0194BCA9CBD5A20A6D36A2A0692A5AC994D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft
Manifest number: 112E
Signing time: Fri 31 Jan 2025 14:00:31 +0000
Manifest this update: Fri 31 Jan 2025 14:00:31 +0000
Manifest next update: Sat 01 Feb 2025 14:00:31 +0000
Files and hashes: 1: 6nka26L-7vbT-huqQ7zH80Ad2_Q.roa (hash: bi36P0sQvSkI3t0S3Th1jO23VxQKQmTqbcjBaO1g00A=)
2: p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.crl (hash: 28lKr0vgxzZ+SGecb97InHenQugrc0XvEJFzN6rUY2o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:cb:d5:a2:0a:6d:36:a2:a0:69:2a:5a:c9:94:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7967d76c2d46720d4cfac0459fa3c3d22005044
Validity
Not Before: Jan 31 14:00:31 2025 GMT
Not After : Feb 1 14:00:31 2025 GMT
Subject: CN=479861ab2cf78ca5ca0c2827db3f34040df42187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:57:23:43:0c:74:29:bd:7e:d7:bd:00:bc:5d:
3e:7c:cd:0d:c1:ab:fc:1d:ba:41:0a:bd:3e:f0:98:
ee:79:62:d5:36:ac:de:05:48:e1:13:7b:d4:d8:5e:
af:81:44:de:1d:b5:93:4b:99:c0:34:be:38:55:0c:
4e:73:75:60:f3:8b:3c:a2:54:06:86:ae:2f:69:c2:
78:c0:c4:65:b2:6d:f8:16:1a:67:c1:12:41:4d:a9:
31:0a:02:64:99:10:58:a6:78:26:73:ef:98:39:53:
f2:64:d8:7c:8d:fb:01:39:e3:dd:1c:47:67:d1:61:
d4:f2:00:58:9c:fe:ab:bc:30:82:09:bf:2a:47:ec:
7e:cd:49:e8:5b:21:e9:76:c3:3f:e7:28:bf:aa:20:
38:28:77:a5:ae:24:24:3c:f4:10:7f:90:54:02:53:
2f:66:4b:90:1a:84:44:d9:98:61:5b:10:6d:3d:69:
72:15:b9:da:80:23:a9:80:08:b0:4c:18:77:72:8b:
dd:5a:32:bf:60:52:16:04:1b:d1:ee:ad:9f:c0:bb:
ea:86:31:27:7a:8d:4d:49:5a:d2:0b:39:14:7e:83:
a7:ea:20:21:86:56:fe:21:5c:26:a3:20:2d:97:d6:
ba:fb:7a:d1:45:c8:18:de:1d:9b:c2:85:17:ab:ab:
2a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:98:61:AB:2C:F7:8C:A5:CA:0C:28:27:DB:3F:34:04:0D:F4:21:87
X509v3 Authority Key Identifier:
keyid:A7:96:7D:76:C2:D4:67:20:D4:CF:AC:04:59:FA:3C:3D:22:00:50:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:65:1f:b6:e2:b0:a8:d0:69:82:29:ca:b6:50:35:6f:6c:12:
97:2f:bc:fb:da:83:f1:28:bc:85:64:54:e9:ea:c5:49:6c:28:
71:65:74:2f:0a:fb:f0:c7:11:85:17:85:f1:ce:90:77:b2:0a:
fe:34:78:41:94:f1:7e:88:2c:00:c1:52:80:d2:98:d9:82:1e:
4d:d4:a0:31:ef:be:08:31:e6:9d:c3:9d:90:0b:13:30:4b:42:
e8:e9:04:36:bf:15:36:e6:0e:19:51:6a:02:41:1e:15:69:8d:
0e:44:0d:20:97:b1:ce:b9:d0:de:11:22:63:83:52:58:0c:80:
5a:e6:04:1b:ee:64:e2:37:f3:2c:f2:ff:ad:81:43:fe:12:cf:
2d:80:f1:ce:fd:8f:7f:c8:db:e9:88:1e:cb:46:00:57:8d:7a:
d3:03:d3:b4:04:11:01:53:4e:a3:2c:fb:78:dd:99:37:c6:42:
19:68:ae:1d:2d:19:13:9a:d5:ba:d5:90:38:ee:b5:68:c6:0c:
4e:e6:b4:b8:46:49:fc:bb:8c:e4:7e:2c:64:b9:92:4f:25:a5:
ca:e7:63:3c:f0:ab:77:19:b2:79:ca:6e:35:57:d0:ca:7c:ba:
f4:fb:c1:64:66:14:1c:3b:ae:36:38:d3:6f:cc:6d:98:70:26:
be:cc:6d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:27:21 2025 by rpki-client