Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft
File: 5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft (raw, json)
Hash identifier: I4J8WISVdTRMqZ8Nu05+8YjCTHQuf61/5ByALwFb/Jg=
Subject key identifier: C0:2E:79:63:67:60:82:79:89:2C:FD:DB:3C:17:3E:51:4B:19:B2:77
Authority key identifier: E7:33:B2:EA:B7:E2:34:68:7B:E9:7F:8C:35:D6:E6:CC:3E:2D:FC:BA
Certificate issuer: /CN=e733b2eab7e234687be97f8c35d6e6cc3e2dfcba
Certificate serial: 0194BC73207F6CD63BB8B0429AA27E850A3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zOy6rfiNGh76X-MNdbmzD4t_Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 13:00:49 +0000
Manifest this update: Fri 31 Jan 2025 13:00:49 +0000
Manifest next update: Sat 01 Feb 2025 13:00:49 +0000
Files and hashes: 1: 5zOy6rfiNGh76X-MNdbmzD4t_Lo.crl (hash: FNMkGqRunuzhLzUvWEWd7ox++jUYUmJSnfdfsEc/Ri0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:20:7f:6c:d6:3b:b8:b0:42:9a:a2:7e:85:0a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e733b2eab7e234687be97f8c35d6e6cc3e2dfcba
Validity
Not Before: Jan 31 13:00:49 2025 GMT
Not After : Feb 1 13:00:49 2025 GMT
Subject: CN=c02e796367608279892cfddb3c173e514b19b277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:87:41:12:ee:99:54:7d:0b:e2:f0:dd:61:ef:
83:00:ea:83:cb:08:9d:49:ae:e7:02:1b:d5:76:1c:
fc:c1:59:4f:bc:0d:3c:1c:85:cd:dc:07:44:97:4c:
72:f9:bb:a2:8b:39:cc:33:b0:d9:c7:a6:f5:1d:08:
7e:2d:40:93:53:21:75:cd:a3:de:05:66:b1:96:e1:
75:e8:f9:7d:27:99:50:66:c7:5f:62:2c:7d:dd:ad:
6b:a4:44:37:28:17:1c:02:1b:38:c7:67:2f:90:4a:
43:c6:b0:4d:ed:b6:2e:ba:5f:71:9f:af:0c:05:8e:
37:34:e8:1a:88:d6:26:ef:a2:19:20:ed:44:72:5f:
74:b6:b9:04:03:39:05:87:5b:90:98:dc:ed:95:bd:
db:2d:24:ad:99:ea:57:f4:fb:2b:6c:89:cd:42:d7:
13:ab:f6:67:42:e9:a3:74:57:ef:c6:23:a8:d9:22:
7a:a5:92:50:68:ba:8d:45:5b:f7:4b:c7:bf:3a:ad:
62:68:c1:ad:bd:da:98:95:69:30:9a:a2:49:08:a9:
d5:bb:7b:e2:c1:c5:0b:1a:fa:28:38:26:ee:a6:7f:
0a:de:db:d7:d5:24:fb:70:d2:74:55:cc:5d:ba:4a:
43:b8:44:3e:08:29:0d:48:91:14:49:d7:f6:7c:bb:
26:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:2E:79:63:67:60:82:79:89:2C:FD:DB:3C:17:3E:51:4B:19:B2:77
X509v3 Authority Key Identifier:
keyid:E7:33:B2:EA:B7:E2:34:68:7B:E9:7F:8C:35:D6:E6:CC:3E:2D:FC:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zOy6rfiNGh76X-MNdbmzD4t_Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:88:b8:cc:3b:12:3d:f3:5f:6b:5e:29:33:67:1b:5e:f1:61:
8e:1c:4e:75:19:0c:fa:98:13:1f:5f:01:1b:9d:dd:ae:98:7d:
0d:26:2a:42:1f:5a:54:44:c9:ca:3b:1a:a8:18:9d:07:d9:bb:
53:ed:a3:34:62:2e:81:ce:36:22:05:8b:d2:ef:d0:f2:86:e1:
aa:84:4e:65:0b:c9:76:2f:a4:4c:c4:bd:92:25:bd:5c:58:e3:
1f:1a:48:63:cb:d6:ee:00:11:9a:68:5b:ef:d6:42:ca:ee:c0:
15:8d:83:fc:1d:f7:04:c9:c7:08:a5:79:69:72:7a:d2:0b:15:
78:f5:ee:11:20:ab:ac:f1:17:dd:42:60:a1:3b:90:dc:43:1f:
15:b4:9c:58:51:5e:05:c5:5d:6d:e8:0f:5c:2b:0c:83:ab:f1:
43:ee:66:98:ee:0a:ec:f1:87:ca:88:c4:6a:9b:71:d4:4f:eb:
06:d4:72:df:c3:86:4a:db:0a:3f:9d:4e:b8:11:34:68:6c:2e:
d9:66:1c:be:51:f3:3d:3f:de:15:f1:40:32:00:00:a4:6b:7f:
1c:dc:16:43:81:f3:1d:09:61:71:a9:c9:4d:50:d5:87:06:4e:
de:69:f8:7d:4a:e7:fb:4c:e9:1c:e7:c6:53:c1:94:b5:f4:fc:
dd:b1:23:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:28 2025 by rpki-client