Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft
File: z5dREMc5t0-E1BcDxIgoMnJ73cw.mft (raw, json)
Hash identifier: tO9fjEaBHZfeRXZFNyPiXWiQ8UIv9BGmNrL0ctZoaaY=
Subject key identifier: 34:86:AD:08:33:EF:3E:A7:34:42:BC:01:32:AB:1E:00:BE:5A:D9:9C
Authority key identifier: CF:97:51:10:C7:39:B7:4F:84:D4:17:03:C4:88:28:32:72:7B:DD:CC
Certificate issuer: /CN=cf975110c739b74f84d41703c4882832727bddcc
Certificate serial: 0194BBCE6C29D56043604F6A8DDC7BA40C41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5dREMc5t0-E1BcDxIgoMnJ73cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft
Manifest number: 13B7
Signing time: Fri 31 Jan 2025 10:00:54 +0000
Manifest this update: Fri 31 Jan 2025 10:00:54 +0000
Manifest next update: Sat 01 Feb 2025 10:00:54 +0000
Files and hashes: 1: z5dREMc5t0-E1BcDxIgoMnJ73cw.crl (hash: DWYbyWRgPoCV8u2RVgfDX/uoxEz9bp3ZLMAsBxpl9qo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:6c:29:d5:60:43:60:4f:6a:8d:dc:7b:a4:0c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf975110c739b74f84d41703c4882832727bddcc
Validity
Not Before: Jan 31 10:00:54 2025 GMT
Not After : Feb 1 10:00:54 2025 GMT
Subject: CN=3486ad0833ef3ea73442bc0132ab1e00be5ad99c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:26:24:4d:8d:26:2d:a7:43:38:9d:b3:33:8d:
90:d7:0a:73:d9:39:e0:83:a4:96:31:c1:ac:a3:b3:
1f:ba:a4:2b:02:bf:69:ac:48:71:16:7a:f0:50:0b:
66:bf:f0:19:9f:7a:ce:b4:5f:52:4f:29:a8:da:10:
8e:fb:42:4c:34:4d:2d:94:7b:c2:5f:32:18:50:d1:
f3:91:3a:e6:d5:97:ff:7b:d2:11:70:8e:bf:51:6a:
11:02:64:7d:a7:85:4f:4f:1e:b0:57:d8:6f:4a:f0:
2b:ae:df:a4:0e:2f:95:07:58:af:f6:63:22:35:a4:
42:06:ca:e4:f2:1e:cc:1c:d4:cf:ec:70:5b:f8:0d:
9e:45:0f:9b:66:d0:68:11:bf:c5:ea:a3:86:9b:95:
f7:36:84:d5:89:ae:7d:1d:dd:30:7e:86:85:d5:a9:
ec:29:fb:24:db:a2:55:af:cf:69:c2:e5:c2:33:c3:
e9:93:d2:1f:66:6e:4e:16:8b:d8:84:60:18:b7:99:
da:e4:bd:c3:d2:c4:4f:de:36:e3:21:ce:cf:18:44:
87:1d:38:d0:0b:2f:5a:e0:ec:79:7b:9b:e5:b2:43:
38:fe:db:28:fb:dd:d3:00:94:06:f8:31:b7:10:de:
45:f8:eb:5c:e2:24:e3:f2:b3:fa:a3:54:65:ea:d5:
f0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:86:AD:08:33:EF:3E:A7:34:42:BC:01:32:AB:1E:00:BE:5A:D9:9C
X509v3 Authority Key Identifier:
keyid:CF:97:51:10:C7:39:B7:4F:84:D4:17:03:C4:88:28:32:72:7B:DD:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5dREMc5t0-E1BcDxIgoMnJ73cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:f0:2e:02:df:8c:18:a4:9c:14:6a:f4:bc:1e:a5:00:24:96:
98:cf:22:e5:d9:b8:4a:73:47:60:8d:ac:7d:bc:1b:ee:0f:60:
51:3a:62:70:51:dc:60:fb:a5:10:dd:c2:57:6d:48:3a:6b:b3:
81:0e:d9:e1:73:77:e7:3b:b2:17:be:ed:71:c2:d1:4f:55:21:
26:e2:cc:f5:55:9c:2a:b0:af:7b:bb:42:d4:60:5b:69:4c:91:
75:3e:16:4e:7a:ba:0f:22:61:41:3d:04:b5:00:98:d4:95:65:
b4:38:5f:4e:0b:02:53:8f:89:b2:22:ee:4b:d5:1c:03:bc:10:
9e:28:f0:d1:57:11:1d:0f:ca:8a:cc:11:20:24:cc:b0:df:c6:
67:2a:fb:33:5c:62:c2:f6:ae:4b:8b:13:ab:74:0b:cf:32:8e:
e6:cb:5a:d4:e2:08:f3:6e:36:48:d2:28:73:af:8a:ef:c1:5c:
e2:e8:83:2f:38:98:7e:16:5c:d5:58:74:06:ad:4f:e7:0c:1a:
4f:0e:0c:4c:9f:bf:ed:ae:aa:eb:36:27:3b:e7:9a:8c:c1:31:
0a:f3:9b:3b:1b:13:ca:bd:04:d3:82:0f:52:c1:fa:d7:dd:2c:
aa:9a:12:15:5e:99:a8:a0:84:30:b2:a2:5a:e5:ec:7d:f9:1b:
7a:71:81:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:21:24 2025 by rpki-client